Re: [pfSense Support] Bridging question

2006-01-24 Thread Dan Swartzendruber
At 12:11 AM 1/24/2006, you wrote: Our new code in head allows a bridge group to receive an ip and will remedy this. 1.0 is not even out and 1.1 is much more fancy. Go figure ;) not complaining. i'm just puzzled it works on pfsense on not my sitch. oh well... Scott On 1/23/06, Dan

Re: [pfSense Support] Bridging question

2006-01-24 Thread Dan Swartzendruber
At 09:58 AM 1/24/2006, you wrote: Yes, Andrew is investigating this problem. We are seeing some similar issues as well. boy that's a relief. i was noticing that when the wifi card was on my pfsense box and bridging on, ftp proxy broke. possibly other weird stuff...

Re: [pfSense Support] Bridging question

2006-01-24 Thread Dan Swartzendruber
with AppleTalk (EtherTalk) packets on a ath - sis bridge. Am 24.01.2006 um 16:47 schrieb Dan Swartzendruber: At 09:58 AM 1/24/2006, you wrote: Yes, Andrew is investigating this problem. We are seeing some similar issues as well. boy that's a relief. i was noticing that when the wifi

Re: [pfSense Support] Bridging question

2006-01-24 Thread Dan Swartzendruber
At 11:45 AM 1/24/2006, you wrote: Make sure you're freebsd box is on RELENG_6 and up to date. it's supposed to be. i've been running cvsup every couple of weeks. i'll make sure i didn't pooch something. thx! - To

Re: [pfSense Support] Bridging question

2006-01-24 Thread Dan Swartzendruber
At 11:50 AM 1/24/2006, you wrote: If you where up to date, you would have that sysctl :) Maybe I misread something. Here is my cvsup tag: *default release=cvs tag=RELENG_6_0 Please tell me this is wrong :) - To

Re: [pfSense Support] Bridging question

2006-01-24 Thread Dan Swartzendruber
At 12:00 PM 1/24/2006, you wrote: That is wrong. I said RELENG_6 On 1/24/06, Dan Swartzendruber [EMAIL PROTECTED] wrote: At 11:50 AM 1/24/2006, you wrote: If you where up to date, you would have that sysctl :) Maybe I misread something. Here is my cvsup tag: *default release=cvs tag

Re: [pfSense Support] Bridging question

2006-01-24 Thread Dan Swartzendruber
At 12:02 PM 1/24/2006, you wrote: That is FreeBSD 6 release. That does not include all the new goodies in -STABLE. i'm wondering if that explains some of the anomalies i saw. i'll test tonight after doing a make world and make kernel etc...

Re: [pfSense Support] Bridging question

2006-01-24 Thread Dan Swartzendruber
At 12:02 PM 1/24/2006, you wrote: That is FreeBSD 6 release. That does not include all the new goodies in -STABLE. that did it! no more loss of connectivity. bless you, my son! :) - To unsubscribe, e-mail: [EMAIL

Re: [pfSense Support] Bridging question

2006-01-24 Thread Dan Swartzendruber
At 06:53 PM 1/24/2006, you wrote: Scott Ullrich wrote: That is FreeBSD 6 release. That does not include all the new goodies in -STABLE. just wanted to add that this is only advisable if you're doing it for good reason. in this case, you want -STABLE because of the relevant changes you

Re: [pfSense Support] more VoIP issues

2006-01-23 Thread Dan Swartzendruber
At 04:27 PM 1/23/2006, you wrote: On Sun, 22 Jan 2006, Scott Ullrich wrote: One major bug that everyone needs to be aware of is that the shaper was not subtracting 20% off the upload and download speeds. Anyone having issues should re-run the Traffic Shaper Wizard and subtract 20% from their

[pfSense Support] Bridging question

2006-01-23 Thread Dan Swartzendruber
Pardon the somewhat off-topic post, but I'm at my wits end. I have a cisco aironet card that was in my pfsense box. I wanted to bridge it to the LAN, but every time I tried, it would take down the ftp proxy, so I thought I'd move it to the freebsd 6.0 server. I did so. Unfortunately,

Re: [pfSense Support] Bridging question

2006-01-23 Thread Dan Swartzendruber
I got it working, but only by moving the IP address from fxp0 to bridge0. WTF??? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Bridging question

