Re: [pfSense] How could I block messages trying to pass as from my net?

2018-05-23 Thread Alberto José García Fumero
El mar, 22-05-2018 a las 20:54 -0400, John Johnstone escribió: > On 5/18/2018 10:42 AM, Alberto José García Fumero wrote: > > > Im trying to block spam (for instance, from 185.234.217.232). > > As far as I know, it's trying to pass as a message from my very > > net: > > > > Transcript of session

Re: [pfSense] How could I block messages trying to pass as from my net?

2018-05-22 Thread John Johnstone
On 5/18/2018 10:42 AM, Alberto José García Fumero wrote: Im trying to block spam (for instance, from 185.234.217.232). As far as I know, it's trying to pass as a message from my very net: Transcript of session follows. De: Mail Delivery System

Re: [pfSense] How could I block messages trying to pass as from my net?

2018-05-21 Thread Alberto José García Fumero
El vie, 18-05-2018 a las 20:23 +0300, Eero Volotinen escribió: > You should use postscreen/blacklist to block spam? > > Eero > Currently I'm using reject_rbl_client + sbnl.spamhaus.org, cbl.abuseat.org and dul.dnsbl.sorbs.net. I'll take a look at postscreen. Thanks! -- M.Sc. Alberto García

Re: [pfSense] How could I block messages trying to pass as from my net?

2018-05-18 Thread Eero Volotinen
You should use postscreen/blacklist to block spam? Eero pe 18. toukok. 2018 klo 17.43 Alberto José García Fumero < albe...@ettpartagas.co.cu> kirjoitti: > Hi all. > > I use PfSense 2.2.1. Of course I know it would very convenient to > upgrade, but right now it isn't possible. > > Im trying to

Re: [pfSense] How could I block messages trying to pass as from my net?

2018-05-18 Thread Steve Yates
ule allows connections only from the spam filter server IP ranges... -- Steve Yates ITS, Inc. -Original Message- From: List <list-boun...@lists.pfsense.org> On Behalf Of Alberto José García Fumero Sent: Friday, May 18, 2018 11:52 AM To: list@lists.pfsense.org Subject: Re: [pfSense] H

Re: [pfSense] How could I block messages trying to pass as from my net?

2018-05-18 Thread Alberto José García Fumero
El vie, 18-05-2018 a las 16:24 +, Steve Yates escribió: > I think your rule should work.  Are you sure there is not > another rule above that one in the list of rules, that allows the > inbound connection?  In other words the block rule has to be above > the rule allowing traffic on port

Re: [pfSense] How could I block messages trying to pass as from my net?

2018-05-18 Thread Steve Yates
. -Original Message- From: List <list-boun...@lists.pfsense.org> On Behalf Of Alberto José García Fumero Sent: Friday, May 18, 2018 9:42 AM To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> Subject: [pfSense] How could I block messages trying to pass as from my net?

[pfSense] How could I block messages trying to pass as from my net?

2018-05-18 Thread Alberto José García Fumero
Hi all. I use PfSense 2.2.1. Of course I know it would very convenient to upgrade, but right now it isn't possible. Im trying to block spam (for instance, from 185.234.217.232). As far as I know, it's trying to pass as a message from my very net: Transcript of session follows. De: Mail

[pfSense] How to setup PPPoE Server, doubts.

2018-02-01 Thread Periko Support
Hi guys. I had follow videos, web pages to setup and test PPPoE server under Pfsense 2.4.2-p1(latest), looks very easy. But no luck. I want to test this setup, this is my network. LAN -> 192.168.1.0/24 WAN -> DHCP Here no issue, I can communicate and navigate on Internet. I want to

[pfSense] How to Block Malicious Address by Using Feed Service?

2017-06-20 Thread ibrahim uçar
Hi all, I have wrote an article which is about how to block malicious websites by using pfBlockerng and I wanted to share with you guys. Well, you can access this article from my blog or slideshare. Blog : http://lifeoverlinux.com/how-to-block-malicious-address-by-using-feed-service/

Re: [pfSense] How To install MySQL on Pfsense 2.4

2017-05-16 Thread WebDawg
om: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Sean Cavanaugh Sent: Tuesday, May 16, 2017 4:59 PM To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> Subject: Re: [pfSense] How To install MySQL on Pfsense 2.4 Best practice is to run as few services as possible on a firewa

