Re: [pfSense Support] Outbound port forward

2011-09-06 Thread David Burgess
On Tue, Sep 6, 2011 at 1:08 PM, Arquivos arqui...@otv.com.br wrote: i need to forward all the requests going out by the port 53 (DNS) to a single external DNS server, in dispite off the DNS configured in the clients. Can someone help me in that? What you want is a NAT Port Forward entry on

[pfSense Support] dialup router

2011-08-19 Thread David Burgess
I'm trying to build a dialup router on an HP t5710. It has 512 MB of flash and a single serial port, which I intend to use for an external modem. I'm wondering if a generic install of 1.2.3 or 2.0 will fit on the 512 MB of flash, or can I do an embedded install and disable the console so that the

Re: [pfSense Support] Happy Birthday Chris

2011-08-18 Thread David Burgess
Happy Birthday, eh. (Canadian) db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

Re: [pfSense Support] PPTP Broken in latest AMD 2.0 Snapshots

2011-08-17 Thread David Burgess
On Wed, Aug 17, 2011 at 1:49 PM, Chris Buechler cbuech...@gmail.com wrote: http://redmine.pfsense.org/issues/1107 Fixing that broke PPPoE entirely on AMD64, doubt if that gets fixed for 2.0. Can you please clarify? Are you saying that folks who use PPPoE on the WAN should not update to the

Re: [pfSense Support] ppp - 3G on 2.0 rc3

2011-07-30 Thread David Burgess
On Sat, Jul 30, 2011 at 4:28 PM, Nenhum_de_Nos math...@eternamente.info wrote: ps: how ofter do nanobsd images are updated ? there is just this from July 4th and no more available. http://forum.pfsense.org/index.php/topic,38687.0.html db

[pfSense Support] Re: unknown cause of limited throughput

2011-07-14 Thread David Burgess
2.0-RC3 (amd64) built on Tue Jul 12 21:23:55 EDT 2011 On Tue, Jul 5, 2011 at 11:52 PM, David Burgess apt@gmail.com wrote: I hope that's not too confusing. To summarize, any two machines, real or virtual, get iperf results near wire speed when on the same L2 network. Any two machines

Re: [pfSense Support] Re: unknown cause of limited throughput

2011-07-14 Thread David Burgess
On Thu, Jul 14, 2011 at 11:56 AM, Adam Thompson athom...@athompso.net wrote: Are you passing the VLAN tags all the way into the pfSense VM on a single vNIC, or are you splitting the VLANs at the vSwitch level and passing them into multiple vNICs on the pfSense VM? Adam, Thanks for the info.

Re: [pfSense Support] Re: unknown cause of limited throughput

2011-07-14 Thread David Burgess
On Thu, Jul 14, 2011 at 4:39 AM, Ermal Luçi ermal.l...@gmail.com wrote: Try to tune these sysctl: net.isr.numthreads: 1 net.isr.bindthreads: 0 net.isr.direct: 1 net.isr.direct_force: 1 I tried those in System: Advanced: System Tunables. Throughput is still 17.4 Mbps between vlan240 and any

[pfSense Support] Re: unknown cause of limited throughput

2011-07-14 Thread David Burgess
On Tue, Jul 5, 2011 at 11:52 PM, David Burgess apt@gmail.com wrote: I'll probably kick myself when I figure this one out And the answer is... traffic shaper. I'm so embarrassed. ::Off to kick self:: db - To unsubscribe

[pfSense Support] unknown cause of limited throughput

2011-07-05 Thread David Burgess
I'll probably kick myself when I figure this one out, but here's a riddle for you. pfsense is 2.0RC3. Atom D510 (2x1.6GHz, GBE) Clear DF bit: enabled Scrub: disabled I have a number of real and virtual hosts (single ESXi server with vlans) connected to pfsense through a Netgear gigabit switch

Re: [pfSense Support] Current Production Version

2011-06-18 Thread David Burgess
On Sat, Jun 18, 2011 at 7:22 PM, Volker Kuhlmann hid...@paradise.net.nz wrote: Well, this is a little annoying. I have RC1 too, and I had checked only about a week ago, and there is no newer than RC1 on the servers The images are labelled RC1, but if you install them they will show up in your

Re: [pfSense Support] Multible PPPoE on same NIC?

2011-06-16 Thread David Burgess
On Thu, Jun 16, 2011 at 10:21 AM, Steven Sherwood stev...@coc.ca wrote: Hi there - I assume that you are using multiple modems?  Should be possible to create VLANs and have multiple PPPoE sessions, one on each VLAN.  You will need a VLAN capable switch upstream of you pfSense box for

Re: [pfSense Support] need reboot after changing firewall rules?

