Re: [pfSense] SSH Bruteforce

mail in error, please notify us immediately by e-mail or telephone and delete the e-mail without copying or disclosing its contents to any other person. On 12/20/2017 01:25 PM, WebDawg wrote: > Also make sure to use private key and public key > > On Dec 20,

[pfSense] SSH Bruteforce

to limit such kind of attacks. Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

[pfSense] FRR and IPv6 Bug

Unicast neighbor is configured This happened because the FRR config puts all IPv6 related stuff in in IPv4 Stack configuration. Is there any way to to it correctly with the GUI or should I use raw config instead? Cheers Daniel ___ pfSense

[pfSense] haproxy Update

Hi there, i updated HAProxa from Version 1.7.9 to 1.8 via GUI. Afer upgrade haproxy seems not redirecting anymore. Are they known issues with upgrading to version 1.8? Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org

[pfSense] FRR restart prevention

on. In this case you also can configure the BGP/OSPF deamon without any hard restarts are needed. It’s just a Hint to make it more better. Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the proj

[pfSense] FRR restart prevention

Hi there, is there anyway to prevent the whole restart of FRR when the config has changed? Problem is durin a restart the connectivity gets lost and when you do this a couple of time it could be that you network is flapping and maybe some providers user damping. Cheers Daniel

[pfSense] Monitor BGP Sessions

Hi there, i run FRR on my PfSense boxes and I wanted to monitor all my BGP Sessions. As I see there are a lot tools for SNMP but it seems I need to get some MIBS which I need to download. Is there anyway to load a larg list of all MIBS to Pfsense? Cheers Daniel

Re: [pfSense] BGP and NAT

Hi, Problem was found by my self. I just added to all Interfaces which are doing BGP the Outbound NAT rules. Am 29.11.17, 13:48 schrieb "List im Auftrag von Daniel" <list-boun...@lists.pfsense.org im Auftrag von dan...@linux-nerd.de>: Hi there, i have

[pfSense] BGP and NAT

the Public Interface where all my Public networks are located on? Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] pfsense 2.3 -> 2.4 upgrade?

I Updates 3 Firewalls all without any problems. Am 26.11.17, 13:04 schrieb "List im Auftrag von Eero Volotinen" : just planning to upgrade my sg-8860 from pfsense 2.3 to 2.4. is there any known issues? it's

Re: [pfSense] pfsense ipv6 not working

You also need to enbale it in the Setting.. tick te IPv6 Box. Am 21.11.17, 19:38 schrieb "List im Auftrag von Steve Yates" : Starting at the top level, do you have a firewall rule allowing ICMP for IPv6? --

Re: [pfSense] quagga/bgp

In this Case, FRR has a text box. I will configure FRR via CLI and Post the config later to the GUI at the text box. This is how I will do this. I tried it via GUI but this is wiered to configure it and a lot of “Clicking” ( Cheers Daniel Am 19.11.17, 05:34 schrieb "List im Auftra

[pfSense] quagga/bgp

Here this, is anyone using quagga with bgpd as a self installed package on pfsense? I don’t want to use openBGPd and I also don’t want to use FRR because I am completely new in FRR. My idea is to use quagga with bgpd daemon on pfsense. Is there any problems? Cheers Daniel

[pfSense] IPv6 nat

hops max, 80 byte packets 1 fd12:38ce:2472:a35e::3 (fd12:38ce:2472:a35e::3) 0.071 ms 0.098 ms 0.087 ms 2 * * * 3 * * * I am not interested to use public IPv6-Addresses in my LAN Cheers Daniel ___ pfSense mailing list https

[pfSense] Packetloss

. Is there anyway in Pfsense to increase the Buffer Size? Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

[pfSense] CARP Interface doese not sync

manually to check logs or so? Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Strange packetloss

and logs also looking OK for me. > > > > Maybe someone can help me out and give me some ideas > > > > Cheers > > > > Daniel > > ___ > pfSense mail

Re: [pfSense] Strange packetloss

i, Oct 20, 2017 at 2:00 PM, Daniel <dan...@linux-nerd.de> wrote: > Hi Everyone, > > > > actually i have an any/any rule applied on all my interfaces. This I did > actually only for debugging issues. > > But I can see that packets st

