Re: [pfSense Support] IGMP packet out of WAN
On Fri, Jul 24, 2009 at 6:19 PM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 23, 2009 5:59 PM From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 23, 2009 12:07 PM From: cbuech...@gmail.com [mailto:cbuech...@gmail.com] On Sent: July 23, 2009 11:32 AM On Thu, Jul 23, 2009 at 11:29 AM, Chris Buechlerc...@pfsense.org wrote: On Thu, Jul 23, 2009 at 10:02 AM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: Thanks for quick report Chris. I am completely new to this stuff please bear with me. Trying to accoomplish 'Clone the tools repo at rcs.pfsense.org' I came to conclusion I need git installed on my pfSense-dev system. Reading several documents I tried the following procedure: echo WITHOUT_X11=yo /etc/make.conf portsnap fetch extract - Success cd /usr/ports/devel/git make BATCH=yo make install BATCH=yo make clean - Failure after the next: No idea. Try to pkg_add -r git, or you may have to clone it on another system and copy over the port. or fetch http://cvs.pfsense.org/~cmb/igmpproxy-port.tgz - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org # pkg_add -r git Error: FTP Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.0-rele ase/Latest/git.tbz: File unavailable (e.g., file not found, no access) pkg_add: unable to fetch 'ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.0-rel ease/Latest/git.tbz' by URL Fetch from http worked, thank you. Eugene Ok, I managed to fix 'not sending IGMP out of upstream interface'. But igmpproxy sends it only first two times when IGMP received on downstream interface. 17:54:59.158716 IP 192.168.254.1 239.142.1.1: igmp v2 report 239.142.1.1 17:55:59.057693 IP 192.168.254.1 239.142.1.1: igmp v2 report 239.142.1.1 Then further igmp reports for this group received on downstream interface are not send out of upstream... Though igmpproxy sees them. Will investigate further. Eugene. Ok. This part is done. IGMP is being sent from downstream to upstream interface. Now another problem. When I generate multicast traffic (with destination IP 239.142.1.1) on WAN this traffic does not go to downstream interface (LAN). Has this package ever worked on Linux (as I undrestand it was initially written on Linux)? http://forum.pfsense.org/index.php/topic,13312.15.html Eugene. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org -- Ermal - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
RE: [pfSense Support] IGMP packet out of WAN
From: Ermal Luçi [mailto:ermal.l...@gmail.com] Sent: July 25, 2009 11:20 AM On Fri, Jul 24, 2009 at 6:19 PM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 23, 2009 5:59 PM From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 23, 2009 12:07 PM From: cbuech...@gmail.com [mailto:cbuech...@gmail.com] On Sent: July 23, 2009 11:32 AM On Thu, Jul 23, 2009 at 11:29 AM, Chris Buechlerc...@pfsense.org wrote: On Thu, Jul 23, 2009 at 10:02 AM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: Thanks for quick report Chris. I am completely new to this stuff please bear with me. Trying to accoomplish 'Clone the tools repo at rcs.pfsense.org' I came to conclusion I need git installed on my pfSense-dev system. Reading several documents I tried the following procedure: echo WITHOUT_X11=yo /etc/make.conf portsnap fetch extract - Success cd /usr/ports/devel/git make BATCH=yo make install BATCH=yo make clean - Failure after the next: No idea. Try to pkg_add -r git, or you may have to clone it on another system and copy over the port. or fetch http://cvs.pfsense.org/~cmb/igmpproxy-port.tgz - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org # pkg_add -r git Error: FTP Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.0-rele ase/Latest/git.tbz: File unavailable (e.g., file not found, no access) pkg_add: unable to fetch 'ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.0-rel ease/Latest/git.tbz' by URL Fetch from http worked, thank you. Eugene Ok, I managed to fix 'not sending IGMP out of upstream interface'. But igmpproxy sends it only first two times when IGMP received on downstream interface. 17:54:59.158716 IP 192.168.254.1 239.142.1.1: igmp v2 report 239.142.1.1 17:55:59.057693 IP 192.168.254.1 239.142.1.1: igmp v2 report 239.142.1.1 Then further igmp reports for this group received on downstream interface are not send out of upstream... Though igmpproxy sees them. Will investigate further. Eugene. Ok. This part is done. IGMP is being sent from downstream to upstream interface. Now another problem. When I generate multicast traffic (with destination IP 239.142.1.1) on WAN this traffic does not go to downstream interface (LAN). Has this package ever worked on Linux (as I undrestand it was initially written on Linux)? http://forum.pfsense.org/index.php/topic,13312.15.html Eugene. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org -- Ermal I do not believe the guy who reported igmpproxy works on forum says truth as there are several more people for whom it does not work. Moreover he proposed to configure rulese for outgoing from interface traffc which does not make sense for me. Eugene. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