Re: [pfSense] How To install MySQL on Pfsense 2.4

2017-05-16 Thread Steve Yates
ailto:list-boun...@lists.pfsense.org] On Behalf Of Sean Cavanaugh Sent: Tuesday, May 16, 2017 4:59 PM To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> Subject: Re: [pfSense] How To install MySQL on Pfsense 2.4 Best practice is to run as few services as possible on a fi

Re: [pfSense] How To install MySQL on Pfsense 2.4

2017-05-16 Thread Sean Cavanaugh
the services away from affecting the firewall. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of rai...@ultra-secure.de Sent: Tuesday, May 16, 2017 8:04 AM To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> Subject: Re: [pfSens

Re: [pfSense] How To install MySQL on Pfsense 2.4

2017-05-16 Thread rainer
Am 2017-05-16 13:30, schrieb Sean Cavanaugh: The only sane way to do this on a single box would be by installing a hypervisor on the server ( such as VMware ESXi) and running pfsense as a virtual machine within it as well as a second virtual machine to host any other non-firewall related

Re: [pfSense] How To install MySQL on Pfsense 2.4

2017-05-16 Thread Sean Cavanaugh
, 2017 12:27 AM To: list@lists.pfsense.org Subject: [pfSense] How To install MySQL on Pfsense 2.4 Hello everyone English is not my first language , excuse me for mistakes I know that this is a repetitive questioning " How to install Mysql on pfsense ?" But , I searched almost t

Re: [pfSense] How To install MySQL on Pfsense 2.4

2017-05-16 Thread mohsen Abbaspour
Thanks for your consideration unfortunately My resources limitation dont allow me to run another machine , I should install Mysql and PFsense on the same machine Best Regards On Tue, May 16, 2017 at 9:07 AM, Erik Anderson wrote: > pfSense is a purpose-built router

Re: [pfSense] How To install MySQL on Pfsense 2.4

2017-05-15 Thread Erik Anderson
pfSense is a purpose-built router distribution, not a general-purpose OS. While it may be possible to do what you propose, you *should not* do this. Instead, if you require a database server, host it on a separate machine. On Mon, May 15, 2017 at 11:27 PM, mohsen Abbaspour

[pfSense] How To install MySQL on Pfsense 2.4

2017-05-15 Thread mohsen Abbaspour
Hello everyone English is not my first language , excuse me for mistakes I know that this is a repetitive questioning " How to install Mysql on pfsense ?" But , I searched almost topic about that , and finally I dont understand what is correct solution ? maybe install Mysql on pfsense

Re: [pfSense] How to ...

2017-02-22 Thread Walter Parker
One thing to consider with a DNS query to mapping system is the effect of DNS caching. Many systems now have local caches, so you will only see the DNS lookup once. For the traffic flows. you might want to look at netflow. It can be setup to send the data to a collector system and you will be able

[pfSense] How to ...

2017-02-22 Thread Richard A. Relph
Hi, I have to believe this doable on an SG-2440. But I don’t have the expertise to implement it. I have configured the software to force all DNS connections through the SG-2440 (except for 1 or 2 IoT devices that seem to insist on talking to their manufacturer’s DNS servers - bad form,

[pfSense] pfsense: how to route all traffic via ipsec?

2016-11-08 Thread Eero Volotinen
how to configure this kind of setup to pfsense? Eero ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] how does on create a DNS blacklist with aout 1000 or so entries?

2016-10-05 Thread Juan Pablo
List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Vick >> Khera >> Sent: Friday, September 30, 2016 2:19 PM >> To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> >> Subject: Re: [pfSense] how does on create a DNS blacklist with aout 1000 &

Re: [pfSense] how does on create a DNS blacklist with aout 1000 or so entries?

2016-09-30 Thread Benjamin E. Nichols
To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> Subject: Re: [pfSense] how does on create a DNS blacklist with aout 1000 or so entries? On Fri, Sep 30, 2016 at 12:57 PM, Doug Lytle <supp...@drdos.info> wrote: On 09/30/2016 11:53 AM, Steve Yates wrote: So you cou

Re: [pfSense] how does on create a DNS blacklist with aout 1000 or so entries?

2016-09-30 Thread Steve Yates
[mailto:list-boun...@lists.pfsense.org] On Behalf Of Vick Khera Sent: Friday, September 30, 2016 2:19 PM To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> Subject: Re: [pfSense] how does on create a DNS blacklist with aout 1000 or so entries? On Fri, Sep 30, 2016 at 12:57 PM

Re: [pfSense] how does on create a DNS blacklist with aout 1000 or so entries?

