[pfSense Support] BGP support in 2.0

2011-08-03 Thread Typo3 on Gmail
Does 2.x have BGP support ? We have 2 providers that we wish to connect to via BGP Chris - tried to shoot you a msg via skype about a quote - if you can hit me up off list - that be great as well :-) - To unsubscribe,

Re: [pfSense Support] BGP support in 2.0

2011-08-03 Thread William Jimenez
That's a good question...I'd like to know too. On Aug 2, 2011 11:20 PM, Typo3 on Gmail gl...@typo3usa.com wrote: Does 2.x have BGP support ? We have 2 providers that we wish to connect to via BGP Chris - tried to shoot you a msg via skype about a quote - if you can hit me up off list - that be

Re: [pfSense Support] BGP support in 2.0

2011-08-03 Thread Typo3 on Gmail
We have been using 1.2.3 and have not pushed forward for fear of loosing BGP. I placed vyatta up elsewhere but truth is - I still think pfsense kicks it teeth in :-) On Aug 3, 2011, at 2:22 AM, William Jimenez wrote: That's a good question...I'd like to know too. On Aug 2, 2011 11:20 PM,

Re: [pfSense Support] BGP support in 2.0

2011-08-03 Thread Chris Buechler
On Wed, Aug 3, 2011 at 2:20 AM, Typo3 on Gmail gl...@typo3usa.com wrote: Does 2.x have BGP support ? Yes, and considerably improved from 1.2.3 where you have a full Internet routing table or two as we've done some tweaks there to prevent PHP from running out of memory with very large routing

Re: [pfSense Support] BGP support in 2.0

2011-08-03 Thread William Jimenez
Is it a package that has to be installed? On Aug 2, 2011 11:32 PM, Chris Buechler cbuech...@gmail.com wrote: On Wed, Aug 3, 2011 at 2:20 AM, Typo3 on Gmail gl...@typo3usa.com wrote: Does 2.x have BGP support ? Yes, and considerably improved from 1.2.3 where you have a full Internet routing

RE: [pfSense Support] BGP support in 2.0

2011-08-03 Thread Nathan Eisenberg
Does 2.x have BGP support ? We have 2 providers that we wish to connect to via BGP It does, and it works great. Multiple production deployments using it to advertise routes. All outbound - not accepting any prefixes inbound, so can't speak to how well that works. If Chris says it works

Re: [pfSense Support] hardware suggestions

2011-08-03 Thread Nick Upson
On 2 August 2011 17:09, Mehma Sarja mehmasa...@gmail.com wrote: On 8/2/11 8:22 AM, Nick Upson wrote: ok, I'm close to giving up with installing pfsense 1.2.3 or 2.0rc3 onto the FX5624 harddrive, Does anyone have suggestions for similiar hardware (6 lan ports, preferably rack mount) that is

[pfSense Support] openVPN frustration

2011-08-03 Thread Alberto Villegas Erce
Hi pfSense lovers, I am quite new in the pfSense world but this past two weeks I have been working hard with it. We have plan to change our actual firewall and we are doing some test with pfSense in a machine working in our internal network. I have managed to configure almost everything I

RE: [pfSense Support] BGP support in 2.0

2011-08-03 Thread Adam Thompson
I've been accepting ~ 13k routes inbound advertising nothing. So that part works, too. Now you just need confirmation from someone who does both! -Adam Thompson Nathan Eisenberg nat...@atlasnetworks.us wrote: Does 2.x have BGP support ? We have 2 providers that we wish to connect to via

[pfSense Support] pfSense 2.0 IPSec-VPN with Certs

2011-08-03 Thread Fuchs, Martin
Hi ! Does anyone have mutual-RSA-IPSec VPN working with 2.0 ? All settings I tried do not work, I always get errors: racoon: ERROR: failed to get subjectAltName racoon: ERROR: racoon: ERROR: no peer's CERT payload found. These errors are away as soon as I use PSKs, so I think it hust have

Re: [pfSense Support] pf in bridge mode

2011-08-03 Thread Arquivos
HI then. I had figured that configuration, but what i really don't know is wich ip's to put in each interface, LAN, WAN and OPT1 (the bridge interface). I followed some howtos and discussion lists threads but in every case i lost conectivity with my box. In my scenario wich ip's do you suggest to

RE: [pfSense Support] hardware suggestions

2011-08-03 Thread Ryan Rodrigue
I'm installing onto a seagate 320GB 2.5 hard drive, from a CD, both connected via sata. I boot from the CD and have attempted to install directly (press I) and continue (press C) into the liveCD boot, do a minimal configuration (1 lan 1 wan) and install from there (option 99). I'm using the

[pfSense Support] fx5624 pfsense install - FIXED

2011-08-03 Thread Nick Upson
Hi everyone, I have finally got 1.2.3 installed onto this box, things that seems to help fix it (I cannot go back and exhaustively test, this needs to go into production asap) - disable packet mode during the install - format the new hard disk on a windows machine first - that got me to a

[pfSense Support] php: : Could not open /usr/local/etc/snort/suppress/ for writing.

