Re: [pfSense] 2.2-RELEASE now available!

2015-02-15 Thread laamanni
Tim lists@... writes:

 
 The Update worked like charm. Many thanks to the devs for all the great work!
 
 Now I started to install packages and get the following error after installing
 HAVP:
 Warning: file_put_contents(/usr/local/etc/havp/havp_conf.xml): failed to open
 stream: No such file or directory in /usr/local/pkg/havp.inc on line 604
 
 This error occurs on top of the HAVP-config-pages.
 
 Regards
 Tim
 
  Chris Buechler cmb@... hat am 24. Januar 2015 um 03:24 geschrieben:
  
  
  Details on the blog:
  https://blog.pfsense.org/?p=1546
  ___
  pfSense mailing list
  https://lists.pfsense.org/mailman/listinfo/list
  Support the project with Gold! https://pfsense.org/gold
 ___
 pfSense mailing list
 https://lists.pfsense.org/mailman/listinfo/list
 Support the project with Gold! https://pfsense.org/gold
 
 


I got this same error message.
I freshly installed pfsense 2.2, no upgrade.
HAVP was the first package I installed, and i got the same error!
There is no such folder in my system: /usr/local/etc/havp...

I enabled the http-proxy server from antivirus config. Do I still need to
install Squid or something else?



___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-29 Thread Chris Buechler
Hey Seth,

On Mon, Jan 26, 2015 at 8:38 AM, Seth Mos seth@dds.nl wrote:
 Sorry to reply to myself here, but 2.2 in combination with the Intel
 X540-2 card isn't very stable. The card keeps dropping the Phy which is
 fine on 2.1.5.


That's surprising, we've seen much better results on our systems with
ix cards, and I know of one system where they push near 2 Gbps across
tens to hundreds of thousands of simultaneous connections through ix
and have had great results where with 2.1.5 they were at times hitting
the limit of what pf could push. They have a good deal of head room to
spare now.

You using any of those cards on stock FreeBSD? I think most of the
Intel 10G cards we have are X520 rather than 540, which might be the
difference.

 [zone: mbuf_jumbo_9k] kern.ipc.nmbjumbo9 limit reached
 ix1: Could not setup receive structures

 That didn't happen on 2.1.5 at all, apparently the limits have changed.

 In FreeBSD 10 these changes need to into loader.conf during boot,
 different from before.
 https://pleiades.ucsc.edu/hyades/FreeBSD_Network_Tuning

 kern.ipc.nmbclusters=262144
 kern.ipc.nmbjumbop=262144
 kern.ipc.nmbjumbo9=65536
 kern.ipc.nmbjumbo16=32768


Some of that does like higher limits in 10.x. Though some of that
actually isn't much different from 8.x/2.1.5, like I'm surprised you
were getting by with  262144 mbufs. We've taken to gnn@'s million
packet march as they referred to it at a past employer of his, and
recommended nmbclusters=100 in the NIC tuning guide.
https://doc.pfsense.org/index.php/Tuning_and_Troubleshooting_Network_Cards#Intel_ix.284.29_Cards

We've seen some bad behavior with low-ish nmbclusters on ix NICs which
are similar to what you describe, I'm curious if things would be fine
if you bumped nmbclusters to 1 million. You have a test setup where
you could try that on the specific hardware you're using?
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-29 Thread A Mohan Rao
[pfSense] 2.2-RELEASE now available!
with lots of problem like squid and squid guard not working properly.


Thanks

A Mohan Rao

+91 98260 61122

On Sat, Jan 24, 2015 at 7:54 AM, Chris Buechler c...@pfsense.com wrote:

 Details on the blog:
 https://blog.pfsense.org/?p=1546
 ___
 pfSense mailing list
 https://lists.pfsense.org/mailman/listinfo/list
 Support the project with Gold! https://pfsense.org/gold

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] 2.2-RELEASE now available!

2015-01-29 Thread Chris Buechler
On Mon, Jan 26, 2015 at 6:26 AM, Doug Lytle supp...@drdos.info wrote:
 I've also noted this morning that the 3 systems I've upgraded, all of them 
 have lost their limiter rules.

