Re: [pfSense-discussion] Squid setup

2005-07-16 Thread Scott Ullrich
Just so everyone is on the same page here. Are you attempting to use the squid package or redirect WEB traffic to another squid box? If you're using the squid package redirection happens automatically on the backend. Scott On 7/16/05, Dmitry Sorokin [EMAIL PROTECTED] wrote: Quoting Kim C.

Re: [pfSense-discussion] BTX halted --- I've fallen and I can't get up :)

2005-07-18 Thread Scott Ullrich
I would try a different CDROM reader drive. Scott On 7/18/05, Matthew Lenz [EMAIL PROTECTED] wrote: Well I got those new supermicro systems (5014C-MF) I talked about before and popped in the pfSense .70.1 cdrom into an external usb 2.0 drive hooked up to the machine. It sees the cdrom and

Re: [pfSense-discussion] spoof mac

2005-07-23 Thread Scott Ullrich
No. Thats so old it has grey hairs. Scott On 7/23/05, Jason Brunk [EMAIL PROTECTED] wrote: I am running 0.69.14 built on Tue Jul 12 04:11:48 UTC 2005 Is this a version that will do it automatically. Jason -Original Message- From: Scott Ullrich [mailto:[EMAIL

Re: [pfSense-discussion] Another Feature Request

2005-07-24 Thread Scott Ullrich
On 7/24/05, Dmitry Sorokin [EMAIL PROTECTED] wrote: Hi, I'd like to take a chance first and say big thank you to all developers and supporters of this great project! Grate job! I wish I can help the project and contribute some code or support one of the packages, but unfortunately I'm so

Re: [pfSense-discussion] dns forwarder and other general questions

2005-07-28 Thread Scott Ullrich
Ahh... If you rename the Optional interfacs, dont use spaces. Scott On 7/28/05, Matthew Lenz [EMAIL PROTECTED] wrote: stupid OE doesn't quote properly for some reason. thanks for responding btw, was beginning to think everyone missed it :) - Original Message - From: Scott

Re: [pfSense-discussion] Correcting a forwarding issue

2005-08-04 Thread Scott Ullrich
I havent tried this yet but IIRC if you reset the lan ip it should reset the HTTP properties such as the port. Scott On 8/4/05, Kim C. Callis [EMAIL PROTECTED] wrote: This morning I was working on the firewall and somehow inadventantly changed the forwarding of the https forwarding of the

Re: [pfSense-discussion] Security problem while loading rules?

2005-08-10 Thread Scott Ullrich
This should not be a problem any longer in the latest version. I would suggest upgrading. Scott On 8/10/05, Randy B [EMAIL PROTECTED] wrote: M. Kohn wrote: Hi, I just updated to 0.74.6 and got a problem while loading the rules: (Don't know if the problem was there before...) -

Re: [pfSense-discussion] Just a tip for naming interfaces...

2005-08-10 Thread Scott Ullrich
Thanks, I'll alter the code now to remove this unusable characters. Scott On 8/10/05, M. Kohn [EMAIL PROTECTED] wrote: Don't use a - in interface description (name), and you have no trouble with firewall rules ;-) Regards, Michael

Re: [pfSense-discussion] Re: Openvpn v2

2005-08-11 Thread Scott Ullrich
On 8/11/05, James Yonan [EMAIL PROTECTED] wrote: I'm the author of OpenVPN. Great! Please give me more info on this and/or any patches you might have so we can fix this. For example, you say that I blew up a firewall in 2 minutes flat -- but what do you mean by this? What did OpenVPN

Re: [pfSense-discussion] Re: Openvpn v2

2005-08-11 Thread Scott Ullrich
On 8/11/05, James Yonan [EMAIL PROTECTED] wrote: Scott, We're planning on releasing 2.0.1 next week, most likely. When are you planning on freezing? Sometime next week, so this is perfect timing. I'm on vacation right now, so I didn't have a chance to go back and read the original

Re: [pfSense-discussion] Re: Openvpn v2

2005-08-11 Thread Scott Ullrich
On 8/11/05, Scott Ullrich [EMAIL PROTECTED] wrote: On 8/11/05, James Yonan [EMAIL PROTECTED] wrote: Scott, We're planning on releasing 2.0.1 next week, most likely. When are you planning on freezing? Sometime next week, so this is perfect timing. I'm on vacation right now, so I

Re: [pfSense-discussion] Re: Openvpn v2

2005-08-12 Thread Scott Ullrich
While I appreciate the effort for other ppl bugging Peter, I really don't think this is going to fix the situation. Even if it did fix the situation we are on limited time before the beta 1 tree is stamped. Scott On 8/12/05, Chris Buechler [EMAIL PROTECTED] wrote: On 8/12/05, Rui Correia

Re: [pfSense-discussion] ipsec failover

2005-08-12 Thread Scott Ullrich
On 8/12/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Thanks Scott, seems this configuration is OK. I have 2 pfsense WRAP configurations and 2 monowall 1.2b9 endpoints. So I can test it for the upcommming beta. What has happended with the gif interface? is it comming back? It's still there,

Re: [pfSense-discussion] pfSense in the distro news

2005-08-15 Thread Scott Ullrich
On 8/15/05, Ben Flores [EMAIL PROTECTED] wrote: pfSense made it to distrowatch's news page: http://distrowatch.com/weekly.php?issue=20050815 Right under New distribution additions. I don't follow this site very closely so what does this mean? pfSense will be reviewed by them soon, etc?

