Re: RES: [pfSense Support] Static ARP

2011-09-02 Thread Jim Pingle
On 9/2/2011 7:46 AM, Ivanildo Galvão - IT Services wrote: a) The previous configuration was made by a former business consultant here, the guy made the business work well, is round, but no VLAN is vulnerable, he may have done this way just to give a customer satisfaction that have hitherto

Re: RES: RES: [pfSense Support] Static ARP

2011-09-02 Thread Jim Pingle
On 9/2/2011 8:09 AM, Ivanildo Galvão - IT Services wrote: Please excuse my ignorance, but can you give me examples of the risks posed by this scenario? It serves as a basis to explain to the client that even in the previous solution with Linux, the setting was already correct. I just said it

Re: [pfSense Support] Routing/NAT issue

2011-09-02 Thread Jim Pingle
On 9/2/2011 11:17 AM, Giacomo Di Ciocco wrote: Hello everyone, please consider this scenario: http://www.deffie.it/garbage/theproblem.png Servers are reaching the internet from their public IP in the /26 and they have PFSense /26 IP as their default route, this is ok. Users from LAN are

Re: [pfSense Support] Static ARP

2011-09-01 Thread Jim Pingle
On 9/1/2011 4:19 PM, Ivanildo Galvão - IT Services wrote: What does this function in pfSense DHCP? The ARP command, and ifconfig. Static ARP entries are added using the arp command and the info provided in the GUI, and then the interface is configured to be staticarp. It's all handled by the OS

Re: RES: [pfSense Support] Static ARP

2011-09-01 Thread Jim Pingle
[Please don't top post] On 9/1/2011 5:01 PM, Ivanildo Galvão - IT Services wrote: I have a client who was using Linux as a proxy server it had this one LAN interface and a WAN, LAN NIC in the virtual one he had, as follows: eth0: 1, eth0: 2, eth0: 3, so he had: Eth0: 1 - 192.168.0.0/24

Re: [pfSense Support] packets passed and logged in UI

2011-08-31 Thread Jim Pingle
On 8/31/2011 12:18 PM, Mario Ciccarelli wrote: Il giorno 31/ago/2011, alle ore 14:06, Jim Pingle ha scritto: That is normal on 1.2.3. The FTP proxy logs the connections it passes to data ports accessed for FTP transfers. thanks for help, but is there any chance to avoid this ? It's not so

Re: [pfSense Support] Success Story

2011-08-30 Thread Jim Pingle
On 8/30/2011 8:21 PM, Nathan Eisenberg wrote: It seems like there are always questions and/or complaints on this list, so I just wanted to share a success story. We just returned (this weekend) from running the PC gaming network at Penny Arcade eXpo's west coast event. This is a rather

Re: [pfSense Support] enc0 not routing traffic

2011-08-18 Thread Jim Pingle
On 8/18/2011 10:29 AM, Fabien Bagard wrote: [...] From the network beyond the PFSense, I can't ping machines beyond the IPCop. [...] What gives me trouble is : * IPCop side, I have an ipsec interface, with an IP address and route to the other side of the IPSec tunnel * PFSense side I

Re: [pfSense Support] Happy Birthday Chris

2011-08-18 Thread Jim Pingle
Happy Birthday! - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

Re: [pfSense Support] enc0 not routing traffic

2011-08-18 Thread Jim Pingle
On 8/18/2011 11:24 AM, Fabien Bagard wrote: On 08/18/2011 04:33 PM, Jim Pingle wrote: On 8/18/2011 10:29 AM, Fabien Bagard wrote: [...] From the network beyond the PFSense, I can't ping machines beyond the IPCop. [...] What gives me trouble is : * IPCop side, I have an ipsec interface

Re: [pfSense Support] PPTP Broken in latest AMD 2.0 Snapshots

2011-08-17 Thread Jim Pingle
On 8/17/2011 5:01 PM, Adam Thompson wrote: From: Chris Buechler [mailto:cbuech...@gmail.com] Subject: Re: [pfSense Support] PPTP Broken in latest AMD 2.0 Snapshots On Wed, Aug 17, 2011 at 3:38 PM, Adam Piasecki apiase...@midatlanticbb.com wrote: Same config works with i386, does not work

Re: [pfSense Support] PPTP Broken in latest AMD 2.0 Snapshots

2011-08-17 Thread Jim Pingle
On 8/17/2011 5:13 PM, Adam Thompson wrote: Read the ticket, and the response again. :-) We tried fixing that, and it broke PPPoE. The fix had to be backed out, so now PPTP is broken again but PPPoE works. Jim I've re-read the ticket and the email and I still don't see how I would come

Re: [pfSense Support] transparent proxy not working as expected.