2006-01-23 Thread Dan Swartzendruber
At 07:32 PM 1/23/2006, you wrote: I've never really tried doing bridging with FreeBSD, but with Linux that's how bridging is done. For every interface you want to add to the bridge, you set its IP address to 0.0.0.0. Then, you set the IP address of the bridge interface and that becomes the

Re: [pfSense Support] more VoIP issues

2006-01-22 Thread Dan Swartzendruber
At 01:08 AM 1/22/2006, you wrote: On 1/22/06, Dan Swartzendruber [EMAIL PROTECTED] wrote: well, that did it for me, for sure! it's been so bad lately,i had to change my asterisk config to not use VOIP at all, since my kids were saying that no-one they called could understand what they were

Re: [pfSense Support] more VoIP issues

2006-01-22 Thread Dan Swartzendruber
At 09:24 AM 1/22/2006, you wrote: On 1/22/06, Dan Swartzendruber [EMAIL PROTECTED] wrote: I wonder how many others are bit by this. Also, can you ellaborate on you're changes from the wizard for anyone else to try? IE: changing rules for voips, etc. All I did was take my real

Re: [pfSense Support] more VoIP issues

2006-01-21 Thread Dan Swartzendruber
At 12:08 AM 1/22/2006, you wrote: On 1/22/06, Ben Browning [EMAIL PROTECTED] wrote: Just out of curiosity, are those with problems tagging packets for some VOIP queue based on the IP address of the VOIP device(s)? I believe I recall an issue in the shaper incorrectly tagging data if a rule

Re: [pfSense Support] FTP Not Working from LAN ?

2006-01-17 Thread Dan Swartzendruber
At 01:49 PM 1/17/2006, Vivek Khera wrote: On Jan 15, 2006, at 6:44 PM, Chris Buechler wrote: Jeb Barger wrote: I've seen this comment a couple of times. Is there a fix allowing FTP clients from lan to connect to a server on the internet? FTP had issues in b1, try B2-BVE3.

Re: [pfSense Support] CPU Mib

2006-01-17 Thread Dan Swartzendruber
At 02:59 PM 1/17/2006, you wrote: In addition the SoC patches was crashing our build so we backed them out. Honestly, you're SO picky! :) - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL

Re: [pfSense Support] FTP Not Working from LAN ?

2006-01-17 Thread Dan Swartzendruber
I looked in http://www.pfsense.org/~sullrich/BETA2-BUGVALIDATION5/ but the directory was empty. elsewhere? At 03:01 PM 1/17/2006, you wrote: 1:1 is fixed in the 5th bug validation edition/beta2. On 1/17/06, Dan Swartzendruber [EMAIL PROTECTED] wrote: At 01:49 PM 1/17/2006, Vivek Khera

Re: [pfSense Support] how to configure vlans

2006-01-14 Thread Dan Swartzendruber
At 10:03 AM 1/14/2006, you wrote: On Fri, 13 Jan 2006 10:21:37 -0500 Chris Buechler [EMAIL PROTECTED] wrote: after you configure them (which appears to be done properly), in the webgui, go to assign interfaces and assign them to something. Then you can configure them just like you can your

RE: AW: AW: [pfSense Support] beeps gone?

2006-01-04 Thread Dan Swartzendruber
At 02:51 PM 1/4/2006, you wrote: So I'm guessing the Sesame Street theme song done in beeps is probably out of the question then? Or Barney? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail:

Re: [pfSense Support] HW infos

2005-12-16 Thread Dan Swartzendruber
At 11:47 AM 12/16/2005, Scott Ullrich wrote: On 12/16/05, Vivek Khera [EMAIL PROTECTED] wrote: Intel provides the NIC drivers for FreeBSD. They do not suck. They work exceptionally well. I agree. Never have had any issues with Intel nics + freebsd. Same here. Realtek, on the other hand

Re: [pfSense Support] Traffic Shaper / IPSec

2005-12-07 Thread Dan Swartzendruber
At 11:29 PM 12/7/2005, you wrote: IPSEC cannot be shaped (yet). yes and no. ESP/AH, no, but if you're doing nat-traversal, that's encapsulated in UDP packets, so that would work, no? Scott On 12/7/05, John Cianfarani [EMAIL PROTECTED] wrote: If you build the traffic shaping rules for