Re: [pfSense-discussion] athstats

2005-08-15 Thread Scott Ullrich
Never heard of it. Can you supply a link? Scott On 8/15/05, Tomas Hodan [EMAIL PROTECTED] wrote: would be nice to have athstats. it's hard to add? tomas

Re: [pfSense-discussion] athstats

2005-08-15 Thread Scott Ullrich
, chooses the IP interface (and thus the WLAN hardware unit), defaulting to ath0. Does pfsense use madwifi? o_O On 15/08/05, Scott Ullrich [EMAIL PROTECTED] wrote: Never heard of it. Can you supply a link? Scott On 8/15/05, Tomas Hodan [EMAIL PROTECTED] wrote: would

Re: [pfSense-discussion] Bridged + NAT + CARP Idea help :)

2005-08-17 Thread Scott Ullrich
On 8/16/05, Tim Roberts [EMAIL PROTECTED] wrote: [snip] We would like to bridge the WAN and OPT interface and leave LAN interface routing/natting. I currently have this scenario working in m0n0wall and assume it will work with pfsense but I think the bridging support has some issues right now

Re: [pfSense-discussion] dynamic IP addresses

2005-08-17 Thread Scott Ullrich
YEs. On 8/17/05, Kim C. Callis [EMAIL PROTECTED] wrote: Can I assign static IP address out of the pool of DHCP issues hosts? -- A human being should be able to change a diaper, plan an invasion, butcher a hog, conn a ship, design a building, write a sonnet, balance accounts, build a

Re: [pfSense-discussion] What exactly is Per User Bandwidth suppose to do?

2005-08-19 Thread Scott Ullrich
On 8/19/05, Kim C. Callis [EMAIL PROTECTED] wrote: I was actually hoping that I could better control the bandwidth... So if I want to put together different user groups of bandwidth allocation, I am need to create a rule in traffic shapping to get that to work. For instance, lets say that the

Re: [pfSense-discussion] Multi-WAN and routable subnets...

2005-08-19 Thread Scott Ullrich
Right now a minimum of 3 public ips will be required between the two boxes: 2 - Each machine will share one REAL ip 1 - Each machine will both share one virtual ip --- 3 total needed Carpdev changes this to need 1 total for both

Re: [pfSense-discussion] Squid SquidGuard

2005-08-20 Thread Scott Ullrich
It's not a planned item by me so someone else needs to step up to the plate. Scott On 8/19/05, Michael Capp [EMAIL PROTECTED] wrote: Are there any timelines established for incorporating Squid and SquidGuard with a configurable web interface into pfSense? I formerly used Smoothwall with

Re: [pfSense-discussion] Net-snmp pf

2005-08-21 Thread Scott Ullrich
That is incorrect. We use bsnmpd. Scott On 8/21/05, Xavier Beaudouin [EMAIL PROTECTED] wrote: Hi, pfSense uses net-snmp as SNMP provider, is there any project to add http://www.packetmischief.ca/openbsd/snmp/ patches to net-snmp to have pf graphs and status ? Thanks, /Xavier

Re: [pfSense-discussion] not able to resolve addresses during startup?

2005-08-22 Thread Scott Ullrich
Try this /etc/rc.bootup and see if it helps out on your next reboot with this. Scott On 8/22/05, Matthew Lenz [EMAIL PROTECTED] wrote: I guess it might not be considered secure anyway but I've got a couple rules to allow outbound access to a couple internet hosts (some external xmlrpc stuff

Re: [pfSense-discussion] sync of config between machines isn't working

2005-08-23 Thread Scott Ullrich
This honestly should work the way you have it setup. Mine is setup to sync from the master firewall to the LAN ip of my second firewall. I just pushed out a new firewall last night using the Virtual IP sync function and it worked great.What version are you on? Hopefully the latest. :) On

Re: [pfSense-discussion] Dumb Question - Saving Config

2005-08-23 Thread Scott Ullrich
On 8/23/05, Tim Roberts [EMAIL PROTECTED] wrote: With m0n0wall you can boot from cd and save config to floppy. Assuming since PFSense has an ISO titled Live CD you can do the same. Is this true? If yes, does it automatically sense the floppy and write to it? If yes, can I use a CF

Re: [pfSense-discussion] sync of config between machines isn't working

2005-08-23 Thread Scott Ullrich
On 8/23/05, Matthew Lenz [EMAIL PROTECTED] wrote: bingo, I am using https. Is there a work around other than not using https currently? Not at the moment.