2011-06-09 Thread David Burgess
On Thu, Jun 9, 2011 at 10:59 AM, Roberto Nunnari roberto.nunn...@supsi.ch wrote: Hi. I just discovered that modifications to the firewall rules will not be active until the box is rebooted.. Is it a known bug or a misconfiguration on my side? Did you try this?

Re: [pfSense Support] Splitting a /24 into multiple subnets

2011-05-23 Thread David Burgess
On Mon, May 23, 2011 at 4:14 PM, Andreas Kaiser di...@binary-punks.com wrote: That allows you to do any routing you want between interfaces / WAN and gives you granular control of everything. *That* is exactly what I want ;-) Have you turned off automatic outbound NAT and disabled or

Re: [pfSense Support] IPsec, Multi-WAN Session Setup Problems. (2.0 RC1)

2011-05-20 Thread David Burgess
On Fri, May 20, 2011 at 1:51 AM, A Mohan Rao mohanra...@gmail.com wrote: not able to do client side open vpn setup properly any body can help for which open vpn client i have to download and install run properly i have to do server side setup which is i have to attached video. Awaiting for

Re: [pfSense Support] A REALLY Simple Question, Really

2011-04-29 Thread David Burgess
On Fri, Apr 29, 2011 at 3:05 PM, Yehuda Katz yeh...@ymkatz.net wrote: On Fri, Apr 29, 2011 at 4:49 PM, Mehma Sarja mehmasa...@gmail.com wrote: Alix running pf 20 RC1 nano. Trying to change from default 192.168.1.x network to 192.168.100.x on the LAN interface - nothing fancy. WHAT I DID

Re: [pfSense Support] pfSense to use more memory

2011-03-31 Thread David Burgess
On Thu, Mar 31, 2011 at 11:17 AM, Shibashish shi...@gmail.com wrote: My pfSense box says real memory  = 12884901888 (12288 MB) avail memory = 2567946240 (2448 MB) How can i ask pfSense to use more memory? Use the 64-bit version. I tried the 64-bit version but it kept crashing, hence

Re: [pfSense Support] pfsense site down?

2011-03-26 Thread David Burgess
Was down briefly here, but up now.

Re: [pfSense Support] Upgrading options

2011-03-25 Thread David Burgess
On Fri, Mar 25, 2011 at 2:25 PM, - Dickie Bradford - dbradf...@never-enuff.net wrote: Is it possible to do backup on a 1.2.3 machine and reload it with a fresh2.0 and reload the backup? Yes. The only issues I've seen come up in the forum are from users who have international characters in the

Re: [pfSense Support] can't block https://facebook.com via firefox

2011-03-22 Thread David Burgess
On Tue, Mar 22, 2011 at 10:53 AM, Luke Jaeger ad...@pvpa.org wrote: Hello, I have squid configured as transparent proxy on my network. The point of transparent proxy is that it doesn't require any system or browser proxy setting; it intercepts all http requests from the user on the active

Re: [pfSense Support] Cisco AnyConnect

2011-03-21 Thread David Burgess
On Sun, Dec 5, 2010 at 12:10 AM, Chris Buechler cbuech...@gmail.com wrote: On Sun, Dec 5, 2010 at 2:02 AM, David Burgess apt@gmail.com wrote: But openconnect works, at least for me on Linux, and from what I gather it's available for FreeBSD too. What are the chances of installing

Re: [pfSense Support] RRD quits collecting

2011-03-09 Thread David Burgess
On Wed, Mar 9, 2011 at 3:49 PM, k_o_l k_...@hotmail.com wrote: Since I installed 2.0-RC1 last Friday I’ve noticed RRD at least on two different occasion stopped collecting data see attached. http://forum.pfsense.org/index.php/topic,33154.0.html db

Re: [pfSense Support] List Posting Etiquette [WAS: Re: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout]

2011-03-08 Thread David Burgess
On Tue, Mar 8, 2011 at 8:02 AM, Yehuda Katz yeh...@ymkatz.net wrote: Does anyone else see why this is annoying? I lost all understanding of this thread many posts back. db - To unsubscribe, e-mail:

Re: [pfSense Support] Re: throughput tuning in 2.0

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 1:24 AM, Seth Mos seth@dds.nl wrote: The current 2.0 snapshots have a different driver for the Intel gigabit cards. We switched to the Yandex drivers to debug driver issues with the Intel supplied ones. I wondered. The difference on this system is positive and

Re: [pfSense Support] Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 8:22 AM, Jim Pingle li...@pingle.org wrote: Since the switch to the Yandex Intel drivers a couple days ago my VMs all constantly print watchdog timeouts on the console... It seems to operate OK, but it makes the console useless. I, for one, welcome our new

Re: [pfSense Support] Thoughts on hardware for a possible pfSense installation for firewalling 5000+ workstations on a 30-40Mbps Internet uplink

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 10:03 AM, Eric Feldhusen efeldhusen.li...@gmail.com wrote: As part of a regional education service agency to multiple K-12 school districts, we're talking about using pfSense for our nat/firewalling for approximately 5000+ workstations on a 30-40 Mbps internet uplink.  