Re: [pfSense Support] multi gateway LAN routing

2005-12-03 Thread Dan Swartzendruber
post your config? At 10:17 AM 12/3/2005, you wrote: You might try changing how Outlook sends attachments. winmail.dat doesn't help most people :) --Bill On 12/3/05, DLStrout [EMAIL PROTECTED] wrote: Hope this gif image is a better rep of what I was trying to convey ... -Original

Re: [pfSense Support] vlans and traffic shaping 0.94.10

2005-11-23 Thread Dan Swartzendruber
At 04:24 AM 11/23/2005, you wrote: Either your LAN or WAN interface doesn't support ALTQ. The wizard cannot continue. Using sis Ethernet cards and vlans on all interfaces. I had thought that the code was committed to allow vlans with altq. Look forward to hearing wheather this patch should be

Re: [pfSense Support] Dynamic DNS ON BOTH ENDPOINTS

2005-11-23 Thread Dan Swartzendruber
At 02:10 PM 11/23/2005, you wrote: I've posted this messege in the forum but I not received any responses for 2 days. I want to setup an always up IPSEC tunnel between two PFSENSE gateways that have dynamic IP addresses (cable modem and dsl modem). I know that this can be easily done on

RE: [pfSense Support] Dynamic DNS ON BOTH ENDPOINTS

2005-11-23 Thread Dan Swartzendruber
At 02:34 PM 11/23/2005, you wrote: I'm not 100% sure Scott will probably need to jump in here to confirm. In my tests even though you can put a dynamic-dns name in the field for remote gateway it doesn't actually seem to do a lookup on it. If it did it probably would work fine. This is

Re: [pfSense Support] vlans and altq

2005-11-17 Thread Dan Swartzendruber
On Thu, 17 Nov 2005, alan walters wrote: I was under the impression that altq has support for vlans. Is this enabled in pfsense at the moment. Have tried a couple of time but get unsupported interfaces. I know that my fxp and sis cards support it So I guess it must be the vlans that are

RE: [pfSense Support] vlans and altq

2005-11-17 Thread Dan Swartzendruber
At 06:04 PM 11/17/2005, you wrote: Tried on 0.90 through to non released 0.93.2 With the same troubles. I have vlans on both of the pfsense wan and lan interfaces. Might try again tomorrow. To see if I can isolate it a bit Hmm, I remember an issue where the vlans didn't have a bandwidth, so

Re: [pfSense Support] Again .. New release / console issue

2005-11-11 Thread Dan Swartzendruber
At 01:16 PM 11/11/2005, you wrote: Need testers. The sooner I get good feedback, the sooner its relased: I'll give this a try tonight... p.s. the traffic shaping is terrific. I downloaded the 0.93 tarball, maxing out the DSL line, and my daughter was gabbing with her friend on my

Re: [pfSense Support] Again .. New release / console issue

2005-11-11 Thread Dan Swartzendruber
At 10:44 PM 11/11/2005, you wrote: On 11/11/05, Dan Swartzendruber [EMAIL PROTECTED] wrote: At 01:16 PM 11/11/2005, you wrote: Need testers. The sooner I get good feedback, the sooner its relased: I'll give this a try tonight... p.s. the traffic shaping is terrific. I downloaded

Re: [pfSense Support] Network Device pooling

2005-11-01 Thread Dan Swartzendruber
At 01:31 PM 11/1/2005, you wrote: Can we please let this thread die already? I'm tired about hearing of benchmarking the *WRONG* way. Must. Control. The. Fist. Of. Death. - To unsubscribe, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Traffic shaping broken in 0.90

2005-10-31 Thread Dan Swartzendruber
At 03:32 PM 10/31/2005, you wrote: Just upgraded to 0.90 and traffic shaping seems to be broken. Even after rerunning the wizard I get: # pfctl -f /tmp/rules.debug bandwidth for qWANRoot higher than interface /tmp/rules.debug:17: errors in queue definition parent qWANRoot not found for qWANdef

Re: [pfSense Support] Traffic shaping broken in 0.90

2005-10-31 Thread Dan Swartzendruber
At 03:41 PM 10/31/2005, you wrote: I'm pretty sure that I am up to date on all MFC's. Did I miss one? http://cvstrac.pfsense.com/chngview?cn=7245 fixed the problem where the shaper vaporizes the BW settings in the GUI. -

Re: [pfSense Support] Traffic shaping broken in 0.90

2005-10-31 Thread Dan Swartzendruber
At 03:46 PM 10/31/2005, you wrote: Which appears to have been MFC'd at: http://cvstrac.pfsense.com/chngview?cn=7254 So it sounds like the problem is not fixed entirely? no, that's different. his errors referred to the BW being higher than the iface BW, which implies it does know it?