Re: [pfSense-discussion] pfSense 0.79.2

2005-08-23 Thread Scott Ullrich
Thanks!!! ... but 0.79.4 is out now :) Scott On 8/23/05, Marc A. Volovic [EMAIL PROTECTED] wrote: A fine release. This is more or less the first time I am playing with FreeBSD since the late 90's, but the build looks quite nice, working well with the (none too complex, I admit) setup I need.

Re: [pfSense-discussion] pfSense 0.79.2

2005-08-23 Thread Scott Ullrich
On Aug 23, 2005, at 1:14 PM, Scott Ullrich wrote: Thanks!!! ... but 0.79.4 is out now :) Scott On 8/23/05, Marc A. Volovic [EMAIL PROTECTED] wrote: A fine release. This is more or less the first time I am playing with FreeBSD since the late 90's, but the build looks quite

Re: [pfSense-discussion] pfSense 0.79.2

2005-08-23 Thread Scott Ullrich
CIA's ties in the HTML which looks pretty bad in Jabber :) Scott On 8/23/05, Bill Marquette [EMAIL PROTECTED] wrote: On 8/23/05, Scott Ullrich [EMAIL PROTECTED] wrote: Wow. Can't say that I knew about the RSS feed :) /me adds to Jabber RSS Service You never asked ;-P CIA has one too

Re: [pfSense-discussion] Multi-WAN troubles still

2005-08-23 Thread Scott Ullrich
Please send me: /cf/conf/config.xml /tmp/rules.debug And I will check for obvious stuff ;) Scott On 8/23/05, Tim Roberts [EMAIL PROTECTED] wrote: I cant seem to get 2 WAN's going. I'm not at all trying to load balance them but rather divide inside lan users based on their ip space out

Re: [pfSense-discussion] carp netmask

2005-08-25 Thread Scott Ullrich
On FreeBSD /32 works just fine for aliases. Scott On 8/25/05, Matthew Lenz [EMAIL PROTECTED] wrote: Is this always supposed to be a /32? I'm using /32 on all of them right now and it works but it still seems to me that since its asking for the netmask of that ip that I should be using /24

Re: [pfSense-discussion] carp netmask

2005-08-25 Thread Scott Ullrich
:30:58 kernel: arp_rtrequest: bad gateway 12.34.56.78 (! AF_LINK) (i changed the public ip to 12.34.56.78 for posting) I thought maybe it had something to do with the netmask not being entirely accurate. On Thu, 2005-08-25 at 11:20 -0400, Scott Ullrich wrote: On FreeBSD /32 works just

Re: [pfSense-discussion] NAT-T

2005-08-25 Thread Scott Ullrich
Not as of yet. Scott On 8/25/05, Homero Thomsom [EMAIL PROTECTED] wrote: Does pfsense support NAT-Traversal ? Thanx. HT. Buenos Aires, Argentina. __ Correo Yahoo! Espacio para todos tus mensajes, antivirus y antispam ¡gratis! ¡Abrí tu

Re: [pfSense-discussion] Squid

2005-08-25 Thread Scott Ullrich
It's all automatic. Or should be.. Scott On 8/25/05, Kim C. Callis [EMAIL PROTECTED] wrote: I just installed squid... Do I need to open up port 3128 for the tranparency to be available? -- Kim C. Callis [EMAIL PROTECTED] _ A human being should be

Re: [pfSense-discussion] Start Squid despite DNS check fails

2005-08-25 Thread Scott Ullrich
Done! Uninstall squid and reinstall for the change to take effect or run: Scott On 8/25/05, Albert Miles Enabe [EMAIL PROTECTED] wrote: Squid fails to start when DNS check fails producing this error log: 2005/08/25 14:10:10| Performing DNS Tests... FATAL: ipcache_init: DNS name lookup

Re: [pfSense-discussion] wan interface failed causing carp failover

2005-08-26 Thread Scott Ullrich
Intel Intel Intel Intel. Really, use Intel. On 8/26/05, Matthew Lenz [EMAIL PROTECTED] wrote: On Fri, 2005-08-26 at 01:50 -0400, Chris Buechler wrote: On 8/26/05, Matthew Lenz [EMAIL PROTECTED] wrote: The watchdog (atleast thats what the system log called it) on my WAN interface reset

Re: [pfSense-discussion] Need Help Bad! :)

2005-08-26 Thread Scott Ullrich
On 8/26/05, Tim Roberts [EMAIL PROTECTED] wrote: [snip] When I try to do this in PFSENSE, It tells me I cannot enter the individual /32 outbound NAT becuase of an overlap. This sounds like a over bearing input validation field. Bill, does that sound about right to you as well? Scott