2016-09-30 Thread Vick Khera
On Fri, Sep 30, 2016 at 12:57 PM, Doug Lytle wrote: > On 09/30/2016 11:53 AM, Steve Yates wrote: >> >> So you could keep your list somewhere else on a web server. > > > This is what I do. > > And I grab the list from > > http://www.wizcrafts.net/chinese-iptables-blocklist.html

Re: [pfSense] how does on create a DNS blacklist with aout 1000 or so entries?

2016-09-30 Thread Doug Lytle
On 09/30/2016 11:53 AM, Steve Yates wrote: So you could keep your list somewhere else on a web server. This is what I do. And I grab the list from http://www.wizcrafts.net/chinese-iptables-blocklist.html Once a month Doug ___ pfSense mailing

Re: [pfSense] how does on create a DNS blacklist with aout 1000 or so entries?

2016-09-30 Thread Steve Yates
pfblockerng.php?pfb=pfB_Africa_v4.; So you could keep your list somewhere else on a web server. -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of qmail Sent: Friday, September 30, 2016 10:30 AM To: list@lists.pfsense.org Subject

Re: [pfSense] how does on create a DNS blacklist with aout 1000 or so entries?

2016-09-30 Thread Todd Russell
Create an alias for all those IPs under Firewall > Aliases, then use that alias in your rules. Peace, Todd Russell Director of IT and Webmaster Saint Joseph Abbey and Seminary College 985-867-2266 985-789-4319 Please consider helping Saint Joseph Abbey and Seminary College recover from the

[pfSense] how does on create a DNS blacklist with aout 1000 or so entries?

2016-09-30 Thread qmail
i's like to blacklist all of mainland china, russia, korea, .. i could have done it by creating a DNS with just those entries. I dont see a way to add in BULK a list of bad boys of the internet. ___ pfSense mailing list

[pfSense] how to find interface router

2016-09-08 Thread Nenhum_de_Nos
Hello all, I am looking into pfsense .inc files to find out how pfSense gets the router for a dhcp or pppoe interface. So far I could get to know it stores info for in /tmp/IF_router. As I know nothing on php, if anyone has any hint. I found the line to write the /tmp/IF_output and I found the

Re: [pfSense] How to determine supported packages without installing

2016-06-17 Thread Bryan D.
On 2016-Jun-17, at 4:03 PM, Steve Yates wrote: > I suspect package compatibility is not maintained on per-pfSense-version > basis. Meaning, packages worked on 2.x up until the package changes on 2.3, > and probably will work on into the future until the next breaking change.

Re: [pfSense] How to determine supported packages without installing

2016-06-17 Thread Rainer Duffner
> Am 18.06.2016 um 01:03 schrieb Steve Yates : > > I suspect package compatibility is not maintained on per-pfSense-version > basis. Meaning, packages worked on 2.x up until the package changes on 2.3, > and probably will work on into the future until the next breaking

Re: [pfSense] How to determine supported packages without installing

2016-06-17 Thread Steve Yates
nal Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Bryan D. Sent: Friday, June 17, 2016 5:18 PM To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> Subject: Re: [pfSense] How to determine supported packages without installing On 2016-Jun-17, a

Re: [pfSense] How to determine supported packages without installing

2016-06-17 Thread compdoc
I didn't even realize that Nut was back. That's great. ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] How to determine supported packages without installing

2016-06-17 Thread compdoc
and Discussion Mailing List Subject: Re: [pfSense] How to determine supported packages without installing On 2016-Jun-17, at 2:35 PM, compdoc <comp...@hotrodpc.com> wrote: > I think this is complete: > <snip'd> Thanks. Looks like I can proceed with an update to 2.3. Regardless, I still

Re: [pfSense] How to determine supported packages without installing

2016-06-17 Thread Bryan D.
On 2016-Jun-17, at 2:35 PM, compdoc wrote: > I think this is complete: > Thanks. Looks like I can proceed with an update to 2.3. Regardless, I still think there should be a way to authoritatively determine this info via the pfSense web site -- ideally, for all

Re: [pfSense] How to determine supported packages without installing

2016-06-17 Thread compdoc
I think this is complete: 2.3.1-RELEASE-p5 (amd64) built on Thu Jun 16 12:53:15 CDT 2016 FreeBSD 10.3-RELEASE-p3 arping 1.2.2_1 AutoConfigBackup1.45 Avahi 1.11_2 Backup 0.4_1 bind9.10_8 blinkled0.4.7_1 Cron0.3.6_2 darkstat3.1.2_1 freeradius2 1.7.3_1