Re: [pfSense Support] Summary of problems in Bridging Mode

2005-10-28 Thread Dan Swartzendruber
At 03:17 PM 10/28/2005, you wrote: On 10/28/05, Peter Zaitsev [EMAIL PROTECTED] wrote: But the rule will will not be functional with fake IP address - it typically does not make sense as there are no from/to ips in the network - fake is not really used anywhere. So why to keep them with

Re: [pfSense Support] Summary of problems in Bridging Mode

2005-10-28 Thread Dan Swartzendruber
At 03:22 PM 10/28/2005, you wrote: That is correct as of the recent version that doesn't install anti-spoof, anti-lockout rules, etc for the lan subnet. Hmmm, actually, I don't know if it makes a difference, but my experience was with an OPT interface being bridged to the WAN, not the LAN.

Re: [pfSense Support] Summary of problems in Bridging Mode

2005-10-28 Thread Dan Swartzendruber
At 03:27 PM 10/28/2005, you wrote: On 10/28/05, Dan Swartzendruber [EMAIL PROTECTED] wrote: At 03:22 PM 10/28/2005, you wrote: Hmmm, actually, I don't know if it makes a difference, but my experience was with an OPT interface being bridged to the WAN, not the LAN. Does that matter

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 02:31 PM 10/26/2005, you wrote: Here is my setup: WRAP 128 mb CF Card First install 0.864 then upgraded via the web GUI to 0.892 WRAP. Currently using WAN/LAN only, OPT1 is not doing anything. This is a home setup using a DSL connection with PPPOE. All is well until I turn on traffic

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 02:48 PM 10/26/2005, you wrote: On 10/26/05, Mojo Jojo [EMAIL PROTECTED] wrote: I probably don't but I do testing sometimes with multiple lines back to my SoftSwitch at the office and don't want to yank it down to 100k or so and have problems. Either way the bandwidth here is only

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 02:54 PM 10/26/2005, you wrote: Also, I tried lower the guarantee to 256k just in case this part of the problem. No joy, same issue.. now *that* is really weird. can you post your rules and queues? - To unsubscribe,

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 02:58 PM 10/26/2005, you wrote: Sure, what would be the easiest way to do this? Get a shell on your box and do: pfctl -sq pftcl -sr I have nothing more than I mentioned before.. Plain vanilla setup with just the shaper stuff I mentioned. I don't even have any firewall rules or anything

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 03:00 PM 10/26/2005, you wrote: I think this is what you want: - shaper schedulertypehfsc/schedulertype - queue ewww, no thanks. reading raw xml is not fun. as scott said, go to /tmp and post rules.debug (removing IP addresses etc if you're worried about security.,,)

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
this is really odd. no queue stuff at all? what happens if you manually type: pfctl -f /tmp/rules.debug any errors? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 03:12 PM 10/26/2005, you wrote: Sorry... I have it turned off at the moment because it kills my connection speed :) I guess I have to turn it back on so the info will show up in this file? yes :) - To unsubscribe,

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 03:15 PM 10/26/2005, you wrote: this is really odd. no queue stuff at all? what happens if you manually type: pfctl -f /tmp/rules.debug any errors? Try this: ### # System Aliases lan = { sis0 } wan = { ng0 } pptp = { ng1 ng2 ng3 ng4 ng5 ng6 ng7 ng8 ng9 ng10 ng11 ng12

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
, Mojo Jojo [EMAIL PROTECTED] wrote: Sorry... I have it turned off at the moment because it kills my connection speed :) I guess I have to turn it back on so the info will show up in this file? Todd - Original Message - From: Dan Swartzendruber [EMAIL PROTECTED] To: support@pfsense.com Sent