RE: [pfSense Support] IGMP packet out of WAN
From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 25, 2009 3:49 PM From: Ermal Luçi [mailto:ermal.l...@gmail.com] Sent: July 25, 2009 11:20 AM On Fri, Jul 24, 2009 at 6:19 PM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 23, 2009 5:59 PM From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 23, 2009 12:07 PM From: cbuech...@gmail.com [mailto:cbuech...@gmail.com] On Sent: July 23, 2009 11:32 AM On Thu, Jul 23, 2009 at 11:29 AM, Chris Buechlerc...@pfsense.org wrote: On Thu, Jul 23, 2009 at 10:02 AM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: Thanks for quick report Chris. I am completely new to this stuff please bear with me. Trying to accoomplish 'Clone the tools repo at rcs.pfsense.org' I came to conclusion I need git installed on my pfSense-dev system. Reading several documents I tried the following procedure: echo WITHOUT_X11=yo /etc/make.conf portsnap fetch extract - Success cd /usr/ports/devel/git make BATCH=yo make install BATCH=yo make clean - Failure after the next: No idea. Try to pkg_add -r git, or you may have to clone it on another system and copy over the port. or fetch http://cvs.pfsense.org/~cmb/igmpproxy-port.tgz - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org # pkg_add -r git Error: FTP Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.0-rele ase/Latest/git.tbz: File unavailable (e.g., file not found, no access) pkg_add: unable to fetch 'ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.0-rel ease/Latest/git.tbz' by URL Fetch from http worked, thank you. Eugene Ok, I managed to fix 'not sending IGMP out of upstream interface'. But igmpproxy sends it only first two times when IGMP received on downstream interface. 17:54:59.158716 IP 192.168.254.1 239.142.1.1: igmp v2 report 239.142.1.1 17:55:59.057693 IP 192.168.254.1 239.142.1.1: igmp v2 report 239.142.1.1 Then further igmp reports for this group received on downstream interface are not send out of upstream... Though igmpproxy sees them. Will investigate further. Eugene. Ok. This part is done. IGMP is being sent from downstream to upstream interface. Now another problem. When I generate multicast traffic (with destination IP 239.142.1.1) on WAN this traffic does not go to downstream interface (LAN). Has this package ever worked on Linux (as I undrestand it was initially written on Linux)? http://forum.pfsense.org/index.php/topic,13312.15.html Eugene. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org -- Ermal I do not believe the guy who reported igmpproxy works on forum says truth as there are several more people for whom it does not work. Moreover he proposed to configure rulese for outgoing from interface traffc which does not make sense for me. Eugene. What I am trying to understand here is how should it work? 'IGMP proxy' means that it should proxy IGMP-packets. Ok, now I got it working with some modification of its code. Now IGMP from downstream interface is proxied to upstream interface. Device on upstream interface start multicasting on this network segmen, so pfSense starts receiving multicast stream on upstream interface. Now the question, what should happen with these multicast packets? 1) kernel shoud route them to downstream interface. 2) igmpproxy should be receiving them and transmitting on downstream interface. Your thoughts please? Eugene. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
[pfSense Support] OT: web based performance testing
Looking for something, preferably open source but commercial is an option, sort of like a host your own private speed test site. The idea is when someone connects in via VPN they can easily hit a URL on a server across the VPN and click a button to test throughput, latency, and loss. The average end user is not highly technical, so something like download this 50 MB test file and ping x.x.x.x isn't viable. I figure someone out there has done something similar in the past. Granted there isn't anything you can do about poor connectivity other than find a different Internet connection, but at least it's a way to tell. Any ideas much appreciated. Thanks, Chris - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] OT: web based performance testing
On Sat, Jul 25, 2009 at 4:26 PM, Chris Buechlerc...@pfsense.org wrote: Looking for something, preferably open source but commercial is an option, sort of like a host your own private speed test site. The idea is when someone connects in via VPN they can easily hit a URL on a server across the VPN and click a button to test throughput, latency, and loss. The average end user is not highly technical, so something like download this 50 MB test file and ping x.x.x.x isn't viable. I figure someone out there has done something similar in the past. Granted there isn't anything you can do about poor connectivity other than find a different Internet connection, but at least it's a way to tell. Any ideas much appreciated. http://www.speedtest.net/mini.php Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] OT: web based performance testing