Re: [pfSense] How to determine supported packages without installing

2016-06-17 Thread Bryan D.
On 2016-Jun-17, at 2:02 PM, Peder Rovelstad wrote: > This help? https://forum.pfsense.org/index.php?topic=8640.0 Thanks, but I don't see anything there that tells me what the current packages are for pfSense 2.3.1 Update 5 (i.e., without having to first install pfSense

Re: [pfSense] How to determine supported packages without installing

2016-06-17 Thread Peder Rovelstad
This help? https://forum.pfsense.org/index.php?topic=8640.0 -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Bryan D. Sent: Friday, June 17, 2016 3:23 PM To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> Subject: [pfSens

[pfSense] How to determine supported packages without installing

2016-06-17 Thread Bryan D .
How does one determine the currently supported packages for the current released version of pfSense without installing pfSense, first. I did find https://doc.pfsense.org/index.php/Features_List but, since there's no stated pfSense version associated with the page and since I've found it to be

Re: [pfSense] How to manually update 2.3 onwards?

2016-05-30 Thread WebDawg
On Wed, May 25, 2016 at 2:00 PM, Chris Buechler wrote: > On Tue, May 24, 2016 at 8:08 AM, Pete Boyd > wrote: > > I have a pfSense 2.3.0_1 which has had an issue connecting to > > pfsense.com to check for updates for years. That's not the issue, as

Re: [pfSense] How to manually update 2.3 onwards?

2016-05-30 Thread Wue Bob
On 25/05/16 22:00, Chris Buechler wrote: > >> ... >> With 2.3.0_1 it appears to offer no means of manually updating, giving >> these error messages on the System > Update screen [1]. >> I see the release notes say "Removed "full update" or "full slice" >> upgrade for systems on 2.3 to later

Re: [pfSense] How to manually update 2.3 onwards?

2016-05-25 Thread Chris Buechler
On Tue, May 24, 2016 at 8:08 AM, Pete Boyd wrote: > I have a pfSense 2.3.0_1 which has had an issue connecting to > pfsense.com to check for updates for years. That's not the issue, as far > as I believe. Perhaps its LAN and WAN are mistakenly the wrong way > around.

[pfSense] How to manually update 2.3 onwards?

2016-05-24 Thread Pete Boyd
I have a pfSense 2.3.0_1 which has had an issue connecting to pfsense.com to check for updates for years. That's not the issue, as far as I believe. Perhaps its LAN and WAN are mistakenly the wrong way around. It routes between two LANs. Anyway I always update it manually by downloading a tgz

Re: [pfSense] How to debug an IPv6 phase2 over IPsec (IKEv2) IPv4 phase1?

2016-05-04 Thread Uğur
-Uğur 2016-05-04 18:44 GMT+03:00 Olivier Mascia : > Having switched recently from OpenVPN to IPsec (IKEv2 only) for 3 site to > site tunnels, I'm still debugging why I can only get it to work for IPv4. > Phase1 are setup with IPv4. Adding two phase2, one tunnel4 and one

[pfSense] How to debug an IPv6 phase2 over IPsec (IKEv2) IPv4 phase1?

2016-05-04 Thread Olivier Mascia
Having switched recently from OpenVPN to IPsec (IKEv2 only) for 3 site to site tunnels, I'm still debugging why I can only get it to work for IPv4. Phase1 are setup with IPv4. Adding two phase2, one tunnel4 and one tunnel6, nothing flows through the tunnel6. Capturing on IPSEC interface on one

Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day?

2015-08-03 Thread A Mohan Rao
But squid+squidguard is filter only http sites not https like facebook. or yourtube etc... On Fri, Jul 31, 2015 at 9:24 PM, Ivo Tonev i...@tonev.pro.br wrote: You can use squid+squidguard to create restrictions and time ranges. Need to create local users in pfsense box and use

Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day?

2015-08-02 Thread joseph.rotan
Sent from Samsung Mobile Original message From: Brian Caouette bri...@dlois.com Date: 01/08/2015 10:55 AM (GMT+12:00) To: pfSense Support and Discussion Mailing List list@lists.pfsense.org Subject: Re: [pfSense] How to restrict certain websites for certain

Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day?

2015-07-31 Thread Ivo Tonev
You can use squid+squidguard to create restrictions and time ranges. Need to create local users in pfsense box and use authentication Em 31/07/2015 12:36, Tim Koop t...@timkoop.com escreveu: I have installed pfsense and I would like to block certain websites during certain times of the day

[pfSense] How to restrict certain websites for certain computers during certain times of the day?