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 03:29 PM 10/26/2005, you wrote: try putting manual bandwidth for WAN and LAN in the gui and see if that helps. You mean under InterfacesWAN and InterfacesLAN? yes. Are you sure you get no errors when loading this? Sorry, when loading what? what happens if you manually type: pfctl

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 03:34 PM 10/26/2005, you wrote: After setting the LAN interface to 100 mb, the screen came back OK except I saw this at the very bottom of the screen: ifconfig: not found Warning: unlink(/var/run/lan.conf.dirty): No such file or directory in /usr/local/www/interfaces_lan.php on line 283

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 03:37 PM 10/26/2005, you wrote: try putting manual bandwidth for WAN and LAN in the gui and see if that helps. You mean under InterfacesWAN and InterfacesLAN? yes. OK, I set my WAN to 10mb and my LAN to 100mb. I then turned traffic shaper back on and did a speed test and no joy, same

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
did you turn shaper back off? please turn it on and add the following two lines before the queue directives (by editing /tmp/rules.debug) altq on fxp1 hfsc bandwidth 10Mb queue { qWANRoot } altq on vlan0 hfsc bandwidth 10Mb queue { qLANRoot } NOTE: change fxp1 to your wan interface and

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
also post results of 'pfctl -sq' - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 03:50 PM 10/26/2005, you wrote: Yes I turned it back off, I have to leave it off or my speed is miserable :) i understand your pain, but no test results with shaping off will be meaningful. - To unsubscribe, e-mail:

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 03:54 PM 10/26/2005, you wrote: Here is the file after turning shaping back on and before making the changes you requested. Working on the changes now. Todd - # System Aliases lan = { sis0 } wan = { ng0 } pptp = { ng1 ng2 ng3 ng4 ng5 ng6 ng7 ng8 ng9 ng10 ng11 ng12 ng13

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 03:56 PM 10/26/2005, you wrote: After turning the shaper back on, I do have this already in the file: altq on sis1 hfsc bandwidth 10Mb queue { qWANRoot } altq on sis0 hfsc bandwidth 100Mb queue { qLANRoot } Do you want me to still replace this with yours? Seems to be the same basically..

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 04:01 PM 10/26/2005, you wrote: hmmm, this should have read: altq on ng0 hfsc bandwidth 10Mb queue { qWANRoot } Should I change it and give it a whirl? yes, please. - To unsubscribe, e-mail: [EMAIL PROTECTED] For

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 04:12 PM 10/26/2005, you wrote: queue root_sis1 bandwidth 10Mb priority 0 {qWANRoot} are you sure you reloaded the rules after changing sis1 to ng0? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands,

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 04:51 PM 10/26/2005, you wrote: OK, I did it and my link is still hosed. Do you want me to run any of those commands again or anything else now that I have reloaded the rules? yes, please send 'pfctl -sq' now that you reloaded 'em.

Re: [pfSense Support] Traffic Shaping, killing my DSL link speed to less than 100k

2005-10-26 Thread Dan Swartzendruber
At 05:07 PM 10/26/2005, you wrote: Hmmm... Since I turned shaper back off.. I had to turn it back on, I noticed that my changes to /tmp/rules.debug had gone away so I put the ng0 back on the line where it belongs. After doing so, I ran: # pfctl -f /tmp/rules.debug pfctl: ng0: driver does

Re: [pfSense Support] Traffic shaping

2005-10-25 Thread Dan Swartzendruber
At 12:45 AM 10/26/2005, you wrote: Not likely. This should be a ticket. If someone can open a ticket I can look at easily unsetting the shaper at the end of the wizard of no options where checked. done. - To

Re: [pfSense Support] Default SSH Config?

