Re: [pfSense Support] Source NAT

2009-12-18 Thread Ian Bowers
I'd really like to see source NAT added. I've been used to pf on openbsd for a while... it'll let you abuse nat any way you like it, and will still call you the next day. I tried pfsense and actually really liked it a lot. it was eventually the lack of options for NAT that made me switch back...

Re: [pfSense Support] beta1 and rum based ap

2010-01-11 Thread Ian Bowers
On Mon, Jan 11, 2010 at 5:52 AM, Nenhum_de_Nos matheus...@gmail.com wrote: On Mon, January 11, 2010 06:19, Chris Buechler wrote: On Fri, Jan 8, 2010 at 12:00 AM, Nenhum_de_Nos matheus...@gmail.com wrote: hail, I have a beta1 trial of pfsense as an ap on rum based tp-link device. I

Re: [pfSense Support] how does one test for stability?

2010-02-04 Thread Ian Bowers
to be honest, you ought to get something like Cacti running on an external server. It's easy to deploy and configure. You'll get charts of all kinds of info, and its only a few clicks to set up. In order to run it you'll need to know a little about SNMP. But for monitoring, quite honestly

Re: [pfSense Support] Re: CARP ip on different network range

2010-06-01 Thread Ian Bowers
On Tue, Jun 1, 2010 at 12:24 PM, Matias matiassu...@gmail.com wrote: El 01/06/10 18:09, Evgeny Yurchenko escribió: Matias wrote: El 01/06/10 17:14, Evgeny Yurchenko escribió: Matias wrote: El 01/06/10 17:00, Evgeny Yurchenko escribió: Matias wrote: Hi, I've an internet connection on

Re: [pfSense Support] Re: CARP ip on different network range

2010-06-03 Thread Ian Bowers
On Thu, Jun 3, 2010 at 12:14 AM, Chris Buechler cbuech...@gmail.com wrote: On Tue, Jun 1, 2010 at 1:05 PM, Ian Bowers iggd...@gmail.com wrote:  I usually reccommend a cisco router over a BSD box for WAN delivery duty since they rarely if ever need patching Cisco has put out more security

Re: [pfSense Support] Re: CARP ip on different network range

2010-06-03 Thread Ian Bowers
On Thu, Jun 3, 2010 at 3:11 PM, Vick Khera vi...@khera.org wrote: On Thu, Jun 3, 2010 at 3:06 PM, Ian Bowers iggd...@gmail.com wrote: My comment on patching was more abstract than saying Cisco is more of a fire and forget box than BSD.  a BSD box, even as a network appliance, is going to have

Re: [pfSense Support] Bandwdith usage since start of month?

2010-06-18 Thread Ian Bowers
darkstat will give you a rolling month, but I'm not sure what would conveniently do traffic since the start of a given month. On Fri, Jun 18, 2010 at 12:04 PM, Adam Thompson athom...@c3a.ca wrote: I’m trying to determine how much traffic I’ve transferred since the first of the month; the RRD

Re: [pfSense Support] how to block the bit torrent

2011-09-01 Thread Ian Bowers
You won't find much success in trying to block bittorrent with a firewall. Your best bet is to use IDS (eg: snort) or another sort of categorization software or appliance to identify who is using bittorrent and deal with them at layer 8 via company security policy. Torrenting is one place where

Re: [pfSense Support] how to block the bit torrent

2011-09-01 Thread Ian Bowers
:04 AM, suresh suresh suresh.notion...@gmail.comwrote: we can install the snort in pfsense 1.2.3? On Thu, Sep 1, 2011 at 8:13 PM, Ian Bowers iggd...@gmail.com wrote: You won't find much success in trying to block bittorrent with a firewall. Your best bet is to use IDS (eg: snort) or another

Re: [pfSense Support] how to block the bit torrent

2011-09-01 Thread Ian Bowers
...@gmail.comwrote: if we disable the bit torrent using traffic shapers.. bit torrent will be block or what will happen.please help me Thank you, Regards, Suresh On Thu, Sep 1, 2011 at 8:44 PM, Ian Bowers iggd...@gmail.com wrote: pfsense is the freebsd, so one way or another you can install the snort

Re: [pfSense Support] how to block the bit torrent

2011-09-01 Thread Ian Bowers
torrent or bit torrent automatically changes the port number start downloading.please help me. Thank you, Regards, Suresh On Thu, Sep 1, 2011 at 9:06 PM, Ian Bowers iggd...@gmail.com wrote: savvy users will use a different port. if your goal is to say we block bit torrent, this shouldnt