Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-08 Thread Mark Tinka
On Sunday, September 08, 2013 09:38:31 AM Oliver Schad wrote: > I don't get your problem. You change on the pfsense your > GW and your WAN interface IP - that's it. > > Maybe you have to change some firewall rules if you used > these fixed adresses anywhere. > > If you made manual NAT rules to

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-08 Thread Mark Tinka
On Sunday, September 08, 2013 08:53:25 AM eyobe kebede wrote: > to all guys I was using pfsense for around one and half > year but now my ISP demanded me to change my IPadress > with public ip that they provided me. the public ip that > they gave me is one in my side and one is in their side. > s

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-08 Thread Oliver Schad
On Sun, 8 Sep 2013 09:53:25 +0300 eyobe kebede wrote: > to all guys I was using pfsense for around one and half year but now > my ISP demanded me to change my IPadress with public ip that they > provided me. the public ip that they gave me is one in my side and > one is in their side. so how can

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-07 Thread eyobe kebede
to all guys I was using pfsense for around one and half year but now my ISP demanded me to change my IPadress with public ip that they provided me. the public ip that they gave me is one in my side and one is in their side. so how can I configure nad NAt the two addresses ? please guys this is urge

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-06 Thread Jim Thompson
(getting back to the actual subject…) The actual documents are worthy of a look. For example, at http://www.nytimes.com/interactive/2013/09/05/us/documents-reveal-nsa-campaign-against-encryption.html?ref=us&pagewanted=all (Goal for CY2013): "Complete enabling for [redacted] encryption chips u

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-06 Thread Warren Baker
On Fri, Sep 6, 2013 at 9:12 AM, Mark Tinka wrote: > > I probably won't get into a war of words :-), but if you've > had a chance to run IP/MPLS networks today, the quality of > code is not as great as it used to be back in the day. > yup, as can be seen on the cisco metro and nexus kit. -- .w

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-06 Thread Mark Tinka
On Thursday, September 05, 2013 08:19:20 PM Jim Pingle wrote: > Very true, though it doesn't always apply to pfSense > (especially where CARP is involved). It certainly > applies to Cisco and friends. That said, someone running > CARP would be less likely to opt-in to an auotmatic > upgrade, but

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-06 Thread Mark Tinka
On Thursday, September 05, 2013 08:13:27 PM Jim Thompson wrote: > Wait, wait. Show me, again where pfSense is used in a > non-trivial service provider environment in a position > where it actually routes traffic. > > And show me again where auto-update was *required*, > rather than an option?

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Jim Thompson
On Sep 5, 2013, at 6:49 PM, Bob Gustafson wrote: > The new Apple operating system = Mavericks or iOS 7 will have an autoupdate > feature. Which can be disabled. ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Bob Gustafson
On 09/05/2013 08:58 AM, Jim Pingle wrote: On 9/5/2013 9:43 AM, Jim Thompson wrote: On Sep 5, 2013, at 7:57 AM, Jim Pingle wrote: But it doesn't matter if the vendors issue a patch, people actually have to install the update to fix it, and odds are high that typical end users have no idea tha

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Jim Thompson
On Sep 5, 2013, at 12:08 PM, Mark Tinka wrote: > On Thursday, September 05, 2013 04:55:31 PM Jim Pingle > wrote: > >> I'm not opposed to auto-update if it's done securely and >> opt-in. Especially if you can schedule the time it takes >> place (e.g. specific day, specific time frame). > > The

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Jeremy Porter
On 9/5/2013 7:57 AM, Jim Pingle wrote: On 9/4/2013 8:33 PM, Robert Guerra wrote: Curious on people's comments on types of routers, firewalls and other appliances that might be affected as well as mitigation strategies. Would installing a pfsense and/or other open source firewall be helpful in

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Jim Thompson
Read ‘em and weep: http://www.nytimes.com/2013/09/06/us/nsa-foils-much-internet-encryption.html?_r=0 My take is that most places don’t enable PFS (because it’s “hard”) in IPSec. In theory, Transport Layer Security (TLS) can choose appropriate ciphers since SSLv3, but in everyday practice many

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Jim Pingle
On 9/5/2013 9:58 AM, Jim Pingle wrote: > On 9/5/2013 9:43 AM, Jim Thompson wrote: >> On Sep 5, 2013, at 7:57 AM, Jim Pingle wrote: >> >>> But it doesn't matter if the vendors issue a patch, people actually have >>> to install the update to fix it, and odds are high that typical end >>> users have

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Jim Pingle
On 9/5/2013 1:08 PM, Mark Tinka wrote: > On Thursday, September 05, 2013 04:55:31 PM Jim Pingle > wrote: > >> I'm not opposed to auto-update if it's done securely and >> opt-in. Especially if you can schedule the time it takes >> place (e.g. specific day, specific time frame). > > The problem wi

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Mark Tinka
On Thursday, September 05, 2013 04:55:31 PM Jim Pingle wrote: > I'm not opposed to auto-update if it's done securely and > opt-in. Especially if you can schedule the time it takes > place (e.g. specific day, specific time frame). The problem with updating router/switch software, as you know, is

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Michael Schuh
The $Customer will have his Pizza and Entertainment well served, functioning and NOW for $0 costs. So how will you provide security under this circumstances? Impossible. Beside the fact, that this entire NSA-Story is funny as hell. Why? Deal with it, deal with the world you (the crowd) would like

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Jim Pingle
On 9/5/2013 9:43 AM, Jim Thompson wrote: > > On Sep 5, 2013, at 7:57 AM, Jim Pingle wrote: > >> But it doesn't matter if the vendors issue a patch, people actually have >> to install the update to fix it, and odds are high that typical end >> users have no idea that is even possible or something

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Jim Thompson
On Sep 5, 2013, at 7:57 AM, Jim Pingle wrote: > But it doesn't matter if the vendors issue a patch, people actually have > to install the update to fix it, and odds are high that typical end > users have no idea that is even possible or something they have to do. This speaks to a service that k

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-05 Thread Jim Pingle
On 9/4/2013 8:33 PM, Robert Guerra wrote: > Curious on people's comments on types of routers, firewalls and other > appliances that might be affected as well as mitigation strategies. Would > installing a pfsense and/or other open source firewall be helpful in anyway > at a home net location?

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-04 Thread Walter Parker
I'd suggest installing pfSense at a home location for benefits that pfSense provides. The ability for you to see what is going on on your network is much greater than with any of the consumer routers. If you get a little Netgate SBC, you can have a ofSense router with the same size and power specs

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-04 Thread Chris Buechler
On Wed, Sep 4, 2013 at 7:33 PM, Robert Guerra wrote: > > Curious on people's comments on types of routers, firewalls and other > appliances that might be affected as > well as mitigation strategies. Would > installing a pfsense and/or other open source firewall be helpful in > anyway at a home

Re: [pfSense] [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-04 Thread Robert Guerra
Curious on people's comments on types of routers, firewalls and other appliances that might be affected as well as mitigation strategies. Would installing a pfsense and/or other open source firewall be helpful in anyway at a home net location? -- R. Guerra Phone/Cell: +1 202-905-2081 Twi