2005-10-24 Thread Dan Swartzendruber
At 05:05 PM 10/24/2005, you wrote: Ryan Neily wrote: I'm still seing problems with both SSH clients I am using. On one, I get a repated login attempt. With SecureCRT on Windows I get a Unknown Authentication Method unless I check the box that says keyboard interactive only??? I am not

[pfSense Support] bridging question

2005-10-24 Thread Dan Swartzendruber
I was looking over the bridging example posted earlier, but it wasn't quite what I was wondering about. Is it possible to bridge an OPT interface to the WAN interface even though the WAN interface is in a totally different subnet than the hosts on the OPT interface? My situation: home DSL

Re: [pfSense Support] passive ftp

2005-10-10 Thread Dan Swartzendruber
At 11:13 AM 10/10/2005, you wrote: As of 0.86.4 there should be a automatic ftp helper that is launched for internet - lan ftp redirections. Make sure you're on the latest version. Hmmm, I'm on 0.86.4 now, and it doesn't work for me. I went to an external linux server and ftp'ed back in to

RE: [pfSense Support] passive ftp

2005-10-10 Thread Dan Swartzendruber
At 11:46 AM 10/10/2005, you wrote: Oh sorry I didn't read this very well. I'm guessing the problem has to do with the ftp proxy (pftpx) saying the data channel is on 10.0.0.2. 227 Entering Passive Mode (10,0,0,2,191,87) - 10,0,0,2 ah, yeah, i didn't notice that either. not enough coffee, i

RE: [pfSense Support] passive ftp

2005-10-10 Thread Dan Swartzendruber
At 12:44 PM 10/10/2005, you wrote: This is what the man page says for the -f switch. -f address Fixed server address. The proxy will always connect to the same server, regardless of where the client wanted to connect to (before it was redirected). Use

RE: [pfSense Support] passive ftp

2005-10-10 Thread Dan Swartzendruber
At 04:38 PM 10/10/2005, you wrote: Well I'm not sure to tell you the truth. I wonder if binding it to the inet facing ip would fix it. The only this is this would remove the need for nat as you would have the proxy handle all the hand offs. :/ Try this. Kill pftpx (only the one with the -c 21

Re: [pfSense Support] passive ftp

2005-10-10 Thread Dan Swartzendruber
At 05:04 PM 10/10/2005, you wrote: File a ticket on cvstrac and I will change the behavior to start the ftp helper using: /usr/local/sbin/pftpx -b $inet-address -c 21 -f 10.0.0.2 -g 21 Roger. Thx! - To unsubscribe,

[pfSense Support] Inaccuracy of memory reporting in WebGUI

2005-10-07 Thread Dan Swartzendruber
Just logged into my pfsense and was surprised to see memory usage of 82% (given that I'm not doing much right now.) Ran top and saw this: Mem: 56M Active, 102M Inact, 42M Wired, 20K Cache, 34M Buf, 42M Free Swap: 512M Total, 512M Free Not sure how the memory usage is derived, but on a BSD

[pfSense Support] suggestion for LAN rule menu

2005-10-07 Thread Dan Swartzendruber
allowable protocol can be tcp/udp, and it add separate rules for tcp and udp. cool. unfortunately, you then have to add one manually for icmp assuming one wants to be able to ping outside hosts. how about tcp/udp/icmp also/instead?

Re: [pfSense Support] suggestion for LAN rule menu

2005-10-07 Thread Dan Swartzendruber
At 10:49 AM 10/7/2005, you wrote: On 10/7/05, Dan Swartzendruber [EMAIL PROTECTED] wrote: allowable protocol can be tcp/udp, and it add separate rules for tcp and udp. cool. unfortunately, you then have to add one manually for icmp assuming one wants to be able to ping outside hosts. how

RE: [pfSense Support] suggestion for LAN rule menu

2005-10-07 Thread Dan Swartzendruber
menu On 10/7/05, Dan Swartzendruber [EMAIL PROTECTED] wrote: p.s. the reason i bumped into this was looking at my ntop data, i noticed a small amount of non-IP data going out the WAN port. no idea what - i have a windows box (XP) but it should be doing NETBIOS over TCP (or whatever the option

Re: [pfSense Support] Inaccuracy of memory reporting in WebGUI

2005-10-07 Thread Dan Swartzendruber
At 12:57 PM 10/7/2005, you wrote: This code is leftover from m0n0wall. Not sure if its accurate since we now factor swap into the equation. At any rate, here is the code in question: exec(/sbin/sysctl -n vm.stats.vm.v_active_count vm.stats.vm.v_inactive_count .

[pfSense Support] squid

2005-10-06 Thread Dan Swartzendruber
just installed the latest package (since michael has provided a bunch of changes.) works fine, except for one glitch: the installation script apparently thinks the cache is /usr/local/squid/cache, but squid expects it in /var/squid, so it pukes. I created that directory manually and

Re: [pfSense Support] WAN issues

2005-10-02 Thread Dan Swartzendruber
At 12:53 AM 10/2/2005, you wrote: Mac address override? my guess. some of them register a mac address. others want a specific client name. never used RR so i can't say... Scott On 10/1/05, Dan Swartzendruber [EMAIL PROTECTED] wrote: At 09:17 PM 10/1/2005, you wrote

Re: [pfSense Support] WAN issues

2005-10-02 Thread Dan Swartzendruber
At 05:56 AM 10/2/2005, you wrote: On 10/2/05, Dan Swartzendruber [EMAIL PROTECTED] wrote: well, your WAN didn't get an IP address (note it's all zeroes?) Does RR require any kind of account information for the dhcp client? Some cable ISPs do, some don't... Well what i think

RE: [pfSense Support] WAN issues

2005-10-02 Thread Dan Swartzendruber
At 10:07 AM 10/2/2005, you wrote: I finally got it to work! I had to recycle the modem for a min and then release the IP and renewed it and the WAN IP showed up on WAN interface. glad to hear it. i guess it was just a glitch...

Re: [pfSense Support] Problem with firefox

2005-10-02 Thread Dan Swartzendruber
thanks, scott, that did it :) - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

RE: [pfSense Support] 802.11q vlans

2005-09-30 Thread Dan Swartzendruber
At 03:15 AM 9/30/2005, you wrote: [alan walters] [alan walters] Just looking at this I can only tag to a specific vlan on each port. So port to is enabled for 802.11q on vlan 1-4 with vlan 1 as the tag but it allows untagged traffic to transit. Other ports have only onevlan on then and they are

Re: [pfSense Support] 802.11q vlans

2005-09-29 Thread Dan Swartzendruber
At 05:28 AM 9/29/2005, you wrote: This might be off topic but I am flummoxed by the problem so I thought I would ask. Configuration Pfsense Lan –with 3 vlans and lan as parent. Switch with vlan 1 through to 4 enabled Port 2 is setup on switch with all vlans and is plugged into lan on

Re: [pfSense Support] 802.11q vlans

2005-09-29 Thread Dan Swartzendruber
At 10:27 AM 9/29/2005, you wrote: Is the switch port configured for tagging, or did you configure it to allow vlans 1-4 to talk to port 2? The VLAN setup in pfSense utilises 802.1q tagging, enabling vlans on a port doesn't necessarily configure that port for tagged frames. --Bill On

Re: [pfSense Support] NIC issues

2005-09-29 Thread Dan Swartzendruber
At 01:12 PM 9/29/2005, you wrote: Well - it keeps timing out, I wish I had the machine in front of me so I could send the actual error - but it keeps saying that the microcoad load is timing out sounds like the nic is flaky. i'm running the same NIC on my pfsense (as the LAN) and it works

Re: [pfSense Support] Interesting failure

2005-09-27 Thread Dan Swartzendruber
At 11:56 PM 9/26/2005, you wrote: This file was introduced after 0.85.2. Are you sure you didn't update filter.inc ? i probably did. i think i was trying to pick up a bugfix. probably not a good idea. - To

Re: [pfSense Support] Interesting failure

2005-09-27 Thread Dan Swartzendruber
At 09:28 AM 9/27/2005, you wrote: Probably not when certain people split a dozen or so functions out into their own file :) 0.85.4 has all the latest fixes. At this time, there isn't much patched post 0.85.4 (unless you try running ipv6 tunneling :)), I'd recommend moving to it. already did,

Re: [pfSense Support] antivirus and etc

2005-09-24 Thread Dan Swartzendruber
At 04:12 PM 9/24/2005, you wrote: Dan Swartzendruber wrote: At 09:07 PM 9/23/2005, you wrote: Oh, I understood you. In that case, I guess we'll have to agree to disagree. This platform deliberately has the capability of running various services on it (unlike m0n0wall.) If someone has

[pfSense Support] antivirus and etc

2005-09-23 Thread Dan Swartzendruber
It seems to me that if someone is going to port clamav as a package, please make sure that clamd can be run as a TCP daemon. Since clamav would need to be running for any kind of squid proxy to scan incoming pages, it could just as easily be available to someone running a mail server

