Re: [pfSense] ICMPv6 filtering recommendations with pfSense?

2014-05-21 Thread Olivier Mascia
Le 14 mai 2014 à 03:37, Chris Buechler c...@pfsense.com a écrit : IMO, I agree that it's best to let ICMP flow free on IPv6. ICMP has had a bad reputation for a long time, and it's mostly undeserved in recent times. Jim How should I interpret the code you pointed to? That pfSense do

[pfSense] squid3

2014-05-21 Thread A Mohan Rao
dear all, today i fresh installed squid 3 then i rebooted my pfsense firewall then i try to access pfsense firewall its not access i have gettting msg pls help ... ERRORThe requested URL could not be retrieved -- The following error was encountered while trying to

Re: [pfSense] ICMPv6 filtering recommendations with pfSense?

2014-05-21 Thread Seth Mos
On 21-5-2014 9:11, Olivier Mascia wrote: Le 14 mai 2014 à 03:37, Chris Buechler c...@pfsense.com mailto:c...@pfsense.com a écrit : IMO, I agree that it's best to let ICMP flow free on IPv6. ICMP has had a bad reputation for a long time, and it's mostly undeserved in

Re: [pfSense] ICMPv6 filtering recommendations with pfSense?

2014-05-21 Thread Olivier Mascia
Le 21 mai 2014 à 09:23, Seth Mos seth@dds.nl a écrit : The ICMPv6 traffic that's considered required for things to function properly is automatically allowed. Excellent. Thanks! The rules should automatically allow ICMP6 echo, packet to big and neighbor discovery on the link-local

[pfSense] installing vmtools

2014-05-21 Thread Florio, Christopher N
Hi, I'm trying to install the VMWare tools on my pfsense host. Specifically I'm looking at this documentation - https://doc.pfsense.org/index.php/VMware_Tools Because I don't have a public facing interface, I'm going with this set of instructions - mount -t cd9660 /dev/acd0 /mnt/ cd /tmp

Re: [pfSense] installing vmtools

2014-05-21 Thread Florio, Christopher N
Oh I feel dumb, the first thing is to install perl, which I can't do given my location on the network. Ok so nevermind, sorry. On May 21, 2014, at 2:30 PM, Florio, Christopher N flo...@email.unc.edumailto:flo...@email.unc.edu wrote: Hi, I'm trying to install the VMWare tools on my pfsense

Re: [pfSense] installing vmtools

2014-05-21 Thread Joseph H
Hi Chris, Have you thought about installing the vmware tools from the package list? They are 3rd party, but they work on all I have setup. Joe On Wed, May 21, 2014 at 2:31 PM, Florio, Christopher N flo...@email.unc.edu wrote: Oh I feel dumb, the first thing is to install perl, which I

Re: [pfSense] Filtering on source == gateway addresses

2014-05-21 Thread Olivier Mascia
Le 21 mai 2014 à 16:09, Paul Beriswill paul.berisw...@pdfcomplete.com a écrit : On 05/19/2014 01:14 PM, Olivier Mascia wrote: pfSense 2.1.3 Would it be possible to write rules filtering on one (or all) of the gateway addresses? For instance, using the gateway names as an ALIAS. Or

Re: [pfSense] installing vmtools

2014-05-21 Thread Jim Pingle
On 5/21/2014 2:31 PM, Florio, Christopher N wrote: Oh I feel dumb, the first thing is to install perl, which I can't do given my location on the network. Ok so nevermind, sorry. You can fetch the .tbz file for perl and the compat package mentioned on the page to another system and then copy

Re: [pfSense] installing vmtools

2014-05-21 Thread Florio, Christopher N
Any idea a URL that I could get this package from? Sounds like a good option. On May 21, 2014, at 2:37 PM, Doug Lytle supp...@drdos.info wrote: Joseph H wrote: Have you thought about installing the vmware tools from the package list? They are 3rd party, but they work on all I have setup.

