Re: [pfSense] How To install MySQL on Pfsense 2.4

[WebDawg]

You know.  The way the package system is setup now, we should be able to
get bad packages I to pfsense in a better way.  I wonder if we can have a
chroot environment and a manually installed packages part of pfsense.

On May 16, 2017 6:12 PM, "Steve Yates"  wrote:

Supposedly one can just install FreeBSD packages (https://doc.pfsense.org/
index.php/Installing_FreeBSD_Packages ) along with manually installing any
dependencies, but as the page says it "may break the firewall."

--

Steve Yates
ITS, Inc.

-Original Message-
From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Sean
Cavanaugh
Sent: Tuesday, May 16, 2017 4:59 PM
To: pfSense Support and Discussion Mailing List 
Subject: Re: [pfSense] How To install MySQL on Pfsense 2.4

Best practice is to run as few services as possible on a firewall to reduce
the possible attack footprint. The more services you run on the firewall,
the more vulnerable it becomes to being broken into.

That is why the recommendation to virtualize the box and at least logically
partition the services away from affecting the firewall.



-Original Message-
From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of
rai...@ultra-secure.de
Sent: Tuesday, May 16, 2017 8:04 AM
To: pfSense Support and Discussion Mailing List 
Subject: Re: [pfSense] How To install MySQL on Pfsense 2.4


Am 2017-05-16 13:30, schrieb Sean Cavanaugh:
> The only sane way to do this on a single box would be by installing a
> hypervisor on the server ( such as VMware ESXi) and running pfsense as
> a virtual machine within it as well as a second virtual machine to
> host any other non-firewall related applications (MySQL, FreeRADIUS).
>
> There is obviously going to be a performance hit from sharing the
> resources but should be minimal if all you are doing is hosting a user
> database and RADIUS server for pfSense.



While it may not be the most clever idea, technically it should be
possible, right?

I'm not too familiar with the inner workings of pfSense - but I assume
there is a partition or directory in the installation that (provided
pfSense is installed on a HD and not a read-only medium) persists data over
reboots.

One would need to start it with that directory as dbdir.

It's possible to run Snort, haproxy. So, why not MySQL?

OP will have to learn how to create packages, and store the
configuration:
https://doc.pfsense.org/index.php/Developing_Packages
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] How To install MySQL on Pfsense 2.4

[Steve Yates]

Supposedly one can just install FreeBSD packages 
(https://doc.pfsense.org/index.php/Installing_FreeBSD_Packages ) along with 
manually installing any dependencies, but as the page says it "may break the 
firewall."

--

Steve Yates
ITS, Inc.

-Original Message-
From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Sean Cavanaugh
Sent: Tuesday, May 16, 2017 4:59 PM
To: pfSense Support and Discussion Mailing List 
Subject: Re: [pfSense] How To install MySQL on Pfsense 2.4

Best practice is to run as few services as possible on a firewall to reduce the 
possible attack footprint. The more services you run on the firewall, the more 
vulnerable it becomes to being broken into.

That is why the recommendation to virtualize the box and at least logically 
partition the services away from affecting the firewall.



-Original Message-
From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of 
rai...@ultra-secure.de
Sent: Tuesday, May 16, 2017 8:04 AM
To: pfSense Support and Discussion Mailing List 
Subject: Re: [pfSense] How To install MySQL on Pfsense 2.4


Am 2017-05-16 13:30, schrieb Sean Cavanaugh:
> The only sane way to do this on a single box would be by installing a 
> hypervisor on the server ( such as VMware ESXi) and running pfsense as 
> a virtual machine within it as well as a second virtual machine to 
> host any other non-firewall related applications (MySQL, FreeRADIUS).
> 
> There is obviously going to be a performance hit from sharing the 
> resources but should be minimal if all you are doing is hosting a user 
> database and RADIUS server for pfSense.



While it may not be the most clever idea, technically it should be possible, 
right?

I'm not too familiar with the inner workings of pfSense - but I assume there is 
a partition or directory in the installation that (provided pfSense is 
installed on a HD and not a read-only medium) persists data over reboots.

One would need to start it with that directory as dbdir.

It's possible to run Snort, haproxy. So, why not MySQL?

OP will have to learn how to create packages, and store the
configuration:
https://doc.pfsense.org/index.php/Developing_Packages
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] How To install MySQL on Pfsense 2.4

[Sean Cavanaugh]

Best practice is to run as few services as possible on a firewall to reduce the 
possible attack footprint. The more services you run on the firewall, the more 
vulnerable it becomes to being broken into.

That is why the recommendation to virtualize the box and at least logically 
partition the services away from affecting the firewall.



-Original Message-
From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of 
rai...@ultra-secure.de
Sent: Tuesday, May 16, 2017 8:04 AM
To: pfSense Support and Discussion Mailing List 
Subject: Re: [pfSense] How To install MySQL on Pfsense 2.4


Am 2017-05-16 13:30, schrieb Sean Cavanaugh:
> The only sane way to do this on a single box would be by installing a 
> hypervisor on the server ( such as VMware ESXi) and running pfsense as 
> a virtual machine within it as well as a second virtual machine to 
> host any other non-firewall related applications (MySQL, FreeRADIUS).
> 
> There is obviously going to be a performance hit from sharing the 
> resources but should be minimal if all you are doing is hosting a user 
> database and RADIUS server for pfSense.



While it may not be the most clever idea, technically it should be possible, 
right?

I'm not too familiar with the inner workings of pfSense - but I assume there is 
a partition or directory in the installation that (provided pfSense is 
installed on a HD and not a read-only medium) persists data over reboots.

One would need to start it with that directory as dbdir.

It's possible to run Snort, haproxy. So, why not MySQL?

OP will have to learn how to create packages, and store the
configuration:
https://doc.pfsense.org/index.php/Developing_Packages
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Found a Bug?

[Ryan Coleman]

Did you check the logs to see what was filling them? Sounds like a bad 
configuration of something, probably Squid.


> On May 15, 2017, at 3:53 AM, Daniel  wrote:
> 
> Hi there,
> 
> it seems i found a bug. 2 times i run in the same Problem.
> Harddisk in my PfSense went to 100% Disk usages. (suricata logs)
> After booting in rescue mode and deleted 100GB Logs the pfSense loses the 
> whole configuration and I needed to reinstall the whole Server and restore a 
> backup.
> 
> This was happened 2 times with the same behavior. Disk went full – 
> configuration get lost.
> 
> Cheers
> 
> Daniel
> 
> ___
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] How To install MySQL on Pfsense 2.4

[rainer]

Am 2017-05-16 13:30, schrieb Sean Cavanaugh:

The only sane way to do this on a single box would be by installing a
hypervisor on the server ( such as VMware ESXi) and running pfsense as
a virtual machine within it as well as a second virtual machine to
host any other non-firewall related applications (MySQL, FreeRADIUS).

There is obviously going to be a performance hit from sharing the
resources but should be minimal if all you are doing is hosting a user
database and RADIUS server for pfSense.




While it may not be the most clever idea, technically it should be 
possible, right?


I'm not too familiar with the inner workings of pfSense - but I assume 
there is a partition or directory in the installation that (provided 
pfSense is installed on a HD and not a read-only medium) persists data 
over reboots.


One would need to start it with that directory as dbdir.

It's possible to run Snort, haproxy. So, why not MySQL?

OP will have to learn how to create packages, and store the 
configuration:

https://doc.pfsense.org/index.php/Developing_Packages
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] How To install MySQL on Pfsense 2.4

[Sean Cavanaugh]

The only sane way to do this on a single box would be by installing a 
hypervisor on the server ( such as VMware ESXi) and running pfsense as a 
virtual machine within it as well as a second virtual machine to host any other 
non-firewall related applications (MySQL, FreeRADIUS).

There is obviously going to be a performance hit from sharing the resources but 
should be minimal if all you are doing is hosting a user database and RADIUS 
server for pfSense.



-Original Message-
From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of mohsen Abbaspour
Sent: Tuesday, May 16, 2017 12:27 AM
To: list@lists.pfsense.org
Subject: [pfSense] How To install MySQL on Pfsense 2.4

Hello  everyone
English is not my first language , excuse me for mistakes

I know that this is a repetitive questioning   " How  to install Mysql  on
pfsense ?"

But , I searched  almost  topic about that , and finally I dont understand what 
is correct solution ? maybe  install Mysql on pfsense 2.4 ?? if the
answer is yes  so How to do that ?  if  the answer is no   what is
alternative  solution ??

integration  freeradius and  mysql is my reason for  Mysql installation
 ,  I  want to grouped my internet  user and   have separated   group
So tnx


-- 




Check out my professional profile and connect with me on LinkedIn.
http://lnkd.in/RqFEqH
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] How To install MySQL on Pfsense 2.4

[mohsen Abbaspour]

Thanks for your consideration
 unfortunately  My resources  limitation dont allow  me  to run another
 machine , I should  install Mysql   and PFsense on the same machine
Best Regards

On Tue, May 16, 2017 at 9:07 AM, Erik Anderson  wrote:

> pfSense is a purpose-built router distribution, not a general-purpose
> OS. While it may be possible to do what you propose, you *should not*
> do this. Instead, if you require a database server, host it on a
> separate machine.
>
> On Mon, May 15, 2017 at 11:27 PM, mohsen Abbaspour
>  wrote:
> > Hello  everyone
> > English is not my first language , excuse me for mistakes
> >
> > I know that this is a repetitive questioning   " How  to install Mysql
> on
> > pfsense ?"
> >
> > But , I searched  almost  topic about that , and finally I dont
> understand
> > what is correct solution ? maybe  install Mysql on pfsense 2.4 ?? if the
> > answer is yes  so How to do that ?  if  the answer is no   what is
> > alternative  solution ??
> >
> > integration  freeradius and  mysql is my reason for  Mysql installation
> >  ,  I  want to grouped my internet  user and   have separated   group
> > So tnx
> >
> >
> > --
> >
> >
> >
> >
> > Check out my professional profile and connect with me on LinkedIn.
> > http://lnkd.in/RqFEqH
> > ___
> > pfSense mailing list
> > https://lists.pfsense.org/mailman/listinfo/list
> > Support the project with Gold! https://pfsense.org/gold
> ___
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
>



-- 




Check out my professional profile and connect with me on LinkedIn.
http://lnkd.in/RqFEqH
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold