[pfSense] routing between subnets at same Interface - configuration not working on 2.4.1

2018-01-30 Thread Fabian Bosch
Hello, I cannot switch from Version 2.3.3 to 2.4.1 because of the routing at the same interface. I transfered the backup.xml from machine A (2.3.3) to machine B (2.4.1) and everything worked fine but the routing between Subnets assigned at LAN-Interface. There are multiple subnets set up via V

Re: [pfSense] routing between subnets at same Interface - configuration not working on 2.4.1

2018-01-30 Thread Jason Hellenthal
Have you tried 2.4.2 ? -- The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume. > On Jan 30, 2018, at 02:57, Fabian Bosch wrote: > > Hello, > > I cannot switch from Version 2.3.3 to 2.4.1 because of the routing at the > same

[pfSense] Force CA certificate installation as tsueted root CA on WiFi clients

2018-01-30 Thread Roberto Carna
Dear, I have pfSEnse + Squid in transparent mode. I have to filter web sites and content in HTTPS with Squidguard, so I've created a CA self-signed certificate and a server certificate (signed by the CA) in pfSense. After that I defined the CA certificate in the Squid configuration tab from pfSens

Re: [pfSense] Force CA certificate installation as tsueted root CA on WiFi clients

2018-01-30 Thread Edwin Pers
I'm assuming you're talking about devices you own/control. Windows is easy, just push it out using AD Linux you'd have to script something to push it out to each device with ssh or similar IOS & Android you might have luck with apple & google's enterprise management systems, but I'm not sure the

Re: [pfSense] Force CA certificate installation as tsueted root CA on WiFi clients

2018-01-30 Thread Izaac
On Tue, Jan 30, 2018 at 01:56:34PM -0300, Roberto Carna wrote: > How can I automatically force the CA certificate installation as a > trusted Root CA on WiFi clients, taking into account they can be > Windows, Linux, Android, Iphone, etc. ??? So, I'm going to re-word this in a way that may make it

Re: [pfSense] Force CA certificate installation as tsueted root CA on WiFi clients

2018-01-30 Thread Izaac
On Tue, Jan 30, 2018 at 12:22:50PM -0500, Izaac wrote: > main-in-the-middles man-in-the-middle -- . ___ ___ . . ___ . \/ |\ |\ \ . _\_ /__ |-\ |-\ \__ ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the proj

Re: [pfSense] Force CA certificate installation as tsueted root CA on WiFi clients

2018-01-30 Thread Chris Bagnall
On 30/1/18 5:22 pm, Izaac wrote: Q: How can I automatically undermine the basis of the SSL PKI by forcing my CA (which, by design, generates certificates for arbitrary sites and thereby main-in-the-middles all communications) onto third parties that happen to be traversing my network? A: You can

Re: [pfSense] routing between subnets at same Interface - configuration not working on 2.4.1

2018-01-30 Thread PiBa
Hi Fabian, Have you set?: System/Advanced/Firewall & NAT: "Static route filtering, Bypass firewall rules for traffic on the same interface" As for your 'static routes', i'm not sure what purpose they serve.. Routing between subnets known on a pfSense interface is 'automatic'. Regards, PiBa-