Re: [pfSense-discussion] wan interface failed causing carp failover

2005-08-27 Thread Scott Ullrich
On 8/27/05, Bill Marquette [EMAIL PROTECTED] wrote: Oh, you will have to reboot after mucking with preempt settings and BOTH boxes have to have it set. Not on recent versions. I changed the CARP settings screen to call both of our carp functions which should set the preempt. Scott

Re: [pfSense-discussion] load balance and carp

2005-08-29 Thread Scott Ullrich
Run top when it happens from a serial console or from exec.php and show us the output. Scott On 8/29/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: I installed 80.4 on a couple os soekris 4801. With carp and and outbound load balance enabled. Everything works, but after a couple of minutes,

Re: [pfSense-discussion] load balance and carp

2005-08-29 Thread Scott Ullrich
This used to be a problem on older versions but was fixed in the 0.80.0 series. Look for the milestone that says its fixed and use a version after that. On 8/29/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Scott Ullrich ha scritto: the webgui is unusable (also ssh), I will use serial I

Re: [pfSense-discussion] IPv6 support on pfSense

2005-08-31 Thread Scott Ullrich
We are in a feature freeze. No new features are going in at the moment. Scott On 8/31/05, Xavier Beaudouin [EMAIL PROTECTED] wrote: Hello, http://www.washingtontechnology.com/news/1_1/daily_news/26715-1.html Says that ipv6 will be mandatory near 2008. In france one big ISP is asking

Re: [pfSense-discussion] IPv6 support on pfSense

2005-08-31 Thread Scott Ullrich
On 8/31/05, Xavier Beaudouin [EMAIL PROTECTED] wrote: We are in a feature freeze. No new features are going in at the moment. Ok :) I understand that because I have also same problems on Caudium :) Do you think you will add on the roadmap for the next pfSense ? Before 2008? Absolutely

Re: [pfSense-discussion] IPv6 support on pfSense

2005-08-31 Thread Scott Ullrich
On 8/31/05, Chris Buechler [EMAIL PROTECTED] wrote: Yeah, I'd be surprised if we see IPv6 support before 2007, really. That's a LOT of work and even though US Federal government networks are mandated IPv6 by 2008 (even that's only at the core), don't expect the rest of the world to be using it

Re: [pfSense-discussion] L3 load balancer

2005-08-31 Thread Scott Ullrich
On 8/31/05, Randy B [EMAIL PROTECTED] wrote: Just noting that the current LB package used is sldb and that it's a very much dead project, actively seeking a new maintainer. I also note that ipvs is in ports. Any potential (future, of course) switch? I know the resource assigned might have

Re: [pfSense-discussion] L3 load balancer

2005-08-31 Thread Scott Ullrich
On 8/31/05, Scott Ullrich [EMAIL PROTECTED] wrote: If it doesn't have those, I can imagine that some of those would be non-trivial to add; maybe I'll have to dig in and try to make a 3rd-party package for pfSense. That's the only way around the feature freeze but after looking

Re: [pfSense-discussion] L3 load balancer

2005-08-31 Thread Scott Ullrich
On 9/1/05, Bill Marquette [EMAIL PROTECTED] wrote: The scheduling is the difficult one...it really really needs to be part of PF before we can add it (and if it requires polling servers, I can guarantee it won't make it in). Bottom line is we aren't a load balancer, this wasn't a terribly

Re: [pfSense-discussion] testing 82.2

2005-09-02 Thread Scott Ullrich
We have special upgrade files for the wrap. Don't use the full upgrade. Will be posting a image over the weekend. Scott On 9/2/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: I am still testing 82.2 and firmware upgrade. I am trying upgrading to 82.4, but I always get:*Firmware image missing

Re: [pfSense-discussion] what are the 'pfsync nodes' on the carp status screen all about?

2005-09-02 Thread Scott Ullrich
On 9/2/05, Matthew Lenz [EMAIL PROTECTED] wrote: what are the 'pfsync nodes' on the carp status screen all about? A unique ID of the machine that box is syncing with. On each reboot a random id is generated and the previous ID will stick around until the states are flushed. Consider this the

Re: [pfSense-discussion] what are the 'pfsync nodes' on the carp status screen all about?

2005-09-02 Thread Scott Ullrich
for, but that many just seems/seemed excessive. - Original Message - From: Scott Ullrich [EMAIL PROTECTED] To: Matthew Lenz [EMAIL PROTECTED] Cc: pfsense discussion@pfsense.com Sent: Friday, September 02, 2005 4:44 PM Subject: Re: [pfSense-discussion] what are the 'pfsync nodes

Re: [pfSense-discussion] Kernel warning...

