Re: [pfSense] pfflowd: Won't export TCP flags on pfSense 2.0.1 ?

2012-04-04 Thread Chris Buechler
On Wed, Apr 4, 2012 at 1:18 AM, Jan j...@agetty.de wrote: Hi, on my local pfSense installation running 2.0.1 I'm using pfflowd to send netflow datagrams to a centralized collector, which works like a charm. However, pfflowd doesn't seem to include tcp flags as well. I already tried

Re: [pfSense] how to know the mac of the client on the captive portal

2012-04-04 Thread Chris Buechler
On Wed, Apr 4, 2012 at 2:29 AM, Bill Yuan byc...@gmail.com wrote: Hi, on pfsense ,actually is using fwd 127.0.0.1:8080 to redirect the traffic to the captive portal when the ip is not allow to go through. but is it possible to add an extra parameter there, like i want to have a MAC address

Re: [pfSense] how to know the mac of the client on the captive portal

2012-04-04 Thread Bill Yuan
Thanks, Yes you are right, But if I want to get VLAN number on the captive portal , then how ? on ipfw rule , there has no way to pass parameter, right ? On Wed, Apr 4, 2012 at 2:34 PM, Chris Buechler c...@pfsense.org wrote: On Wed, Apr 4, 2012 at 2:29 AM, Bill Yuan byc...@gmail.com wrote:

[pfSense] lagg

2012-04-04 Thread Ugo Bellavance
Hi, Setting up pfsense on a physical server with 2 onboard NICs. The available bandwidth is more than enough (gigabit interfaces for a 10mbps WAN and 100mbps LAN). I think I should do an LAGG interface, then put VLAN interfaces on it, but is the added redundancy worth the hassle? Thanks,

Re: [pfSense] lagg

2012-04-04 Thread Michael Schuh
Am 4. April 2012 14:47 schrieb Ugo Bellavance u...@lubik.ca: Hi, Setting up pfsense on a physical server with 2 onboard NICs. The available bandwidth is more than enough (gigabit interfaces for a 10mbps WAN and 100mbps LAN). I think I should do an LAGG interface, then put VLAN interfaces

Re: [pfSense] Recommended DynDns Service for PFsense

2012-04-04 Thread David Miller
Dyn.com's free service has been working well for me for years. -- David On Wed, Apr 4, 2012 at 9:16 AM, Gavin Will gavin.w...@exterity.com wrote: Hi there, Can people please give me their experience / recommendations with regards to a 3rd party DynDNS service that will work with PFsense.

Re: [pfSense] Recommended DynDns Service for PFsense

2012-04-04 Thread Paul Mather
On Apr 4, 2012, at 10:25 AM, David Miller wrote: Dyn.com's free service has been working well for me for years. -- David On Wed, Apr 4, 2012 at 9:16 AM, Gavin Will gavin.w...@exterity.com wrote: Hi there, Can people please give me their experience / recommendations with regards to a

Re: [pfSense] Recommended DynDns Service for PFsense

2012-04-04 Thread Antonio Cortes Alhambra (INCATEL)
Any way, If only you use dyndns the service will be continue free Atte., Antonio Cortés Alhambra From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On Behalf Of David Miller Sent: Wednesday, April 04, 2012 2:31 PM To: pfSense support and discussion Subject:

Re: [pfSense] Recommended DynDns Service for PFsense

2012-04-04 Thread David Miller
I think you're missing the last point in the section from their website. You get to keep 1 host name for free for trying their pro product. So there is still a free option from Dyn it's just limited to a single host and you have to sign up for a pro trial and then cancel it. -- David On Wed,

Re: [pfSense] Virtual IPs: Carp or proxy arp?