2015-07-31 Thread Tim Koop
I have installed pfsense and I would like to block certain websites during certain times of the day for certain computers. I've looked around pfsense as well as a plugin or two, and this looks very difficult or impossible to do. Anyone have any ideas? These are the details: It's installed

Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day?

2015-07-31 Thread Gregory K Shenaut
If this is browser-based access you are talking about, you might take a look at the various browser extensions out there like Waste No Time. They allow you to define certain times during which certain sites are accessible via the browser. Obviously, this isn't network-level blocking, but

Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day?

2015-07-31 Thread Brian Caouette
Squid lock is the way to go. This is what I use at home. We set the categories to block and no one can get to those sites. I've just recently played with scheduling so now we can enable or disable categories at will. I no we could open it up so mom and dad have full access to the net but

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-29 Thread Vick Khera
On Tue, Jul 28, 2015 at 4:12 PM, Moshe Katz mo...@ymkatz.net wrote: Again, I agree with you that this shouldn't affect your score. I am simply explaining why they do it. based on this explanation, i agree. there's no reason for them to demand your certificate also signs any other domain

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-29 Thread Claudio Thomas
On 29.07.2015 18:02, Vick Khera wrote: On Tue, Jul 28, 2015 at 4:12 PM, Moshe Katz mo...@ymkatz.net wrote: Again, I agree with you that this shouldn't affect your score. I am simply explaining why they do it. based on this explanation, i agree. there's no reason for them to demand your

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-28 Thread Moshe Katz
On Tue, Jul 28, 2015 at 3:44 PM, Vick Khera vi...@khera.org wrote: On Sun, Jul 26, 2015 at 10:31 PM, Ryan Coleman ryan.cole...@cwis.biz wrote: I have an issue with Qualy’s: They ding my certification because I have domain.com http://domain.com/ on it and not www.domain.com

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-28 Thread Ryan Coleman
On Jul 28, 2015, at 2:50 PM, Moshe Katz mo...@ymkatz.net wrote: On Tue, Jul 28, 2015 at 3:44 PM, Vick Khera vi...@khera.org mailto:vi...@khera.org wrote: On Sun, Jul 26, 2015 at 10:31 PM, Ryan Coleman ryan.cole...@cwis.biz wrote: I have an issue with Qualy’s: They ding my

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-28 Thread Moshe Katz
On Tue, Jul 28, 2015 at 3:54 PM, Ryan Coleman ryan.cole...@cwis.biz wrote: On Jul 28, 2015, at 2:50 PM, Moshe Katz mo...@ymkatz.net wrote: On Tue, Jul 28, 2015 at 3:44 PM, Vick Khera vi...@khera.org mailto: vi...@khera.org wrote: On Sun, Jul 26, 2015 at 10:31 PM, Ryan Coleman

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-28 Thread Vick Khera
On Sun, Jul 26, 2015 at 10:31 PM, Ryan Coleman ryan.cole...@cwis.biz wrote: I have an issue with Qualy’s: They ding my certification because I have domain.com http://domain.com/ on it and not www.domain.com http://www.domain.com/ (multi-site cert). That’s not a reason to lower a

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-25 Thread Chris L
On Jul 24, 2015, at 5:18 PM, Ted Byers r.ted.by...@gmail.com wrote: On Fri, Jul 24, 2015 at 6:29 PM, Chris Buechler c...@pfsense.com wrote: On Fri, Jul 24, 2015 at 5:20 PM, Ted Byers r.ted.by...@gmail.com wrote: This is an external scan. We forward ports such as 443 and 22 to specific

[pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread Ted Byers
I have checked our installation of our website (a classic protected LAN with a DMZ formed by two pfsense machines serving as our inner and outer firewall, and one machine in the DMZ and the rest behind the inner firewall) using a PCI scanner. The PCI scan identified two vulnerabilities WRT our

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread Adam Thompson
I'm 95% sure the answer is wait for the developers to fix those issues and/or become a developer and fix those issues :-). Configuration of lighttpd is controlled by the pfSense management framework, so once you discover the correct invocation, you could locally modify the PHP file that

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread Steve Yates
Ted Byers wrote on Fri, Jul 24 2015 at 3:51 pm: First, the scanner complains that TLS1 is supported and we need to restrict it to TLS1.2. Second, it appears that ssh-server on pfsense is version 6.6 Is this an internal scan or external? Hopefully those aren't exposed externally.

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread Yehuda Katz
If you are forwarding the ports to other machines, it is those machines which need and update, not pfSense. This is the test: get out your ssh client of choice and connect to the port from outside. If you get something that is not pfSense, then upgrading ssh on your firewall isn't going to help.