2005-09-05 Thread Scott Ullrich
What version are you on? How much ram, etc? Scott On 9/5/05, Kim C. Callis [EMAIL PROTECTED] wrote: I just got on the console the following: kern.ipc.maxpipekva exceeded; see turning(7) And with that, I can not get dhcpd to allot client addresses to the AP. Although I am able to

Re: [pfSense-discussion] authpf package

2005-09-07 Thread Scott Ullrich
That doc is somewhat getting old now. Read that and then refer to: http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/pkg_config.xml?rev=1.175 http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/packages/ Scott On 9/7/05, Gary Buckmaster [EMAIL PROTECTED] wrote: Dominic, The pfSense packages

Re: [pfSense-discussion] help with update

2005-09-07 Thread Scott Ullrich
It was removed due to not working as intended. Scott On 9/7/05, janif [EMAIL PROTECTED] wrote: Hello, Can you help me. I need install package PerUserBW, but the package isnt in the list of Available Package. Thanks

Re: [pfSense-discussion] Compact Flash images!

2005-09-12 Thread Scott Ullrich
Awesome. What hardware did you use? Scott On 9/12/05, Bao C. Ha [EMAIL PROTECTED] wrote: Hello, I have been playing around with pfSense last weekend, trying to make it bootable on the compact flash on our hardware. I have built some images that could be dding directly to the compact

Re: [pfSense-discussion] Compact Flash images!

2005-09-12 Thread Scott Ullrich
On 9/12/05, Bao C. Ha [EMAIL PROTECTED] wrote: Hi Scott, I use the OpenBrick-E, but it works on all of hardware, as well as the Lex systems. I use the compact flash image built for the Wrap, but have to replace everything in the /boot/kernel with stuff from the LiveCD to make it works.

Re: [pfSense-discussion] can't get outbound ftp working

2005-09-13 Thread Scott Ullrich
.. But can't ftp out from my OPT2 net. I can http and ntp out from my OPT2 net just fine. -Matt On Tue, 2005-09-13 at 11:21 -0400, Scott Ullrich wrote: Does killall pftpx pftpx from the shell fix it? Scott On 9/12/05, Matthew Lenz [EMAIL PROTECTED] wrote

Re: [pfSense-discussion] can't get outbound ftp working

2005-09-13 Thread Scott Ullrich
127.0.0.1.8021: S 3451987609:3451987609(0) win 5840 mss1460,sackOK,timestamp[|tcp] WWW.WWW.WWW.WWW is the machine's private 'OPT2 net' ip from which I'm trying to ftp to a public internet site. On Tue, 2005-09-13 at 15:32 -0400, Scott Ullrich wrote: rdr on em0 proto tcp from

Re: [pfSense-discussion] Firmware Updates

2005-09-13 Thread Scott Ullrich
On 9/13/05, Mojo Jojo [EMAIL PROTECTED] wrote: I am a little confused about the Firmware Updates section. There is a tab that says Auto Update but it doesn't really do anything, it seems to be read only. I see the other two tabs where you can set options but.. My question is, can I keep

Re: [pfSense-discussion] Massive Boot delay during load

2005-09-14 Thread Scott Ullrich
Disable the floppy controller. Its been reported on the FreeBSD lists. Also, I'm working on a small bug where php is launching quite frequently which is driving up the CPU load. Scott On 9/14/05, Gary Buckmaster [EMAIL PROTECTED] wrote: I have also seen this behavior on several different

Re: [pfSense-discussion] Optional NIC

2005-09-16 Thread Scott Ullrich
On 9/16/05, Greg Huggins [EMAIL PROTECTED] wrote: I am currently using IPCOP and have the RED – Wan, GREEN – Lan and BLUE – Wireless concept in my mind for referring to the various NICS. In my current IPCOP configuration I have my wireless AP and other computers hooked to the BLUE NIC and

Re: [pfSense-discussion] tool you might want to include in pfsense

2005-09-18 Thread Scott Ullrich
at your company and you did not hire me, you will not receive permission. Cash bounty awarded to any whistleblowers whose information leads to successful prosecution or settlement. Derivative works must not change these terms. We only handle GPL or BSD packages here. Scott On 9/18/05, Scott

Re: [pfSense-discussion] Massive Boot delay during load

2005-09-18 Thread Scott Ullrich
: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Thursday, 15 September 2005 1:30 AM To: discussion@pfsense.com Subject: Re: [pfSense-discussion] Massive Boot delay during load Disable the floppy controller. Its been reported on the FreeBSD lists. Also, I'm working on a small bug where php

Re: [pfSense-discussion] Intrusion Prevention Systems

2005-09-20 Thread Scott Ullrich
It's written in perl. You do NOT want to use this as its delayed reaction to issues will be a lot more than a C version. Scott On 9/20/05, Robert Depenbrock [EMAIL PROTECTED] wrote: On Mon, 19 Sep 2005, Tommaso Di Donato wrote: mmh... I am not a freebsd guru, but some times ago I found

Re: [pfSense-discussion] Intrusion Prevention Systems

2005-09-20 Thread Scott Ullrich
Now we're talking. Someone step up to the plate and make a package :) Scott On 9/20/05, Robert Depenbrock [EMAIL PROTECTED] wrote: On Tue, 20 Sep 2005, Scott Ullrich wrote: It's written in perl. You do NOT want to use this as its delayed reaction to issues will be a lot more than a C

