Topic: Server Only or Server Gateway

[dannygoh]

Our requirement

- SMTP & HTTP Proxy
- Email Server

We have a multi wan load balancer in place running pfsense.

Can someone advise me which role should i install?

If install server gateway, i dont need to change any configuration on user pc but i can see SME Server Only mode if i have a multi wan load balance in place.

[jester]

It might make things a bit more complex, but if you want your proxy to be transparent i'd put it in server/gateway mode.

[versa]

I have pfsense as my firewall mostly for its traffic shaping, it also runs squid as a transparent proxy and squidguard for a bit of content filtering.
SME server is set up in "server only mode" and acts as the web server, mail server and file server it also handles the dhcp and dns.
Since you need pfsense for dual wan I would set sme up in server mode. However for the proxy I'm not sure if squid works on pfsense when using dual wan ?

[dannygoh]

if sme provide nat and pfsense also provide nat, anything wrongs with that?

[paradigm]

if sme provide nat and pfsense also provide nat, anything wrongs with that?

not to my knowledge , you would just have to do port forwarding to sme server

from pfsense (whice by the way looks to me vary nice , i would like to hear

about your experience with it) ,

and port forward ports from sme server to pfsense.

another thing you should chack is how does pfsense handle vpn passthrouge ,

i had a lot of bad experince with routers that dont support more then one vpn

user at a time

[dannygoh]

not to my knowledge , you would just have to do port forwarding to sme server

from pfsense and port forward ports from sme server to pfsense.

that sound complex to me.

[paradigm]

that sound complex to me.

I think that if you are going to use pfsense you should try to learn about port

forwarding at least , it isnt complex and it is a must for managing a network

they have great how to guides in the pfsense sith ,

sme server is a lot more simple in that aspect (single control panel for port

forward whice is very simple).