Re: [pfSense] Bandwidth Mismatch between pfSense and Data Center Provider...

2018-05-23 Thread Chuck Mariotti
This is certainly possible, but the RRD GUI has a choice to display stats for WAN (Default) and LAN... selectin LAN essentially swaps the In/Out columns +/- a few gigs... We are running ntopng but it only has data for the last 12 days... the one webserver that is likely causing a lot of usage

Re: [pfSense] Syntax error in rules.debug for lagg0 (WAN) after upgrade to 2.4.3_1

2018-05-23 Thread Steve Yates
I found Suricata won't start, and I'm guessing the error Suricata is logging when it terminates (leaving its .pid file behind), "23/5/2018 -- 22:42:18 - -- [ERRCODE: SC_ERR_INVALID_ARGUMENT(13)] - alert-pf: Could not validate pf table: snort2c, module init failed." ...is related to

[pfSense] Syntax error in rules.debug for lagg0 (WAN) after upgrade to 2.4.3_1

2018-05-23 Thread Steve Yates
After upgrading our HA routers from 2.4.2_1 to 2.4.3_1, every few minutes they are logging: There were error(s) loading the rules: /tmp/rules.debug:242: syntax error - The line in question reads [242]: pass out route-to ( lagg0 64.79.96.145 ) from to !/ tracker 105913 keep state

Re: [pfSense] Upgrades to 2.4.3.x failing after updating metadata

2018-05-23 Thread Steve Yates
FWIW I upgraded our SG-4860 pair and saw the same behavior, fails after the metadata update. I waited 5 minutes and it did not restart and saw no indication in system log it was going to, or upgrading. -- Steve Yates ITS, Inc. -Original Message- From: Steve Yates Sent:

Re: [pfSense] Bandwidth Mismatch between pfSense and Data Center Provider...

2018-05-23 Thread Melvin Backus
Is it possible these numbers are for both interfaces on the pfSense box? If so, do they include both inbound and outbound traffic for both? That would effectively double the true data transfer if traffic isn't being routed between other subnets / interfaces on the firewall. I don't have RRD

Re: [pfSense] Bandwidth Mismatch between pfSense and Data Center Provider...

2018-05-23 Thread Steve Yates
I don't have a straight answer for you, but are you sure the DC is counting all traffic and not just HTTP/SMTP/etc? I would think they are, but... Something that may help...the firewall/rules page tracks data usage in the States column. I'm assuming from when it was last booted. Perhaps make

[pfSense] memstick-2.4.3-RELEASE-amd64.img debugflags needed for ZFS

2018-05-23 Thread Jason Hellenthal
Sorry for the long subject but has anyone experienced in the ZFS install for a mirrored setup of two disks that you need to set kern.geom.debugflags=16 to allow shooting yourself in the foot just to get the kernel to stop denying you access to the disks ? The UFS install works as intended.

[pfSense] Bandwidth Mismatch between pfSense and Data Center Provider...

2018-05-23 Thread Chuck Mariotti
We've run into a data overage situation at a datacenter... We get charged a premium per GB over 500GB (yes I know, stupid). Their reporting system seems to indicate significantly less data usages vs pfSense's RRD reporting... their billing system seems to be indicating overage similar to their

Re: [pfSense] How could I block messages trying to pass as from my net?

2018-05-23 Thread Alberto José García Fumero
El mar, 22-05-2018 a las 20:54 -0400, John Johnstone escribió: > On 5/18/2018 10:42 AM, Alberto José García Fumero wrote: > > > Im trying to block spam (for instance, from 185.234.217.232). > > As far as I know, it's trying to pass as a message from my very > > net: > > > > Transcript of session