Comments on: GIF and GRE support now in 1.3

By: John Yii

John Yii — Thu, 02 Oct 2008 06:23:54 +0000

Can’t wait for the GRE limit remove. We have to revert back to IPCOP because multiple people from behind the firewall are making PPTP connection to the same IP address.

By: emb3dd3d

emb3dd3d — Sun, 21 Sep 2008 16:37:13 +0000

oops.. forgot to say good deal on Gre !

By: emb3dd3d

emb3dd3d — Sun, 21 Sep 2008 16:35:55 +0000

Ok, I third the L2TP option… We are in the process of replacing our fw’s and I immediately thought of Pfsense over the ones we have been using. Here was my list of choices: Monowall, Pfsense, Untangle, Vyatta. I think they all have their purpose, depending on your needs. Pfsense gives the best ROI and peace of mind out of all of them (imho). Now only if it supported the already in place L2TP clients, I would be in heaven. We may go with vyatta for now, but I would love to go straight Pfsense.

By: Chris Buechler

Chris Buechler — Wed, 03 Sep 2008 16:06:28 +0000

This isn’t related to forwarding of GRE, that’s been possible since before 1.0. You can either use the PPTP server’s forward functionality or port forwards for TCP 1723 and GRE (not the best description for other IP protocols given “port” means nothing for non-TCP/UDP traffic, but that’s a whole other discussion that’s already been had at length).

By: Ron

Ron — Wed, 03 Sep 2008 15:45:46 +0000

Will the 1.3 GRE support be needed if you just want to forward GRE packets to your VPN server? We have a Windows VPN server behind the firewall and port forward PPTP and GRE (Protocol 47) to this server so our remote users can connect. Will this work on 1.2 or do we have to wait for 1.3?

By: Chris Buechler

Chris Buechler — Thu, 21 Aug 2008 14:38:14 +0000

No timeline yet, it’ll be sometime in 2009. A more specific timeline will be available in the coming months.

By: Ask Bjørn Hansen

Ask Bjørn Hansen — Thu, 21 Aug 2008 11:25:31 +0000

Is there a timeline for 1.3? I didn’t realize until just now that gif devices (with ipsec) isn’t supported in 1.2.1 which just about is ruining my plans for how we’re setting that up. Aaargh!

By: Kobby

Kobby — Fri, 08 Aug 2008 10:57:50 +0000

Anything about supporting H.323?

By: John

John — Sun, 03 Aug 2008 19:17:10 +0000

Great work on a wonderful firewall. I would second Slicks plea for an L2TP server. Perhaps we can get enough interested users together and build a decent bounty???

By: Chris Buechler

Chris Buechler — Thu, 31 Jul 2008 17:33:01 +0000

Paul: Not planned at this time, but feel free to open a feature request ticket at http://cvstrac.pfsense.org