On Sat, Jul 25, 2009 at 4:29 PM, Scott Ullrichsullr...@gmail.com wrote: On Sat, Jul 25, 2009 at 4:26 PM, Chris Buechlerc...@pfsense.org wrote: Looking for something, preferably open source but commercial is an option, sort of like a host your own private speed test site. The idea is when someone connects in via VPN they can easily hit a URL on a server across the VPN and click a button to test throughput, latency, and loss. The average end user is not highly technical, so something like download this 50 MB test file and ping x.x.x.x isn't viable. I figure someone out there has done something similar in the past. Granted there isn't anything you can do about poor connectivity other than find a different Internet connection, but at least it's a way to tell. Any ideas much appreciated. http://www.speedtest.net/mini.php Saw that, doesn't have latency or loss though. That's the piece that's missing from all the options I've seen. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] OT: web based performance testing
On Sat, Jul 25, 2009 at 4:31 PM, Chris Buechlerc...@pfsense.org wrote: Saw that, doesn't have latency or loss though. That's the piece that's missing from all the options I've seen. Maybe this will fit the bill. Kinda expensive. http://www.ookla.com/linequality.php Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] OT: web based performance testing
I have been wanting to make an app like iperf available through a web page...not sure how that would work but i think it would be cool. Curtis LaMasters http://www.curtis-lamasters.com http://www.builtnetworks.com On Sat, Jul 25, 2009 at 3:32 PM, Scott Ullrichsullr...@gmail.com wrote: On Sat, Jul 25, 2009 at 4:31 PM, Chris Buechlerc...@pfsense.org wrote: Saw that, doesn't have latency or loss though. That's the piece that's missing from all the options I've seen. Maybe this will fit the bill. Kinda expensive. http://www.ookla.com/linequality.php Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] IGMP packet out of WAN
On Sat, Jul 25, 2009 at 9:55 PM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 25, 2009 3:49 PM From: Ermal Luçi [mailto:ermal.l...@gmail.com] Sent: July 25, 2009 11:20 AM On Fri, Jul 24, 2009 at 6:19 PM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 23, 2009 5:59 PM From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 23, 2009 12:07 PM From: cbuech...@gmail.com [mailto:cbuech...@gmail.com] On Sent: July 23, 2009 11:32 AM On Thu, Jul 23, 2009 at 11:29 AM, Chris Buechlerc...@pfsense.org wrote: On Thu, Jul 23, 2009 at 10:02 AM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: Thanks for quick report Chris. I am completely new to this stuff please bear with me. Trying to accoomplish 'Clone the tools repo at rcs.pfsense.org' I came to conclusion I need git installed on my pfSense-dev system. Reading several documents I tried the following procedure: echo WITHOUT_X11=yo /etc/make.conf portsnap fetch extract - Success cd /usr/ports/devel/git make BATCH=yo make install BATCH=yo make clean - Failure after the next: No idea. Try to pkg_add -r git, or you may have to clone it on another system and copy over the port. or fetch http://cvs.pfsense.org/~cmb/igmpproxy-port.tgz - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org # pkg_add -r git Error: FTP Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.0-rele ase/Latest/git.tbz: File unavailable (e.g., file not found, no access) pkg_add: unable to fetch 'ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.0-rel ease/Latest/git.tbz' by URL Fetch from http worked, thank you. Eugene Ok, I managed to fix 'not sending IGMP out of upstream interface'. But igmpproxy sends it only first two times when IGMP received on downstream interface. 17:54:59.158716 IP 192.168.254.1 239.142.1.1: igmp v2 report 239.142.1.1 17:55:59.057693 IP 192.168.254.1 239.142.1.1: igmp v2 report 239.142.1.1 Then further igmp reports for this group received on downstream interface are not send out of upstream... Though igmpproxy sees them. Will investigate further. Eugene. Ok. This part is done. IGMP is being sent from downstream to upstream interface. Now another problem. When I generate multicast traffic (with destination IP 239.142.1.1) on WAN this traffic does not go to downstream interface (LAN). Has this package ever worked on Linux (as I undrestand it was initially written on Linux)? http://forum.pfsense.org/index.php/topic,13312.15.html Eugene. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org -- Ermal I do not believe the guy who reported igmpproxy works on forum says truth as there are several more people for whom it does not work. Moreover he proposed to configure rulese for outgoing from interface traffc which does not make sense for me. Eugene. What I am trying to understand here is how should it work? 