Re: [pfSense Support] Thoughts on hardware for a possible pfSense installation for firewalling 5000+ workstations on a 30-40Mbps Internet uplink

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 10:12 AM, David Burgess apt@gmail.com wrote: If you want to spend a little more for that 'instant' feel, I can tell you that a Core i3 550 on the same connection feels pretty much instant To clarify, I was referring to navigating the UI. All of the hardware I

Re: AW: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 3:34 PM, Kevin Tollison ktolli...@gmail.com wrote: Sorry for the top post. (BlackBerry) I worked with Scott and Ermal a while today on an em issue. Ermal was able to improve the situation some, but it is still not resolved. I had to bail on him. Is anyone

Re: AW: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread David Burgess
On 2011 3 4 20:09, Kevin Tollison ktolli...@gmail.com wrote: 2 B5 was good until a month or so ago. Are you using any vlans? I am beginning to think it may be in vlans. Yes. One of my onboards has 8 vlans and the other 5.

Re: AW: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread David Burgess
Client. Sent from my phone. On 2011 3 4 20:14, Kevin Tollison ktolli...@gmail.com wrote: What about openVPN? -- Kevin Tollison Sent from my Blackberry -Original Message- From: David Burgess apt@gmail.com Date: Fri, 4 Mar 2011 20:12:21 To: support@pfsense.com Reply

Re: AW: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 8:22 PM, Kevin Tollison ktolli...@gmail.com wrote: That kills my theories. Must still be driver or kernel. Wonder if one of the panic fixes caused the issue I am seeing. Ermal did some voodoo that I didn't understand today. Worked better, but not completely fixed. Glad to

[pfSense Support] Re: throughput tuning in 2.0

2011-03-03 Thread David Burgess
On Wed, Mar 2, 2011 at 11:21 PM, David Burgess apt@gmail.com wrote: On Wed, Mar 2, 2011 at 2:44 AM, David Burgess apt@gmail.com wrote: the NIC is sending and receiving a total of about 530 mbit x2 during the test. This gets worse I'm afraid. Well, some good news. I have reinstalled

[pfSense Support] Re: throughput tuning in 2.0

2011-03-02 Thread David Burgess
On Wed, Mar 2, 2011 at 2:44 AM, David Burgess apt@gmail.com wrote: the NIC is sending and receiving a total of about 530 mbit x2 during the test. This gets worse I'm afraid. I recreated my setup, substituting a GS724T switch in for the GS108E, hoping the switch might be the bottleneck

[pfSense Support] throughput tuning in 2.0

2011-03-01 Thread David Burgess
2.0-RC1 (amd64) built on Tue Mar 1 15:52:28 EST 2011 Core i3 550 3.2 GHz 4GB RAM Intel GBE I've just set this system up doing some crude throughput testing with iperf. The most I can push through this box from LAN to WAN is a steady 503-520 mbps, using the default mtu (higher mtu values produce

Re: [pfSense Support] throughput tuning in 2.0

2011-03-01 Thread David Burgess
On Wed, Mar 2, 2011 at 12:38 AM, Seth Mos seth@dds.nl wrote: I'm routing it from one interface to another although it's destination is also a VLAN on that other interface. Maybe that's where the issue lies. It would be unfortunate if vlan-vlan traffic on a given interface has its maximum

Re: [pfSense Support] Microsoft updates through pfSense

2011-02-17 Thread David Burgess
On Thu, Feb 17, 2011 at 8:42 PM, Shali K.R. sh...@vidyaacademy.ac.in wrote: Dear all, I am having 500 windows client machines connected through pfSense and squid, please suggest me a suitable method for handling updates. You'll find the appropriate info here:

Re: [pfSense Support] Microsoft updates through pfSense

2011-02-17 Thread David Burgess
On Thu, Feb 17, 2011 at 8:52 PM, Shali K.R. sh...@vidyaacademy.ac.in wrote: Dear db, i have tried this, but it showing a high bandwidth usage, is this a proper way?? I uninstalled the squid package about three months ago, unable to get it to function properly. I will try it again when pfsense

Re: [pfSense Support] install pfsense from usb stick

2011-02-12 Thread David Burgess
The 2.0 snapshots include a usb image. Installing 1.2.3 from usb will be a bit of a trick, as you have learned. db

[pfSense Support] pfsense and DDOS

2011-02-01 Thread David Burgess
An article popped up on /. today, and although it's a poorly written article, some of the ensuing discussion did provoke some thought. http://it.slashdot.org/story/11/02/01/181200/Firewalls-Make-DDoS-Attacks-Worse I think the article is mostly just scare marketing, but it raises the question of

