Re: [pfSense] More than one MAC address on one phys.ethernet interface
Well create a php script like ?php pfSense_ngctl_attach(., re0); ? Execute that before running daemonology commands. But if you just want to test for one time. I cannot imagine keeping that stable without suppport in teh architecture of pfSense. On Mon, Nov 5, 2012 at 11:31 PM, David Brodski da...@brodski.eu wrote: Thank you for the replay, but I it is not working. If I try to use the commands from http://www.daemonforums.org/showpost.php?s=192d3b485d84462d3982051f5959b35ap=19494postcount=12 ngctl mkpeer . eiface hook ether - works ifconfig ngeth0 up - works [2.0.1-RELEASE][admin@pfsense.localdomain]/root(5): ngctl mkpeer ngeth0: bridge lower link0 ngctl: send msg: Protocol family not supported and that is where it does not work anymore. If I try your command: [2.0.1-RELEASE][admin@pfsense.localdomain]/root(2): ngctl ether re0 -iirc ngctl: ether: unknown command Any idea what went wrong? Thanks, David General information: re0 is the external interface, ngeth0 is created after the first command. I can assign an other mac to ngeth0 but of course I can not send any data. [2.0.1-RELEASE][admin@pfsense.localdomain]/root(8): ngctl list There are 5 total nodes: Name: unnamed Type: socket ID: 0010 Num hooks: 0 Name: unnamed Type: socket ID: 000f Num hooks: 0 Name: ngctl31879 Type: socket ID: 002e Num hooks: 0 Name: ngeth0 Type: eiface ID: 002a Num hooks: 0 Name: fwe0Type: ether ID: 0001 Num hooks: 0 [2.0.1-RELEASE][admin@pfsense.localdomain]/root(7): ifconfig fwe0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500 options=8VLAN_MTU ether 02:00:00:00:00:00 ch 1 dma -1 fwip0: flags=8802BROADCAST,SIMPLEX,MULTICAST metric 0 mtu 1500 lladdr 0.0.0.0.0.0.0.0.a.2.ff.fe.0.0.0.0 re0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500 options=389bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC ether 00:03:1d:03:e8:1c inet6 fe80::203:1dff:fe03:e81c%re0 prefixlen 64 scopeid 0x3 inet 83.XXX.XXX.XX netmask 0xfe00 broadcast 83.XXX.XXX.255 nd6 options=3PERFORMNUD,ACCEPT_RTADV media: Ethernet autoselect (100baseTX full-duplex) status: active re1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500 options=389bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC ether 00:03:1d:03:e8:1d inet 192.168.140.2 netmask 0xff00 broadcast 192.168.140.255 inet6 fe80::203:1dff:fe03:e81d%re1 prefixlen 64 scopeid 0x4 nd6 options=3PERFORMNUD,ACCEPT_RTADV media: Ethernet autoselect (1000baseT full-duplex) status: active plip0: flags=8810POINTOPOINT,SIMPLEX,MULTICAST metric 0 mtu 1500 lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST metric 0 mtu 16384 options=3RXCSUM,TXCSUM inet 127.0.0.1 netmask 0xff00 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6 nd6 options=3PERFORMNUD,ACCEPT_RTADV pfsync0: flags=0 metric 0 mtu 1460 syncpeer: 224.0.0.240 maxupd: 128 syncok: 1 pflog0: flags=100PROMISC metric 0 mtu 33200 enc0: flags=0 metric 0 mtu 1536 ngeth0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500 ether 00:00:00:00:00:00 inet6 fe80::203:1dff:fe03:e81c%ngeth0 prefixlen 64 scopeid 0xa nd6 options=3PERFORMNUD,ACCEPT_RTADV On 05.11.2012 16:56, Ermal Luçi wrote: you have to attache the interface yourself to netgraph. ngctl ether $iface -iirc After that you can continue renaming the interface etc... But you will have issues with restart of pfSense. There was never something pushing this to be implemented. On Mon, Nov 5, 2012 at 2:16 PM, David Brodski da...@brodski.eu mailto:da...@brodski.eu wrote: Hi, my ISP gives me one global IP per computer (mac address / dhcp) attached to my cable modem. When I use pfsense as firewall, I can only get one IP since it only has one wan interface. I do not know the IP addresses before, they are not static IPs. Is there a way to do that in pfsense without adding another ethernet card? I already found similar topics, but they are quit old and the links are not working (http://www.mail-archive.com/support@pfsense.com/msg02096.html). It seams that either I need the kernel modul ng_ether.ko or change some scripts since I can not add a bridge to my interfaces. If I run ngctl list I'll get unamed interfaces and the real interfaces re0 and re1 are not in the list, similar to http://forum.pfsense.org/index.php/topic,36722.msg189344.html . The solution they describe is missing some steps or I just do not get it :-D. I also tried
[pfSense] Unsubscribe one of the mails
Hi, I would like to unsubscribe one of my other emails. But doesn't send me the confirmation link. It's about the email n...@utelisys.commailto:n...@utelisys.com (noc [at] utelisys.com). Can someone help me out? Sincerely yours, Mikey van der Worp -- Utelisys Communications B.V. ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] fast CF cards?
On 11/6/2012 2:24 PM, David Burgess wrote: My CF card is getting to be a few years old now, and I really should have a backup ready to go. I really hate slow IO in any machine, and I don't like long drawn-out firmware updates (especially since I'm usually up at 4 am doing them). With that in mind, can anybody recommend a CF card with good write speed and good reliability? I'm not interested in paying $100, as this is an itx machine and for that money I could just jump to an SSD. My favourite vendor has a good selection of Kingston, but I really don't like that brand for anything other than RAM. If anybody knows of something decent under $40, I welcome your recommendation. Thanks. I have a Sandisk 200x (30MB/s) 4gb card here that is very speedy. However, it has an annoying quirk with the disk layout that makes FreeBSD spit an error message on every rw mount. Annoying log spam, but it's still speedy. May just be this model, not sure. Jim ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] fast CF cards?
On Tue, Nov 6, 2012 at 12:30 PM, Jim Pingle li...@pingle.org wrote: I have a Sandisk 200x (30MB/s) 4gb card here that is very speedy. However, it has an annoying quirk with the disk layout that makes FreeBSD spit an error message on every rw mount. Annoying log spam, but it's still speedy. May just be this model, not sure. Thanks for the recommendation. pfsense firmware updates are pretty much pure sequential writes, aren't they? I'm reading reviews and just want to confirm which apecs should matter most for me. db ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] fast CF cards?
I've got a FIrewire 800-based CF gadget, and the SanDisk cards go very fast while running dd to program them with pfSense. The error, isn't, really. The CF reports its entire size, but has kept some sectors in reserve. freeBSD attempts to access these during boot, and the error results. But nothing bad happened. Netgate uses Kingston for the 4GB cards, and SanDisk for the 2GB cards. -- Jim On Nov 6, 2012, at 11:30 AM, Jim Pingle li...@pingle.org wrote: On 11/6/2012 2:24 PM, David Burgess wrote: My CF card is getting to be a few years old now, and I really should have a backup ready to go. I really hate slow IO in any machine, and I don't like long drawn-out firmware updates (especially since I'm usually up at 4 am doing them). With that in mind, can anybody recommend a CF card with good write speed and good reliability? I'm not interested in paying $100, as this is an itx machine and for that money I could just jump to an SSD. My favourite vendor has a good selection of Kingston, but I really don't like that brand for anything other than RAM. If anybody knows of something decent under $40, I welcome your recommendation. Thanks. I have a Sandisk 200x (30MB/s) 4gb card here that is very speedy. However, it has an annoying quirk with the disk layout that makes FreeBSD spit an error message on every rw mount. Annoying log spam, but it's still speedy. May just be this model, not sure. Jim ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] fast CF cards?
This may be more than you want cost-wise, but you can pick up smaller SSDs for just barely under $50: http://www.newegg.com/Product/Product.aspx?Item=N82E16820148579nm_mc=OTC-FroogleNEWcm_mmc=OTC-FroogleNEW-_-Solid+State+Disk-_-Crucial-_-20148579 that's obviously way more space than you need, and much more expensive than your average CF card. On Tue, Nov 6, 2012 at 2:30 PM, Jim Pingle li...@pingle.org wrote: On 11/6/2012 2:24 PM, David Burgess wrote: My CF card is getting to be a few years old now, and I really should have a backup ready to go. I really hate slow IO in any machine, and I don't like long drawn-out firmware updates (especially since I'm usually up at 4 am doing them). With that in mind, can anybody recommend a CF card with good write speed and good reliability? I'm not interested in paying $100, as this is an itx machine and for that money I could just jump to an SSD. My favourite vendor has a good selection of Kingston, but I really don't like that brand for anything other than RAM. If anybody knows of something decent under $40, I welcome your recommendation. Thanks. I have a Sandisk 200x (30MB/s) 4gb card here that is very speedy. However, it has an annoying quirk with the disk layout that makes FreeBSD spit an error message on every rw mount. Annoying log spam, but it's still speedy. May just be this model, not sure. Jim ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] fast CF cards?
I did have some issues related to running pfSense off of flash memory on certain motherboards (Jetway NF96-525-FL). It was some off compatibility quirk, the same flash memory worked just fine on another board, and that board was perfectly happy with an old hard drive on the same exact IDE channel. But this was not a case of just a warning log message, on 1.3 it would lock up the firewall once every few days, on 2 it would only boot maybe 1/4 of the time. But if you are currently using a CF card successfully, hopefully a new one will continue to work just fine. On Tue, Nov 6, 2012 at 2:43 PM, Jim Thompson j...@netgate.com wrote: I've got a FIrewire 800-based CF gadget, and the SanDisk cards go very fast while running dd to program them with pfSense. The error, isn't, really. The CF reports its entire size, but has kept some sectors in reserve. freeBSD attempts to access these during boot, and the error results. But nothing bad happened. Netgate uses Kingston for the 4GB cards, and SanDisk for the 2GB cards. -- Jim On Nov 6, 2012, at 11:30 AM, Jim Pingle li...@pingle.org wrote: On 11/6/2012 2:24 PM, David Burgess wrote: My CF card is getting to be a few years old now, and I really should have a backup ready to go. I really hate slow IO in any machine, and I don't like long drawn-out firmware updates (especially since I'm usually up at 4 am doing them). With that in mind, can anybody recommend a CF card with good write speed and good reliability? I'm not interested in paying $100, as this is an itx machine and for that money I could just jump to an SSD. My favourite vendor has a good selection of Kingston, but I really don't like that brand for anything other than RAM. If anybody knows of something decent under $40, I welcome your recommendation. Thanks. I have a Sandisk 200x (30MB/s) 4gb card here that is very speedy. However, it has an annoying quirk with the disk layout that makes FreeBSD spit an error message on every rw mount. Annoying log spam, but it's still speedy. May just be this model, not sure. Jim ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] Strange problem after auto update
Hi, I was able to do the upgrade just now, finally... and no luck. From: Chris Buechler c...@pfsense.org Sent: Tue Nov 06 17:17:02 NCT 2012 To: pfSense support and discussion list@lists.pfsense.org Subject: Re: [pfSense] Strange problem after auto update You can try either upgrading to a November 6 or newer snapshot, or just removing the line containing Done. This doesn't change the situation unfortunately... set state-policy if-bound from /etc/inc/filter.inc and reloading the filter rules under StatusFilter reload. See if that changes anything. That line isn't even present in /etc/inc/* : [2.1-BETA0][r...@pfsense2.univ-nc.nc]/etc/inc(8): grep state-policy * [2.1-BETA0][r...@pfsense2.univ-nc.nc]/etc/inc(9): [2.1-BETA0][r...@pfsense2.univ-nc.nc]/etc/inc(10): grep if-bound * [2.1-BETA0][r...@pfsense2.univ-nc.nc]/etc/inc(11): I'm restoring again right now. Any other idea ? bye, and thanks so much again for your time -- Jerome Alet ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