 I've read the release notes, nothing that I saw stated they'd be removed.


Limiters won't be removed. Check your config history,
DiagBackup/restore, Config History tab. Hopefully you still have a
revision there pre-upgrade. Use the diff functionality there to see
where that changed. By lost their limiter rules, what specifically
do you mean? The limiters are gone from FirewallTraffic Shaper,
Limiters? The rules that were using them are gone? Their specification
in the rule that was there is now missing?
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-29 Thread Doug Lytle

Chris Buechler wrote:

what specifically
do you mean? The limiters are gone from FirewallTraffic Shaper,
Limiters?


Correct.

It was as if I had never set it.  Since it's my home firewall, wasn't a 
big deal, just thought I'd let someone know.


Doug

--
Ben Franklin quote:

Those who would give up Essential Liberty to purchase a little Temporary Safety, 
deserve neither Liberty nor Safety.

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-26 Thread Doug Lytle
  On Jan 26, 2015, at 6:43 AM, Tim Hogan t...@hoganzoo.com wrote:
 After running those commands all of my previous data was available.

Cool!

I'll give that a go,

Doug
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-26 Thread Doug Lytle
I've also noted this morning that the 3 systems I've upgraded, all of them have 
lost their limiter rules.

I've read the release notes, nothing that I saw stated they'd be removed.

Doug
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-26 Thread Seth Mos
Sorry to reply to myself here, but 2.2 in combination with the Intel
X540-2 card isn't very stable. The card keeps dropping the Phy which is
fine on 2.1.5.

I've just reverted and reinstalled 2.1.5 with a backup config.

Although the nmbclusters change did make the 2nd port of the ix card
power on it eventually hung the network after half an hour or so.

Due diligence.

Regards,

Seth

Seth Mos schreef op 26-1-2015 om 11:12:
 Chris Buechler schreef op 24-1-2015 om 3:24:
 Details on the blog:
 https://blog.pfsense.org/?p=1546
 
 2 Upgrades done so far, one had a different Architecture autoupdate URL,
 that one updated from AMD64 to i386, please don't do that.
 
 Also, I have issues with the Intel X540-2 10G card now, it's throwing a
 few errors. Port 0 goes into a flapping state while port 1 never comes up.
 
 [zone: mbuf_jumbo_9k] kern.ipc.nmbjumbo9 limit reached
 ix1: Could not setup receive structures
 
 That didn't happen on 2.1.5 at all, apparently the limits have changed.
 
 In FreeBSD 10 these changes need to into loader.conf during boot,
 different from before.
 https://pleiades.ucsc.edu/hyades/FreeBSD_Network_Tuning
 
 kern.ipc.nmbclusters=262144
 kern.ipc.nmbjumbop=262144
 kern.ipc.nmbjumbo9=65536
 kern.ipc.nmbjumbo16=32768
 
 Regards,
 
 Seth
 ___
 pfSense mailing list
 https://lists.pfsense.org/mailman/listinfo/list
 Support the project with Gold! https://pfsense.org/gold
 

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-26 Thread Seth Mos
Chris Buechler schreef op 24-1-2015 om 3:24:
 Details on the blog:
 https://blog.pfsense.org/?p=1546

2 Upgrades done so far, one had a different Architecture autoupdate URL,
that one updated from AMD64 to i386, please don't do that.

Also, I have issues with the Intel X540-2 10G card now, it's throwing a
few errors. Port 0 goes into a flapping state while port 1 never comes up.

[zone: mbuf_jumbo_9k] kern.ipc.nmbjumbo9 limit reached
ix1: Could not setup receive structures

That didn't happen on 2.1.5 at all, apparently the limits have changed.

In FreeBSD 10 these changes need to into loader.conf during boot,
different from before.
https://pleiades.ucsc.edu/hyades/FreeBSD_Network_Tuning

kern.ipc.nmbclusters=262144
kern.ipc.nmbjumbop=262144
kern.ipc.nmbjumbo9=65536
kern.ipc.nmbjumbo16=32768

Regards,

Seth
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-26 Thread b...@todoo.biz
Le 24 janv. 2015 à 03:24, Chris Buechler c...@pfsense.com a écrit :
 
 Details on the blog:
 https://blog.pfsense.org/?p=1546
 ___
 pfSense mailing list
 https://lists.pfsense.org/mailman/listinfo/list
 Support the project with Gold! https://pfsense.org/gold


Congratulation to the pfSense team for the quality of the update : 

Beside snort and couple of other packet re-install, the update is very smooth, 
filled with new features and one click away. 
I have rarely seen such a good updates anywhere else. 