[pfSense-discussion] Interesting slideshow

2005-09-20 Thread Scott Ullrich
http://www.dixongroup.net/NYCBSDCON/Failover_Firewalls_and_VPNs_with_OpenBSD_CARP_pfsync_and_sasyncd.pdf

Re: [pfSense-discussion] An Illustrated Guide to IPSec

2005-09-20 Thread Scott Ullrich
Thats a nice document. Thanks for passing it along! Scott On 9/20/05, William Armstrong [EMAIL PROTECTED] wrote: http://www.unixwiz.net/techtips/iguide-ipsec.html 0,2 cents -- -=-=-=-=-=-=-=-=-=- William David Armstrong Bio Systems Security. ICQ 10253747 MSN [EMAIL PROTECTED]

Re: [pfSense-discussion] Payload inspection

2005-09-21 Thread Scott Ullrich
I do not know of any layer 7 stuff for the BSD's besides the usual snort, etc. Scott On 9/21/05, A Rossi [EMAIL PROTECTED] wrote: Would it be feasible to add payload inspection to pfSense after its first release? (FYI: I don't know how to code, but I am trying to teach myself)

Re: [pfSense-discussion] Payload inspection

2005-09-21 Thread Scott Ullrich
Everyone break out the pitch-forks and fire! There's gonna be a lynching for cross-posters! Scott On 9/21/05, Greg Hennessy [EMAIL PROTECTED] wrote: Nice thread here: http://thread.gmane.org/gmane.os.freebsd.devel.pf4freebsd/952 The OP in that thread wasn't the sharpest knife in the

Re: [pfSense-discussion] Traffic Shaper

2005-09-24 Thread Scott Ullrich
On 9/24/05, Mojo Jojo [EMAIL PROTECTED] wrote: [snip] Currently if our bandwidth on our T1 gets soaked 1.55 mb or so, our calls go to crap. [snip] I noticed if I tweaked the Bandwidth: setting under VOIP specific settings from the default of 32k to 96k, my call was fine. Seems that this

Re: [pfSense-discussion] NTOP bug

2005-09-24 Thread Scott Ullrich
Thanks, this is fixed now! Scott On 9/24/05, Beau Gunderson [EMAIL PROTECTED] wrote: if you select two interfaces in the pfsense ntop GUI (say LAN and WAN) and submit it will change /usr/local/etc/rc.d/ntop.sh to use a command line of the format: -i interface 1 interface 2 ntop will

Re: [pfSense-discussion] Restoring a backup from an older version??

2005-09-26 Thread Scott Ullrich
Shouldn't be a problem at all. Scott On 9/26/05, Mojo Jojo [EMAIL PROTECTED] wrote: If I were to make a backup of say a 0.84 machine and then restore it to a 0.85 machine, would this cause issues? Really what I need is interfaces, rules and aliases, the rest I can re-do by hand. If I do

Re: [pfSense-discussion] Won't boot

2005-09-30 Thread Scott Ullrich
Hello, do you still have acecss to this box? If so could you perform this after installation and send me the results? dd if=/dev/ad0s1 of=/tmp/cpressey.bin bs=32k count=1 Then send /tmp/cpressey.bin Thanks! On 9/16/05, Angus Jordan [EMAIL PROTECTED] wrote: Yes, extremely similar. But there

Re: [pfSense-discussion] Traffic Shaper

2005-10-04 Thread Scott Ullrich
On 10/4/05, Mojo Jojo [EMAIL PROTECTED] wrote: I was told that the Traffic Shaper wizard is basically for the LAN interface and not really useful at this point for servers/devices on the OPT1 or 2 interface. That is correct for the moment. So, I am wondering, if I put a machine on the LAN

Re: [pfSense-discussion] Traffic Shaper

2005-10-04 Thread Scott Ullrich
On 10/4/05, Scott Ullrich [EMAIL PROTECTED] wrote: Will this work or will it be useless since it's only prioritizing traffic on the LAN? Will the servers in the OPT 1 (DMZ) be able to step all over my phone calls coming from the LAN side? I would think it will work fine but someone jump

Re: [pfSense-discussion] Can I use the LAN interface as the CARP interface?

2005-10-04 Thread Scott Ullrich
On 10/4/05, Mojo Jojo [EMAIL PROTECTED] wrote: Can I use the LAN interface as the CARP interface? Do you mean the carp sync interface? If so, sure. Scott

Re: [pfSense-discussion] Is it possible to get the Adobe SVG viewer working in Mozilla

2005-10-04 Thread Scott Ullrich
http://www.pfsense.com/index.php?id=16 16. Which version of the SVG plugin should I use for the traffic graph? Scott On 10/4/05, Bill Marquette [EMAIL PROTECTED] wrote: I know we have a few too many places to find information, but this is actually in the FAQ. --Bill On 10/4/05, Mojo Jojo

