Re: [pfSense] recommandation: snort IDS, web http traffic, pfsense

2014-09-28 Thread Stefan Fuhrmann
Hello all, can someone help? tia Stefan Am Freitag, 26. September 2014, 15:11:04 schrieb Stefan Fuhrmann: Hello all, I need a recommandation for following setup: pfsense-cluster loadbalancers webservers There are some thousend visits per day and I want to secure with pfsense and

[pfSense] bogon networks

2014-09-28 Thread Andrew Mitchell
My company has just recently been assigned it's own block from ARIN. We have a handful of pfSense boxes we need to connect to from that block. I have noticed we can't when Block bogon networks is enabled on the WAN interfaces. Interestingly enough I also noticed that our block can't connect to

Re: [pfSense] bogon networks

2014-09-28 Thread Jim Thompson
Perhaps if you specified your block? On Sep 28, 2014, at 5:59 AM, Andrew Mitchell andrew.k.mitch...@att.net wrote: My company has just recently been assigned it's own block from ARIN. We have a handful of pfSense boxes we need to connect to from that block. I have noticed we can't

Re: [pfSense] bogon networks

2014-09-28 Thread Andrew Mitchell
My apologies. 192.40.140.0/23 Drew - Original Message - From: Jim Thompson j...@netgate.com To: pfSense Support and Discussion Mailing List list@lists.pfsense.org Sent: Sunday, September 28, 2014 7:01:05 AM Subject: Re: [pfSense] bogon networks Perhaps if you specified your block?

Re: [pfSense] bogon networks

2014-09-28 Thread Paul Galati
I had a coworker that uses an ISP at home that obtained a new block that was listed in the bogon list. I sent an email to the bogon list curators and informed them that a now legit IP block was being blocked. It took maybe 24 hours, but the block was removed and bogons could be re-enabled on

Re: [pfSense] recommandation: snort IDS, web http traffic, pfsense

2014-09-28 Thread compdoc
I need a recommandation for following setup: pfsense-cluster loadbalancers webservers I can't help with these. There are some thousend visits per day and I want to secure with pfsense and snort. Snort runs on lan-site. In the moment there are several thousend alerts per day!

Re: [pfSense] bogon networks

2014-09-28 Thread Chris Bagnall
On 28 Sep 2014, at 12:19, Andrew Mitchell andrew.k.mitch...@att.net wrote: My apologies. 192.40.140.0/23 I'm not sure what pfSense uses as its Bogons source, but my reference has usually been: http://www.team-cymru.org/Services/Bogons/http.html Your IP block isn't in there, from what I can

Re: [pfSense] bogon networks

2014-09-28 Thread Moshe Katz
The pfSense bogon list is at https://files.pfsense.org/lists/fullbogons-ipv4.txt and the current version there also doesn't have your block. Make sure that your pfSense has the newest list. (This should usually be done automatically, but you should be able to do it from the console/SSH by running

Re: [pfSense] States Issue with Asterisk behind pfSense

2014-09-28 Thread Hannes Werner
I would like to repeat Vassilis questions: Has this been implemented? Could this be implemented? Do the pfsense dev's need some more info? Can we help with testing? On Sat, Sep 27, 2014 at 1:02 PM, Vassilis V. bigracc...@gmx.net wrote: ADSL over PPPoE with constant changing IPs is the standard

Re: [pfSense] States Issue with Asterisk behind pfSense

2014-09-28 Thread Espen Johansen
If this is to be implemented it should be a tick box on each interfance. Dropping all states if you want to move a cable/reroute it is not a good idea. This needs to be user controllable or only affect interface if is_interface_type=pppoe. Just my 2 cents. -lsf 28. sep. 2014 19:19 skrev Hannes

Re: [pfSense] States Issue with Asterisk behind pfSense

2014-09-28 Thread PiBa
Hi Guy's, Anyone care to test if this fixes the issue? I dont have a pppoe myself , but do think everyone with a changing wan ip is affected by old udp states that stay alive long after a outbound natted ip has changed.. I think there is no danger in dropping all states that use that specific

Re: [pfSense] recommandation: snort IDS, web http traffic, pfsense

2014-09-28 Thread Ivo Tonev
can you send your network layout ? how many servers ? -- Ivo Tonev i...@tonev.pro.br On Sep 28, 2014, at 05:58, Stefan Fuhrmann ste...@fuhrmann.homedns.org wrote: Hello all, can someone help? tia Stefan Am Freitag, 26. September 2014, 15:11:04 schrieb Stefan Fuhrmann: Hello