2011-08-17 Thread Jim Pingle
On 8/17/2011 4:32 PM, greg whynott wrote: Hi, I just installed a fresh copy of 2.0-RC3 for a client to segergate the vm sandbox enviroment. We are not using NAT, rather just routing. My intention was to configure some basic fw rules afterwards. During the setup, I turned off NAT

Re: [pfSense Support] IPSec crl

2011-08-17 Thread Jim Pingle
On 8/17/2011 4:56 PM, Fuchs, Martin wrote: Hi, Does the IPSec config make use of crl's defined in the certified-Manager ? I cannot See any references To used crl in the cert-Manager when a crl is d= efined there, neither can i Chose a crl in the IPSec-config.=20 This is a Security-Risk i

Re: [pfSense Support] policy routing issue : stumped : more

2011-08-15 Thread Jim Pingle
On 8/15/2011 5:11 AM, mayak-cq wrote: On Sat, 2011-08-13 at 11:34 +0200, mayak-cq wrote: hi chris On Fri, 2011-08-12 at 17:00 -0400, Chris Buechler wrote: snip It does not, policy routing rules override the system routing table. i just tried booting pfsense as a live cd, entered the

Re: [pfSense Support] Kingston SSD filesystem corruption

2011-08-09 Thread Jim Pingle
On 8/9/2011 11:33 AM, Jeppe Øland wrote: About a year ago, I switched to running the full pfSense 2.0 (beta something at the time) on a Kingston SS100S2/8G embedded SSD. Since then, every 3 months or so I noticed (in connection with installing a new release) that the filesystem was

Re: [pfSense Support] pfSense change logging

2011-07-29 Thread Jim Pingle
On 7/29/2011 11:41 AM, Scott Benson wrote: Is there a way to see who(based on IP) made a change to the webgui causing a new /cf/conf/backup/ to be created? is it something in that file, or logged anywhere? On current 2.0 snapshots it logs the username and IP that caused a change, and that

Re: [pfSense Support] pfSense change logging

2011-07-29 Thread Jim Pingle
On 7/29/2011 1:10 PM, Scott Benson wrote: Is there a way to hack it into 1.2.3? Probably, not sure it's worth the time it would take to do it at this stage. 2.0 is practically out the door, it's time to stop holding onto 1.2.3 :-)

Re: [pfSense Support] pfSense change logging

2011-07-29 Thread Jim Pingle
On 7/29/2011 1:40 PM, Scott Benson wrote: well then. with that being said, upgrades from 1.2.3 and 1.2.3 embedded to 2.0 are seemless? Should be. You can install the pre-upgrade check package to ensure your config doesn't have any data in it that would cause issues.

Re: [pfSense Support] Incorrect System Log Order/Logging Bug?

2011-07-13 Thread Jim Pingle
On 7/9/2011 9:17 PM, Dimitri Rodis wrote: The system is and has been set to -8 (I am Pacific Daylight Time, USA), and hasn't been re/booted since the first boot on that build--and I have reported this issue back in RC1 and it still appears to be an issue. It almost looks as if the

Re: [pfSense Support] muting openvpn management log entries

2011-06-10 Thread Jim Pingle
On 6/10/2011 7:45 AM, mayak-cq wrote: my openvpn log is full of: Jun 10 13:41:51 openvpn[26867]: MANAGEMENT: Client disconnected Jun 10 13:41:51 openvpn[26867]: MANAGEMENT: CMD 'quit' Jun 10 13:41:50 openvpn[26867]: MANAGEMENT: CMD 'status 2' Jun 10 13:41:50 openvpn[26867]: MANAGEMENT:

Re: [pfSense Support] user interface issue when managing certificates

2011-06-03 Thread Jim Pingle
On 6/3/2011 5:22 AM, mayak-cq wrote: [snip] i then looked at the url, and it had not changed after deleting the correct cert -- the desired result (i believe) would be to re-write the url (removing the delete action) after each delete -- this would require an admin to click the delete button

Re: [pfSense Support] NAT Reflection Broken in recent builds

2011-05-23 Thread Jim Pingle
On 5/23/2011 4:41 AM, Dimitri Rodis wrote: nc: getaddrinfo: hostname nor servname provided, or not known What does your /var/etc/inetd.conf file look like on the working system and the broken system? So yesterday I went ahead and told the thing to just upgrade to the latest build hoping that

Re: [pfSense Support] wrong default gateway set on reboot

2011-05-13 Thread Jim Pingle
On 5/13/2011 2:38 PM, John Sellens wrote: Anyone seen anything similar, or is this a known issue, or is it fixed in a more recent build? Check the system log and Status Gateways, was the primary gateway marked as being down? The default will switch to a secondary gateway if the primary has

Re: [pfSense Support] wrong default gateway set on reboot

2011-05-13 Thread Jim Pingle
On 5/13/2011 4:06 PM, John Sellens wrote: | Anyone seen anything similar, or is this a known issue, or is it | fixed in a more recent build? | | Check the system log and Status Gateways, was the primary gateway | marked as being down? | | The default will switch to a secondary gateway

Re: [pfSense Support] 802.11n AP success?

