Re: [pfSense Support] Dyndns and PPPoE Test... Reloaded!

2005-10-29 Thread Ispánovits Imre
It seems that dyndns does the job when running from the cron at night. The only problem that it doesn't start when the ip changes in the interface. == snip Oct 29 02:01:02 php: : phpDynDNS: (Success) IP Address Changed Successfully! (xx.yyy.zzz.21) Oct 29

Re: [pfSense Support] Summary of problems in Bridging Mode

2005-10-29 Thread Chris Buechler
Scott Ullrich wrote: That is correct as of the recent version that doesn't install anti-spoof, anti-lockout rules, etc for the lan subnet. I did some bridging testing this evening, with 0.89.6, a version that's not publicly available yet. The above is still a problem, but with an IP on

Re: [pfSense Support] Hardware... (old)

2005-10-29 Thread Chris Buechler
Forrest Aldrich wrote: Oops sorry about that. ;-) I was using Intel 10/100 cards (dual port). I also had Kensingtons. It could also be due to other factors, such as my running FreeBSD's natd. But, I did notice that SMB file browsing was much more fast when I updated to the new machine.

Re: [pfSense Support] Long IP lists

2005-10-29 Thread Scott Ullrich
No, this is not how we handle things. I would suggest looking at our code in filter.inc before suggesting anything further. On 10/28/05, Forrest Aldrich [EMAIL PROTECTED] wrote: Does PFSense allow for includes in the pf.conf file - or would it honor those directives. Until a better solution

Re: [pfSense Support] Re: Wrap Embedded 0.89.2: Traffic Shaper error

2005-10-29 Thread Scott Ullrich
Once we release, every version will have concise notes. We haven't even made it to beta yet! Scott On 10/29/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: At 07:27 PM 10/28/2005, Bill Marquette wrote: Correct, you will need to reflash, the CF updates are PHP only, they don't include kernel

Re: [pfSense Support] Dyndns and PPPoE Test... Reloaded!

2005-10-29 Thread Damien Dupertuis
Hello, same for me... here is my log... Damien --- Ispánovits Imre [EMAIL PROTECTED] a écrit : It seems that dyndns does the job when running from the cron at night. The only problem that it doesn't start when the ip changes in the interface. == snip

Re: [pfSense Support] Dyndns and PPPoE Test... Reloaded!

2005-10-29 Thread Scott Ullrich
This is a CLOG file so you cannot see the entire output. Someone will need to copy and paste the system log screen.Please show me the logs right after the connection comes up (pppoe) and also after a 24 hour cron job kickoff. On 10/29/05, Damien Dupertuis [EMAIL PROTECTED] wrote: Hello,

[pfSense Support] Virtual IPs

2005-10-29 Thread Nate Davis
Howdy, pfSense has been a solid firewall for home use, and now I am implementing it as a firewall at work. I have run into a snag, and not really sure what the problem is. I am running 89.2 Here is my Setup: WAN (ATT-T1): 12.165.119.195 LAN: 192.168.40.1 I can use NAT, and Port

Re: [pfSense Support] Virtual IPs

2005-10-29 Thread Chris Buechler
Nate Davis wrote: Howdy, pfSense has been a solid firewall for home use, and now I am implementing it as a firewall at work. I have run into a snag, and not really sure what the problem is. I am running 89.2 Here is my Setup: WAN (ATT-T1): 12.165.119.195 LAN: 192.168.40.1 I can use

[pfSense Support] Testing the LiveCD version...

2005-10-29 Thread Forrest Aldrich
I have PFSense booted on my old AP200. Following the docs (m0n0wall, et al), I can't seem to get PFSense to just run on the LAN address. I think this might be an arp issue as well, since it wants to be the primary route for all... whereas I want to bind the LAN address to an internal

Re: [pfSense Support] Virtual IPs

2005-10-29 Thread Nate Davis
Chris, Thanks for the clarification. I will be doing a 1:1 Nat for the Mail Server for sure. That seems like the best route for the Mail Server. I guess you would call it Standard NAT (TCP). Not sure exactly what you are asking specifically. Let me see if this example helps. WAN IP:

Re: [pfSense Support] Testing the LiveCD version...