Re: [pfSense-discussion] problem with vlans - with correct ifconfig -a

2005-10-05 Thread Scott Ullrich
: Ethernet autoselect (100baseTX full-duplex) status: active vlan: 30 parent interface: fxp1 # --- Ursprüngliche Nachricht --- Von: Scott Ullrich [EMAIL PROTECTED] An: discussion@pfsense.com Betreff: Re: [pfSense-discussion] problem with vlans Datum: Wed, 5 Oct 2005 16

Re: [pfSense-discussion] Traffic Shaper

2005-10-06 Thread Scott Ullrich
On 10/5/05, Sean D. [EMAIL PROTECTED] wrote: wow.. ok... did not realize altq was not working on OPT interfaces... that tidbit would have saved me hours of tinking around... i think maybe you should put something in bold letters on the web interface... i was cussing rather loudly a few weeks

Re: [pfSense-discussion] FFS bad disklabel

2005-10-09 Thread Scott Ullrich
I sent out an email this weekend asking people to test the final version. Please test. Scott On 10/9/05, Rajkumar S [EMAIL PROTECTED] wrote: Rainer Duffner wrote: I doubt they make new ones that small. (They may actually do that, but for special purposes where one disk costs one grand)

Re: [pfSense-discussion] SNMP OperStatus down why ?

2005-10-10 Thread Scott Ullrich
! -Original Message- From: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Monday, October 10, 2005 10:43 AM To: discussion@pfsense.com Subject: Re: [pfSense-discussion] SNMP OperStatus down why ? pilp0 is ip over a parallel port. This is normal unless your using this function. Scott

Re: [pfSense-discussion] Two wireless virtual interfaces

2005-10-14 Thread Scott Ullrich
Yep. Espen needs a big pat on the back. The only problem now with the wireless portion is there is too many knobs. /me ducks. :P On 10/14/05, Richard Davis [EMAIL PROTECTED] wrote: And the web interface is working? Sounds great! -Original Message- From: alan walters

Re: [pfSense-discussion] mac filtering

2005-10-14 Thread Scott Ullrich
Turn on the captive portal. Add pass through MAC addresses. On 10/14/05, Marc-Henri Boisis-delavaud [EMAIL PROTECTED] wrote: How do you make mac filtering with PF in the captive portal ? Marc

Re: [pfSense-discussion] mac filtering

2005-10-14 Thread Scott Ullrich
And as I said before, use the captive portal. That is what your looking for, it uses ipfw. On 10/14/05, Marc-Henri Boisis-Delavaud [EMAIL PROTECTED] wrote: Scott Ullrich wrote: Turn on the captive portal. Add pass through MAC addresses. On 10/14/05, Marc-Henri Boisis-delavaud [EMAIL

Re: [pfSense-discussion] Beep script

2005-10-21 Thread Scott Ullrich
/usr/local/bin/beep.sh On 10/21/05, Josh A [EMAIL PROTECTED] wrote: sweet.. but what file do i edit to change this :) Randy B wrote: I like the current beep, but had written my own for a headless Linux box some time ago. You guys might at least be entertained... RB

Re: [pfSense-discussion] state-table size display wrong?

2005-10-26 Thread Scott Ullrich
I have reproduced this problem here. The first AJAX update shows the correct size then it reverts back to 1. I'm looking for the problem now. On 10/26/05, Rainer Duffner [EMAIL PROTECTED] wrote: Hi, I upped that number (10k by default) to 100k but on the System Overview page, it's

Re: [pfSense-discussion] Restricted viewing...

2005-10-28 Thread Scott Ullrich
On 10/28/05, Rainer Duffner [EMAIL PROTECTED] wrote: Scott Ullrich wrote: Sure its possible. Are we planning to do this soon? Not on the list. I'd also vote for pushing this far behind. Perhaps somebody has got an idea how to get a per-customer user-interface implemented so

Re: [pfSense-discussion] __Shaping__ UI

2005-10-31 Thread Scott Ullrich
Not to mention we want to release in the next month, not in the next 3-4 months. If we gut the shaper again, it will require a _LOT_ of testing and work for 1.0. At this point we will ship a shaping system that works for a majority of the people but for some it will show some limitations.

Re: [pfSense-discussion] PPTP wan over dynamic IP

2005-10-31 Thread Scott Ullrich
Have you tried enabling PPTP on the WAN interface? On 10/29/05, Gil Freund [EMAIL PROTECTED] wrote: Hi, Our local Cable provider has decided to access using L2TP or PPTP over DHCP. One ISP (www.actcom.co.il) was kind enough to provide a script to achieve this connection (The script is for

Re: [pfSense-discussion] Package system update

2005-11-02 Thread Scott Ullrich
Version 1.1. Considering we haven't released 1.0, it will be a while. Scott On 11/2/05, Rajkumar S [EMAIL PROTECTED] wrote: Hi, Any idea when the proposed Package system update hits the downloadable iso? http://pfsense.blogspot.com/2005/10/package-system-update.html raj