[pfSense Support] Re: pfsense and DDOS

2011-02-01 Thread David Burgess
On Tue, Feb 1, 2011 at 12:25 PM, David Burgess apt@gmail.com wrote: I recently read a page in the pfsense docs (can't find it in the wiki or FAQ now), which I believe quoted the pfsense book (don't have it), where cmb states that pfsense is the best open source firewall, and one

Re: [pfSense Support] Traffic Graph accurate--but not the host list

2011-01-24 Thread David Burgess
On Mon, Jan 24, 2011 at 11:38 AM, Dimitri Rodis dimit...@integritasystems.com wrote: pfSense 2.0, most recent builds When I go to status/traffic graph, the graph is correct but the list of hosts is not. I don’t know if there’s something I’m not doing, but here’s what I did to test it: Put

Re: [pfSense Support] pfSense 2.0, upgrade to this morning's snap problem

2011-01-24 Thread David Burgess
On Mon, Jan 24, 2011 at 11:42 AM, Dimitri Rodis dimit...@integritasystems.com wrote: After an upgrade to this morning’s snap, I received the following after the upgrade/reboot (it’s what’s on my PuTTY atm): This looks a lot like what's being discussed here, although I don't see the em driver

Re: [pfSense Support] Re: Network Traffic difference

2011-01-19 Thread David Burgess
On Wed, Jan 19, 2011 at 9:44 PM, Shali K.R. sh...@vidyaacademy.ac.in wrote: sir .. In my pfsense traffic graphic shows WAN in 4 Mbps LAN out 1Mbps   Why this differenceanything wrong with mypfsense? http://forum.pfsense.org/index.php/topic,31855.0.html For pcap use tcpdump on the pfsense

[pfSense Support] MHz myth?

2011-01-17 Thread David Burgess
I'm familiar with the hardware sizing guide, and I've done a few benchmarks myself, but I'm wondering if a MHz is a MHz when it comes to pf performance, or do things like IPC and cache sizes matter? What about RAM frequencies and latency? Putting encryption and the various pfsense packages aside,

Re: [pfSense Support] Is it possible to Port Forward same PORT to TWO servers? pfsense + TWO Asterisk servers and NAT

2011-01-14 Thread David Burgess
On Fri, Jan 14, 2011 at 11:55 AM, Bruce B bruceb...@gmail.com wrote: Hi Everyone, I am facing a dilemma here. If I port forward 1-2 to my first Asterisk server which sets behind pfSense v1.2.3 then I have two way audio. If I remove it I don't have any audio but call establishes. Now,

Re: [pfSense Support] autorollback?

2011-01-13 Thread David Burgess
On Thu, Jan 13, 2011 at 2:00 PM, Charles N Wyble char...@knownelement.com wrote: Phase one applies the configuration. Phase two rolls it back if you don't confirm it. So if you did something that blocked you out of the device for example, it would auto roll back. Ubiquiti's AirOS 5 has a

Re: [pfSense Support] Multi WAN

2011-01-13 Thread David Burgess
On Thu, Jan 13, 2011 at 10:29 PM, Shali K.R. sh...@vidyaacademy.ac.in wrote: Dear all, I have 2 WAN ( Static and another PPPOE )connections and a LAN connection i added PPPOE as WAN and static as OPT1 two connections are active and i added a firewall rule for OPT1 allow all to all  then i

Re: [pfSense Support] Multi WAN

2011-01-13 Thread David Burgess
On Thu, Jan 13, 2011 at 11:30 PM, Shali K.R. sh...@vidyaacademy.ac.in wrote: Dear sir, How can i create rule for out going? i already created all allow rule for OPT1 in firewal- Rules When you create a firewall rule on an interface, that rule will govern only packets arriving on that

Re: [pfSense Support] Testing 2.0 - What is the upgrade and downgrade process for Daily snapshots?

2011-01-12 Thread David Burgess
On Wed, Jan 12, 2011 at 1:37 PM, Dimitri Rodis dimit...@integritasystems.com wrote: if that doesn’t work, you can use the gui to boot off of the old slice. Very nice and easy. Or if it /really/ doesn't work you can use the initial boot menu to choose the other slice at boot time. You will see

Re: [pfSense Support] Testing 2.0 - What is the upgrade and downgrade process for Daily snapshots?