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread Ted Byers
Thanks for this. I'd hoped it would be as simple as apt-get-update apt-get upgrade apt-get update openssh-server. That is,whatever the equivalent of apt-get is on a pfsense machine, I'd hoped it would be a command invoked from ssh to ask the system to check for updates and apply any found.

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread Ted Byers
This is an external scan. We forward ports such as 443 and 22 to specific Ubuntu machines. But both sshd and apache have been configured to accept only TLS1.2 Port 443 must be open to support the web server in our DMZ, and we need ssh to connect to each machine for administration purposes. (if

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread Ted Byers
Thanks. I will do this this evening. Thanks ted On Fri, Jul 24, 2015 at 6:18 PM, David Burgess apt@gmail.com wrote: On Fri, Jul 24, 2015 at 4:14 PM, Ted Byers r.ted.by...@gmail.com wrote: Thanks for this. I'd hoped it would be as simple as apt-get-update apt-get upgrade apt-get

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread Ted Byers
We have version 2.2.2. What is the easiest way to upgrade on eminor versiion? On Ubuntu, I'd use 'apr-get update' and/or 'apt-get upgrade', or one of the variants thereof. But, if I understand correctly, pfsense is built on freeBSD, about which I know nothing. Thanks Ted On Fri, Jul 24, 2015

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread David Burgess
On Fri, Jul 24, 2015 at 4:14 PM, Ted Byers r.ted.by...@gmail.com wrote: Thanks for this. I'd hoped it would be as simple as apt-get-update apt-get upgrade apt-get update openssh-server. That is,whatever the equivalent of apt-get is on a pfsense machine, I'd hoped it would be a command

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread Chris Buechler
On Fri, Jul 24, 2015 at 3:51 PM, Ted Byers r.ted.by...@gmail.com wrote: I have checked our installation of our website (a classic protected LAN with a DMZ formed by two pfsense machines serving as our inner and outer firewall, and one machine in the DMZ and the rest behind the inner firewall)

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread Ted Byers
On Fri, Jul 24, 2015 at 6:29 PM, Chris Buechler c...@pfsense.com wrote: On Fri, Jul 24, 2015 at 5:20 PM, Ted Byers r.ted.by...@gmail.com wrote: This is an external scan. We forward ports such as 443 and 22 to specific Ubuntu machines. But both sshd and apache have been configured to

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-24 Thread Ryan Coleman
On Jul 24, 2015, at 7:18 PM, Ted Byers r.ted.by...@gmail.com wrote: On Fri, Jul 24, 2015 at 6:29 PM, Chris Buechler c...@pfsense.com wrote: On Fri, Jul 24, 2015 at 5:20 PM, Ted Byers r.ted.by...@gmail.com wrote: This is an external scan. We forward ports such as 443 and 22 to specific

[pfSense] How to Install PFSENSE in VM

2015-06-30 Thread putra kurnia Ramadana
Dear Friends, I was completed download pfsense on my laptop, so, I want to install pfsense use my laptop in VM. but why it can't install ? the format file of pfsense is iso.gz please help me to install pfsense on my laptop ? Thank You. *Sincerely Yours, * *Putra Kurnia Ramadana*

Re: [pfSense] How to Install PFSENSE in VM

2015-06-30 Thread Tiernan OToole
You need to unzip the file first. 7zip worked for me. --Tiernan On 30 June 2015 09:32:06 GMT+01:00, putra kurnia Ramadana ramadana.sibar...@gmail.com wrote: Dear Friends, I was completed download pfsense on my laptop, so, I want to install pfsense use my laptop in VM. but why it can't install

Re: [pfSense] How to Install PFSENSE in VM

2015-06-30 Thread putra kurnia Ramadana
Dear Mr. Tiernan, I was extract pfsense, so what can I do after unzip ? I have to burn it of ? Thank's *Sincerely Yours, * *Putra Kurnia Ramadana* ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold!