2005-10-29 Thread Scott Ullrich
You have two interfaces? On 10/29/05, Forrest Aldrich [EMAIL PROTECTED] wrote: I have PFSense booted on my old AP200. Following the docs (m0n0wall, et al), I can't seem to get PFSense to just run on the LAN address. I think this might be an arp issue as well, since it wants to be the

Re: [pfSense Support] Testing the LiveCD version...

2005-10-29 Thread Forrest Aldrich
Yes, a dual Intel NIC (10/100) Scott Ullrich wrote: You have two interfaces? On 10/29/05, Forrest Aldrich [EMAIL PROTECTED] wrote: I have PFSense booted on my old AP200. Following the docs (m0n0wall, et al), I can't seem to get PFSense to just run on the LAN address. I

Re: [pfSense Support] Testing the LiveCD version...

2005-10-29 Thread Scott Ullrich
I'm not sure what you mean by just running on the lan address? By default it uses 192.168.1.1. Scott On 10/29/05, Forrest Aldrich [EMAIL PROTECTED] wrote: Yes, a dual Intel NIC (10/100) Scott Ullrich wrote: You have two interfaces? On 10/29/05, Forrest Aldrich [EMAIL PROTECTED]

Re: [pfSense Support] Testing the LiveCD version...

2005-10-29 Thread Scott Ullrich
You should be able to assign the ip address from the console and simply surf into the ip. There is a default anti-web lockout rule for the lan that will let you in regardless of the rules defined on the lan interface. Scott On 10/29/05, Forrest Aldrich [EMAIL PROTECTED] wrote: Sorry, I

Re: [pfSense Support] Testing the LiveCD version...

2005-10-29 Thread Forrest Aldrich
This is what I tried. I simply brought down the fxp1 interface, and had dhclient grab an available IP, then brought it back up (via ifconfig). That doesn't work. Though, I can telnet to port 80 on the console of PFSense (shell). Thanks. Scott Ullrich wrote: You should be able to assign

Re: [pfSense Support] Testing the LiveCD version...

2005-10-29 Thread Scott Ullrich
That is not how it works. You need to assign a LAN ip address from the console. On 10/29/05, Forrest Aldrich [EMAIL PROTECTED] wrote: This is what I tried. I simply brought down the fxp1 interface, and had dhclient grab an available IP, then brought it back up (via ifconfig). That doesn't

[pfSense Support] Odd READ_BIG MEDIUM ERROR

2005-10-29 Thread Forrest Aldrich
I'm getting repeated errors upon boot: acd0: FAILURE - READ_BIG MEDIUM ERROR asc=0x11 ascq=0x05 error=4ABORTED It eventually does boot up, but I wonder what this is - or if the CDROM in this sucker is just old (I have spares around). _F

Re: [pfSense Support] Testing the LiveCD version...

2005-10-29 Thread Forrest Aldrich
Duh. I should have seen that one. I have it working now, and am browsing through the interface. Thank you. Scott Ullrich wrote: That is not how it works. You need to assign a LAN ip address from the console. On 10/29/05, Forrest Aldrich [EMAIL PROTECTED] wrote: This is

Re: [pfSense Support] Odd READ_BIG MEDIUM ERROR

2005-10-29 Thread Scott Ullrich
I have this problem on a machine at home as well. It's a FreeBSD issue. Scott On 10/29/05, Forrest Aldrich [EMAIL PROTECTED] wrote: I'm getting repeated errors upon boot: acd0: FAILURE - READ_BIG MEDIUM ERROR asc=0x11 ascq=0x05 error=4ABORTED It eventually does boot up, but I wonder what

[pfSense Support] Firmware bug?