2011-01-12 Thread David Burgess
On Wed, Jan 12, 2011 at 1:46 PM, Bruce B bruceb...@gmail.com wrote: So, if I am on: 1 pfsense and do an upgrade, does the upgrade apply to 1 pfsense or 2 pfsense ? If you booted from 1 then upgraded, it will overwrite the 2 slice. Also, rather using the Console Cable each time, can I change

[pfSense Support] Re: squid continues downloading but LAN client stalls

2011-01-07 Thread David Burgess
On Fri, Jan 7, 2011 at 10:58 AM, David Burgess apt@gmail.com wrote: I am trying to download a large iso from microsoft.com. At some point (different every time), the download stalls on the client. Sorry, forgot to mention what I'm using. 2.0-BETA5 (amd64) built on Tue Jan 4 02:47:18 EST

Re: [pfSense Support] Advice?

2011-01-04 Thread David Burgess
On Tue, Jan 4, 2011 at 8:25 AM, Nicolas Roussi nicolas.rou...@archimedean.org wrote: Would this setup be sufficient? Depends on the bandwidth limits you will put on your clients. I have 2.0 with squid running on an Atom D510 with 4GB RAM and a 40/4 mbps mlppp connection and it has no trouble.

[pfSense Support] FAQ item request: Do I need to know how to use a shell to use PFSense?

2010-12-20 Thread David Burgess
I'm annoyed by the recurrence of posts like this: http://www.dslreports.com/forum/r25224935- I see the Linux myth is debunked in the FAQ, but is there something substantial that I can link to that states or demonstrates that pfsense is adequately administered from the UI for most non-dev users?

Re: [pfSense Support] pfSense and adsl

2010-12-17 Thread David Burgess
On Fri, Dec 17, 2010 at 12:39 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: Or if you can answer more generally what is genereal pfSense set up if you get DSL line from ISP? I'm not familiar with that Netgear or PPPoA. My DSL uses PPPoE, and I have two options for handling that login: 1.

Re: [pfSense Support] custom files in /var/etc/ gone after reboot

2010-12-15 Thread David Burgess
On Wed, Dec 15, 2010 at 11:14 AM, Scott Benson sben...@a-1networks.com wrote: [r...@host]/conf(17): mkdir blah mkdir: blah: Read-only file system [1.2.3-RELEASE] [r...@host]/conf(18): /etc/rc.conf_mount_rw db - To

[pfSense Support] 2.0 book?

2010-12-09 Thread David Burgess
Is there any public plan for a 2.0 book? I sure would like to pick one up. db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available -

[pfSense Support] Re: OT: coexisting with cisco

2010-12-09 Thread David Burgess
On Wed, Dec 8, 2010 at 1:38 PM, David Burgess apt@gmail.com wrote: Can somebody please tell me the cisco equivalent of a firewall rule that will keep state? After some closer inspection I don`t think there is a Cisco firewall on site at all, just a router and layer 3 switching. I talked

Re: [pfSense Support] RDD failed in BETA

2010-12-08 Thread David Burgess
On Wed, Dec 8, 2010 at 9:33 AM, k_o_l k_...@hotmail.com wrote: “There has been an error creating the graphs, please check your system logs” I would like to keep my RRD data is there a work around? This has been discussed in the forum, and IIRC, the only solution that was offered was to delete

[pfSense Support] OT: coexisting with cisco

2010-12-08 Thread David Burgess
Can somebody please tell me the cisco equivalent of a firewall rule that will keep state? I have hosts (Windows and pfSense) on opposite sides of a cisco firewall and router which I don't control. When I try to reach pfSense from Windows, tcpdump shows that pfSense is receiving the packet and

[pfSense Support] RFC1918 on WAN

2010-12-04 Thread David Burgess
My WAN is mlppp with a static public IP address. pfSense is 2.0 beta4. Out of curiosity I disabled the check box on the WAN config page to block private networks. I then created an alias for RFC1918 and loopback addresses and manually created a logging reject rule at the top of the WAN rules for

Re: [pfSense Support] RFC1918 on WAN

2010-12-04 Thread David Burgess
On Sat, Dec 4, 2010 at 2:35 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: I would suggest to tcpdump. This way you for sure will know where these packets are coming from. Thanks for the hint. tcpdump confirms that these are coming from pppoe0, so I'll be talking to my ISP. db

[pfSense Support] Cisco AnyConnect

2010-12-04 Thread David Burgess
Is there a way to connect pfsense with an Anyconnect server? Google isn't turning up much for me. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial

[pfSense Support] (non)local address resolution

2010-11-29 Thread David Burgess
pfsense is setup like this: pfsense--WAN (public IP x) --OPT1 (public IP y/30) Connected to OPT1 is client's cisco firewall which is NATing for a 172.21.50/23 subnet. Their dhcp is handing out pfsense's OPT1 address as DNS server, and pfsense is running DNS forwarder. This works well,

Re: [pfSense Support] ath0: ath_rx_proc: no mbuf!

