Re: [pfSense-discussion] Considering Switching to Pfsense

2011-02-10 Thread Tim Dressel
The snort plugin has this functionality built in. Just enter your oink code and set how often you want it to update. On Thu, Feb 10, 2011 at 7:16 AM, Tony Zakula tonyzak...@gmail.com wrote: Yes, but I was just wondering if this is routing for say several hundred hosted sites, if it would be

RE: [pfSense-discussion] Considering Switching to Pfsense

2011-02-10 Thread Greg Hennessy
For hosted sites, I would suggest enablement on a site by site basis. A change control snafu/bad update could kill everything otherwise. From: Tim Dressel [mailto:tjdres...@gmail.com] Sent: 10 February 2011 3:29 PM To: discussion@pfsense.com Subject: Re: [pfSense-discussion] Considering

Re: [pfSense-discussion] Considering Switching to Pfsense

2011-02-10 Thread Tony Zakula
otherwise. From: Tim Dressel [mailto:tjdres...@gmail.com] Sent: 10 February 2011 3:29 PM To: discussion@pfsense.com Subject: Re: [pfSense-discussion] Considering Switching to Pfsense The snort plugin has this functionality built in. Just enter your oink code and set how often you want

RE: [pfSense-discussion] Considering Switching to Pfsense

2011-02-10 Thread Greg Hennessy
then be applied at the most appropriate level. -Original Message- From: Tony Zakula [mailto:tonyzak...@gmail.com] Sent: 10 February 2011 3:36 PM To: discussion@pfsense.com Subject: Re: [pfSense-discussion] Considering Switching to Pfsense Wow! Cool. So the IDS is built

Re: [pfSense-discussion] Considering Switching to Pfsense

2011-02-10 Thread Tony Zakula
at the most appropriate level. -Original Message- From: Tony Zakula [mailto:tonyzak...@gmail.com] Sent: 10 February 2011 3:36 PM To: discussion@pfsense.com Subject: Re: [pfSense-discussion] Considering Switching to Pfsense Wow!  Cool.  So the IDS is built in. Greg, are you saying you can

Re: [pfSense-discussion] Considering Switching to Pfsense

2011-02-09 Thread jason whitt
I dont see any reason why PF wouldnt fit your bill. The hardware may be slightly overkill, but so what. What are you going to do pull that aging pIII server out of the closet dust it off and fire it up? On Wed, Feb 9, 2011 at 3:41 PM, Tony Zakula tonyzak...@gmail.com wrote: Hi, I have been

Re: [pfSense-discussion] Considering Switching to Pfsense

2011-02-09 Thread Chris Buechler
On Wed, Feb 9, 2011 at 5:41 PM, Tony Zakula tonyzak...@gmail.com wrote: We have a 5mb line, is a quad core processor with 4gb of ram overkill? Way, way overkill, that's closer suited to a 5 Gb connection than 5 Mb. Not that that's a problem, you can get by with a whole lot less hardware if

Re: [pfSense-discussion] Considering Switching to Pfsense

2011-02-09 Thread Tim Dressel
Hi Tony, I have a /24 public subnet for a school district running behind an old pail of proliant dual CPU (single core) opteron box, 2GB ram each. It is ridiculous overkill with my 100Mbit pipe and ~10,000 simultaneous sessions. I used to run squid on it, but moved that elsewhere as it made it

RE: [pfSense-discussion] Considering Switching to Pfsense

2011-02-09 Thread Greg Hennessy
We have a 5mb line, is a quad core processor with 4gb of ram overkill? Just ever so slightly. I've used dual core Opteron with 2GB in multi gig/sec (large packet) applications with PF. - To unsubscribe, e-mail:

Re: [pfSense-discussion] Considering Switching to Pfsense

2011-02-09 Thread Tony Zakula
Thank you for the replies. I figured the hardware was overkill, but the current Linux platform runs in about 1gb of ram and I am currently not doing any ip traffic collection. I was considering using pmacct or ntop for that which I have been told ntop takes some resources. I have been using