[pfSense] RRD persistence

2015-01-07 Thread Nenhum_de_Nos
Hail,

I have a couple of pfsense using the nanobsd approach. Great stability, great 
for flash memory.
But I always loose my rrd data when I reboot.

is there a way to have it written like once a day/week ?

thanks,

matheus


-- 
We will call you cygnus,
The God of balance you shall be

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

http://en.wikipedia.org/wiki/Posting_style
___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] RRD persistence

2015-01-07 Thread Jeppe Øland
Doesn't it automatically save the latest files when you reboot?
I don't reboot often, but I don't remember ever having lost data
(except if the firewall crashes - which did happen a few times in the
past).

Regards,
-Jeppe

On Wed, Jan 7, 2015 at 5:05 AM, Peder Rovelstad provels...@comcast.net wrote:
 System: Advanced: Miscellaneous: RAM Disk Settings (near page bottom)

 -Original Message-
 From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of
 Nenhum_de_Nos
 Sent: Wednesday, January 07, 2015 6:01 AM
 To: list@lists.pfsense.org
 Subject: [pfSense] RRD persistence

 Hail,

 I have a couple of pfsense using the nanobsd approach. Great stability,
 great for flash memory.
 But I always loose my rrd data when I reboot.

 is there a way to have it written like once a day/week ?

 thanks,

 matheus


 --
 We will call you cygnus,
 The God of balance you shall be

 A: Because it messes up the order in which people normally read text.
 Q: Why is top-posting such a bad thing?

 http://en.wikipedia.org/wiki/Posting_style
 ___
 List mailing list
 List@lists.pfsense.org
 https://lists.pfsense.org/mailman/listinfo/list

 ___
 List mailing list
 List@lists.pfsense.org
 https://lists.pfsense.org/mailman/listinfo/list
___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] RRD persistence

2015-01-07 Thread Peder Rovelstad
System: Advanced: Miscellaneous: RAM Disk Settings (near page bottom)

-Original Message-
From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of
Nenhum_de_Nos
Sent: Wednesday, January 07, 2015 6:01 AM
To: list@lists.pfsense.org
Subject: [pfSense] RRD persistence

Hail,

I have a couple of pfsense using the nanobsd approach. Great stability,
great for flash memory.
But I always loose my rrd data when I reboot.

is there a way to have it written like once a day/week ?

thanks,

matheus


-- 
We will call you cygnus,
The God of balance you shall be

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

http://en.wikipedia.org/wiki/Posting_style
___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list

___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Using Snort in PFSense, slowdowns the internet connection

2015-01-07 Thread Chris Buechler
On Wed, Jan 7, 2015 at 6:07 AM, Yusufi M R yu...@global-analytics.com wrote:
 Hi All,



 We are using PFSense as a Firewall in our production environment. For
 IDS/IPS, we have also installed Snort package into it. In Snort, there are
 two rulesets one from the Snort itself and other one from Emerging Threat.
 We have enabled Snort Community, Snort VRT Free and ETOpen.

 We have users connected behind this Firewall. We are facing the issue like
 slowness in the internet. The images takes long time to load. When I disable
 block offenders, it works fine. But the purpose of doing this whole is to
 prevent users from the attacks/offenders.

 Is all the above ruleset needed for Intrusion Detection and Prevention ? How
 can I increase the performance and be secure in parallel ?


There is effectively no difference between running with blocking and
without from a general performance perspective. I'm guessing you're
blocking something that is causing delays elsewhere, like maybe a name
server that then requires your clients to wait for a timeout and try
another, or something similar along those lines. Check your alerts and
what you're blocking.
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] How to change driver for NIC

2015-01-07 Thread compdoc
 It is only pfSense 2.2, that has this not usuable speed from other VM's 
in the Xenserver.

I installed xenserver with a pfSense guest on a machine, and had the same
problem. Traffic from hosts on the lan through the pfSense guest to the wan
is nice and fast, but traffic from other guests through pfSense drops to a
crawl. 

