Recent Posts

1

Installation / Re: Migration Problem from SmallWall to t1n1wall

« Last post by andywhite on September 21, 2021, 11:49:23 AM »

I'll take a look this weekend, hopefully a simple fix

2

Installation / Re: Migration Problem from SmallWall to t1n1wall

« Last post by Y.Mamoto on September 19, 2021, 09:02:29 AM »

If I check the function "Allow Fragment Packets", save and reflect the rule, the WebUI'll be locked out again.

Doesn't  the function work correctly?

3

Installation / Re: Migration Problem from SmallWall to t1n1wall

« Last post by Y.Mamoto on September 17, 2021, 11:06:00 AM »

Hello,

After unchecking "Allow fragmented packets" of all rules,
I've solved the problem.

In the xml file, after deleting all the lines with <frags />,
and restoring the config file.

4

Installation / Re: Migration Problem from SmallWall to t1n1wall

« Last post by Y.Mamoto on September 10, 2021, 04:28:43 AM »

I send the results of status.php via e-mail.
Thanks.

5

Installation / Re: Migration Problem from SmallWall to t1n1wall

« Last post by andywhite on September 10, 2021, 12:38:56 AM »

something in the firewall rules is breaking, probably a bug.  I'd need to see your firewall rules from /status.php

6

Installation / Migration Problem from SmallWall to t1n1wall

« Last post by Y.Mamoto on September 10, 2021, 12:34:51 AM »

I need help with my new Express 5800 server.

 I can login when its newly installed but as soon as I load an old config from smallwall 1.8.4b11 to the newest t1n1wall, I can't access web interface.

 If I disable pf, I  access web interface, but the firewall doesn't work.
I've tried various things (ex. delete all static route, apply, reboot), but I'm in trouble because I can't solve it.

Please let me know if there is a workaround.

7

Feature Requests / Re: Multiple Phase 2 Entries for IPSec Tunnels

« Last post by andywhite on April 07, 2021, 11:56:46 AM »

Hi,  Is there a link to the diagram ?  I can't understand the request without it I think

8

Feature Requests / Multiple Phase 2 Entries for IPSec Tunnels

« Last post by tuaris on March 22, 2021, 06:51:54 PM »

In case the title isn't self explanatory, this allows you to use IPsec with multiple subnets.  The diagram below explains this.

Without another phase 2 entry, hosts 192.168.7.123 and 10.8.8.2 are unable to communicate with each other.  Unless there was a way to tell t1n1wall to route traffic from 192.168.7.0/24 to 10.8.8.0/24 over the existing IPSec tunnel (which there isn't and static routes don't work). 

Additionally, some have suggested to create a 3rd IPSec tunnel using the same keys and endpoints, but with different subnets.  That doesn't work either.  It results in only one of the two tunnels working.



The correct solution is the create a second phase 2 entry for the existing IPSec tunnel.

9

Feature Requests / Re: Support creating generic tunnel interface (GIF)

« Last post by tuaris on March 22, 2021, 06:24:46 PM »

Ah, thanks.  I didn't realize this was already possible.

10

Feature Requests / Re: Support creating generic tunnel interface (GIF)

« Last post by andywhite on January 31, 2021, 08:18:04 PM »

Hi !

There is support already there , carried over from m0n0wall days, for an ipv6 tunnel. 

Once ipv6 is enabled (in the system settings), the wan interface will show options for using a tunnel endpoint for ipv6