[pfSense] Reject action for non-TCP/UDP packets

2015-02-16 Thread Volker Kuhlmann
What happens exactly in pfsense with a reject-action rule with protocol "any" and a packet that is neither TCP nor UDP? Does this rule reject TCP+UDP packets, and deny others? Or is there a chance non TCP/UDP packets could be passed? Is this different for pfsense 2.1 and 2.2? IPv4 and IPv6? This i

Re: [pfSense] Squid not logging traffic

2015-02-16 Thread Volker Kuhlmann
On Tue 17 Feb 2015 12:27:34 NZDT +1300, Walter Parker wrote: > For the real time monitor, if you switch from WAN to LAN, you can see who > is doing spikes. For the other items, you can see how much bandwidth each > internal IP addresses has used in one of those packages. Unless you have > servers

Re: [pfSense] Squid not logging traffic

2015-02-16 Thread Walter Parker
I'd recommend doing it on a second box (Or turn it into a pfSense package). On Mon, Feb 16, 2015 at 3:48 PM, Brian Caouette wrote: > I looked at cacti a few days ago. It looks real nice but I have no clue > how to set this up on the pfSense box. > > Sent from my iPad > > On Feb 16, 2015, at 6:2

Re: [pfSense] Squid not logging traffic

2015-02-16 Thread Brian Caouette
I looked at cacti a few days ago. It looks real nice but I have no clue how to set this up on the pfSense box. Sent from my iPad > On Feb 16, 2015, at 6:27 PM, Walter Parker wrote: > > For the real time monitor, if you switch from WAN to LAN, you can see who is > doing spikes. For the other i

Re: [pfSense] Squid not logging traffic

2015-02-16 Thread Walter Parker
For the real time monitor, if you switch from WAN to LAN, you can see who is doing spikes. For the other items, you can see how much bandwidth each internal IP addresses has used in one of those packages. Unless you have servers in a DMZ outside of the firewall or are doing some sort of traffic ref

Re: [pfSense] Squid not logging traffic

2015-02-16 Thread Volker Kuhlmann
On Tue 17 Feb 2015 10:33:21 NZDT +1300, Walter Parker wrote: > In Realtime, you can use the dashboard app. The pfsense dashboard? I don't think so. traffic going through a particular interface is not so interesting. > For plugins, BandwidthD and Darkstat have some information. Unfortuntely the

Re: [pfSense] Squid not logging traffic

2015-02-16 Thread Walter Parker
In Realtime, you can use the dashboard app. For plugins, BandwidthD and Darkstat have some information. I've used netflow on other systems to get this sort of information, but for pfSense you would have to setup a second box that ran the netflow visualizer to see the traffic information from one

Re: [pfSense] Squid not logging traffic

2015-02-16 Thread Volker Kuhlmann
On Tue 17 Feb 2015 06:15:46 NZDT +1300, Brian Caouette wrote: > I also notice it doesn't log torrents. Is there a way to tell it to > log everything I don't know about lightsquid. Squid is a web cache and I'm not sure it is even able to deal with anything but http. If you look at its config file

Re: [pfSense] Squid not logging traffic

2015-02-16 Thread Tiernan OToole
Torrents wouldn't be tracked. They are going over a non HTTP connection. If you want to check the connection, BandwithD might be what your looking for. --Tiernan -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Brian Caouette Sent: Monday 16 February 201

Re: [pfSense] Squid not logging traffic

2015-02-16 Thread Brian Caouette
I also notice it doesn't log torrents. Is there a way to tell it to log everything so I can get an accurate picture of what each device on the network is using? Sent from my iPad > On Feb 15, 2015, at 11:09 PM, Volker Kuhlmann > wrote: > >> On Mon 16 Feb 2015 03:53:55 NZDT +1300, Brian Caoue

Re: [pfSense] Squid not logging traffic

2015-02-16 Thread Brian Caouette
bbs.dlois.com:/lightsquid/day_detail.cgi?year=2015&month=02&day=16 Dell wired and Roku are the busiest devices yet report almost no traffic. Sent from my iPad > On Feb 15, 2015, at 11:09 PM, Volker Kuhlmann > wrote: > >> On Mon 16 Feb 2015 03:53:55 NZDT +1300, Brian Caouette wrote: >> >>

Re: [pfSense] pfsense bind package

2015-02-16 Thread Vick Khera
On Mon, Feb 16, 2015 at 12:32 AM, Vadym Chepkov wrote: > Also in panel "Resulting zone config file" each slave zone displays > unprintable characters. > It looks more like binary zone dump, instead of zone config. > > Not specific to pfSense package for bind 9.9, the salve zone file format is bin

Re: [pfSense] Fwd: Running Out of /var

2015-02-16 Thread Thomas Guldener
If I disable dhcpv6: Disk usage / (ufs): 12% of 1.8G /cf (ufs): 1% of 49M /tmp (ufs in RAM): 3% of 38M /var (ufs in RAM): 26% of 58M > On 16. Feb 2015, at 13:35, Thomas Guldener wrote: > > $ ls -l /var/dhcpd/var/db > total 33728 > -rw-r--r-- 1 dhcpd _dhcp 0 Feb 1

[pfSense] Fwd: Running Out of /var

2015-02-16 Thread Thomas Guldener
$ ls -l /var/dhcpd/var/db total 33728 -rw-r--r-- 1 dhcpd _dhcp 0 Feb 16 12:50 dhcpd.leases -rw-r--r-- 1 root _dhcp 1193 Feb 16 12:50 dhcpd.leases~ -rw-r--r-- 1 dhcpd _dhcp 28661 Feb 16 13:11 dhcpd6.leases -rw-r--r-- 1 dhcpd _dhcp 17203155 Feb 16 13:11 dhcpd6.leases~ > Be

Re: [pfSense] Running Out of /var

2015-02-16 Thread Thomas Guldener
Hi Tierman Thx for the Feedback. I haven’t run any additional packages like Squid. My feeling is, that dhcpd and dhcpd6 will run out of space. g. thomas > On 16. Feb 2015, at 13:24, Tiernan OToole wrote: > > I had a similar problem and it was Squid taking up space for the logs... mind > you

Re: [pfSense] Running Out of /var

2015-02-16 Thread Tiernan OToole
I had a similar problem and it was Squid taking up space for the logs... mind you, i bumped up the storage available... I think i may have also set squid to use less space... cant remember off the top of my head now... hope this helps. --Tiernan From: Li

[pfSense] Running Out of /var

2015-02-16 Thread Thomas Guldener
I have a Problem with my DS437 box. After a reboot the /var drive will run out of free disk in minutes. Anyone a Idea, what it could be? g. thomas Version 2.2-RELEASE (amd64) built on Thu Jan 22 14:03:54 CST 2015 FreeBSD 10.1-RELEASE-p4 You are on the latest version. Platformnanobsd