From what I can gather, this is a problem with the freebsd 10 drivers, and
not really related to pfSense. 

And unfortunately, you can't change the NIC emulation in xenserver for
guests. I tried in several ways. Freebsd 10 senses the xen environment and
installs the xen NIC drivers and there seems no way to change this. 

There are enough people with freebsd having this problem that I'm sure this
will be fixed before long.



___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] RRD persistence

2015-01-07 Thread Nenhum_de_Nos

On Wed, January 7, 2015 11:27, Jim Pingle wrote:
 On 01/07/2015 09:07 AM, Jeppe Øland wrote:
 Doesn't it automatically save the latest files when you reboot?
 I don't reboot often, but I don't remember ever having lost data
 (except if the firewall crashes - which did happen a few times in the
 past).

 It does save them on a clean reboot. It can't save them if the power is
 cut or the OS crashes/reboots uncleanly, though.

 Some people reboot by yanking the power out from under a device or
 using a hardware (or VM) reset button. That works, of course, but should
 be a last resort. Rebooting via Diagnostics  Reboot or the equivalent
 console/ssh menu option is best.

I had two power outages, in both the box was up for about 180 days. So my last 
year traffic is all
lost :(

thanks for the tips !

matheus

-- 
We will call you cygnus,
The God of balance you shall be

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

http://en.wikipedia.org/wiki/Posting_style
___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] RRD persistence

2015-01-07 Thread Nenhum_de_Nos

On Wed, January 7, 2015 14:37, Vick Khera wrote:
 On Wed, Jan 7, 2015 at 7:01 AM, Nenhum_de_Nos math...@eternamente.info
 wrote:

 is there a way to have it written like once a day/week ?


 In system - advanced - miscellaneous tab, there is an option to set how
 frequently to back up the RRD databases.

thanks for all replies. The longest time is once a day. Thats it now.

thanks :)

matheus

-- 
We will call you cygnus,
The God of balance you shall be

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

http://en.wikipedia.org/wiki/Posting_style
___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list


[pfSense] Using Snort in PFSense, slowdowns the internet connection

2015-01-07 Thread Yusufi M R
Hi All,

We are using PFSense as a Firewall in our production environment. For IDS/IPS, 
we have also installed Snort package into it. In Snort, there are two rulesets 
one from the Snort itself and other one from Emerging Threat. We have enabled 
Snort Community, Snort VRT Free and ETOpen.

We have users connected behind this Firewall. We are facing the issue like 
slowness in the internet. The images takes long time to load. When I disable 
block offenders, it works fine. But the purpose of doing this whole is to 
prevent users from the attacks/offenders.

Is all the above ruleset needed for Intrusion Detection and Prevention ? How 
can I increase the performance and be secure in parallel ?

If any one of the ruleset is good enough to secure from the intrusion, please 
suggest. Would be glad if get help on which categories to be block. If could 
get the list of high attacks category, will do.

Looking forward for your early response.

Regards,
Yusuf
___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] RRD persistence

2015-01-07 Thread Jim Pingle
On 01/07/2015 09:07 AM, Jeppe Øland wrote:
 Doesn't it automatically save the latest files when you reboot?
 I don't reboot often, but I don't remember ever having lost data
 (except if the firewall crashes - which did happen a few times in the
 past).

It does save them on a clean reboot. It can't save them if the power is
cut or the OS crashes/reboots uncleanly, though.

Some people reboot by yanking the power out from under a device or
using a hardware (or VM) reset button. That works, of course, but should
be a last resort. Rebooting via Diagnostics  Reboot or the equivalent
console/ssh menu option is best.

Jim

___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] RRD persistence

2015-01-07 Thread Vick Khera
On Wed, Jan 7, 2015 at 7:01 AM, Nenhum_de_Nos math...@eternamente.info
wrote:

 is there a way to have it written like once a day/week ?


In system - advanced - miscellaneous tab, there is an option to set how
frequently to back up the RRD databases.
___
List mailing list
List@lists.pfsense.org
https://lists.pfsense.org/mailman/listinfo/list