Re: [pfSense] pf(4) relative performance: opinions?

2015-04-11 Thread Jim Thompson
> On Apr 11, 2015, at 8:23 PM, Adam Thompson wrote: > > I know a lot of performance work has gone into both FreeBSD and pfSense, but > I haven't tested the limits in a long time, so I'm asking... > > I'm running a pair of firewalls, each with dual Xeon L5520 cpus (4c/8t, > 2.26GHz, 8M L2),

[pfSense] pf(4) relative performance: opinions?

2015-04-11 Thread Adam Thompson
I know a lot of performance work has gone into both FreeBSD and pfSense, but I haven't tested the limits in a long time, so I'm asking... I'm running a pair of firewalls, each with dual Xeon L5520 cpus (4c/8t, 2.26GHz, 8M L2), 48GB triple-channel RAM, where all networking occurs on carp(4) int

Re: [pfSense] sun qfe status?

2015-04-11 Thread Bryan D.
On 2015-Apr-11, at 2:22 PM, Adam Thompson wrote: > I recall seeing reports of problems with Sun 'qfe' (quad-port hme) interfaces > on this list previously; does anyone know what the current status is? Do > they work properly in 2.2.1 i386? > Thanks, > -Adam I'd reported a "runaway process" is

[pfSense] sun qfe status?

2015-04-11 Thread Adam Thompson
I recall seeing reports of problems with Sun 'qfe' (quad-port hme) interfaces on this list previously; does anyone know what the current status is? Do they work properly in 2.2.1 i386? Thanks, -Adam -- -Adam Thompson athom...@athompso.net ___ pfSen

Re: [pfSense] best way to change WAN interface after migration

2015-04-11 Thread Martin Fuchs
Hi ! So you recommend changing to and vice versa ? Does it work in the editor embedded in the gui for /cnd/default.xml ? -Ursprüngliche Nachricht- Von: List [mailto:list-boun...@lists.pfsense.org] Im Auftrag von Espen Johansen Gesendet: Samstag, 11. April 2015 20:58 An: pfSense support a

Re: [pfSense] best way to change WAN interface after migration

2015-04-11 Thread Kostas Backas
Ditto here. I am changing configs in text editor by hand, in order to match Alix interfaces to Intel ones. Best regards Kostas Sent from my iPhone On 11 Απρ 2015, at 22:30, Chris L wrote: >> On Apr 11, 2015, at 11:58 AM, Espen Johansen wrote: >> >> In the past I have edited a config backup

Re: [pfSense] best way to change WAN interface after migration

2015-04-11 Thread Chris L
> On Apr 11, 2015, at 11:58 AM, Espen Johansen wrote: > > In the past I have edited a config backup and restored it. Maybe there are > better ways, but find and replace in a editor does the trick :-) > > Brgds, Espen Be careful you don’t match anything in any certificates and keys or other bas

Re: [pfSense] best way to change WAN interface after migration

2015-04-11 Thread Espen Johansen
In the past I have edited a config backup and restored it. Maybe there are better ways, but find and replace in a editor does the trick :-) Brgds, Espen 11. apr. 2015 20:46 skrev "Martin Fuchs" : > Hi ! > > > > Does anyone have any experience with changing WAN-interfaces ? > > > > We migrated out

[pfSense] best way to change WAN interface after migration

2015-04-11 Thread Martin Fuchs
Hi ! Does anyone have any experience with changing WAN-interfaces ? We migrated out CARP-cluster from one provider to another. On em1 we have provider-old and On em7 we have provider-new. The old provider will switch off his connection soon. We changed the gateways and everything,

Re: [pfSense] pfsense squid sso

2015-04-11 Thread David Latreyte
Hello, thank you a lot for your answer. We’ve already got a windows 2008R2 domain and some pfsense boxes acting as firewall and routers. We now would like to add SSO authentication with squid. I could build a debian box for that but everyone here like pfsense and we would prefer dedicate that

Re: [pfSense] pfsense squid sso

2015-04-11 Thread Nicola Ferrari (#554252)
Hi David. Be patient for my english, I'm italian... I suggest you to install a separated Samba4 appliance to have a DC in your network, and then setup PFSense to authenticate users via LDAP or RADIUS services. Zentyal is one of the most common Samba4 appliances, that you can configure as a DC

Re: [pfSense] NTP failure in 2.2.1?

2015-04-11 Thread Fabian Wenk
Hello Adam On 09.04.15 02:37, Adam Thompson wrote: I'm running 2.2.1-RELEASE (i386) in a new install, and everything's working great so far (or as great as the FUBAR layer 2 lets it work...) except for NTP. No matter what NTP server I pick, it sits in .INIT. state forever. Stopping ntpd and usi