[pfSense] Strange packetloss

and give me some ideas Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] ICMP Rate Limit

of some limitations. But more funny is – I see the same loss on both Firewalls. Am 17.10.17, 14:25 schrieb "List im Auftrag von ibrahim uçar" <list-boun...@lists.pfsense.org im Auftrag von ucribra...@gmail.com>: Hi Daniel, I hope that I did understand you :). You sho

[pfSense] Clear interface stats

Hi there, is there any way to clear the interface counters? I had same errors on my LAG Interface ( in/out 0/10283) somethink link this. I just wanted to clear that counters that it is 0/0 again. I read something with netstat –iz ? Cheers Daniel

[pfSense] pfSense virtualisation

Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Interface Errors

One other question regarding LAG: None This protocol is intended to do nothing: it disables any traffic without disabling the lagg interface itself. This means it will not allow any traffic. So in clear: Interface is not reachable anymore? Cheers Daniel

[pfSense] Interface Errors

Hi There, i have a LAG Interface which has actually only one NIC included. I was looking on the Interface Stats and I see a lot off errors: In/Out Error: 0/131935 Is there any way to debug this errors and reset the counters? Cheers Daniel

Re: [pfSense] bandwithd

Afer rebooting the firewall it should work. Dont know why ;) -- Grüsse Daniel Am 31.08.17, 22:47 schrieb "List im Auftrag von Steve Yates" <list-boun...@lists.pfsense.org im Auftrag von st...@teamits.com>: For what it's worth we installed this package yesterday and had

[pfSense] bandwithd

to Count traffic for each IP. -- Grüsse Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] massive CARP Failover

https://www.dropbox.com/s/pq953p0wbsfseu7/Screenshot%202017-06-08%2011.19.07.png?dl=0 Yes i am sure ;) -- Grüsse Daniel Am 08.06.17, 01:12 schrieb "List im Auftrag von Espen Johansen" <list-boun...@lists.pfsense.org im Auftrag von pfse...@gmail.com>: Are you sure y

Re: [pfSense] massive CARP Failover

Hi, the Sync interface is connected directly without a Switch. But Carp is running WAN/LAB for example. -- Grüsse Daniel Am 07.06.17, 16:04 schrieb "List im Auftrag von Espen Johansen" <list-boun...@lists.pfsense.org im Auftrag von pfse...@gmail.com>: I assume you

Re: [pfSense] massive CARP Failover

Both are Physical. -- Grüsse Daniel Am 07.06.17, 14:34 schrieb "List im Auftrag von Ivo Tonev" <list-boun...@lists.pfsense.org im Auftrag von i...@tonev.pro.br>: Firewalls are virtual or physical servers? On Wed, Jun 7, 2017 at 9:12 AM, Daniel <dan...@l

Re: [pfSense] massive CARP Failover

Hi, Firewall on the Switch is the latest installed. The Switch is just simple installed. No VLANS actually just IGMP disabled. Carp has for sure 3 IPs. 2 Dedicated for each Server and one CARP (Virtual Failover per Subnet) -- Grüsse Daniel Am 06.06.17, 00:04 schrieb "List im Auftra

[pfSense] massive CARP Failover

Netgear JGS524Ev2 Mayme someone has some experience with it? -- Grüsse Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Found a Bug?

Hi, no i think not. When I wanted to add a route by hand it says that it already exists. So I am absolutely confused why this can happen. -- Grüsse Daniel Am 18.05.17, 15:12 schrieb "List im Auftrag von WebDawg" <list-boun...@lists.pfsense.org im Auftrag von webd...@gmail.c

Re: [pfSense] Found a Bug?

Hi, yes, as i said it was from Suricata. -- Grüsse Daniel Am 16.05.17, 20:27 schrieb "List im Auftrag von Ryan Coleman" <list-boun...@lists.pfsense.org im Auftrag von ryan.cole...@cwis.biz>: Did you check the logs to see what was filling them? Sounds like a ba

Re: [pfSense] Found a Bug?

Hi, as i already wrote – Suricata Logs. The Problem is not that the disc is filling up – the problem is that the config disappears -- Grüsse Daniel Am 16.05.17, 01:59 schrieb "List im Auftrag von WebDawg" <list-boun...@lists.pfsense.org im Auftrag von webd...@gmail.com>:

[pfSense] Found a Bug?

. This was happened 2 times with the same behavior. Disk went full – configuration get lost. Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

[pfSense] Found a Bug?