Re: [pfSense] How to Install PFSENSE in VM

2015-06-30 Thread putra kurnia Ramadana
Dear Mr. Tiernan Mr. Randy, I use Ms. Windows 7 32 bit, and I use Vmware Workstation 7 it's match for use it ? Thank You. *Sincerely Yours, * *Putra Kurnia Ramadana* ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the

Re: [pfSense] How to Install PFSENSE in VM

2015-06-30 Thread Ryan Coleman
There’s an OVA floating around somewhere still that had 2.0 on it, you could upgrade it through to 2.2.3 pretty easily… I typically, though, use the ISO these days so I can have a little more flexibility in my installation. On Jun 30, 2015, at 3:32 AM, putra kurnia Ramadana

Re: [pfSense] How to Install PFSENSE in VM

2015-06-30 Thread Tiernan OToole
As mentioned by Jostein in another post, it depends on your VM host: VMWare, hyper-v, virtual box, all have options to attach an ISO to a VM. Google is your friend! Good luck! --Tiernan On 30 June 2015 10:04:21 GMT+01:00, putra kurnia Ramadana ramadana.sibar...@gmail.com wrote: Dear Mr.

Re: [pfSense] How to Install PFSENSE in VM

2015-06-30 Thread Wue Bob
On 30/06/15 11:21, putra kurnia Ramadana wrote: Dear Mr. Tiernan Mr. Randy, I use Ms. Windows 7 32 bit, and I use Vmware Workstation 7 it's match for use it ? Thank You. Yes. How about following the Installation Howto? https://doc.pfsense.org/index.php/Installing_pfSense It's written in

[pfSense] How to troubleshoot

2015-03-10 Thread Bryan D .
I have a v2.2 64-bit config running on a Core2 Duo system. The config uses a number of aliases (including aliases that include other aliases, etc.). Rules are based upon the aliases (du-oh!). PROBLEM: if I change the name of 1 of the IP aliases, the name of the corresponding table doesn't

[pfSense] how to get to CARP settings in 2.2?

2015-02-28 Thread Vick Khera
I must be totally blind here, but I cannot get to CARP configuration settings on my 2.2 install. I traversed the menus: Status - CARP then clicked the + icon, but that takes me to HA sync. Firewall - Virtual IPs - CARP Settings, but that also takes me to HA sync.

Re: [pfSense] how to get to CARP settings in 2.2?

2015-02-28 Thread Chris L
To set up the actual CARP VIPs you go to Firewall Virtual IPs then create a VIP of type CARP. That’s where you set the freq, skew, etc. On Feb 28, 2015, at 7:18 AM, Vick Khera vi...@khera.org wrote: I must be totally blind here, but I cannot get to CARP configuration settings on my 2.2

Re: [pfSense] How do I stop noise to logs

2015-02-23 Thread Chris Buechler
On Mon, Feb 23, 2015 at 10:48 AM, Tim Hogan t...@hoganzoo.com wrote: Ed, I have version 2.1.46.30093 installed on my NAS which is newer than the link below. I have also discovered burred under the noise being created by the NAS that I have one other device also generating the same type of

Re: [pfSense] How do I stop noise to logs

2015-02-23 Thread Edward Servello
Tim, One more shot at this before I give up... I created a sample rule using the GUI. Does your rule look like this one? ~Ed On 2/23/2015 11:48 AM, Tim Hogan wrote: Ed, I have version 2.1.46.30093 installed on my NAS which is newer than the link below. I have also discovered burred

Re: [pfSense] How do I stop noise to logs

2015-02-23 Thread Jim Spaloss
If you're interested in just silencing the noice from that particular device, create a block (or reject) rule that matches the source IP with logging disabled on that rule. I often do this on my WAN interfaces to keep NetBIOS noise from filling up my logs. On Feb 23, 2015 4:35 PM, Chris Buechler

[pfSense] How do I stop noise to logs

2015-02-22 Thread Tim Hogan
Hello All, I am using pfSense v2.2 and I have been seeing a bunch of firewall log entries blocking traffic to the 169.254.0.0/16 netblock. This traffic seems to be created by an older NAS that I have and I really do not want these message in my logs. So, my thought was that I would create a

Re: [pfSense] How to change driver for NIC

2015-01-07 Thread compdoc
It is only pfSense 2.2, that has this not usuable speed from other VM's in the Xenserver. I installed xenserver with a pfSense guest on a machine, and had the same problem. Traffic from hosts on the lan through the pfSense guest to the wan is nice and fast, but traffic from other guests through

[pfSense] How to change driver for NIC

2015-01-04 Thread Morten Christensen
As mentioned in another thread, pfSense 2.2 is not usable on a XenServer. In the forum https://forum.pfsense.org/index.php?topic=85797.0 it was mentioned, that I could try to change the driver away from xn, but I can not find a way to change the NIC driver on my virtualised pfSense 2.2. Can

Re: [pfSense] How to change driver for NIC

2015-01-04 Thread compdoc
Can anyone give me a description of, how to change driver ? Well, you would need to change the NIC itself. I haven't tried this, but the following url explains the problem and might help fix the problem. http://www.netservers.co.uk/articles/open-source-howtos/citrix_e1000_gigabit I switched

Re: [pfSense] How to change driver for NIC

2015-01-04 Thread Morten Christensen
Den 04-01-2015 kl. 15:55 skrev compdoc: Can anyone give me a description of, how to change driver ? Well, you would need to change the NIC itself. I haven't tried this, but the following url explains the problem and might help fix the problem.