2010-11-28 Thread David Burgess
On Sun, Nov 28, 2010 at 3:07 PM, Cyril Jaquier cyril.jaqu...@jaqpot.net wrote: I searched the pfsense forum and found someone with a similar issue. ermal suggested to disable the shaper on the wireless interface. This seems to fix the problem for me. Is this a known bug? Any better

Re: [pfSense Support] how to manage 2 subnets for LAN ?

2010-11-19 Thread David Burgess
On 2010-11-19 9:56 AM, Richard Amerman fi...@7technw.com wrote: I do this all the time and using a separate nic is simpler and easier to manage than an alias. Unless I am missing something, a vlan for this case is overkill. I discussed this with the m0n0wall list back in '07 where cmb and

Re: [pfSense Support] how to manage 2 subnets for LAN ?

2010-11-18 Thread David Burgess
On Thu, Nov 18, 2010 at 12:39 PM, Fred Boiteux fblis...@free.fr wrote: The different LAN subnets' trafic aren't VLAN tagged, and all traffic comes from one Ethernet port (from the nearest antenna), so I don't understand how VLAN could be used there ? Most carrier-grade radios support tagging

Re: [pfSense Support] how to manage 2 subnets for LAN ?

2010-11-18 Thread David Burgess
On Thu, Nov 18, 2010 at 3:11 PM, Adam Thompson athom...@athompso.net wrote: I think the OP was referring to running two subnets concurrently on the same wire, something I often have to do for various reasons, sometimes to solve co-existence issues while renumbering a network.  I have no idea

Re: [pfSense Support] how to manage 2 subnets for LAN ?

2010-11-18 Thread David Burgess
On Thu, Nov 18, 2010 at 3:51 PM, fi...@7technw.com fi...@7technw.com wrote: Another easy solution is to just add another nic. Not an option in this case. The OP described a wireless network where the client subnet and management subnet exist on the same physical network. You can't change that in

Re: [pfSense Support] New to pfSense, need some advice

2010-11-07 Thread David Burgess
On Sun, Nov 7, 2010 at 10:19 PM, Neonicacid neonica...@gmail.com wrote: My main issue with how it is set up right now is that File and Printer Sharing does not jump across the subnets, so none of the computers can communicate. Does anyone have any advice or solutions for this problem? If

Re: [pfSense Support] New to pfSense, need some advice

2010-11-07 Thread David Burgess
On Sun, Nov 7, 2010 at 10:43 PM, Neonicacid neonica...@gmail.com wrote: David, I don't have a single switch big enough to support all of the devices that I currently have on the network. The routers help with that by providing extra ports to connect devices with. So the simplest way to

Re: [pfSense Support] carp with bridge

2010-10-28 Thread David Burgess
On Thu, Oct 28, 2010 at 11:35 AM, Gerald Waugh gwa...@frontstreetnetworks.com wrote: We use bridging as the pfsense machine firewalls servers with public IP addresses. Clues on how to accomplish with routing appreciated. You have a public subnet from your ISP, 1.1.1.0/24, for example. You get

[pfSense Support] networked file systems

2010-10-27 Thread David Burgess
After some contemplation I think I would like to run squid on my pfsense box, but mount the squid cache directory (/var/squid) on an external host. After some research, I believe the following options would provide the best performance with the least overhead, in descending order: 1. AoE

Re: [pfSense Support] networked file systems

2010-10-27 Thread David Burgess
On Wed, Oct 27, 2010 at 4:00 PM, Nathan Eisenberg nat...@atlasnetworks.us wrote: iSCSI is relatively excellent - and as a block device, has great performance.  I've had less than pleasing results with AOE in several different use-cases. If you want to share the cache across multiple

Re: Re: [pfSense Support] networked file systems

2010-10-27 Thread David Burgess
On Wed, Oct 27, 2010 at 5:59 PM, Adam Thompson athom...@c3a.ca wrote: If you want to take advantage of Linux' TRIM support, you should be using NFS.  TRIM support (AFAIK) requires underlying knowledge of the filesystem or at least the block allocation... iSCSI hides all of those details, as

Re: [pfSense Support] LAGG Question

2010-10-26 Thread David Burgess
On Tue, Oct 26, 2010 at 9:09 AM, James Bensley jwbens...@gmail.com wrote: can the pfSense box handle incoming balancing this way as well as out going? Incoming load balancing in pfsense is different from outgoing load balancing. It allows you to have more than one server on your internal

Re: [pfSense Support] LAGG Question

2010-10-25 Thread David Burgess
On Mon, Oct 25, 2010 at 6:53 AM, James Bensley jwbens...@gmail.com wrote: Hello Everybody :) I would like to use the LAGG to bond multiple ADSL lines for a faster, more reliable internet access (using LACP). LAGG acts by bonding multiple interfaces at layer 2. You're trying to bond a pair of