. This was happened 2 times with the same behavior. Disk went full – configuration got lost. Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] HAproxy URL Redirect

Hi, this ACLs is what i want. Could you provide me some examples how to do? http://foobar.com needs to be redirect to https://bar.com -- Grüsse Daniel Am 05.05.17, 23:53 schrieb "List im Auftrag von PiBa" <list-boun...@lists.pfsense.org im Auftrag von pba_...@yahoo.com>

[pfSense] HAproxy URL Redirect

? -- Grüsse Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

[pfSense] Daily Mail from pfSense

Hi, there is a package wich is called Mail Report. Is it possible to generate a daily mail with Graphs? As i understand it seems that i am only able to send log files. Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo

Re: [pfSense] Documentation about acme

/ Now i need to know how i can import these Certs to pfsense :-( I thought its doing automatically Cheers daniel > Am 16.02.2017 um 19:48 schrieb Arthur Wiebe <arthur.wi...@nerdsonsite.com>: > > OK yeah I am using the DNS method on a load balancer as well but using this >

[pfSense] Documentation about acme

Hi there, is there any Documentation and configuration Examples for acme to manage it via the GUI? For Example local DocRoot or DNS Setup or what ever. I use PowerDNS but i didnt know what for Information he wants to have to update the zones. Cheers Daniel

Re: [pfSense] BandwithD

Ok so i can also use bandwithD on a separate Server and push data with softlowd from pfsense ;) > Am 16.02.2017 um 15:41 schrieb Ivo Tonev <i...@tonev.pro.br>: > > It was removed. You can use netflow with netflow colector in another server. > > Em 16 de fev de 2017

[pfSense] BandwithD

Hi there, is it possible that bandwithD is removed from the Packages? I wanted to install it and i cant see it anymore. Is there any other way or any other way to track Traffic per IP? Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org

[pfSense] Inbound HAProxy or Load Balancer

/24 i got no response. I read somethink about NAT reflection but i didnt understand how to configure it correctly. Could someone give me an expample how to configure inbound load balancing with HA proxy oder load balancer? Cheers Daniel ___ pfSense

Re: [pfSense] CARP random Failover

achines ? if so, is Macspoofing enabled ? > > 2017-02-04 20:23 GMT+01:00 Daniel <dan...@linux-nerd.de>: >> Hi There, >> >> anyone can help me to debug my CARP problem? >> My Problem is that my CARP interfaces randomly toggle from Master to Backup >> and serval sec

[pfSense] CARP random Failover

i can proof the connections or something like that. Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Acme SSL Certificates

ieb Daniel <dan...@linux-nerd.de>: > > Hi there, > > yesterday i saw the new package ACME on pfSense. So i installed it and wanted > to try it. > I have a Domain which is handled with haproxy. > > But it seems that i am not able to generate certificates. Anyone ca

[pfSense] Acme SSL Certificates

it? Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

[pfSense] Strange Blocking

,block,in,4,0x0,,64,12732,0,DF,6,tcp,40,10.0.3.63,10.0.3.254,1503,53487,0,RA,0,2253571189,0,, On the LAN Device i have an ANY/ANY Rule. On WAN/DMZ Rule i have a Source Any - Dest 10.0.3.0/24 allow Rule (for debugging) Anyone have an Idea? Cheers Daniel

[pfSense] Freeradius after upgrade hangs

... overwrite! Loading package configuration... done. Configuring package components... Loading package instructions... Custom commands... Executing custom_php_install_command()… Since 2 hours, should it be normal? Cheers Daniel ___ pfSense mailing list https

Re: [pfSense] add Blocking in suricata just for some IPs

ur image showed. > > One caveat to country blocking is Microsoft has started using IPv4 blocks > allocated to it in other countries for its Azure service, since they ran out. > > -- > > Steve Yates > ITS, Inc. > > -Original Message- > From: List [mailto:lis

Re: [pfSense] add Blocking in suricata just for some IPs

pfblocker is a L7 IDS/IPS Protection? > Am 20.06.2016 um 22:26 schrieb Ducky BUNG <ducky.b...@gmail.com>: > > Use pfblocker package for this. > > > > On 06/20/2016 08:27 PM, Daniel Eschner wrote: >> Hi to everyone, >> >> is it possible to

Re: [pfSense] add Blocking in suricata just for some IPs

ble the alerting and select to not automatically > block the bad traffic that may be easier. > > -- > > Steve Yates > ITS, Inc. > > -Original Message- > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Daniel Eschner > Sent: Monday, June 20, 2016

Re: [pfSense] add Blocking in suricata just for some IPs

the > interface though. > > However if you just enable the alerting and select to not automatically > block the bad traffic that may be easier. > > -- > > Steve Yates > ITS, Inc. > > -Original Message- > From: List [mailto:list-boun...@lists.pfse

[pfSense] PFSense and Kibana

Hi there, i run Suricata on a pfSense. I Try to build some Dashboards. For the First everthing seems running but it seems i have Problems with domains like linux-nerd.de In the Dashboard its shown as linux All Domains or attacks or wha ever with - in the Word get broken.

[pfSense] CARP

that is is not so sensible? Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Snort or Suricata

> > > How do you have Snort configured to differentiate between incoming and > outgoing traffic? Mhh, dont configured anythink. Just put the rules in my WAN interface. Maybe i have to spend more time and read more documentation on it ___ pfSense

Re: [pfSense] Kibana ELK Stack logging

i fixed everything by my self ;) Its working now ;) > Am 31.05.2016 um 16:23 schrieb Koray AGAYA <hackinde...@gmail.com>: > > Hi daniel > > How can I help yours for ELK > 30 May 2016 23:27 tarihinde "Daniel Eschner" <dan...@linux-nerd.de> yazdı: &

[pfSense] Kibana ELK Stack logging

Hi all, is anyone here using Kibana with ELK Stack in actual Versions? I cant get it running and maybe someone can help me out ;) Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold

Re: [pfSense] problems captive portal after upgrade from 2.2.6 to 2.3

7:35 Asunto: Re: [pfSense] problems captive portal after upgrade from 2.2.6 to 2.3 Same problem with me, even refreshing on mobile devices does not do any good. I revert back to 2.2.6 From: List <list-boun...@lists.pfsense.org> on behalf

[pfSense] Routing Question

Hi there, can anyone tell me how is it possible to route a Public Network thought a Transfer-Network? When i create a (Gateway rule) i get errors :-( I dont want to use NAT or somethink like that. ___ pfSense mailing list

Re: [pfSense] Routing Issue

) 0.442 ms 0.366 ms 0.324 ms 2 r1ffm.de.vianw.net (212.168.1.221) 4.573 ms 4.814 ms 4.766 ms 3 xe-5-3-2-0.fra-006-score-1-re0.interoute.net (89.202.134.177) 7.794 ms 5.978 ms 10.017 ms > Am 10.05.2016 um 22:12 schrieb Daniel Eschner <dan...@linux-nerd.de>: > > Let my

Re: [pfSense] Routing Issue

> -- > > Steve Yates > ITS, Inc. > > -Original Message- > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Daniel Eschner > Sent: Tuesday, May 10, 2016 2:32 PM > To: list@lists.pfsense.org > Subject: [pfSense] Routing Issue > > Hi there

[pfSense] Routing Issue

that the .1 is shown in the Interface? All IPs are Public IPs Hope you understand what i mean ;) Cheers Daniel ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

[pfSense] problems captive portal after upgrade from 2.2.6 to 2.3

i have update to 2.3 ( a fantastic job) but in my case when i login in captive portal, the browser no redirect to web page ,i need update (F5) the web browser and then i have access to web page. i have tryed with iexplore, firefox, opera, chrome and with alls the web browser the results is the

[pfSense] pfSense + OpenLDAP + OpenVPN + OTP (RADIUS?)

in pfSense? Thanks and best regards Daniel -- Daniel Lopes de Carvalho http://www.unisim.cepetro.unicamp.br dan...@cepetro.unicamp.br 19 3521-1221 ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold

Re: [pfSense] pfSense IP stack crashing.

do you have configurate limiters? https://redmine.pfsense.org/issues/4310 - Mensaje original - De: "Bryant Zimmerman" Para: "pfSense Support and Discussion Mailing List" Enviados: Jueves, 15 de Octubre 2015 20:04:51 Asunto: Re:

