Let's get IPVanish working with pfSense 2.0.3

[xbipin]

i havent done a speed test but i find it much better than exprevvpn which i have been using since past one year but wanted to try something new as most of the times the expressvpn servers i use go down so had to switche very now and then

[tjabas]

ok, so please make a speed test, and also let me know what your actual speed without vpn is.

thank you.

[xbipin]

without vpn
http://www.speedtest.net/my-result/2954941262

with vpn
http://www.speedtest.net/my-result/2954946721

[tjabas]

thank you for your post, well thats not a great speed, but i guess that openvpn kills more speed than pptp do?!

[xbipin]

the speeds vary from server to server and i guess the 256bit encryption is a bit of a overkill, expressvpn uses 128bit. i tried the Singapore server and getting better speeds.

pptp client connection not possible in pfsense but sometime back some1 had created a package for it enabling it, check the bounty section for it

[tjabas]

ok it sounds good that the spped can be better and i also Think that 256bit is a bit overkill.
i have looked in the Bounty section but i didnt find any of pptp pasthrough,
is there anyone else that have seen this?

[Annasdaddy]

tjabas, let me know if you still don't have it working.  I have it connected just fine (in the USA) and get 30mbps down/6 mbps up reliably.

The only thing that I am still struggling with is making sure the data is only passed through the IPVANISH OpenVPN session.  It works when the vpn is up, but broadcasts my non-vpn when it drops.

BTW, I am working on a write up when I get it completely finalized.

[HypeTelecon]

xbipin, can you describe the steps you took with the AON to route select traffic out the VPN tunnel? If you can give me a synopsis, I'll ammend the step-by-step guide I started here so other people can take advantage of the information (including myself): http://forum.pfsense.org/index.php/topic,66467.0.html

[xbipin]

yes sure, first goto firewall->NAT, outbound tab and select Manual Outbound NAT rule generation and hit save, rules will get generated below as shown in image, leave it as they are. Then goto firewall->rules and under lan tab create a rule as shown below, source and destination can be of anything of ur choice but in gateway, select the vpn gateway to route out of and traffic matching that will go out of vpn tunnel

if u dont use route-nopull then u dont need to use AON also in which case the vpn server will push default gateway for pfsense and then by default all ur lan traffic will go out of the vpn, u need that command to not use the vpn as default gateway and then after AON u can selectively route out of the vpn or ur internet gateway

[xbipin]

i moved back to expressvpn coz ipvanish has speed issues at peak times and the 256bit cipher is a bit too heavy also

[anvar]

I've got the setup working without a problem. The only thing is that I modified the "Firewall - Rules - LAN" Default LAN rule to take the new gateway. Now all my traffic is routed through the VPN. This is not exactly like I want it, I just want 1 or 2 hosts (read IP's) to go through the VPN. But when I make an extra rule "IP - all ports - all destinations - all ports - default gateway - none queue" the traffic still goes over the VPN gateway and not the default gateway.

PS: I also use the route-nopull in the openvpn settings.

[xbipin]

have u enabled advanced outbound nat

[anvar]

yes, but I found the solution. The Firewall Rules are descending. They were in the wrong order. I found out by deleting and creating them manually again. Then aftwerwards I found the arrow icon to move the rules, gave myself a big slap on the forehead ::)
But thanks for the help though