Re: [pfSense Support] LAGG Question

2010-10-25 Thread David Burgess
On Mon, Oct 25, 2010 at 9:33 AM, James Bensley jwbens...@gmail.com wrote: Thanks guys for your responses, I will look into MLPPP but in the mean time, with regards to load balancing; Again, how does this work in pfSense? For 1.2: http://doc.pfsense.org/index.php/MultiWanVersion1.2 For 2.0:

Re: [pfSense Support] Cannot achieve 100 mbps Full Duplex (C2D, Intel NICs)

2010-10-21 Thread David Burgess
On Thu, Oct 21, 2010 at 12:06 PM, Christian Borchert ccb...@gmail.com wrote: I have tried this network card in another machine (HP Core 2 Quad) and it works perfectly under the same test conditions. I have limited experience with Dell servers, but I have found some of their newer laptops

[pfSense Support] archives incomplete?

2010-10-19 Thread David Burgess
Why is it that when I browse the list archives for this month (gmane and marc), I only see 2 threads? Specifically I'm looking for a link to the ongoing discussion started by Luke Jaeger on script-heavy sites, and I don't see it there. Likewise, when I search the archive for his name I get no

Re: [pfSense Support] 2.0-BETA4 - Admin logout link?

2010-10-09 Thread David Burgess
On Sat, Oct 9, 2010 at 9:53 PM, Yehuda Katz yeh...@ymkatz.net wrote: I just installed 2.0-BETA4, logged in as admin, and created a new user. I have not been able to find a logout link so I can try using that user. Is it there and I just don't see it or is it really not there? - Yehuda Under

Re: [pfSense Support] Siproxd

2010-10-06 Thread David Burgess
On Wed, Oct 6, 2010 at 4:46 AM, belkhiria aymen belkhiria.ay...@gmail.com wrote: Hi, I need to configure siproxd as Sip proxy for external users. I don't think siproxd is designed for this, nor is it necessary. db - To

Re: [pfSense Support] How do I break down a /22 into smaller subnets to use behind(LAN) side of my pfsense box

2010-10-04 Thread David Burgess
On Mon, Oct 4, 2010 at 5:19 PM, Chris Flugstad ch...@cascadelink.com wrote: -how to i break up the large block into smaller blocks Like this? http://www.vlsm-calc.net/ db - To unsubscribe, e-mail:

Re: [pfSense Support] BLOCK IP or ALIAS firewall rule not blocking traffic

2010-09-22 Thread David Burgess
On Wed, Sep 22, 2010 at 5:14 PM, Chris Flugstad ch...@cascadelink.com wrote: wan  rules           proto         source               port          dest           port       gw block   *          216.127.61.72       *                 *        *            * lan rules block   *              

Re: [pfSense Support] BLOCK IP or ALIAS firewall rule not blocking traffic

2010-09-22 Thread David Burgess
On Wed, Sep 22, 2010 at 5:30 PM, Chris Flugstad ch...@cascadelink.com wrote: I did what i needed to do for the time being though. much appreciated. And that, ladies and gentlemen, is what we call poaching the solution ;) If this list ran on a points system I would get a flogging now. db

Re: [pfSense Support] Allow Traffic Between Interfaces

2010-09-18 Thread David Burgess
On Sat, Sep 18, 2010 at 8:54 PM, Ron Lemon r...@maplewood.com wrote: Action:  Pass Interface:  LAN Protocol:  any (I assume this also include ICMP???) Source:  Single Host (10.0.1.100) Destination:  Network (10.0.0.0 / 24) Gateway:  default To me this means that 10.0.1.100 can talk to any

Re: [pfSense Support] Write 512MB image onto 4GB CF-card ?

2010-09-17 Thread David Burgess
On Fri, Sep 17, 2010 at 2:45 AM, Michel Servaes mic...@mcmc.be wrote: Thanks for the explaining - don't know if this dane-elec has wear-levelling though (I'd suspect they would mention this, if it was) My understanding with SSDs (no idea if CFs are the same way) is that wear-levelling works

Re: [pfSense Support] power-out and Alix-boards

2010-09-09 Thread David Burgess
On Thu, Sep 9, 2010 at 2:26 PM, Michel Servaes mic...@mcmc.be wrote: I am a bit worried about the fact that the CF card should be set read-only. If I may paraphrase Bob, I thought he was meaning that because/if you are using the embedded version, the problem you describe must be due to some

Re: [pfSense Support] power-out and Alix-boards

2010-09-09 Thread David Burgess
On Thu, Sep 9, 2010 at 3:12 PM, Bob Gustafson bob...@rcn.com wrote: I don't know the significance of 'embedded' in the context of CF cards. Sorry, I meant to say I was paraphrasing Beat, not Bob. The pfsense embedded version, which is recommended for CF installs, mounts the filesystem read-only,