Re: [pfSense-discussion] *dances*

2005-11-04 Thread Scott Ullrich
Give it a try... http://www.pfsense.com/~sullrich/pfSense-LiveCD-0.92.iso Scott On 11/4/05, Matthew Lenz [EMAIL PROTECTED] wrote: from the release notes for FreeBSD 6.0 cdboot now works around a BIOS problem observed on some systems when booting from USB CDROM drives. swet. This was

Re: [pfSense-discussion] Re: PXE/TFTP install

2005-11-08 Thread Scott Ullrich
Already been done. See http://doc.m0n0.ch/handbook/faq-hiddenopts.html Scott On 11/8/05, Bill Plein [EMAIL PROTECTED] wrote: On 11/8/05, Gil Freund [EMAIL PROTECTED] wrote: I should tune up my googleing skills http://www.cheapnet.net/~mike/soekris/ PFSense Guys- Would you be

Re: [pfSense-discussion] WRAP Power Supply

2005-11-08 Thread Scott Ullrich
Search here: http://www.digikey.com/ This is where Soekris gets theirs from... Scott On 11/8/05, Mojo Jojo [EMAIL PROTECTED] wrote: Thanks for the info.. Anyone else have suggestions? I am not sure what I would pay for one of these new, could be pricey. I can probably find one on eBay

Re: [pfSense-discussion] Squid and traffic shaper

2005-11-17 Thread Scott Ullrich
You can do that now... http://www.pfsense.com/screens/redirect_lan_to_another_mail_server.PNG Scott On 11/17/05, Dan Swartzendruber [EMAIL PROTECTED] wrote: Is it feasible to add a rdr rule to send outbound http traffic to another box on the lan? I'd do that myself

Re: [pfSense-discussion] Squid and traffic shaper

2005-11-18 Thread Scott Ullrich
going in a circle? I used to do http redirection for transparent cache server, but I had to put a special rule in for that cache server to allow it to go out without rdr. I did this with open bsd, not with pfsense. I may be missing something :) jason -Original Message- From: Scott

Re: [pfSense-discussion] SVG for traffic graph?

2005-11-19 Thread Scott Ullrich
Yep, known issue on m0n0wall and pfSense. The author is rewriting the SVG graph to make it work. In the meantime grab the plugin that allows you to switch between native svg and plugin from mozilla extensions site. On 11/19/05, Dan Swartzendruber [EMAIL PROTECTED] wrote: I upgraded to firefox

Re: [pfSense-discussion] Build error regarding freesbie2

2005-11-20 Thread Scott Ullrich
Make sure your freesbie2 directory is up to date: cd /home/pfsense/freesbie2 cvs up Scott On 11/20/05, Angelo Turetta [EMAIL PROTECTED] wrote: While trying to build pfSense RELENG_1, I get this error during the 'build everything' phase: === share/doc (all) === share/doc/bind9 (all) ===

Re: [pfSense-discussion] qemu, pfsense and0 FreeSBIE2 now integrated....

2005-11-22 Thread Scott Ullrich
Great to hear!! Scott On 11/22/05, Etienne Ledoux [EMAIL PROTECTED] wrote: Not having access to vmware or a spare pc, I use qemu as a system emulator to install and test stuff on. Qemu has served me well, but I have never been able to use it to install pfsense. It always complained about

Re: [pfSense-discussion] Unfork m0n0wall

2005-11-27 Thread Scott Ullrich
On 11/27/05, Bennett [EMAIL PROTECTED] wrote: Email address created just to troll us. I already see issues. I've been looking for an open source firewall. I found m0n0wall, IPCop, and few others. I thought m0n0wall was great, but then I came across pfSense, and it was even better, picking

Re: [pfSense-discussion] Re: Newbie Q: security of php on perimeter firewall

2005-11-28 Thread Scott Ullrich
There are still a few other small ones. In paticular with the status queues screen + fast cgi. When we kill pfctl somehow its signal is being passed up and killing off the fast-cgi handler. Woops. On 11/28/05, Bill Marquette [EMAIL PROTECTED] wrote: On 11/28/05, Lists [EMAIL PROTECTED]

Re: [pfSense-discussion] Newbie Q: security of php on perimeter firewall

2005-11-28 Thread Scott Ullrich
On 11/28/05, Bill Marquette [EMAIL PROTECTED] wrote: On 11/28/05, Chris Buechler [EMAIL PROTECTED] wrote: This part of the architecture has changed slightly from m0n0wall I believe, so if I go astray here, somebody kick me back into shape. ;) *kick* Basically, you can't get to PHP

Re: [pfSense-discussion] Newbie Q: security of php on perimeter firewall

2005-11-28 Thread Scott Ullrich
On 11/28/05, Sanjay Arora [EMAIL PROTECTED] wrote: However, I would like to make one request to the project design...users be given easily configured modular way to remove (i.e. not compile in) services they do not want on the pfsense box, i.e. the ones that are not basic to the basic

  1   2   3   >