Re: [pfSense Support] Wake On LAN - Now Works on 1.2.3 Embedded!

2009-12-12 Thread Chris Weakland
Here is my expierence with wake on lan. The bios and the operating
system have to be configured to put the nic into the proper state upon
shutdown sucht hat can be awaken by a wol packet.  In windows u need
to modify the nic in device manager and enable this feature. If the pc
looses total power, ie. the power plug pulled from the source and then
re-pluged in, wol may not function.

Chris

On Dec 12, 2009, at 1:21 AM, Tortise tort...@paradise.net.nz wrote:

 - Original Message - From: Chris Buechler cbuech...@gmail.com
 
 To: support@pfsense.com
 Sent: Tuesday, December 01, 2009 8:57 PM
 Subject: Re: [pfSense Support] Wake On LAN


 On Tue, Dec 1, 2009 at 2:53 AM, Tortise tort...@paradise.net.nz
 wrote:
 Somehow I cannot get magic packets to awaken any PC on a pfSense
 LAN. I
 don't get it.

 Some motherboard BIOS seem to have WOL and others don't. Even the
 ones I
 have that are said to have it cannot be awoken as best I can tell!
 I have
 tried an Intel GT1000 with WOL functionality. I can get Boot on LAN
 to work
 OK, WOL seems a mystery!

 It is not clear to me the state that a PC to be awoken in is, I
 expected
 that the ATX power supplies would allow the PC to awaken when the
 right
 packets are sent however I am wondering if what is needed is a PC
 in a
 suspended state - or something else?


 Just need a WOL-enabled NIC, and to have WOL turned on in the BIOS. If
 you have an onboard NIC, it should be as simple as enabling it in the
 BIOS. As long as the machine is plugged in, it'll wake. With add-in
 NICs you need a WOL cable from the NIC to the motherboard, that can
 complicate things.

 -

 Well I had already done all that and it still didn't work, that
 was using 1.2.3 RC1 embedded.  (3 NIC's, one WAN, two LAN)  I now
 wish I had set up a sniffer to see if magic packets were actually
 going out

 I just upgraded to 1.2.3 and thought I'd fire off a few magic
 packets for funand just as well I was sitting on my chair, the
 other PC's had fired into life!

 Only thing that had really changed was the pfSense version!  (That
 means the motherboard BIOS was already enabled for each on board NIC
 on the couple of Pentium 3000 class boxes I had tried)

 Curious that I couldn't find any updates about this, anyway others
 might find it works now?

 Thank you for the posters on this topic, it seems it may have proved
 a useful thread for some...

 In addition to what Chris said above I understand that some NIC's do
 not need an additional WOL cable for WOL, e.g. Intel 1000GT which
 are WOL capable and have no cable connection!

 I hate having to get some more 512M plus CF cards but accept there
 are excellent reasons for this!

 Looking forward to checking out some more embedded stuff.

 I'd suggested the other half give me the pfsense book for Christmas
 in the hope I might learn some useful stuff about VLAN's etc, even
 if I don't learn anything I am pleased the other half is
 contributing to support pfSense!

 Happy Christmas all!

 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com

 Commercial support available - https://portal.pfsense.org


-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Wake On LAN - Now Works on 1.2.3 Embedded!

2009-12-12 Thread Chris Weakland
Also if ur nic is a pci or pcie nic the wol cable must be connected to
the motherboard header for it to work with wol.

Chris

On Dec 12, 2009, at 1:21 AM, Tortise tort...@paradise.net.nz wrote:

 - Original Message - From: Chris Buechler cbuech...@gmail.com
 
 To: support@pfsense.com
 Sent: Tuesday, December 01, 2009 8:57 PM
 Subject: Re: [pfSense Support] Wake On LAN


 On Tue, Dec 1, 2009 at 2:53 AM, Tortise tort...@paradise.net.nz
 wrote:
 Somehow I cannot get magic packets to awaken any PC on a pfSense
 LAN. I
 don't get it.

 Some motherboard BIOS seem to have WOL and others don't. Even the
 ones I
 have that are said to have it cannot be awoken as best I can tell!
 I have
 tried an Intel GT1000 with WOL functionality. I can get Boot on LAN
 to work
 OK, WOL seems a mystery!

