[pfSense Support] Where can one download 1.2 release candidate 1?

2007-05-17 Thread Anil garg



Re: [pfSense Support] LAN / WAN disconnections - Motorola Surfboard SB5101 Cable Modem?

2007-05-17 Thread Tortise
Thanks Raj

The modems web interface is, as you suggest, present at 192.168.100.1.

The modem is being used in a transparent mode (bridging?) as the static IP is 
assigned on rl1.  So far as I can tell it is not using 
0.0 on the WAN side, it is using 3 digit numbers for the a.b.c.d IP address.

Kind regards
David

- Original Message - 
From: Rajkumar S [EMAIL PROTECTED]
To: support@pfsense.com
Sent: Thursday, May 17, 2007 5:53 PM
Subject: Re: [pfSense Support] LAN / WAN disconnections - Motorola Surfboard 
SB5101 Cable Modem?


On 5/17/07, Tortise [EMAIL PROTECTED] wrote:
 rl1 = WAN and Direct connected only to the Cable modem i.e. no switch sharing.
 rl2 = LAN and connected to LAN switches.

You have 192.168.0.4 on your lan, but for some reason your cable modem
also sends arp replies for that ip. One possible reson is that your
ISP might be using 192.168.0.0 network for the HFC side of cable
modem. Try browsing to 192.168.100.1 and check if you get the cable
modem web interface. From here you can check the ip address assigned
to your modem. (I am typing from my memory, so I might be wroing about
the cable modem web interface ip)

If your ISP is using that ip range for HFC network, you will have to
change your lan ip addressing.

raj

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] LAN / WAN disconnections - Motorola Surfboard SB5101 Cable Modem?

2007-05-17 Thread Bill Marquette

On 5/17/07, Tortise [EMAIL PROTECTED] wrote:

Hi Bill

for me

rl1 = WAN and Direct connected only to the Cable modem i.e. no switch sharing.
rl2 = LAN and connected to LAN switches.

Can I presume that means you have checked and confirmed there are no similar 
messages in your System Logs?


I no longer use this setup, my 5101 is sitting in my basement
collecting dust.  However, I would have noticed both the error _and_
the issue.  Other suggestions.

Check your netmask on both interfaces.  I know WAN will be DHCP, but
it's worth seeing what the ISP is sending you and confirming that it
makes sense.  Seeing as you are on a HUGE layer 2 broadcast domain,
it's entirely possible that there's some joker out there sending out
gratuitous arps - not sure offhand how to stop that in pfsense (I know
how to do it in the OS, but that won't help you here).  You can check
the arp tables on the firewall (at any time, but likely most useful
after it stops working) by doing an 'arp -an' from the command prompt.

--Bill

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Where can one download 1.2 release candidate 1?

2007-05-17 Thread Bill Marquette

Nowhere, there's no RC1 yet.  You might mean Beta 1, it can be pulled
down from any of our official mirrors, listed on the downloads page.

--Bill

On 5/17/07, Anil garg [EMAIL PROTECTED] wrote:





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Shaping OpenVPN Tunnels (Take two)

2007-05-17 Thread Mike Lee
Hello Everyone,

I did some searching and found this previous discussion on shaping
OpenVPN tunnels:

http://forum.pfsense.org/index.php?PHPSESSID=836df07da7c9becd9259e22e1847c7aetopic=3013.0

Basically the discussion ended with, that you cannot shape the
OpenVPN tunnels because openvpn uses the TUN interface and the shaper
looks for traffic on the LAN interface heading towards the WAN to
shape.  My question is, since this discussion is somewhat old, has there
been any more progress/talk on getting the OpenVPN tunnels to shape
properly?
I would like to be able to shape them because I have some remote
offices and plan on using OpenVPN tunnels for VoIP.  I know you cannot
shape traffic within VPN tunnels because they are encrypted, but I am
planning on using specific ports for certain tunnels to pass only VoIP
traffic through and shaping those OpenVPN ports.
Thanks in advance.

Mike Lee

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



AW: [pfSense Support] Shaping OpenVPN Tunnels (Take two)

2007-05-17 Thread Fuchs, Martin
The general problem is not solved until now - encrypted tunnels cannot be 
shaped...
There's the possibility to shape a whole OpenVPN tunnel (clientside) for 
outgoing traffic, but I believe this is not what wou really want...

What you are planning is some sort of traffic shaping on port based rules.

It might be possible to do so, but perhaps you better ask scott for this when 
he's back from bsdcan...

Regards,

Martin

-Ursprüngliche Nachricht-
Von: Mike Lee [mailto:[EMAIL PROTECTED] 
Gesendet: Donnerstag, 17. Mai 2007 16:40
An: support@pfsense.com
Betreff: [pfSense Support] Shaping OpenVPN Tunnels (Take two)

Hello Everyone,

I did some searching and found this previous discussion on shaping
OpenVPN tunnels:

http://forum.pfsense.org/index.php?PHPSESSID=836df07da7c9becd9259e22e1847c7aetopic=3013.0

Basically the discussion ended with, that you cannot shape the
OpenVPN tunnels because openvpn uses the TUN interface and the shaper
looks for traffic on the LAN interface heading towards the WAN to
shape.  My question is, since this discussion is somewhat old, has there
been any more progress/talk on getting the OpenVPN tunnels to shape
properly?
I would like to be able to shape them because I have some remote
offices and plan on using OpenVPN tunnels for VoIP.  I know you cannot
shape traffic within VPN tunnels because they are encrypted, but I am
planning on using specific ports for certain tunnels to pass only VoIP
traffic through and shaping those OpenVPN ports.
Thanks in advance.

Mike Lee

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



AW: [pfSense Support] Where can one download 1.2 release candidate 1?

2007-05-17 Thread Fuchs, Martin
Well, if there would be some RC, I'd know I think... J

 

Some snapshot builds can be found here:

http://snapshots.pfsense.com/FreeBSD6/RELENG_1_2/

 

official builds can be found on the mirrors:

http://www.pfsense.org/mirror.php?section=downloads

http://www.pfsense.org/mirror.php?section=updates

 

Regards,

 

Martin

 

Von: Anil garg [mailto:[EMAIL PROTECTED] 
Gesendet: Donnerstag, 17. Mai 2007 08:49
An: support@pfsense.com
Betreff: [pfSense Support] Where can one download 1.2 release candidate
1?