Re: [pfSense] upgrading

‎This should answer your questions:  https://doc.pfsense.org/index.php/Upgrade_Guide Von: Curtis Maurand Gesendet: Donnerstag, 10. September 2015 17:30 An: pfSense Support and Discussion Mailing List Betreff: [pfSense] upgrading This has probably been covered, but I'm about to do an

[pfSense] Fwd: captive portal doesn´t work after upgrade to 2.2

hi. first of all to thank for the fabulous work that the team pfsense . My problem is this , after upgrading to version 2.2 from 2.1.5 . access to captive portal does not work. My configuration is as follows . the captive portal runs on a dedicated interface with a virtual ip carp , which use

[pfSense] captive portal doesn´t work after upgrade to 2.2

hi. first of all to thank for the fabulous work that the team pfsense . My problem is this , after upgrading to version 2.2 from 2.1.5 . access to captive portal does not work. My configuration is as follows . the captive portal runs on a dedicated interface with a virtual ip carp , which use

[pfSense] captive portal doesn´t work after upgrade to 2.2

- Mensaje reenviado - good morning. first of all to thank for the fabulous work that the team pfsense . My problem is this , after upgrading to version 2.2 from 2.1.5 . access to captive portal does not work. My configuration is as follows . the captive portal runs on a

[pfSense] captive portal doesn´t work after upgrade to 2.2

good morning. first of all to thank for the fabulous work that the team pfsense . My problem is this , after upgrading to version 2.2 from 2.1.5 . access to captive portal does not work. My configuration is as follows . the captive portal runs on a dedicated interface with a virtual ip

Re: [pfSense] pfsense hardware for a proxy, 1U w/ 12 depth

I have 2x http://www.supermicro.com/products/system/1U/5015/SYS-5015A-EHF-D525.cfm. Should fit your depth limitation, I have yet to hit performance problems with it and know that others on the list use this system as well. On Wed, May 2, 2012 at 4:08 PM, Ugo Bellavance u...@lubik.ca wrote: Hi,

Re: [pfSense] 802.1X VLAN function and switch support

Sorry, it is in the wiki on the FreeRadius site. Regards, Daniel Davis -Original Message- From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On Behalf Of bsd Sent: Thursday, 15 December 2011 7:10 PM To: pfSense support and discussion Subject: Re: [pfSense

Re: [pfSense] 802.1X VLAN function and switch support

(NAC) can return the correct IETF attributes such as Tunnel-Type, Tunnel-Medium-Type and Tunnel-Private-Group-Id it will generally work. This is all supported by FreeRadius and well documented in the wiki with example configs for numerous different switch manufacturers. Regards, Daniel Davis

Re: [pfSense] 3G USB Modem installation on PFSENSE

in addition to pfSense, especially when pfSense is _behind_ the Windows box and therefore not firewalling the WAN link. -- Regards,     The Honeymonster aka Daniel Llewellyn ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman

Re: [pfSense] Multiple IPSEC Mutual PSK + Xauth Tunnels

Bump... any ideas? From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On Behalf Of Daniel Davis Sent: Wednesday, 2 November 2011 3:09 PM To: 'pfSense support and discussion' Subject: [pfSense] Multiple IPSEC Mutual PSK + Xauth Tunnels We have a situation where all our

Re: [pfSense] Replacing CheckPoint Firewall-1 with pfSense

the help you get from most CCSP's. Good luck. Regards, Daniel ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list -- This message has been scanned for viruses and dangerous content

Re: [pfSense] Forwarding an external port according to user

. Regards, Daniel Davis -Original Message- From: list-boun...@lists.pfsense.org [mailto:list- boun...@lists.pfsense.org] On Behalf Of David Brown Sent: Tuesday, 25 October 2011 12:14 AM To: pfSense support and discussion Subject: Re: [pfSense] Forwarding an external port according

Re: [pfSense] pfSense 2.0 - Filtering traffic on OpenVPN

. -- Regards,     The Honeymonster aka Daniel Llewellyn ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

[pfSense] Traffic shaping query

% Does anyone see any problems with this configuration? Feel free to shoot me down in flames if this won't work for any reason, I want to get this right. Cheers, Daniel ___ List mailing list

Re: [pfSense] cannot access gui

Nelson, If you can get to the console you can choose option 11 - Restart webConfigurator, this will restart the web interface services without affecting other services. Cheers, Daniel   From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On Behalf Of Nelson Serafica