Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Best way to edit FreeBSD config files whithout breaking pfSense ?

    General pfSense Questions
    3
    4
    1342
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      marcello last edited by

      Hello
      I need to edit /etc/inetd.conf to manually add tcp proxying with netcat, as explained in http://doc.pfsense.org/index.php/Inbound_Load_Balancing#Lack_of_NAT_Reflection.

      Can I just go ahead and add the missing entries ?

      Will it mess with the rest of pfSense core ? (I am not talking about packages, as I don't use them)

      Will it survive a pfsense upgrade like 2.0 -> 2.1

      Generally, is there a pfSense way of modyfing the underlying FreeBSD system without breaking thins ?  ???

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        You'd have to modify the pfSense code that generates inetd.conf - don't edit it directly or your changes will be lost.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • D
          dhatz last edited by

          Just a quick note to suggest that you try socat instead of netcat, if you want to use it for proxying (search the forum for more)

          And yes, you'll need to change the source code (https://github.com/bsdperimeter/pfsense)

          1 Reply Last reply Reply Quote 0
          • M
            marcello last edited by

            I get the idea of nat redirection wit socat,
            as seen in http://aplawrence.com/Girish/socat.html

            socat TCP-LISTEN:5000,fork TCP-CONNECT:23.3.4.45:25

            but I don't see actually actually I can make it
            work with loadbalancing.

            Since the requests coming from a public IP adress are sent by the load balancer to two differents lan IP, I would need to have two different socat command but listening on the same port ?

            I don't see how such a setup is possible, so I will look if can achieve the same http load balancing feature with HA proxy or a Reverse Squid.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post