Re: [pfSense Support] 0.71.x WARP Version

2005-07-25 Thread Bill Marquette
On 7/25/05, Chris Buechler <[EMAIL PROTECTED]> wrote: > upnp is junk anyway. Whoever decided it was a good idea to let some > application on your network dynamically open ports on your firewall > needs to share some of what they were smoking. > > Ok, if it's not abused, it's better than having ne

Re: [pfSense Support] RE: [pfSense-discussion] Interface help

2005-07-25 Thread Bill Marquette
On 7/25/05, Kim C. Callis <[EMAIL PROTECTED]> wrote: > There is nothing in the manual about setting up CARP so I have did a Yeah, there's a lot that isn't in the manual...kinda pointless to document something that keeps changing :) > VIP using proxy ARP. I don't care which way it has to be setup,

Re: [pfSense Support] 0.71.x WARP Version

2005-07-25 Thread Chris Buechler
On 7/25/05, Scott Ullrich <[EMAIL PROTECTED]> wrote: > This package is no longer available via freebsd's ftp servers and > we've never had a confirmation that it works so I am deactivating this > package. > upnp is junk anyway. Whoever decided it was a good idea to let some application on your n

Re: [pfSense Support] 0.71.x WARP Version

2005-07-25 Thread Bill Marquette
Yeah, I played around with this package for a few hours and couldn't convince myself that it actually did anything. Maybe someone else can make sing and dance (well, at least make it sing so we can teach it how to dance). Until then, it's gone. --Bill On 7/25/05, Scott Ullrich <[EMAIL PROTECTED

Re: [pfSense Support] 0.71.x WARP Version

2005-07-25 Thread Scott Ullrich
This package is no longer available via freebsd's ftp servers and we've never had a confirmation that it works so I am deactivating this package. Scott On 7/25/05, Giorgio Ducci <[EMAIL PROTECTED]> wrote: > Thanks for the new WRAP version! I'm following your work very closely > and it is great.

Re: [pfSense Support] traffic shaper queues scheduler options

2005-07-25 Thread Bill Marquette
On 7/25/05, Xtian <[EMAIL PROTECTED]> wrote: > > Bill and Scott: > > Many thanks for the info and the field descriptions. Right, I was doing about > 105KBps down (on my 1Mbps down, 384Kbps up DSL) which is everything, and then > initiated an SSH session and latency was as high as ever. Then I loo

Re: [pfSense Support] 0.71.x WARP Version

2005-07-25 Thread Giorgio Ducci
Thanks for the new WRAP version! I'm following your work very closely and it is great. I'm testing all the feature (step by step) and I found that 'upnp' does not install==>Downloading package configuration file... done. Saving updated package information... done. Downloading upnp and its dependenc

[pfSense Support] snmp and mib support

2005-07-25 Thread alan walters
Have been looking for a replacement to monitor our hosts bandwidth behind our pfsense firewalls. I was wondering if the pf filter mib with snmp would be caperable of doing this from within the state table.   Does anyone have some good ideas for this. All the information needs to come bac

Re: [pfSense Support] traffic shaper queues scheduler options

2005-07-25 Thread Scott Ullrich
Try the ez shaper wizard and do not over commit your real bandwidth available. Over commiting the bandwidth values will have huge consequences. Scott On 7/25/05, Xtian <[EMAIL PROTECTED]> wrote: > > Bill and Scott: > > Many thanks for the info and the field descriptions. Right, I was doing ab

Re: [pfSense Support] traffic shaper queues scheduler options

2005-07-25 Thread Xtian
Bill and Scott: Many thanks for the info and the field descriptions. Right, I was doing about 105KBps down (on my 1Mbps down, 384Kbps up DSL) which is everything, and then initiated an SSH session and latency was as high as ever. Then I looked in the rules and saw nothing for SSH. So I assumed i

Re: [pfSense Support] squid diskd 70.10

2005-07-25 Thread Scott Ullrich
I will look into using the sysctl.conf infrastructure that we have. I have a feeling that some of these values need to be passed from the boot loader, however. We'll see. Scott On 7/25/05, Bill Marquette <[EMAIL PROTECTED]> wrote: > Uhhh, what's that gonna do to the rest of us that don't use

Re: [pfSense Support] 0.71.x WARP Version

2005-07-25 Thread Rodolfo Vardelli
David Strout ha scritto: yes, It works :-) but... ssh doesn't work with 0.70.x I wasn't able to restore a saved configuration nat: outbound load balance, does it work? regards Everyone, Has anyone tried the new 0.71.x WARP version on a Soekris 4801 yet? If so could you provide any findings

[pfSense Support] 0.71.x WARP Version

2005-07-25 Thread David Strout
Everyone, Has anyone tried the new 0.71.x WARP version on a Soekris 4801 yet? If so could you provide any findings / gotchas? Regards, -- David L. Strout Engineering Systems Plus, LLC - To unsubscribe, e-mail: [EMAIL PROTECT

Re: [pfSense Support] Bridge filtering

2005-07-25 Thread Scott Ullrich
I believe 5.4 requires the if_bridge patch. Scott On 7/25/05, Tommaso Di Donato <[EMAIL PROTECTED]> wrote: > ...Thank you very much! > And just for curiosity.. does FreeBSD 5.4 need it? > > > On 7/25/05, Scott Ullrich <[EMAIL PROTECTED]> wrote: > > On 7/25/05, Tommaso Di Donato <[EMAIL PROTE