 It is not clear to me the state that a PC to be awoken in is, I
 expected
 that the ATX power supplies would allow the PC to awaken when the
 right
 packets are sent however I am wondering if what is needed is a PC
 in a
 suspended state - or something else?


 Just need a WOL-enabled NIC, and to have WOL turned on in the BIOS. If
 you have an onboard NIC, it should be as simple as enabling it in the
 BIOS. As long as the machine is plugged in, it'll wake. With add-in
 NICs you need a WOL cable from the NIC to the motherboard, that can
 complicate things.

 -

 Well I had already done all that and it still didn't work, that
 was using 1.2.3 RC1 embedded.  (3 NIC's, one WAN, two LAN)  I now
 wish I had set up a sniffer to see if magic packets were actually
 going out

 I just upgraded to 1.2.3 and thought I'd fire off a few magic
 packets for funand just as well I was sitting on my chair, the
 other PC's had fired into life!

 Only thing that had really changed was the pfSense version!  (That
 means the motherboard BIOS was already enabled for each on board NIC
 on the couple of Pentium 3000 class boxes I had tried)

 Curious that I couldn't find any updates about this, anyway others
 might find it works now?

 Thank you for the posters on this topic, it seems it may have proved
 a useful thread for some...

 In addition to what Chris said above I understand that some NIC's do
 not need an additional WOL cable for WOL, e.g. Intel 1000GT which
 are WOL capable and have no cable connection!

 I hate having to get some more 512M plus CF cards but accept there
 are excellent reasons for this!

 Looking forward to checking out some more embedded stuff.

 I'd suggested the other half give me the pfsense book for Christmas
 in the hope I might learn some useful stuff about VLAN's etc, even
 if I don't learn anything I am pleased the other half is
 contributing to support pfSense!

 Happy Christmas all!

 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com

 Commercial support available - https://portal.pfsense.org


-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] RC3 to RELEASE - Verify

2009-12-12 Thread Nenhum_de_Nos
On Fri, 11 Dec 2009 19:41:32 +0100
Seth Mos seth@xs4all.nl wrote:

 Chris Buechler schreef:
  On Fri, Dec 11, 2009 at 11:27 AM, Eugen Leitl eu...@leitl.org wrote:
  On Fri, Dec 11, 2009 at 09:31:38AM -0600, J.D. Bronson wrote:
  I just did the upgrade via the web GUI..
  it went down w/o a hitch...
  Same thing here. One thing that was a potential problem
  in the past was https.
  
  Shouldn't be a problem anymore, I upgraded several HTTPS systems.
 
 Worked fine for me since forever really.
 
 And that's a really long way back. Only one I know of, and was fixed 
 recently, was upgrading to a 2.0 snapshot.
 
 Regards,
 
 Seth

I couldn't upgrade from webui from 1.2.3-RC1 to Release. Just got it when I 
downloaded the full update and did uploading the tgz.

matheus

-- 
We will call you cygnus,
The God of balance you shall be

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

http://en.wikipedia.org/wiki/Posting_style

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] OpenBGPD status page

2009-12-12 Thread Scott Ullrich
On Fri, Dec 11, 2009 at 7:26 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote:
 I know it is cosmetic but it is easy to fix, please do it.

 1) Status has two OpenBGPD Routing sections, one of them should be renamed
 to Forwarding as it shows fib not rib.
 2) OpenBGPD IP section returns error

 missing argument:
 valid commands/args:
  bgp

 it happens because not there is not bgpctl show ip command, we have to use
 bgpctl show ip bgp
 
 Fix for both issues:
 --- openbgpd_status.php.20091211.bak    2009-12-10 11:26:10.0 -0500
 +++ openbgpd_status.php 2009-12-11 19:20:28.83700 -0500
 @@ -140,10 +140,10 @@
 defCmdT(OpenBGPD Summary,bgpctl show summary); defCmdT(OpenBGPD
 Interfaces,bgpctl show interfaces); defCmdT(OpenBGPD Routing,bgpctl
 show rib); -defCmdT(OpenBGPD Routing,bgpctl show fib);
 +defCmdT(OpenBGPD Forwarding,bgpctl show fib); defCmdT(OpenBGPD
 Network,bgpctl show network); defCmdT(OpenBGPD Nexthops,bgpctl show
 nexthop); -defCmdT(OpenBGPD IP,bgpctl show ip); +defCmdT(OpenBGPD
 IP,bgpctl show ip bgp); defCmdT(OpenBGPD Neighbors,bgpctl show
 neighbor);
 ?

Thanks, all of the submissions have been committed.

Scott

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



[pfSense Support] syslog on 1.2.3

2009-12-12 Thread J.D. Bronson
I noticed this when I 1st started using pfSense at 1.2.3-RC, so I am not 
sure if its a new issue or not.


Using the web interface:
Status...then system logs then system..and then press CLEAR LOG

clears the screen but nothing is ever there when I log back in again 
later on. As long as you dont clear that log, it will continue to add

and work fine...but

Its like it ran 'newsyslog' but never kicked syslogd or something.

After I press CLEAR LOG, this is what I see:

Dec 12 15:42:15 syslogd: kernel boot file is /boot/kernel/kernel

and then nothing more...


--
J.D. Bronson
Information Technology
Aurora Health Care - Milwaukee WI
Office: 414.978.8282 // Fax: 414.978.3988

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] syslog on 1.2.3

2009-12-12 Thread Chris Buechler
On Sat, Dec 12, 2009 at 4:44 PM, J.D. Bronson jd_bron...@sbcglobal.net wrote:
 I noticed this when I 1st started using pfSense at 1.2.3-RC, so I am not
 sure if its a new issue or not.

 Using the web interface:
 Status...then system logs then system..and then press CLEAR LOG

 clears the screen but nothing is ever there when I log back in again later
 on. As long as you dont clear that log, it will continue to add
 and work fine...but

 Its like it ran 'newsyslog' but never kicked syslogd or something.

 After I press CLEAR LOG, this is what I see:

 Dec 12 15:42:15         syslogd: kernel boot file is /boot/kernel/kernel

 and then nothing more...


You sure there is something that should be logging there that shortly
after? Depending on what you're running, there isn't much that logs to
system log once the system is up and running. The syslogd message is
what is logged after syslog is restarted. After clearing log, and
restarting Snort which generates a bunch of logs there, mine
immediately show up.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] syslog on 1.2.3

2009-12-12 Thread J.D. Bronson


well my ISP DHCP lease is only 10mins, even though it never has changed 
in 2yrs...


and as such, there is 'noise' on the system log indicating the renew
every 10mins...piles of them.

Once I clear the system log, I never see these again..



--
J.D. Bronson
Information Technology
Aurora Health Care - Milwaukee WI
Office: 414.978.8282 // Fax: 414.978.3988

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] syslog on 1.2.3

2009-12-12 Thread Chris Buechler
On Sat, Dec 12, 2009 at 6:40 PM, J.D. Bronson jd_bron...@sbcglobal.net wrote:

 well my ISP DHCP lease is only 10mins, even though it never has changed in
 2yrs...

 and as such, there is 'noise' on the system log indicating the renew
 every 10mins...piles of them.

 Once I clear the system log, I never see these again..


I just tried 3 different boxes and they all continue to log just fine.
Including when kicking off dhclient. Try to edit and save a firewall
rule and apply changes, that will log the filter reload.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] syslog on 1.2.3

2009-12-12 Thread J.D. Bronson

On 12/12/09 6:09 PM, Chris Buechler wrote:

I just tried 3 different boxes and they all continue to log just fine.
Including when kicking off dhclient. Try to edit and save a firewall
rule and apply changes, that will log the filter reload.


Ok at 18:14 I edited a rule..saved it and then applied the changes.

.and then see this in system log:

Dec 12 18:14:27 check_reload_status: reloading filter
Dec 12 17:35:12 syslogd: kernel boot file is /boot/kernel/kernel
Dec 12 17:35:12 syslogd: exiting on signal 15
Dec 12 17:33:46 sshd[6834]: Accepted publickey for XX
Dec 12 15:42:15 syslogd: kernel boot file is /boot/kernel/kernel


but nothing more. Not even the dhclient messages. My install is straight 
forward and I didnt edit/hack anything. What am I missing?


as long as I never clear the 'system-log' or firewall log - it logs 
everything it should and shows it accurately.


--
J.D. Bronson
Information Technology
Aurora Health Care - Milwaukee WI
Office: 414.978.8282 // Fax: 414.978.3988

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] syslog on 1.2.3

2009-12-12 Thread Chris Buechler
On Sat, Dec 12, 2009 at 7:19 PM, J.D. Bronson jd_bron...@sbcglobal.net wrote:
 On 12/12/09 6:09 PM, Chris Buechler wrote:

 I just tried 3 different boxes and they all continue to log just fine.
 Including when kicking off dhclient. Try to edit and save a firewall
 rule and apply changes, that will log the filter reload.