Bravo ! 



«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§

Your provider of OpenSource Appliances

www.osnet.eu

«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§

PGP ID -- 0x1BA3C2FD

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] 2.2-RELEASE now available!

2015-01-26 Thread Tim Hogan


I was able to get vnstat to work by running the following commands

cd /var
mkdir lib
cd lib
ln -s /cf/conf/vnstat


After running those commands all of my previous data was available.

Regards,
Tim

On 1/25/2015 3:54 AM, Doug Lytle wrote:

Brian Caouette wrote:

Lightsquid and vnstat2 do not work with 2.2

Can anyone else confirm?


I cannot comment on Lightsquid, but I can confirm my vnstat2 is 
non-functional.  I've just re-installed the package, I'll see if that 
fixes it.


Doug




___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-25 Thread Doug Lytle

Doug Lytle wrote:
've just re-installed the package, I'll see if that fixes it. 


Also of note:

Options selected for interfaces to monitor and log rotation never get saved.

Doug


--
Ben Franklin quote:

Those who would give up Essential Liberty to purchase a little Temporary Safety, 
deserve neither Liberty nor Safety.

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-25 Thread Tim
The Update worked like charm. Many thanks to the devs for all the great work!

Now I started to install packages and get the following error after installing
HAVP:
Warning: file_put_contents(/usr/local/etc/havp/havp_conf.xml): failed to open
stream: No such file or directory in /usr/local/pkg/havp.inc on line 604

This error occurs on top of the HAVP-config-pages.

Regards
Tim



 Chris Buechler c...@pfsense.com hat am 24. Januar 2015 um 03:24 geschrieben:
 
 
 Details on the blog:
 https://blog.pfsense.org/?p=1546
 ___
 pfSense mailing list
 https://lists.pfsense.org/mailman/listinfo/list
 Support the project with Gold! https://pfsense.org/gold
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-25 Thread Bob Gustafson
I tried it and on an overnight auto upgrade - in the morning Asterisk 
was there.


Not tested, but the code is there.

So far so good on the rest.

Bob G

On 01/25/2015 01:47 AM, Bob Gustafson wrote:

Has anyone tried Asterisk?

On 01/24/2015 08:05 PM, Brian Caouette wrote:

Lightsquid and vnstat2 do not work with 2.2

Can anyone else confirm?

Sent from my iPad


On Jan 24, 2015, at 8:39 PM, Jon Gerdes gerd...@blueloop.net wrote:

2.2


Cheers cmb 'n' troops.  Great piece of work.

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-24 Thread Bob Gustafson

Has anyone tried Asterisk?

On 01/24/2015 08:05 PM, Brian Caouette wrote:

Lightsquid and vnstat2 do not work with 2.2

Can anyone else confirm?

Sent from my iPad


On Jan 24, 2015, at 8:39 PM, Jon Gerdes gerd...@blueloop.net wrote:

2.2


Cheers cmb 'n' troops.  Great piece of work.

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] 2.2-RELEASE now available!

2015-01-24 Thread Brian Caouette
Lightsquid and vnstat2 do not work with 2.2

Can anyone else confirm?

Sent from my iPad

 On Jan 24, 2015, at 8:39 PM, Jon Gerdes gerd...@blueloop.net wrote:
 
 2.2
 
 
 Cheers cmb 'n' troops.  Great piece of work.
 
 ___
 pfSense mailing list
 https://lists.pfsense.org/mailman/listinfo/list
 Support the project with Gold! https://pfsense.org/gold
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


[pfSense] 2.2-RELEASE now available!

2015-01-23 Thread Chris Buechler
Details on the blog:
https://blog.pfsense.org/?p=1546
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold