Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Bill Marquette
On 9/24/05, Mojo Jojo <[EMAIL PROTECTED]> wrote: > Not sure what you mean by "only gracefully handles home networks".. It was designed with the 80/20 rule...the vast majority of our users have an WAN and a LAN and that's it. > My setup is using the OPT1 inteface bridged to the WAN interface, I ha

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Bill Marquette
On 9/24/05, Mojo Jojo <[EMAIL PROTECTED]> wrote: > Nope, 0.84.. Sorry, thought I mentioned that several times. Maybe not.. > > Any way I can get my old file back? Copy this file into /usr/local/www/wizards http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/pfSense/usr/local/www/wizards/traffic_shaper_wizar

Re: [pfSense-discussion] Benefits of a hard disk install?

2005-09-24 Thread Vinc Duran
I installed once with the WRAP install and once with the hard drive install. I'm not super familar with the software yet but I think in the WRAP install there was no way to add applications. I hope to use squid and I'm reading about some of the other apps. In the hard disk version it was straight f

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Mojo Jojo
Not sure what you mean by "only gracefully handles home networks".. My setup is using the OPT1 inteface bridged to the WAN interface, I have nothing on the LAN interface and I don't want to use NAT for my Asterisk server because that causes other issues with SIP. So, I guess then that the onl

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Mojo Jojo
Nope, 0.84.. Sorry, thought I mentioned that several times. Maybe not.. Any way I can get my old file back? I am not ready to update to 0.85 yet because I am still trying to prove out some issues with hardware on 0.84 and I don't want to change the software the same time I am changing the hard

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Bill Marquette
Nope, at this time the wizard only gracefully handles home networks. I ripped out that functionality a while back cause it was causing problems - I now have a workaround and need to rewrite it. I'd expect it to take a couple weeks and probably won't be in place for the 1.0 release as we're really

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Bill Marquette
Hmmm, I can't duplicate that error. Is this the PC or wrap version? You are running 0.85 (or 0.85.2) right (taht function was introduced in 0.85)? --Bill On 9/24/05, Mojo Jojo <[EMAIL PROTECTED]> wrote: > This seems to have done some bad stuff to my install. > > Fatal error: Call to undefined f

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Mojo Jojo
The errors that were scrolling across my screen went away after I clicked on them. I don't see them in the logs or anywhere else, so not sure what they were. Todd - Original Message - From: "Mojo Jojo" <[EMAIL PROTECTED]> To: Sent: Saturday, September 24, 2005 9:36 PM Subject: Re: [

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Mojo Jojo
Sorry, my question was not asked correctly.. Should have been: Since my Asterisk server is on not on the LAN interface and is on the OPT 1 (DMZ) interface with the rest of my servers, will I really benefit from the traffic shaping that will be setup by this wizard? - Original Message ---

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Mojo Jojo
Also, I was looking through this file /usr/local/www/wizards/traffic_shaper_wizard.xml... When looking at the VOIP section I see a section that mentions the source WAN and LAN but no mention of OPT 1 or any of the other optional interfaces. So, my question is this.. Since my Asterisk server

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Mojo Jojo
This seems to have done some bad stuff to my install. Fatal error: Call to undefined function: is_altq_capable() in /usr/local/www/wizard.php(140) : eval()'d code on line 1 is all I get when I click on the wizard. I also have some errors scrolling across the top of the GUI, some about my rul

[pfSense-discussion] Benefits of a hard disk install?

2005-09-24 Thread Mojo Jojo
I just bought a WRAP for testing and I am waiting for it to arrive. Can someone tell me the benefits of having a hard drive install inside a beefier PC over a slimmed down install in a WRAP type device? I initially thought a hard drive install would be better because I thought I would get al

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Mojo Jojo
Cool, thanks.. You guys rock! --Todd - Original Message - From: "Bill Marquette" <[EMAIL PROTECTED]> To: Sent: Saturday, September 24, 2005 6:58 PM Subject: Re: [pfSense-discussion] Traffic Shaper On 9/24/05, Mojo Jojo <[EMAIL PROTECTED]> wrote: Sorry Scott, I don't follow.. Are y

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Bill Marquette
On 9/24/05, Mojo Jojo <[EMAIL PROTECTED]> wrote: > Sorry Scott, I don't follow.. > > Are you saying this will download a file that you tweaked and basically > update my PfSense install? > > Once I do this the ports I mentioned will be added to the wizard including > the IAX and IAX2 ports? yes and

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Mojo Jojo
Sorry Scott, I don't follow.. Are you saying this will download a file that you tweaked and basically update my PfSense install? Once I do this the ports I mentioned will be added to the wizard including the IAX and IAX2 ports? Thanks for the clarification. --Todd - Original Message -

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Scott Ullrich
update_file.sh /usr/local/www/wizards/traffic_shaper_wizard.xml Rerun the traffic shaper, pick Asterisk, set the bandwidth to 1.5 megabit. Then that is added. Scott On 9/24/05, Mojo Jojo <[EMAIL PROTECTED]> wrote: > Thanks but what about this part :) > > > 1- Is there any reasonably easy way f

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Mojo Jojo
Thanks but what about this part :) 1- Is there any reasonably easy way for me to add the IAX (5036) and IAX2 (4569) ports to the prioritization after I run the wizard? - Original Message - From: "Bill Marquette" <[EMAIL PROTECTED]> To: Sent: Saturday, September 24, 2005 6:14 PM Sub

Re: [pfSense-discussion] NTOP bug

2005-09-24 Thread Beau Gunderson
hey scott, sorry! i lied; it's actually -i , (comma-seperated) ntop loads with the one i tried but only uses the last interface.. d'oh! beau. Scott Ullrich wrote: Thanks, this is fixed now! Scott On 9/24/05, Beau Gunderson <[EMAIL PROTECTED]> wrote: if you select two interfaces in t

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Bill Marquette
On 9/24/05, Mojo Jojo <[EMAIL PROTECTED]> wrote: > > Also, I assume the wizard only prioritizes the SIP port? Does it > > prioritize > > any other ports like the IAX ports, RTP and so on? > >> > >>The asterisk setting prioritizes > >>UDP 5060-5069 > >>and > >>UDP 1-17226 (no idea why - SIP mayb

Re: [pfSense-discussion] NTOP bug

2005-09-24 Thread Scott Ullrich
Thanks, this is fixed now! Scott On 9/24/05, Beau Gunderson <[EMAIL PROTECTED]> wrote: > if you select two interfaces in the pfsense ntop GUI (say LAN and WAN) > and submit it will change /usr/local/etc/rc.d/ntop.sh to use a command > line of the format: > > -i > > ntop will error out with thi

[pfSense-discussion] NTOP bug

2005-09-24 Thread Beau Gunderson
if you select two interfaces in the pfsense ntop GUI (say LAN and WAN) and submit it will change /usr/local/etc/rc.d/ntop.sh to use a command line of the format: -i ntop will error out with this config, it should be of the format: -i -i i changed ntop.sh myself to get it working but this

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Mojo Jojo
Also, I assume the wizard only prioritizes the SIP port? Does it prioritize any other ports like the IAX ports, RTP and so on? The asterisk setting prioritizes UDP 5060-5069 and UDP 1-17226 (no idea why - SIP maybe?) This may help: http://www.voip-info.org/tiki-index.php?page=Asterisk%20f

Re: [pfSense-discussion] block vs reject?

2005-09-24 Thread Chris Buechler
A Rossi wrote: I've narrowed it down to 2 possible sites: http://www.auditmypc.com/ and https://www.grc.com/x/ne.dll?bh0bkyd2 neither gave me anything out of the ordinary behind m0n0wall or pfsense. first one found my private IP address **GASP** Oh no!;) -cmb

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Bill Marquette
On 9/24/05, Mojo Jojo <[EMAIL PROTECTED]> wrote: > OK, since I have most of PfSense setup the way I want, I am now ready to > dive into traffic shaping. > > Traffic shaping is a big reason we went with PFSense. > > We have a softswitch (Asterisk) on site behind our PfSense box. > > We are looking t

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Scott Ullrich
On 9/24/05, Mojo Jojo <[EMAIL PROTECTED]> wrote: [snip] > Currently if our bandwidth on our T1 gets soaked 1.55 mb or so, our calls go > to crap. > [snip] > I noticed if I tweaked the "Bandwidth:" setting under "VOIP specific > settings" from the default of 32k to 96k, my call was fine. Seems that

[pfSense-discussion] Traffic Shaper

2005-09-24 Thread Mojo Jojo
OK, since I have most of PfSense setup the way I want, I am now ready to dive into traffic shaping. Traffic shaping is a big reason we went with PFSense. We have a softswitch (Asterisk) on site behind our PfSense box. We are looking to do some QOS (traffic shaping) for our VOIP in and out of

Re: [pfSense-discussion] What about a Ramdisk?

2005-09-24 Thread Tommaso Di Donato
On 9/24/05, sai <[EMAIL PROTECTED]> wrote: On a more fundemental level, I would question having a virus scanneron the same machine as the firewall. Shouldn't you have antivirus ,anti spam  etc on separate machines from your main firewall? You get asingle point of failure with increased possibiliite

Re: [pfSense-discussion] What about a Ramdisk?

2005-09-24 Thread sai
> I totally agree with Chris. in my personal experience, viruses enter the > lan mainly through web traffic and emails. So, I ma trying to develop an > appliance that could filter this kind of traffic directly on the gateway! > Using squid, you should be able to stop viruses (in downloaded files,