 Ok at 18:14 I edited a rule..saved it and then applied the changes.

 .and then see this in system log:

 Dec 12 18:14:27         check_reload_status: reloading filter
 Dec 12 17:35:12         syslogd: kernel boot file is /boot/kernel/kernel
 Dec 12 17:35:12         syslogd: exiting on signal 15
 Dec 12 17:33:46         sshd[6834]: Accepted publickey for XX
 Dec 12 15:42:15         syslogd: kernel boot file is /boot/kernel/kernel


 but nothing more. Not even the dhclient messages. My install is straight
 forward and I didnt edit/hack anything. What am I missing?


I suspect it's doing as intended, your DHCP lease may be longer than
you think, or than it previously was. Logging from dhclient is no
different than anything else that you are seeing logs from. Release
and renew from Status-Interfaces will force it to renew.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] syslog on 1.2.3

2009-12-12 Thread J.D. Bronson

On 12/12/09 6:21 PM, Chris Buechler wrote:

but nothing more. Not even the dhclient messages. My install is straight
  forward and I didnt edit/hack anything. What am I missing?


I suspect it's doing as intended, your DHCP lease may be longer than
you think, or than it previously was. Logging from dhclient is no
different than anything else that you are seeing logs from. Release
and renew from Status-Interfaces will force it to renew.


Its even shorter than I had thought:
  option dhcp-renewal-time 300;
  option dhcp-rebinding-time 525;
  renew 6 2009/12/12 23:47:46;
  rebind 6 2009/12/12 23:51:31;
  expire 6 2009/12/12 23:52:46;

5 mins.

Never logged in system once I clear it..but still logged in /var/db
as expected.

I cant believe this is a bug but its annoying that it stops logging once 
cleared and even more annoying its not duplicated in your tests.


I guess I give up...
I just need to stop clearing any logs and it will then keep displaying 
the last 50 events and thats ok I guess.







--
J.D. Bronson
Information Technology
Aurora Health Care - Milwaukee WI
Office: 414.978.8282 // Fax: 414.978.3988

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Captive Portal RADIUS authentication - Authentication error - Username and/or password invalid

2009-12-12 Thread Michael Vinocur
The external IP of the radius server has to be added to the radius servers 
client list or else it will reject authentication requests.

Mike 


From: Tancinco, Jon 
Sent: Wednesday, December 09, 2009 5:43 PM
To: support@pfsense.com 
Subject: RE: [pfSense Support] Captive Portal RADIUS authentication - 
Authentication error - Username and/or password invalid


Secret key works under m0n0wall and the same key is used in pfSense.  Not sure 
what you mean about the IP of the NAS.

 

Thanks for your help!

 

 

Jon

 

From: Michael Vinocur [mailto:michaelvino...@hotmail.com] 
Sent: Wednesday, December 09, 2009 2:28 PM
To: support@pfsense.com
Subject: Re: [pfSense Support] Captive Portal RADIUS authentication - 
Authentication error - Username and/or password invalid

 

Could be the secret key or check is you added the IP of the NAS.

 

Mike

 

From: Tancinco, Jon 

Sent: Wednesday, December 09, 2009 11:37 AM

To: support@pfsense.com 

Subject: [pfSense Support] Captive Portal RADIUS authentication - 
Authentication error - Username and/or password invalid

 

Same error on Versions 1.2.2 and 1.2.3


Using the pfSense Captive Portal. I am getting the Authentication error - 
Username and/or password invalid. message when trying to authenticate. The 
password is correctly submitted, but get the error everytime. RADIUS server 
reports incorrect password. Using m0n0wall, Captive Portal and RADIUS 
authentication works with no problems using the same username, password and 
RADIUS server.

Any help would be appreciated.

 

 

 

 

Jon

 


Re: [pfSense Support] potential pfsense hardware

2009-12-12 Thread Jeppe Øland
Just stumbled over this:
MSI Industrial WindBOXII
http://www.logicsupply.com/products/ms_9a25

Not cheap - but it's got everything in a nice pre-packaged box.

Regards,
-Jeppe

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org