2011-05-06 Thread Jim Pingle
On 5/6/2011 2:42 AM, Josh Karli wrote: On 5/5/2011 5:39 PM, Yehuda Katz wrote: On Thu, May 5, 2011 at 4:58 PM, Josh Karli josh.ka...@gmail.com mailto:josh.ka...@gmail.com wrote: Has anyone had any success in setting up a wireless N AP? According to the 2.0-RC1 record of tests on

Re: [pfSense Support] 2.0-RC1 installation problem

2011-04-28 Thread Jim Pingle
On 4/28/2011 1:45 PM, Lupel wrote: I'm trying to install the pfsense-2.0-RC1 cd iso for amd64 on a Dell PowerEdge R210 and installation hangs right after the ncurses interface starts at waiting for backend message. The image I've downloaded is pfSense-2.0-RC1-amd64-20110226-1807.iso Does

Re: [pfSense Support] Incorrect Sort on 2.0-RC1

2011-04-11 Thread Jim Pingle
On 4/11/2011 1:59 PM, Dimitri Rodis wrote: *2.0-RC1 *(i386) built on Mon Mar 14 17:33:11 EDT 2011 Log sorting is set to newest first, however, the log sort is “randomly incorrect” (see screen snippet). I didn’t see anything in redmine, thought I would check here first.. The log isn't

Re: [pfSense Support] squid+squidguard problem

2011-03-31 Thread Jim Pingle
On 3/30/2011 10:02 PM, Volkan VURAL wrote: Squid+squidguard randomly stop filtering and pass all traffic. (pfsense 1.2.3, squid 2.7.9_4, squidGuard 1.4_3 pkg v.1.9) ... But another my pfsense system (pfsense 1.2.3, squid 2.7.9_4, squidGuard 1.3_1 pkg v.1.9) working good. When i add new

Re: [pfSense Support] utilization question

2011-03-30 Thread Jim Pingle
On 3/30/2011 9:13 PM, k_o_l wrote: I have been running 2.0-RC1 for the three weeks now, and I've noticed that early this week the number of processes jumped from 44 to 119 without any changes to the system, even after a reboot they stayed high. What could be the reason for the number of

Re: [pfSense Support] Problem with pfSense and curl

2011-03-20 Thread Jim Pingle
On 3/20/2011 5:01 PM, Jostein Elvaker Haande wrote: On 20 March 2011 21:50, Seth Mos seth@dds.nl wrote: I use curl from within PHP with cookies and can succesfully login to the ui with that. You need something that keeps state and cookies won't do. Now this might be a lack of knowledge

Re: [pfSense Support] Difference between IP Alias and Other for VIPs

2011-03-17 Thread Jim Pingle
On 3/17/2011 8:29 AM, bsd wrote: I wanted to know what was the difference between IP Alias and Other in VIPs ? What does IP Alias do technically speaking ? It is not very clear to me. IP Alias is just that, an IP Alias in FreeBSD. It is an actual additional IP address defined directly on

Re: [pfSense Support] fail update package on pfsense 1.2.3

2011-03-14 Thread Jim Pingle
On 3/13/2011 5:14 PM, Joseph Rotan wrote: Hi, i've been trying to run this command pkg_add -r samba3 on my pfsense 1.2.3 but keep on getting the following error: Error:FTP Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/samba3.tbz : File

Re: [pfSense Support] XML Api to create NAT and Rules ?

2011-03-14 Thread Jim Pingle
On 3/14/2011 7:17 AM, Xavier Beaudouin wrote: Hello, I dunno if I am wrong or not, but I have a vague memory about PFSense that we can add / removes rules using XML-RPC or something like this. Unfortunatly I cannot find any API and description somewhere on pfsense sites? Any pointer

Re: [pfSense Support] XML Api to create NAT and Rules ?

2011-03-14 Thread Jim Pingle
On 3/14/2011 9:23 AM, Xavier Beaudouin wrote: On 3/14/2011 7:17 AM, Xavier Beaudouin wrote: Hello, I dunno if I am wrong or not, but I have a vague memory about PFSense that we can add / removes rules using XML-RPC or something like this. Unfortunatly I cannot find any API and description

Re: [pfSense Support] OpenVPN issues

2011-03-08 Thread Jim Pingle
On 3/8/2011 3:02 PM, k_o_l wrote: I had working OpenVPN with pfsense 1.2.3, however with 2.0-RC1 the server is handing the wrong mask and no gateway to the clients, I have tried the wizard and changing different subnets, no matter what the server is handing out /30 instead of /32. Firewalls

Re: [pfSense Support] OpenVPN issues

2011-03-08 Thread Jim Pingle
On 3/8/2011 5:21 PM, k_o_l wrote: From: Jim Pingle [mailto:li...@pingle.org] On 3/8/2011 3:02 PM, k_o_l wrote: I had working OpenVPN with pfsense 1.2.3, however with 2.0-RC1 the server is handing the wrong mask and no gateway to the clients, I have tried the wizard and changing different

Re: [pfSense Support] OpenVPN issues

2011-03-08 Thread Jim Pingle
On 3/8/2011 5:38 PM, k_o_l wrote: Just under address pool I had 10.168.2.0/24, I'm fine with not getting /24 with the new setup, as long as I can communicate client-to-client and of course resolve the issue with the quad zero gateway That's fine, it will take /30's out of that /24 - that's

Re: [pfSense Support] Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread Jim Pingle
On 3/4/2011 9:59 AM, Moshe Katz wrote: I currently have two pfSense boxes with Intel Gigabit cards. The first is a Dell Optiplex gx270 (Pentium 4, 512mb RAM). It has one built-in Intel Gigabit port and two dual-port PCI cards. This gives me em0 - em4. As far as I can tell, this box is

Re: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread Jim Pingle
[please don't top post] On 3/4/2011 10:38 AM, Moshe Katz wrote: On Friday, March 4, 2011, Jim Pingle li...@pingle.org wrote: Is this on a 2.0 snapshot? If so, what date? Since the switch to the Yandex Intel drivers a couple days ago my VMs all constantly print watchdog timeouts

Re: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread Jim Pingle
On 3/4/2011 11:15 AM, Moshe Katz wrote: Does em0 seem to work OK for you otherwise? Just log/console spam? I just noticed that it doesn't just make the console useless, it also spams the system log, filling that up as well. If it operates OK but just has annoying logs, that

Re: [pfSense Support] Master Backup not in sync - VIP proxy ARP

2011-02-24 Thread Jim Pingle
On 2/24/2011 9:49 AM, Shibashish wrote: I have 2 pfSense box with Carp sync and failover configured. I have 2 Virtual IPs of the type Proxy ARP on the Master FW which do not get sync to the Backup FW. Is this a feature or a bug? Do i have to add the vip manually to backup fw server ? Also,

Re: [pfSense Support] install pfsense from usb stick

2011-02-12 Thread Jim Pingle
On 2/12/2011 5:43 PM, Hans Maes wrote: [snip] I'm sure this would be a very useful entry in the pfsense online documentation as well, since I found quite a lot of people online asking the same question but never found a working procedure. No need to make one yourself. 2.0 includes them

Re: [pfSense Support] Can anyone build a 1.2.3 ISO?

2011-02-02 Thread Jim Pingle
On 2/2/2011 9:01 AM, Mark Jones wrote: I’ve now tried it everywhere 7.1 7.2 8.1 1.2.3 will only build on 7.2 (and maybe 7.3, there were some patches out there for that) It seems impossible to build a dev ISO (no longer supported, thanks for the info) nor a regular ISO That may be the

Re: [pfSense Support] Can anyone build a 1.2.3 ISO?

2011-02-02 Thread Jim Pingle
On 2/2/2011 11:35 AM, Mark Jones wrote: The Beta label on 2.0 is holding us back. (Also, last night I tried building 2.0 on 8.1 and it failed, but I don't even see any errors, nor do I know where they are squirreled away.) We are running on 7.2 with 1.2.3 and it works. What we are trying

Re: [pfSense Support] Can't build Regular ISO either

2011-02-01 Thread Jim Pingle
On 2/1/2011 7:48 AM, Mark Jones wrote: Since I learned yesterday that the dev ISO is no longer used, I tried to build a regular ISO and the output of doing that is below. I’m trying to build 1.2.3 on 7.2 because this is going into a production environment and based on what I see 2.0 is still

Re: [pfSense Support] How to build a Developer ISO

2011-01-31 Thread Jim Pingle
On 1/30/2011 11:29 PM, Mark Jones wrote: Well, I'm pretty close to admitting defeat. I've followed the guidance given @ http://devwiki.pfsense.org/DevelopersBootStrapAndDevIso I've used FreeBSD 8, 7.2 and 7.1, and in all cases am unable to build a developer ISO. I've built portmaster

Re: [pfSense Support] 2.0 B5 Update Breaks Web GUI - 08-Jan-2011 15:37

2011-01-14 Thread Jim Pingle
On 1/14/2011 1:40 PM, Mark Street wrote: [please don't top post] OK, the broken webgui feature is getting a bit old... After three more snapshot firmware updates from the command line the Webgui is still not functional... I took a look in the webgui error logs and they are empty..

Re: [pfSense Support] Not able to add virtual carp ip on different subnet

2011-01-13 Thread Jim Pingle
On 1/13/2011 5:29 AM, Shibashish wrote: My WAN ip is xx.xx.87.44 I am trying to add a Virtual IP CARP as xx.xx.93.193, but i am not able to. Sorry, we could not locate an interface with a matching subnet for xx.xx.93.193/27. Please add an ip in this subnet on a real interface. I want

Re: [pfSense Support] Not able to add virtual carp ip on different subnet

2011-01-13 Thread Jim Pingle
On 1/13/2011 8:15 AM, Shibashish wrote: [please don't top post] On Thu, Jan 13, 2011 at 6:38 PM, Jim Pingle li...@pingle.org mailto:li...@pingle.org wrote: On 1/13/2011 5:29 AM, Shibashish wrote: My WAN ip is xx.xx.87.44 I am trying to add a Virtual IP CARP as xx.xx

Re: [pfSense Support] autorollback?