Re: [pfSense Support] Bridge filtering

2005-07-25 Thread Tommaso Di Donato
...Thank you very much! And just for curiosity.. does FreeBSD 5.4 need it?On 7/25/05, Scott Ullrich <[EMAIL PROTECTED]> wrote: On 7/25/05, Tommaso Di Donato <[EMAIL PROTECTED] > wrote:> Hi to all.>  I am working on a solution to change the bridge part of pfSense, to add the> ability of bridge toget

Re: [pfSense Support] Bridge filtering

2005-07-25 Thread Scott Ullrich
On 7/25/05, Tommaso Di Donato <[EMAIL PROTECTED]> wrote: > Hi to all. > I am working on a solution to change the bridge part of pfSense, to add the > ability of bridge together LAN and WAN interface. > To better understand the process, and also because I am very curious, I am > trying to build "

[pfSense Support] Bridge filtering

2005-07-25 Thread Tommaso Di Donato
Hi to all. I am working on a solution to change the bridge part of pfSense, to add the ability of bridge together LAN and WAN interface. To better understand the process, and also because I am very curious, I am trying to build "from scratch": not all the pfSense system, but at least the bridging

Re: [pfSense Support] traffic shaper queues scheduler options

2005-07-25 Thread Bill Marquette
On 7/25/05, Christian Rohrmeier <[EMAIL PROTECTED]> wrote: > I haven't found that to be true. It doesn't create any rules for SSH. > pfSense has a wide selection of games and P2P software that it will make > rules and queues for, but not SSH, unless I overlooked something. > Certainly trying to SSH

Re: [pfSense Support] round robin on inbound nat

2005-07-25 Thread Scott Ullrich
On 7/25/05, alan walters <[EMAIL PROTECTED]> wrote: > I know this discussion is going on a bit. But I was wondering > If we really think it is practical using the method we are trying. > > With a basic round robin configured on the firewall. The web servers can > be configured to use there own sof

Re: [pfSense Support] CARP and backup firewall

2005-07-25 Thread Scott Ullrich
I have 2 boxes at home, both on carp. Works fine. You sure your outbound rules are setup correctly? Scott On 7/25/05, alan walters <[EMAIL PROTECTED]> wrote: > > > > On version 0.70.8 I had sync working and backup lan operational when the > master was down. > > On veriosn 0.71 the sync

Re: [pfSense Support] traffic shaper queues scheduler options

2005-07-25 Thread Scott Ullrich
On 7/25/05, Christian Rohrmeier <[EMAIL PROTECTED]> wrote: > I haven't found that to be true. It doesn't create any rules for SSH. > pfSense has a wide selection of games and P2P software that it will make > rules and queues for, but not SSH, unless I overlooked something. > Certainly trying to SSH

Re: [pfSense Support] traffic shaper queues scheduler options

2005-07-25 Thread Christian Rohrmeier
Hi Bill, I haven't found that to be true. It doesn't create any rules for SSH. pfSense has a wide selection of games and P2P software that it will make rules and queues for, but not SSH, unless I overlooked something. Certainly trying to SSH whilst FTPing a large suffered from the same massive la

Re: [pfSense Support] RE: [pfSense-discussion] Interface help

2005-07-25 Thread Bill Marquette
On 7/25/05, alan walters <[EMAIL PROTECTED]> wrote: > The virtual interface does not show up with statnad ifconfig on bsd?? > Sure someone else can tell you why. Cause it's not an IP alias on an existing interface. Virtual IPs are either just a proxy ARP or a CARP address. In the case of proxy A

Re: [pfSense Support] squid diskd 70.10

2005-07-25 Thread Bill Marquette
Uhhh, what's that gonna do to the rest of us that don't use squid? Is this going to make the kernel use more memory? --Bill On 7/24/05, Scott Ullrich <[EMAIL PROTECTED]> wrote: > Alright, I'll recompile the kernel with: > > options MSGMNB=8192 # max # of bytes in a queue >

Re: [pfSense Support] traffic shaper queues scheduler options

2005-07-25 Thread Bill Marquette
Use the EZ-Shaper wizard. It will do exactly what you want. --Bill On 7/24/05, Xtian <[EMAIL PROTECTED]> wrote: > > Hi, > > I have done my best to read the FAQs, documentation, and mailing list > archives for both pfSense and Monowall, and have not found any information on > this, hence I am a

[pfSense Support] CARP and backup firewall

2005-07-25 Thread alan walters
On version 0.70.8 I had sync working and backup lan operational when the master was down. On veriosn 0.71 the sync works great all the rules are being syncronised and the backup becomes master in the status of carp but?? It does not seem to have a route to the internet any more.   A tra

[pfSense Support] RE: [pfSense-discussion] Interface help

2005-07-25 Thread alan walters
Yep it does normally. After doing what you have done. Ie VIP proxy ARP 1 to 1 NAT Have you made a rule to allow access to the host inside the 1 to 1 nat Ie Allow all source to destination 'local IP address' 'the port of your choice' This is different from linux in that you need to add the allow

[pfSense Support] RE: [pfSense-discussion] Interface help

2005-07-25 Thread alan walters
The virtual interface does not show up with statnad ifconfig on bsd?? Sure someone else can tell you why. If you have a rule to allow to the virtual interface on imcp and you get a reply then where is the problem.??? I was under the understanding that when you use 1 to 1 nat you don't need all th

RE: [pfSense Support] round robin on inbound nat

2005-07-25 Thread alan walters
I know this discussion is going on a bit. But I was wondering If we really think it is practical using the method we are trying. With a basic round robin configured on the firewall. The web servers can be configured to use there own software to manage there own Virtual ipaddresses. That will allo