'IGMP proxy' means that it should proxy IGMP-packets. Ok, now I got it working with some modification of its code. Now IGMP from downstream interface is proxied to upstream interface. Device on upstream interface start multicasting on this network segmen, so pfSense starts receiving multicast stream on upstream interface. Now the question, what should happen with these multicast packets? 1) kernel shoud route them to downstream interface. 2) igmpproxy should be receiving them and transmitting on downstream interface. Your thoughts please? Yeah kernel should do the routing. I think there might be a sysctl for alloing multicast forwarding to work but that should be activated when you create the socket(to be verified!). I will give it a look soon and find the solution that feets all. Though on 2.0 based on 8.0 freebsd it works without as it is. Eugene. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org -- Ermal
RE: [pfSense Support] IGMP packet out of WAN
From: Ermal Luçi [mailto:ermal.l...@gmail.com] Sent: July 25, 2009 5:30 PM On Sat, Jul 25, 2009 at 9:55 PM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 25, 2009 3:49 PM From: Ermal Luçi [mailto:ermal.l...@gmail.com] Sent: July 25, 2009 11:20 AM On Fri, Jul 24, 2009 at 6:19 PM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 23, 2009 5:59 PM From: Evgeny Yurchenko [mailto:evgeny.yurche...@frontline.ca] Sent: July 23, 2009 12:07 PM From: cbuech...@gmail.com [mailto:cbuech...@gmail.com] On Sent: July 23, 2009 11:32 AM On Thu, Jul 23, 2009 at 11:29 AM, Chris Buechlerc...@pfsense.org wrote: On Thu, Jul 23, 2009 at 10:02 AM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: Thanks for quick report Chris. I am completely new to this stuff please bear with me. Trying to accoomplish 'Clone the tools repo at rcs.pfsense.org' I came to conclusion I need git installed on my pfSense-dev system. Reading several documents I tried the following procedure: echo WITHOUT_X11=yo /etc/make.conf portsnap fetch extract - Success cd /usr/ports/devel/git make BATCH=yo make install BATCH=yo make clean - Failure after the next: No idea. Try to pkg_add -r git, or you may have to clone it on another system and copy over the port. or fetch http://cvs.pfsense.org/~cmb/igmpproxy-port.tgz - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org # pkg_add -r git Error: FTP Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.0-rele ase/Latest/git.tbz: File unavailable (e.g., file not found, no access) pkg_add: unable to fetch 'ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.0-rel ease/Latest/git.tbz' by URL Fetch from http worked, thank you. Eugene Ok, I managed to fix 'not sending IGMP out of upstream interface'. But igmpproxy sends it only first two times when IGMP received on downstream interface. 17:54:59.158716 IP 192.168.254.1 239.142.1.1: igmp v2 report 239.142.1.1 17:55:59.057693 IP 192.168.254.1 239.142.1.1: igmp v2 report 239.142.1.1 Then further igmp reports for this group received on downstream interface are not send out of upstream... Though igmpproxy sees them. Will investigate further. Eugene. Ok. This part is done. IGMP is being sent from downstream to upstream interface. Now another problem. When I generate multicast traffic (with destination IP 239.142.1.1) on WAN this traffic does not go to downstream interface (LAN). Has this package ever worked on Linux (as I undrestand it was initially written on Linux)? http://forum.pfsense.org/index.php/topic,13312.15.html Eugene. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org -- Ermal I do not believe the guy who reported igmpproxy works on forum says truth as there are several more people for whom it does not work. Moreover he proposed to configure rulese for outgoing from interface traffc which does not make sense for me. Eugene. What I am trying to understand here is how should it work? 'IGMP proxy' means that it should proxy IGMP-packets. Ok, now I got it working with some modification of its code. Now IGMP from downstream interface is proxied to upstream interface. Device on upstream interface start multicasting on this network segmen, so pfSense starts receiving multicast stream on upstream interface. Now the question, what should happen with these multicast packets? 1) kernel shoud route them to downstream interface. 2) igmpproxy should be receiving them and transmitting on downstream interface. Your thoughts please? Yeah kernel should do the routing. I think there might be a sysctl for alloing multicast forwarding to work but that should be activated when you create the socket(to be verified!). I will give it a look soon and find the solution that feets all. Though on 2.0 based on 8.0 freebsd it works without as it is. Eugene.
Re: [pfSense Support] IGMP packet out of WAN
On Sun, Jul 26, 2009 at 12:42 AM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: Can somebody please say whether pfSense's kernel was compiled with MROUTING option or not? [pfsense-org:tools/builder_scripts/conf] sullrich% pwd /Users/sullrich/pfSense_GIT/tools/builder_scripts/conf [pfsense-org:tools/builder_scripts/conf] sullrich% cat pfSense.7 | grep MROUT options MROUTING Yes, it includes it. Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