2012-04-04 Thread Ugo Bellavance
On 2012-03-22 08:32, Adam Thompson wrote: Ok, but are there drawbacks compared to an alias VIP? None that I've run into personally. The one I can think of is that you can't (or rather, shouldn't) run CARP on the same network (or VLAN, or...) as any Cisco HSRP devices because they use the same

[pfSense] PFSENSE 2.01 NAT TUNNELING FOR PASIVE FTP

2012-04-04 Thread Antonio Cortes Alhambra (INCATEL)
Dear friends: last week I replaced my old pfSense 1.2.3 with a new hardware with pfSense 2.0.1 I made a new configuration similar to the previous firewall. Same WAN IP and LAN IP than older. I have an FTP server on the LAN, which meets requirements active and pasives. In the pfSense 2.0.1 I

[pfSense] PFsense MIBs

2012-04-04 Thread Drew Lehman
I would like to add Pfsense monitoring to my managed services software, but I can't seem to find any mibs for it anywhere. If I can get a set of mibs and build a monitoring script I think more managed services would adopt Pfsense over some of the other firewalls.

Re: [pfSense] PFsense MIBs

2012-04-04 Thread Jim Pingle
On 4/4/2012 4:07 PM, Drew Lehman wrote: I would like to add Pfsense monitoring to my managed services software, but I can't seem to find any mibs for it anywhere. If I can get a set of mibs and build a monitoring script I think more managed services would adopt Pfsense over some of the other

Re: [pfSense] lagg

2012-04-04 Thread Jim Pingle
On 4/4/2012 9:29 AM, Ugo Bellavance wrote: Hmm, theoretically, I think my idea may work, but I think in practice it is not possible to configure an lagg interface without having at least one (temporary) nic available during the configuration. It depends on your switch. I don't recall what the

Re: [pfSense] Virtual IPs: Carp or proxy arp?

2012-04-04 Thread Michael Schuh
Ok, but are there drawbacks compared to an alias VIP? In virtual environments you have to take care that the virtual switches allow/permit this type of traffic. (p.e. on ESX ) the same rule is valid for physical environments, but the most do it out of the box. -- = = =

Re: [pfSense] lagg

2012-04-04 Thread Michael Schuh
Am 4. April 2012 15:29 schrieb Ugo Bellavance u...@lubik.ca: On 2012-04-04 09:19, Michael Schuh wrote: Am 4. April 2012 14:47 schrieb Ugo Bellavance u...@lubik.ca mailto:u...@lubik.ca: Hi, Setting up pfsense on a physical server with 2 onboard NICs. The available bandwidth

Re: [pfSense] PFSENSE 2.01 NAT TUNNELING FOR PASIVE FTP

2012-04-04 Thread Peder Rovelstad
To connect from the Internet in passive mode, with pfSense 1.2.3 works perfectly, however with pfSense 2.0.1 there is not response to a ls or dir command, and I can not transfer files. What is the difference? What other settings must be configured manually in version2.0.1? Hi. Do you have a

Re: [pfSense] PFsense MIBs

2012-04-04 Thread Drew Lehman
I apologize if this goes twice. I sent it out with a screenshot then figured that would probably not go through the list. On 4/4/2012 7:00 PM, Drew Lehman wrote: Thanks Jim, I'm a bit new to this SNMP business. I'm trying to enter the data into some monitoring software. It's asking for

Re: [pfSense] PFsense MIBs

2012-04-04 Thread Jim Pingle
On 4/4/2012 7:20 PM, Drew Lehman wrote: I apologize if this goes twice. I sent it out with a screenshot then figured that would probably not go through the list. On 4/4/2012 7:00 PM, Drew Lehman wrote: Thanks Jim, I'm a bit new to this SNMP business. I'm trying to enter the data into

Re: [pfSense] issues with 2.1 snapshot

2012-04-04 Thread Brian Henson
any other ideas? On Tue, Apr 3, 2012 at 7:36 AM, Brian Henson marin...@gmail.com wrote: yes it is checked and i have unchecked and rechecked it just for good measure. On Tue, Apr 3, 2012 at 6:59 AM, Seth Mos seth@dds.nl wrote: Op 3-4-2012 9:04, Brian Henson schreef: Another strange