RE: [pfSense Support] /rescue directory

2005-09-13 Thread Dan Swartzendruber
At 08:40 AM 9/13/2005, Frimmel, Ivan \(ISS South Africa\) wrote: My routers have been up for sometime before 0.84 and after .. du –h gives ~3Mb on both. No VMware. i'm running vanilla 0.84 and i get: # du -h /rescue/ 2.8M /rescue/

RE: [pfSense Support] /rescue directory

2005-09-13 Thread Dan Swartzendruber
At 11:44 AM 9/13/2005, John Cianfarani wrote: On my none vmware system I have it running on it looks to do the same thing. # df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/ad0s1a3.9G433M3.1G12%/ devfs 1.0K1.0K 0B 100%/dev # du -h

[pfSense Support] Ticket 481

2005-09-09 Thread Dan Swartzendruber
arpwatch still not quite right. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

[pfSense Support] mail alias weirdness?

2005-09-06 Thread Dan Swartzendruber
A couple of times I've inadvertantly sent to pfsense.org instead of pfsense.com, and gotten the following bounce: Hi. This is the qmail-send program at mail.livebsd.com. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up.

Re: [pfSense Support] startup problem

2005-09-06 Thread Dan Swartzendruber
At 03:27 PM 9/6/2005, Richard Davis wrote: This is probably a newbie question but I have loaded pfsense on the hard drive on PC A and have a cross over cable going to another PC(PC B). I configured the PC B with an IP in the same range(192.168.1.10\24 .the default on the pfsense box is

[pfSense Support] Captive portal update

2005-08-26 Thread Dan Swartzendruber
Running latest 80.4. Part of my problem was a basic misunderstanding. I had assumed that the portal would block access until you authenticated, so I left the default OPT1 = Any rule in I had before. So... I removed it and now access is not allowed until I go through the portal page.

Re: [pfSense Support] Captive portal update

2005-08-26 Thread Dan Swartzendruber
At 07:23 PM 8/26/2005, Chris Buechler wrote: On 8/26/05, Dan Swartzendruber [EMAIL PROTECTED] wrote: Running latest 80.4. Part of my problem was a basic misunderstanding. I had assumed that the portal would block access until you authenticated, so I left the default OPT1 = Any rule in I

Re: [pfSense Support] Sweet!

2005-08-25 Thread Dan Swartzendruber
I don't know if this is something I'm doing wrong. Using the default pfsense captive portal page, I defined a test user and password. Unfortunately, even if I deliberately enter something wrong, I get no error indication, and my browser goes to the URL I requested. I do happen to be

Re: [pfSense Support] Accessing NATed services from behind the NAT

2005-08-25 Thread Dan Swartzendruber
At 09:20 PM 8/25/2005, Dimitri Rodis wrote: Does this issue still exist in the latest build of pfSense? Better explanation: http://www.m0n0.ch/wall/docbook/faq-lannat.html I *hate* the split horizon or split brain DNS solution. It is an absolute nightmare to do this stuf in DNS. Please tell

Re: [pfSense Support] VLAN problem

2005-08-24 Thread Dan Swartzendruber
Almost forgot: what it is now doing is when I enter the webGUI, it keeps bringing up the wizard. I can skip it, but next time it comes up again... - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands,

[pfSense Support] captive portal question?

2005-08-24 Thread Dan Swartzendruber
I was looking at the setup screen, and it doesn't look like it will let me pick the OPT1 interface (which is where my guest WLAN will come in on...) - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands,

Re: [pfSense Support] captive portal question?

2005-08-24 Thread Dan Swartzendruber
At 07:10 PM 8/24/2005, Scott Ullrich wrote: The interface must be enabled and configured to show up. Aha, thanks. I was before, but I got bit by that bug you just fixed in the vlan checking code. Haven't pulled down 0.80 yet. Thx... Scott On 8/24/05, Dan Swartzendruber [EMAIL

[pfSense Support] DNS Forwarder question

2005-08-23 Thread Dan Swartzendruber
Currently you can only specify an IP address for entries. Some clients (such as my belkin network KVM) don't pass a client name. Others (such as my Series 2 TiVo) pass a less than useful one (in this case, the serial number.) Is there some reason this field couldn't take a name? Maybe