2011-01-13 Thread Jim Pingle
On 1/13/2011 3:26 PM, Francois-Alexandre St-Onge Aubut wrote: dont apply changes? On 11-01-13 03:11 PM, Charles N Wyble wrote: Does pfsense have a feature like cisco/juniper where if you don't confirm the change it rolls it back? How difficult would something like this be to implement?

Re: [pfSense Support] pfSense Beta 5 - upgrade/reboot issue

2011-01-12 Thread Jim Pingle
On 1/12/2011 2:11 PM, Dimitri Rodis wrote: The last 3-4 upgrades that I’ve done using nano are not automatically rebooting after the upgrade is complete, even though it says it is on the console (and last night I left it to see if it eventually would, and it did not and I logged in this

Re: [pfSense Support] freeradius not installing

2011-01-06 Thread Jim Pingle
[Please don't top post] On 1/6/2011 8:46 AM, Shibashish wrote: On Thu, Jan 6, 2011 at 6:52 PM, Jim Pingle li...@pingle.org mailto:li...@pingle.org wrote: On 1/6/2011 8:18 AM, Shibashish wrote: Freeradius not installing, can anyone please fix this? Downloading package

Re: [pfSense Support] New Alias Rules

2011-01-04 Thread Jim Pingle
On 1/4/2011 11:21 AM, James Bensley wrote: Hi List, If I make 3 alias' for some static port mappings so lets say I make, -port1 with the port #100 -port2 with the port #200 -port3 with the port #300 and then make another alias called myports with three ports defined where in the first I

Re: [pfSense Support] Auto-update Check fails

2010-12-23 Thread Jim Pingle
On 12/23/2010 10:17 AM, Oliver Hansen wrote: I needed to upgrade a few routers that were 1.2.2 to 1.2.3 this week and I found the auto-update check failed with the following message: Could not contact pfSense update server http://updates.pfSense.com/_updaters.; Am I the only one seeing

Re: [pfSense Support] NAT Traversal for IPSec mobile clients??

2010-12-22 Thread Jim Pingle
On 12/22/2010 3:47 AM, Maik Heinelt wrote: Since about 2 days, I try to get work the mobile client in pfSense 1.2.3. Now, I noticed, that pfSense 1.2.3RC1 is different to my current version pfSense 1.2.3. I miss the NAT Traversal setting for the mobile client. Where is it in 1.2.3 ??? How

Re: [pfSense Support] custom files in /var/etc/ gone after reboot

2010-12-15 Thread Jim Pingle
On 12/15/2010 11:45 AM, Scott Benson wrote: Hello everyone, We have multiple deployments of pfsense running for clients and recently after one unexpected power failure the custom files we put in /var/etc disappeared. Then last night we rebooted another pfsense box and it did the same

Re: [pfSense Support] console menu closes when enter pressed

2010-12-15 Thread Jim Pingle
On 12/15/2010 12:27 PM, Moshe Katz wrote: I noticed that if I just hit enter on the pfSense console without typing an option first, it exits the console. If I am on ssh, it closes the connection and if I am on the local terminal, where I have it set to prompt for a password, it asks the

Re: [pfSense Support] custom files in /var/etc/ gone after reboot

2010-12-15 Thread Jim Pingle
On 12/15/2010 1:50 PM, Scott Benson wrote: On 12/15/10 10:05 AM, Jim Pingle wrote: What some people do is put their files there in /conf/ and setup a shellcmd to copy them into place at boot time. Where would you put this shellcmd to make it stay after reboots, if the only location

Re: [pfSense Support] Man Pages

2010-12-14 Thread Jim Pingle
On 12/14/2010 4:26 AM, James Bensley wrote: Just our of curiosity, why does pfSense have no man pages? To save hard drive space, download space, etc. The stock ones from FreeBSD can all be accessed on the web: http://www.freebsd.org/cgi/man.cgi Jim

Re: [pfSense Support] PPTP VPN question

2010-12-09 Thread Jim Pingle
On 12/9/2010 5:49 PM, David Miller wrote: How does one configure routes across a VPN connection? IE, I have a pfsense 2.0beta box with external address 1.2.3.4 connected to 10.2.1.0/24 on the inside. If the box gives out 172.30.40.50 as a VPN ppp0 address, how do I tell the client to route

Re: [pfSense Support] inconsistent handling of VPN remote endpoints

2010-11-11 Thread Jim Pingle
On 11/11/2010 8:48 AM, Vick Khera wrote: [snip] I think it would be really nice if the VPN endpoints would all behave like the fixed endpoint IPsec connections so I did not need to add rules to the LAN filter to avoid the failover pool rule. Barring that, it would be really handy to have on

Re: [pfSense Support] filterrule/rule//filter :: array('filter'=array(0=rule, 1=rule)) conversion

2010-11-08 Thread Jim Pingle
On 11/8/2010 7:54 AM, Ozan UÇAR wrote: I'm working on adding DansGuardian configuration in config.xml. In order to achieve this, I need to be able to write some arrays I put into $config to config.xml. I.e. extensions = array('banned'=array(), 'excluded'=array()) etc. [snip] I have been

