<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Yeah, one bad apple spoils the bunch…<div><br></div><div><br><div><div>On Feb 20, 2014, at 3:51 PM, Ryan Dunlop <<a href="mailto:ryan.c.dunlop@gmail.com">ryan.c.dunlop@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr">The folks over at <a href="http://blog.gmane.org/gmane.comp.security.firewalls.pfsense.general">http://blog.gmane.org/gmane.comp.security.firewalls.pfsense.general</a> are real quick to respond to issues like this. I would give them a shot. <br>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Feb 20, 2014 at 11:21 AM, Ryan Coleman <span dir="ltr"><<a href="mailto:ryanjcole@me.com" target="_blank">ryanjcole@me.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I know some of us use pfSense here and I’ve only used it for single-IP functions and for auto-sensing internet paths if a site doesn’t have a static address at the time of programming.<br>
<br>
I’m moving away from single server design on my ESXi box to dedicated guests for each service but I cannot seem to get those dedicated services through the firewall.<br>
<br>
I have a 29bit subnet (IPs 1 through 5). Everything is internal to the ESXi (5.1) server.<br>
<br>
.1 = pfSense Firewall<br>
.2 = OPT1 interface on pfSense<br>
.3 = Customer VM (will port over to OPT2 after this works)<br>
.4 = All-in-one hosted VM<br>
.5 = Same All-in-one hosted VM<br>
<br>
I am going to eliminate .4 and .5 as I pull specific services out and into VMs (I’ve already moved the basic part of the FTP, the entire SQL server and LDAP to internal systems).<br>
<br>
But whenever I set up NAT rules on .2 it seems to be using .1’s stuff.<br>
<br>
I will have the following pushed through:<br>
FTP<br>
WWW (one primary, each subserver has functioning Apache for their services)<br>
IMAP SSL/SMTP<br>
SSH (via pushed ports to each server)<br>
<br>
Any thoughts would be helpful. The biggest thing I need to get running now is the FTP part - I cannot get it to push through nor will it register on the firewall log that it’s being blocked.<br>
—<br>
Ryan<br>
_______________________________________________<br>
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota<br>
<a href="mailto:tclug-list@mn-linux.org">tclug-list@mn-linux.org</a><br>
<a href="http://mailman.mn-linux.org/mailman/listinfo/tclug-list" target="_blank">http://mailman.mn-linux.org/mailman/listinfo/tclug-list</a><br>
</blockquote></div><br></div>
_______________________________________________<br>TCLUG Mailing List - Minneapolis/St. Paul, Minnesota<br><a href="mailto:tclug-list@mn-linux.org">tclug-list@mn-linux.org</a><br><a href="http://mailman.mn-linux.org/mailman/listinfo/tclug-list">http://mailman.mn-linux.org/mailman/listinfo/tclug-list</a><br></blockquote></div><br></div></body></html>