2005-10-29 Thread Forrest Aldrich
Just got this bug when going to the Firmware menu option: http://192.168.1.199/system_firmware_check.php Warning: raiseerror(PEAR.php): failed to open stream: No such file or directory in /etc/inc/xmlrpc_client.inc on line 562 Warning: raiseerror(): Failed opening 'PEAR.php' for inclusion

Re: [pfSense Support] Virtual IPs (FTP)

2005-10-29 Thread Nate Davis
Howdy, OK, I figured out the problem I was having... Turns out that for FTP, which is what I was trying to Port Forward with, there is a userland FTP-Proxy that is turned on by default. This was causing the Incoming FTP Connections to hang and timeout. I turned this off in the Advanced Page,

Re: [pfSense Support] Virtual IPs (FTP)

2005-10-29 Thread Bill Marquette
On 10/29/05, Nate Davis [EMAIL PROTECTED] wrote: Howdy, OK, I figured out the problem I was having... Turns out that for FTP, which is what I was trying to Port Forward with, there is a userland FTP-Proxy that is turned on by default. This was causing the Incoming FTP Connections to hang

Re: [pfSense Support] Virtual IPs (FTP)

2005-10-29 Thread Nate Davis
On 10/29/05, Nate Davis [EMAIL PROTECTED] wrote: Howdy, OK, I figured out the problem I was having... Turns out that for FTP, which is what I was trying to Port Forward with, there is a userland FTP-Proxy that is turned on by default. This was causing the Incoming FTP Connections to hang

Re: [pfSense Support] 1 to 1 NAT

2005-10-29 Thread Nate Davis
Sorry to be such a pest today. I don't know what my real problem is. I followed these Steps 1. Created a Virtual IP of 12.165.119.199/32 (ProxyARP) 2. Created a 1:1 NAT Rule, 12.165.119.199/32 to 192.168.55.41/32 3. Opened up needed Ports... All incoming access works. I can telnet into

RE: [pfSense Support] 1 to 1 NAT

2005-10-29 Thread Jason J. Ellingson
I have several servers behind a 1:1 NAT. All I did was map IP to IP and add the rules. I did not use virtual IPs or anything else. It works great... HOWEVER, you have to do it for EACH IP... it doesn't work when you try to do a block. Make a 1:1 NAT for each and every IP individually.

Re: [pfSense Support] 1 to 1 NAT

2005-10-29 Thread Scott Ullrich
Sounds like a bug. Please upgrade to http://www.pfsense.com/~sullrich/pfSense-Full-Update-0.89.6.tgz Scott On 10/29/05, Nate Davis [EMAIL PROTECTED] wrote: Sorry to be such a pest today. I don't know what my real problem is. I followed these Steps 1. Created a Virtual IP of

Re: [pfSense Support] Traffic shaping breaks

2005-10-29 Thread Bill Marquette
Fixed. update_file.sh /usr/local/www/system_advanced.php and re-run shaper wizard or add: schedulertypehfsc/schedulertype to shaper tag in /conf/config.xml and reboot. --Bill On 10/29/05, Peter Zaitsev [EMAIL PROTECTED] wrote: Hi, I tried to enable device pooling in advanced options (the

Re: [pfSense Support] Traffic shaping breaks

2005-10-29 Thread Peter Zaitsev
On Sat, 2005-10-29 at 23:05 -0500, Bill Marquette wrote: Fixed. update_file.sh /usr/local/www/system_advanced.php and re-run shaper wizard or add: schedulertypehfsc/schedulertype to shaper tag in /conf/config.xml and reboot. Thanks. I actually simply rerun traffic shaper. Anyway this

Re: [pfSense Support] Traffic shaping breaks

2005-10-29 Thread Bill Marquette
On 10/29/05, Peter Zaitsev [EMAIL PROTECTED] wrote: On Sat, 2005-10-29 at 23:05 -0500, Bill Marquette wrote: Fixed. update_file.sh /usr/local/www/system_advanced.php and re-run shaper wizard or add: schedulertypehfsc/schedulertype to shaper tag in /conf/config.xml and reboot.