Re: [pfSense] installing vmtools

2014-05-21 Thread Joseph H
Login to pfsense gui, go to Systems - Packages - Available Packages, do a search for Open-VM-Tools and click on the add icon to the right of the package. As long as it has Internet Access it will download and install all necessary packages. On Wed, May 21, 2014 at 2:39 PM, Florio, Christopher N

Re: [pfSense] installing vmtools

2014-05-21 Thread Moshe Katz
On Wed, May 21, 2014 at 2:39 PM, Florio, Christopher N flo...@email.unc.edu wrote: Any idea a URL that I could get this package from? Sounds like a good option. One of these should do it (pick the one appropriate for your architecture)

Re: [pfSense] apu.4c silently dies

2014-05-21 Thread Vick Khera
On Tue, May 20, 2014 at 1:15 AM, mayak ma...@australsat.com wrote: unit will run sometimes for days, or sometimes for several hours, before becoming unresponsive: My gut says overheating. ___ List mailing list List@lists.pfsense.org

Re: [pfSense] apu.4c silently dies

2014-05-21 Thread mayak
On 05/21/2014 10:14 PM, Vick Khera wrote: On Tue, May 20, 2014 at 1:15 AM, mayak ma...@australsat.com wrote: unit will run sometimes for days, or sometimes for several hours, before becoming unresponsive: My gut says overheating. hi vick, man -- you're good -- i was waiting a bit more to post

Re: [pfSense] apu.4c silently dies

2014-05-21 Thread mayak
On 05/21/2014 10:59 PM, Stefan Baur wrote: Am 21.05.2014 22:53, schrieb mayak: i'll be curious to see pc engines proposes a new mounting/heat sync method. if the case had air flow slits on top and on the sides, i'd bet that it would be much cooler. Out of curiosity, did you buy a new case

Re: [pfSense] installing vmtools

2014-05-21 Thread Walter Parker
Given than pfSense 2.1.3 uses FreeBSD 8.3 as the base OS, wouldn't http://ftp1.freebsd.org/pub/FreeBSD/ports/amd64/packages-8.3-release/perl5/ be better location to use for packages? Walter On Wed, May 21, 2014 at 11:57 AM, Moshe Katz mo...@ymkatz.net wrote: On Wed, May 21, 2014 at 2:39 PM,

[pfSense] pfsense performance

2014-05-21 Thread Joseph H
Hi Everyone, I was having a debate with a new network engineer we have and we were discussing how pfSense performs and how it would handle 10G network connections, setup as a transparent firewall, using snort and a few other packages to help monitor and graph traffic. I was saying that as long

Re: [pfSense] pfsense performance

2014-05-21 Thread Adam Thompson
On 14-05-21 08:27 PM, Joseph H wrote: Hi Everyone, I was having a debate with a new network engineer we have and we were discussing how pfSense performs and how it would handle 10G network connections, setup as a transparent firewall, using snort and a few other packages to help monitor and

Re: [pfSense] pfsense performance

2014-05-21 Thread Joseph H
Hi Adam, Thanks for the response, I wonder if I setup a pfsense and use a packet generator maybe I can find out an answer. Once I get a couple of servers freed up which has dual 10G nics, I might give this a try. I have a couple of HP servers with I think 48 cores and 128G of ram being decommed

[pfSense] Web GUI certs

2014-05-21 Thread Volker Kuhlmann
The web GUI uses a default auto-generated cert, which (as expected) causes browser errors. An improved aproach would be to generate a CA, a key, and to load the CA into the browser. That way I can be assured to not accidentally OK the wrong connection, and it tests my understanding of the cert

Re: [pfSense] installing vmtools

2014-05-21 Thread Moshe Katz
On Wed, May 21, 2014 at 5:23 PM, Walter Parker walt...@gmail.com wrote: Given than pfSense 2.1.3 uses FreeBSD 8.3 as the base OS, wouldn't http://ftp1.freebsd.org/pub/FreeBSD/ports/amd64/packages-8.3-release/perl5/ be better location to use for packages? Walter On Wed, May 21, 2014 at

[pfSense] syslog server IP/name

2014-05-21 Thread Volker Kuhlmann
https://pfsense/diag_logs_settings.php Has 3 fields for syslog servers. Says IP addresses must be entered. Does accept names (corresponding entry exists in DHCP server or DNS forwarder). Either the comment is wrong, or error checking is absent (intentionally or accidentally). Volker -- Volker