2011-08-03 Thread Ernst den Broeder
I am seeing this message in the system logs: php: : Could not open /usr/local/etc/snort/suppress/ for writing. Here's the version info: pfsense 2.0-RC3 (i386) (hard disk installation) https://209.87.237.162:8080/snort/snort_interfaces.phpsnort 2.8.6.1 pkg v. 1.34 Looking at the permissions of

[pfSense Support] Re: php: : Could not open /usr/local/etc/snort/suppress/ for writing.

2011-08-03 Thread Ernst den Broeder
More snips from the system log: Aug 3 12:54:26 snort[48939]: FATAL ERROR: Unable to open rules file /usr/local/etc/snort/snort_5152_fxp0//usr/local/etc/snort/suppress/LANsuppressList: No such file or directory. Aug 3 12:54:26 SnortStartup[49209]: Snort HARD Reload For 5152_fxp0... Aug 3 12:54:26

Re: [pfSense Support] hardware suggestions

2011-08-03 Thread Mehma Sarja
On 8/3/11 1:29 AM, Nick Upson wrote: On 2 August 2011 17:09, Mehma Sarja mehmasa...@gmail.com mailto:mehmasa...@gmail.com wrote: On 8/2/11 8:22 AM, Nick Upson wrote: ok, I'm close to giving up with installing pfsense 1.2.3 or 2.0rc3 onto the FX5624 harddrive,

Re: [pfSense Support] BGP support in 2.0

2011-08-03 Thread Chris Buechler
On Wed, Aug 3, 2011 at 7:43 AM, Adam Thompson athom...@athompso.net wrote: I've been accepting ~ 13k routes inbound  advertising nothing.  So that part works, too. Now you just need confirmation from someone who does both! I setup one that does both last week, gets full Internet routing

Re: [pfSense Support] php: : Could not open /usr/local/etc/snort/suppress/ for writing.

2011-08-03 Thread Chris Buechler
On Wed, Aug 3, 2011 at 1:11 PM, Ernst den Broeder erns...@gmail.com wrote: I am seeing this message in the system logs: php: : Could not open /usr/local/etc/snort/suppress/ for writing. Here's the version info: pfsense 2.0-RC3 (i386)   (hard disk installation) snort 2.8.6.1 pkg v. 1.34

RE: [pfSense Support] BGP support in 2.0

2011-08-03 Thread Nathan Eisenberg
I setup one that does both last week, gets full Internet routing table, ~360K routes each, from two providers. And advertises their AS. What about IPv6? ;) - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For

Re: [pfSense Support] php: : Could not open /usr/local/etc/snort/suppress/ for writing.

2011-08-03 Thread Ernst den Broeder
On 2011-08-03, at 5:23 PM, Chris Buechler wrote: On Wed, Aug 3, 2011 at 1:11 PM, Ernst den Broeder erns...@gmail.com wrote: I am seeing this message in the system logs: php: : Could not open /usr/local/etc/snort/suppress/ for writing. Here's the version info: pfsense 2.0-RC3 (i386)

Re: [pfSense Support] php: : Could not open /usr/local/etc/snort/suppress/ for writing.

2011-08-03 Thread Ernst den Broeder
On 2011-08-03, at 7:52 PM, Ernst den Broeder wrote: On 2011-08-03, at 5:23 PM, Chris Buechler wrote: On Wed, Aug 3, 2011 at 1:11 PM, Ernst den Broeder erns...@gmail.com wrote: I am seeing this message in the system logs: php: : Could not open /usr/local/etc/snort/suppress/ for writing.

Re: [pfSense Support] BGP support in 2.0

2011-08-03 Thread Chris Buechler
On Wed, Aug 3, 2011 at 6:19 PM, Nathan Eisenberg nat...@atlasnetworks.us wrote: I setup one that does both last week, gets full Internet routing table, ~360K routes each, from two providers. And advertises their AS. What about IPv6? ;) Should work on the 2.1 branch with manual bgpd.conf