[pfSense Support] Broadcom opens Linux wireless drivers

2010-09-09 Thread David Burgess
So will this benefit the FreeBSD crowd any time soon? http://www.osnews.com/story/23786/BREAKING_BROADCOM_OPEN_SOURCES_WIRELESS_DRIVERS db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands,

Re: [pfSense Support] PFsense 2.0 roadmap

2010-09-08 Thread David Burgess
On Wed, Sep 8, 2010 at 11:42 AM, Tonix (Antonio Nati) to...@interazioni.it wrote:  Thanks... I see no dates at all. About 2.0, I see no documentation around. Is there a list where to ask for 2.0 features explained? Generally speaking, the forum is where most discussion around 2.0 happens,

Re: [pfSense Support] Over 2GB File can not copy LAN to WAN Pfsense

2010-09-07 Thread David Burgess
On Tue, Sep 7, 2010 at 8:32 AM, Michel Servaes mic...@mcmc.be wrote: What happens, if you transfer the file in direct (eg. without the pfsense in between ?) Definitely try that. pfsense has a workaround specifically for NFS on System: Advanced: Firewall and NAT (system_advanced_firewall.php).

Re: [pfSense Support] Over 2GB File can not copy LAN to WAN Pfsense

2010-09-07 Thread David Burgess
On Tue, Sep 7, 2010 at 10:34 AM, Bradley D. Thornton brad...@northtech.us wrote: I thought there was about a 2GByte file size limit on Ext2 File systems too. Not according to wikipedia, however There are also many userspace programs that can't handle files larger than 2 GB.

Re: [pfSense Support] Benchmark tool

2010-09-04 Thread David Burgess
On Sat, Sep 4, 2010 at 3:58 AM, bsd b...@todoo.biz wrote: Hi, I am looking for a tool (or a configuration setup) that will allow me to benchmark (performance test) couple of firewall based on pfSense, and eventualy to compare them with other software / hard solution. Any idea, clue, link

Re: [pfSense Support] Appliance Recommendation for 100 Mbps (DOCSIS 3.0) Service

2010-09-01 Thread David Burgess
On Wed, Sep 1, 2010 at 11:17 AM, stephen at stephenjc step...@stephenjc.com wrote: Supermicro twin is like that but they share a ps. I was going to suggest that it wouldn't be hard to modify a SM twin to use dual independent PicoPSU or M4-ATX or the like, but it appears the twins are all Xeon

Re: [pfSense Support] QoS for Dummies?

2010-08-31 Thread David Burgess
On Mon, Aug 30, 2010 at 9:09 PM, Dane Reugger d...@downtownpc.com wrote: I'm a long time fan of PfSense but several concepts elude me ... so I was hopping somebody had a VoIP QoS for PfSense how-to they could point me at. The single most important aspect of a working QoS solution is to make

[pfSense Support] interrupt v kernel usage

2010-08-25 Thread David Burgess
I'm using a pair of onboard (vr) NICs on a net5501-80 (500 MHz Geode) with vlans to firewall a 36/4 mlppp connection. During heavy download top reports interrupts around 40-50% CPU usage with most of the remainder being idle. I dropped in an Intel Pro 1000 GT (em, PCI) in place of one of the

[pfSense Support] Re: interrupt v kernel usage

2010-08-25 Thread David Burgess
Sorry, forgot to mention 2.0 nanobsd August 2 snapshot. On Wed, Aug 25, 2010 at 12:20 AM, David Burgess apt@gmail.com wrote: I'm using a pair of onboard (vr) NICs on a net5501-80 (500 MHz Geode) with vlans to firewall a 36/4 mlppp connection. During heavy download top reports interrupts

Re: [pfSense Support] Simultaneous client connection limit / Maximum state entries per host

2010-08-16 Thread David Burgess
On Mon, Aug 16, 2010 at 8:21 AM, Dominic dominic@gmail.com wrote: My query though is, how can I test that this is working correctly? Is there a tool that I can use to make connections from a single machine? Ideally something that provides the Would this do it?

Re: [pfSense Support] Simultaneous client connection limit / Maximum state entries per host

2010-08-16 Thread David Burgess
On Mon, Aug 16, 2010 at 8:28 AM, David Burgess apt@gmail.com wrote: On Mon, Aug 16, 2010 at 8:21 AM, Dominic dominic@gmail.com wrote: My query though is, how can I test that this is working correctly? Is there a tool that I can use to make connections from a single machine? Ideally

Re: [pfSense Support] SSD partition alignment in 2.0

2010-08-16 Thread David Burgess
On Mon, Aug 16, 2010 at 12:03 PM, Scott Ullrich sullr...@gmail.com wrote: That is a good question.   The 2.0 installer uses pc-sysinstaller which I am not entirely sure if it takes into account this or not. I did an install yesterday and worked on this. I manually changed geometry to 32 heads

  1   2   3   >