Re: [pfSense Support] carp with bridge

2010-10-28 Thread Jim Pingle
On 10/28/2010 12:25 PM, Gerald Waugh wrote: We desire to add carp to our current pfsense firewall Purchased a second server for the slave/secondary Currently bridging the WAN/Opt(Servers) interfaces on the master/primary Using pfsense 1.2.3 Looking for howto links and any other info I

Re: [pfSense Support] carp with bridge

2010-10-28 Thread Jim Pingle
On 10/28/2010 1:43 PM, David Burgess wrote: On Thu, Oct 28, 2010 at 11:35 AM, Gerald Waugh gwa...@frontstreetnetworks.com wrote: We use bridging as the pfsense machine firewalls servers with public IP addresses. Clues on how to accomplish with routing appreciated. You have a public subnet

Re: [pfSense Support] carp with bridge

2010-10-28 Thread Jim Pingle
On 10/28/2010 3:22 PM, Gerald Waugh wrote: Appears to be ongoing expense to have to get another subnet from ISP. We have a /24 now and the servers use this, We use bridging to get them through the pfsense firewall, and works great. Just looking for the redundancy carp provides. Yes, but the

Re: [pfSense Support] OpenVPN multi-wan in 2.0 - local port re-use?

2010-10-25 Thread Jim Pingle
On 10/25/2010 4:15 AM, Ermal Luçi wrote: On Mon, Oct 25, 2010 at 6:31 AM, Chris Buechler cbuech...@gmail.com wrote: On Mon, Oct 25, 2010 at 12:00 AM, Adam Thompson athom...@c3a.ca wrote: Using 2.0 from a few days ago… In the OpenVPN setup, I can (must) choose which interface each OpenVPN

Re: [pfSense Support] ADSL2+ PCI Card (from LinITX.com) in a pfSense Box ?

2010-10-19 Thread Jim Pingle
On 10/19/2010 8:36 AM, Vincent Hoffman wrote: On 19/10/2010 12:32, Paul Mansfield wrote: if I knew the equivalent of linux's lspci I could tell you what it is. For FreeBSD/pfsense try pciconf -lv for windows something like SIW (http://www.gtopala.com/) maybe? On Windows, I prefer SIV:

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

2010-10-16 Thread Jim Pingle
On 10/16/2010 6:07 AM, Seth Mos wrote: Hi, Op 16 okt 2010, om 03:49 heeft Mehma Sarja het volgende geschreven: This is getting interesting, someone on the list mentions that 2.5 drives are not reliable for 24x7x365 situations - so are you using a 3.5 drive? My setup is at home as well and

Re: [pfSense Support] TinyDNS on 2.0beta4 ?

2010-10-15 Thread Jim Pingle
On 10/15/2010 2:52 PM, Adam Thompson wrote: Chris/anyone, Does the TinyDNS package work correctly under 2.0BETA4? Yes, we have one customer running it on 2.0 with around 15,000 records. Jim - To unsubscribe, e-mail:

Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread Jim Pingle
On 10/13/2010 1:37 PM, James Bensley wrote: Hi List, I would like to put Spam Assassin on a pfSense 2.0 box and I see that here (http://www.pfsense.com/packages/pkg_config.xml) it is listed as a package to install but doesn't show up in my package list on my 2.0 box, is this the package

Re: [pfSense Support] Any know issues with PPT and 2.0?

2010-09-29 Thread Jim Pingle
On 9/29/2010 4:29 PM, Wade Blackwell wrote: Version *2.0-BETA1 * built on Tue Mar 2 18:51:32 EST 2010 FreeBSD 8.0-STABLE Before you do anything else, update to a current snapshot. There were hundreds if not thousands of commits and fixes since then. Jim

Re: [pfSense Support] Any know issues with PPT and 2.0?

2010-09-29 Thread Jim Pingle
On 9/29/2010 7:14 PM, Jorge Fábregas wrote: Does the update feature thru the WebGUI works? p.d. I tried it a couple of weeks ago but couldn't make it work (something about the update package not being signed). It depends on where you start from and how you are updating. Auto update was

Re: [pfSense Support] Write 512MB image onto 4GB CF-card ?

2010-09-16 Thread Jim Pingle
On 9/16/2010 3:34 PM, Michel Servaes wrote: Would it hurt, to write a 512MB image onto a 4GB CF-card ? I don't need the extra space, and this shortens my write-time drastically :) I'm trying it right now... if no-one knows, I'll tell how it turned out anyway (if intrested). It works fine.