Re: [pfSense] How to change driver for NIC

2015-01-04 Thread compdoc
Is it impossible to try to improve on pfSense 2.2's problem in pfSense You might not be the only person having the problem, but I haven't researched to know for sure. Sometimes, it's possible to do the work and discover the problem yourself. There are a few areas of experimentation that might

Re: [pfSense] How to change driver for NIC

2015-01-04 Thread Morten Christensen
Den 04-01-2015 kl. 18:57 skrev compdoc: Is it impossible to try to improve on pfSense 2.2's problem in pfSense You might not be the only person having the problem, but I haven't researched to know for sure. Sometimes, it's possible to do the work and discover the problem yourself. There are a

Re: [pfSense] How to change driver for NIC

2015-01-04 Thread Chris L
On Jan 4, 2015, at 1:42 PM, Morten Christensen mc-m...@g.mc.cx wrote: Den 04-01-2015 kl. 18:57 skrev compdoc: Is it impossible to try to improve on pfSense 2.2's problem in pfSense You might not be the only person having the problem, but I haven't researched to know for sure.

Re: [pfSense] How do I fix this?

2014-09-04 Thread Brian Caouette
The price was right but yes it consumes some power. Its loud and warms the room. Should be good in another month or so when we turn the furnace on. As for the nics I have no idea if their intel or not. Don't recall that detail. I'll try your suggestion and change the time and see what happens.

Re: [pfSense] How do I fix this?

2014-09-03 Thread Bob Gustafson
What version pfsense? On 09/03/2014 12:30 PM, Brian Caouette wrote: Sep 3 09:00:58 apinger: ALARM: dlois(192.254.233.145) *** loss *** Sep 3 08:59:55 apinger: alarm canceled: dlois(192.254.233.145) *** delay *** Sep 3 08:59:47 apinger: alarm canceled: dlois(192.254.233.145) *** down ***

Re: [pfSense] How do I fix this?

2014-09-03 Thread Brian Caouette
2.1.4 Just one version behind. I haven't updated to the announced a few days ago. On 9/3/2014 2:14 PM, Bob Gustafson wrote: What version pfsense? On 09/03/2014 12:30 PM, Brian Caouette wrote: Sep 3 09:00:58 apinger: ALARM: dlois(192.254.233.145) *** loss *** Sep 3 08:59:55 apinger: alarm

Re: [pfSense] How do I fix this?

2014-09-03 Thread Brian Caouette
This problem has been here since I began using pfsense. Even on another hardware box. Not sure its a version problem but I will be upgrading soon as I always stay current. On 9/3/2014 2:30 PM, Bob Gustafson wrote: Why not try the upgrade. Maybe the problem will go away.. On 09/03/2014 01:20

Re: [pfSense] How do I fix this?

2014-09-03 Thread compdoc
Why not try the upgrade. Maybe the problem will go away.. There are also three settings for apinger that can be useful: Alternative monitor IP, Probe Interval, and Down Is this a new install, or a machine that recently developed a problem?

Re: [pfSense] How do I fix this?

2014-09-03 Thread Brian Caouette
On 9/3/2014 3:01 PM, compdoc wrote: Why not try the upgrade. Maybe the problem will go away.. There are also three settings for apinger that can be useful: Alternative monitor IP, Probe Interval, and Down Is this a new install, or a machine that recently developed a problem?

Re: [pfSense] How do I fix this?

2014-09-03 Thread Brian Caouette
On 9/3/2014 3:01 PM, compdoc wrote: Why not try the upgrade. Maybe the problem will go away.. There are also three settings for apinger that can be useful: Alternative monitor IP, Probe Interval, and Down Is this a new install, or a machine that recently developed a problem?

Re: [pfSense] How do I fix this?

2014-09-03 Thread compdoc
I have tried the alternate IP. No change. Not sure what the other two do? Some connections might be slow to respond occasionally, or not handle constant pings well. You can send fewer pings, (every 3 seconds for instance) and wait a longer period of time before declaring the link is down.

  1   2   >