Re: [pfSense Support] power-out and Alix-boards

2010-09-12 Thread Jim Pingle
On 9/12/2010 8:44 AM, Michel Servaes wrote: Checking via the serial-cable, I can go into shell... but trying to do a Set LAN ip, won't work at all... (it just comes back at me telling me that /libexec/ld-elf.so.1: shared object libxml2.so.5 not found, required by php). That has less to do

Re: [pfSense Support] PFsense 2.0 roadmap

2010-09-08 Thread Jim Pingle
On 9/8/2010 1:42 PM, Tonix (Antonio Nati) wrote: http://redmine.pfsense.org/projects/pfsense/roadmap Thanks... I see no dates at all. Correct. No dates. It will be ready when it's ready. :) About 2.0, I see no documentation around. Is there a list where to ask for 2.0 features explained? I

Re: [pfSense Support] PFsense 2.0 roadmap

2010-09-07 Thread Jim Pingle
On 9/7/2010 5:08 AM, Tonix (Antonio Nati) wrote: Is there any updated roadmap for pfsense 2.0? When stable version is planned to be released? Closest thing to a roadmap is here: http://redmine.pfsense.org/projects/pfsense/roadmap The release will happen when it's ready, but hopefully that

Re: [pfSense Support] Appliance Recommendation for 100 Mbps (DOCSIS 3.0) Service

2010-09-02 Thread Jim Pingle
On 9/2/2010 12:03 PM, Curtis Maurand wrote: I found one Vyatta feature that trumped pfsense where I am. the ability to route VPN via a secondary address/lan on one of the NIC's. I could not make that happen w/pfsense. Otherwise I would be using it, here. In another location that I'm

Re: [pfSense Support] Large Aliases

2010-08-23 Thread Jim Pingle
On 8/23/2010 3:12 PM, Seth Mos wrote: Hi, Op 23 aug 2010, om 21:08 heeft Jim Cheetham het volgende geschreven: Perhaps there's another way; what are you doing this for? Instead of basing rules on a large set of aliases that you have to update regularly, is there some other characteristic

Re: [pfSense Support] Large Aliases

2010-08-23 Thread Jim Pingle
On 8/23/2010 6:20 PM, Joseph L. Casale wrote: Also, in 2.0 we have support for nested aliases. What you can do with this is pretty straightforward ofcourse. You can then update 1 specific alias which is part of the parent alias. This should make management a lot easier, the chances of error

Re: [pfSense Support] /boot/loader.conf vs /system_advanced_sysctl.php in 2.0

2010-08-12 Thread Jim Pingle
On 8/12/2010 1:54 PM, David Burgess wrote: In 1.2.3 I had very good results adding the following lines to /boot/loader.conf while using the squid package in transparent mode: hint.apic.0.disabled=1 kern.ipc.nmbclusters=32768 kern.maxfiles=65536 kern.maxfilesperproc=32768

Re: [pfSense Support] USB Keyboard - Boot Hangs

2010-08-04 Thread Jim Pingle
On 8/4/2010 1:24 PM, Tim Nelson wrote: Greetings (again) fellow pfSense'rs- I'm also having issues with booting a system with a USB keyboard. The keyboard works perfectly fine, but when pfSense attempts to initialize all devices, there are problems and the system hangs: Starting device

Re: [pfSense Support] 2.0 beta1 embedded to beta3 upgrade

2010-07-28 Thread Jim Pingle
On 7/28/2010 2:12 PM, stephen at stephenjc wrote: I have tried from the terminal to upgrade from beta1 to beta3. It says everything is ok and reboots but always comes backup as beta1. From a snap that old you will probably have to do a GUI firmware update. Both the console upgrade and auto

Re: [pfSense Support] Writing a 4gb version from windows.

2010-07-14 Thread Jim Pingle
On 7/14/2010 9:51 AM, Laurentiu STEFAN wrote: I have try to write on a dvd the last version of the pfSense from a PC whit Windows 7. I recive an error:The image file is invalid Can some one send me a link to an image file whit the last full version of the PFsense and instruction to write

Re: [pfSense Support] Re: FTP Server or samba server for PFSense

2010-07-14 Thread Jim Pingle
On 7/14/2010 11:18 AM, Laurentiu STEFAN wrote: Can some one help me whit this problem too? 2010/7/14 Laurentiu STEFAN laurentiu.ste...@gmail.com mailto:laurentiu.ste...@gmail.com I have an IBM Inellystation whith 2 Pentium 2 - 350Mhz processor, 512 RAM and 150 GB Hdd. I want

Re: [pfSense Support] Minimal configuration for pfSense.

2010-07-14 Thread Jim Pingle
On 7/14/2010 3:17 PM, Laurentiu STEFAN wrote: It's OKa to use an IBM Pentium MMX 200MHZ, 64MB Ram, 3GB SCSI, 3X LAN for pfSense (Mask, firewall load balancing whith 10 PC behind)? That's not very much RAM. If it doesn't use any packages, and no VPNs, it might work. Barely. But it will

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-13 Thread Jim Pingle
On 7/13/2010 3:21 PM, Adam Thompson wrote: Aha! In /usr/local/www/status_rrd_summary.php, on line 38, the requested resolution for $lastmonth is 86400, but the RRD file in question doesn't have anything larger than 720*60=43200 (according to rrdtool info, anyway) and defaults to

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-13 Thread Jim Pingle
On 7/13/2010 6:20 PM, David Burgess wrote: On Tue, Jul 13, 2010 at 4:06 PM, Jim Pingle li...@pingle.org wrote: I committed a fix and updated the package. It should be up shortly. Parse error: syntax error, unexpected '(' in /usr/local/www/status_rrd_summary.php on line 38 That's

Re: [pfSense Support] Re: Potential DNS rebind attack detected

2010-07-06 Thread Jim Pingle
On 7/6/2010 10:57 AM, David Burgess wrote: On Tue, Jul 6, 2010 at 8:50 AM, David Burgess apt@gmail.com wrote: Any idea what's going on here? I see a thread is already active in the forum. I'll recall this post in favour of that thread.

Re: [pfSense Support] Create larger embedded images

2010-07-01 Thread Jim Pingle
On 7/1/2010 3:45 PM, Trevor Benson wrote: We have a few devices with sad drives we would like to use packages with and configure extra steps into the shutdown to backup additional log data an some small configurations to the /cfg partition. It would be useful to use the rest of the 32G. We

Re: [pfSense Support] blocking https:facebook.com via squidguard pfsense gui

2010-07-01 Thread Jim Pingle
On 6/30/2010 4:29 PM, Luke Jaeger wrote: thanks Jim - I got the impression from reading the pfsense forum that there is a way to block https for specific domains by denying the connect method - am I understanding this wrong? That would still require they be routed through squid. Denying a

Re: [pfSense Support] upgrade failure from Beta2 to Beta3

2010-06-30 Thread Jim Pingle
On 6/30/2010 10:16 AM, Lyle Giese wrote: I am playing with 2.0 Beta and saw Beta3 was availible. I am running the nanobsd version on a Soekris Net4801 on a 2g SanDisk CF card. The orginal load was by putting the Beta2 image on the CF card with dd. I downloaded the latest snapshot of Beta3

Re: [pfSense Support] blocking https:facebook.com via squidguard pfsense gui

2010-06-30 Thread Jim Pingle
On 6/30/2010 4:00 PM, Luke Jaeger wrote: I decided to enable transparent proxy on my school firewall because I was getting a million requests a day to configure proxy settings on student laptops. But now that I turned on transparent proxy, students have discovered that they can get to

Re: [pfSense Support] Bandwdith usage since start of month?

2010-06-24 Thread Jim Pingle
On 6/18/2010 1:44 PM, Jim Pingle wrote: On 6/18/2010 1:40 PM, Adam Thompson wrote: It wouldn't be too difficult to add this to the GUI if we can confirm that the results are indeed accurate. Well, I can tell you that the numbers returned matched up exactly with what my ISP wants to bill

Re: [pfSense Support] Bandwdith usage since start of month?

2010-06-18 Thread Jim Pingle
On 6/18/2010 12:04 PM, Adam Thompson wrote: Is there a way to get this information? Try this command at the CLI, do the values look right when compared to the graph? My awk-fu isn't that good, there's probably a better way to do this: (This should all be one single line) rrdtool fetch

Re: [pfSense Support] Bandwdith usage since start of month?

2010-06-18 Thread Jim Pingle
On 6/18/2010 1:28 PM, Adam Thompson wrote: Thank you very much! I never know how to extract the raw data from rrdlogs, now I know it's actually not that hard. (BTW: the AWK is fine, although you can omit the cut(1) stage in the pipe simply by having awk add up $2 and $3 instead of $1 and

Re: [pfSense Support] Bandwdith usage since start of month?

2010-06-18 Thread Jim Pingle
On 6/18/2010 1:40 PM, Adam Thompson wrote: It wouldn't be too difficult to add this to the GUI if we can confirm that the results are indeed accurate. Well, I can tell you that the numbers returned matched up exactly with what my ISP wants to bill me for :-) That's certainly a good

Re: [pfSense Support] New blocked traffic

2010-06-09 Thread Jim Pingle
I have another soekris running 2.0-BETA2 and seeing the following in the logs from it(it's not logging source or destination). Be nice to have the source ip address... Lyle Giese LCR Computer Services, Inc. Jun 8 21:47:21 proxy pf: 00:00:00.000350 rule 2/0(match): block in on sis0:

Re: [pfSense Support] New blocked traffic

2010-06-09 Thread Jim Pingle
On 6/9/2010 9:35 AM, Lyle Giese wrote: On 2.0 the pf logs are split into two lines. You need the line after this to see the remainder of the log info. That bytes! How does a simple syslog parser handle that to match the two lines together? How can you guarentee that the next line is the

Re: [pfSense Support] PFsense 2.0 SMTP notifications.

2010-06-04 Thread Jim Pingle
On 6/4/2010 3:19 PM, Ryan wrote: Sorry if this gets sent twice, I forgot to put a subject smacks self in head I finally got a chance t play with the new version 2.0 beta. I must say, I like what I see so far. Thanks I see there is a place under Advanced Notifications for an smtp server

  1   2   >