RE: [pfSense Support] blocking china

2008-09-24 Thread Derrick Conner
I feel pretty confident it's Exchange IMF doing it. But it's not too bad. Thanks Derrick On Tue, Sep 23, 2008 at 10:40 AM, Derrick Conner [EMAIL PROTECTED] wrote: For some reason, some of the messages in here get sent to junk mail. Gmail has been sending about 10-20% of the list

RE: [pfSense Support] blocking spammers xml

2008-09-24 Thread Derrick Conner
Since a great many of these are dynamic IPs that send spam, rather than make a giant list, I found it better to block the whole thing. Anyone who uses those entries I sent, needs to be aware, it was my preference so one should edit to suit theirs. I did an IPWHOIS on every one of them based

[pfSense Support] ipv6 possibility

2008-09-24 Thread R. Th. Boots
Hello, As Pfsense is derived from Monowall and monowall has recently, in the 1.3beta12, incorporated ipv6, I was wondering how difficult it is going to be to port the changes in monowall to pfsense? See the announcement of monowall: http://m0n0.ch/wall/list/showmsg.php?id=346/12 Regards,

Re: [pfSense Support] blocking china

2008-09-24 Thread Cristian Ionescu-Idbohrn
On Wed, 24 Sep 2008, Derrick Conner wrote: I feel pretty confident it's Exchange IMF doing it. But it's not too bad. How 'intelligent' is that? Cheers, Cristian -- Top posting is reserved for suits. - To unsubscribe,

[pfSense Support] RBL checks - was Re: [pfSense Support] blocking china

2008-09-24 Thread Paul Mansfield
Chris Buechler wrote: Gmail has been sending about 10-20% of the list messages to spam the http://www.robtex.com/rbl/ try wacking in IP addresses of relays and see what turns up - To unsubscribe, e-mail: [EMAIL PROTECTED] For

Re: [pfSense Support] ipv6 possibility

2008-09-24 Thread Eugen Leitl
On Wed, Sep 24, 2008 at 09:23:11AM +0200, R. Th. Boots wrote: As Pfsense is derived from Monowall and monowall has recently, in the 1.3beta12, incorporated ipv6, I was wondering how difficult it is going to be to port the changes in monowall to pfsense? See the announcement of monowall:

RE: [pfSense Support] blocking china

2008-09-24 Thread Derrick Conner
Not very, so lets just call it MF' instead of IMF. :) Derrick -Original Message- From: Cristian Ionescu-Idbohrn [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 24, 2008 3:05 AM To: support@pfsense.com Subject: Re: [pfSense Support] blocking china On Wed, 24 Sep 2008,

Re: [pfSense Support] random lock up

2008-09-24 Thread Michael Schuh
Hello Matias, can you see any error messages on the Console from the box? thia are to less informations for identifying the source(s) of this error behavior. regards michael 2008/9/24 Matias Surdi [EMAIL PROTECTED] Hi, I'm experiencing random crashed with 1.2, sometimes happens when saving

Re: [pfSense Support] random lock up

2008-09-24 Thread Vivek Khera
On Wed, Sep 24, 2008 at 11:03 AM, Matias Surdi [EMAIL PROTECTED]wrote: Hi, I'm experiencing random crashed with 1.2, sometimes happens when saving a rule, other times when saving advanced settings.No reply from the pfSense box, no ping replies.nothing.Completly dead. I'll point at hardware

[pfSense Support] pfsense v1.2 hangs when approaching 40 days of uptime

2008-09-24 Thread hitete
Hi, My pfsense box (v1.2) needs reboot or filter reload every once in a while (it's always when it approches 40-45 days of uptime). Some tcp connections are blocked (either DNS either HTTP either IMAP), and I don't know why?. Have some of you guys seen such a behavior ?. Regards,

Re: [pfSense Support] random lock up

2008-09-24 Thread Glenn Kelley
We are seeing this also. I think going to 1.2.1 will help. We have seen this - interesting I take out the drive - and placed in another chasis - same thing loaded same from scratch --- and sure enough same thing Dell Hardware - not even a few months old. Interesting - same hardware w/ 1.2.1

Re: [pfSense Support] random lock up

2008-09-24 Thread Tim Nelson
Does the box eventually come back up? What does the console(vga/serial) show? What hardware platform? Embedded, full, or live installation? How many NICs? Storage medium (HDD, DOM, CF, CD+Floppy, Etc)? More info needed please... :-) Tim Nelson Systems/Network Engineer Rockbochs Inc.

[pfSense Support] Re: random lock up

2008-09-24 Thread Matias Surdi
I've already replied a few moments ago with the output of dmesg, that should answer many of your questions. The console is absolutely FROZEN, I just see the menu as always but I can't do anything. The installation was made from the 1.2 CD and is running from harddisk. The problems started

[pfSense Support] Re: random lock up

2008-09-24 Thread Matias Surdi
Even more info: # dmesg Copyright (c) 1992-2007 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD

[pfSense Support] Re: random lock up

2008-09-24 Thread Matias Surdi
More info: It seems to be happenning each 70 minutes. Michael Schuh escribió: Hello Matias, can you see any error messages on the Console from the box? thia are to less informations for identifying the source(s) of this error behavior. regards michael 2008/9/24 Matias Surdi [EMAIL

[pfSense Support] Re: random lock up

2008-09-24 Thread Matias Surdi
The console is absolutely frozen.Can't do anything. I've the logs on a remote syslog server, but I don't see any error message that could give me a clue, just DHCP and blocked packets information. Also, the contents of all log files in /var/log (after rebooting) isn't usefull. Help

Re: [pfSense Support] pfsense v1.2 hangs when approaching 40 days of uptime

2008-09-24 Thread Víctor Pasten
wath type of connection (wan) is used? - xdsl??, fixed ip address o dynamic? maybe, the ip address has been expired -Original Message- From: hitete [EMAIL PROTECTED] To: support@pfsense.com Date: Wed, 24 Sep 2008 17:41:34 +0200 Subject: [pfSense Support] pfsense v1.2 hangs when

Re: [pfSense Support] pfsense v1.2 hangs when approaching 40 days of uptime

2008-09-24 Thread Paul Mansfield
hitete wrote: Hi, My pfsense box (v1.2) needs reboot or filter reload every once in a while (it's always when it approches 40-45 days of uptime). Some tcp connections are blocked (either DNS either HTTP either IMAP), and I don't know why?. Have some of you guys seen such a behavior

Re: [pfSense Support] Re: random lock up

2008-09-24 Thread Michael Schuh
Hi Matias, have you cleaned up the filesystem after such a reboot? As mentoided? second it seems to me it could be a lockup during a hot spot?? 30.000 state should be possible with enough ram. I have a box configured with 1.000.000 states but 2 G RAM!! such a behavior w/o errormessages could

[pfSense Support] Re: random lock up

2008-09-24 Thread Matias Surdi
Should this backup/restore procedure work backing up from 1.2 Release and restoring on 1.2.1 ? Thanks. Michael Schuh escribió: Hi Matias, have you cleaned up the filesystem after such a reboot? As mentoided? second it seems to me it could be a lockup during a hot spot?? 30.000 state

Re: [pfSense Support] Re: random lock up

2008-09-24 Thread Michael Schuh
yes, it works also over releases in some cases for me it has worked from 1.0 RELEASE to 1.2 RELEASE 2008/9/24 Matias Surdi [EMAIL PROTECTED] Should this backup/restore procedure work backing up from 1.2 Release and restoring on 1.2.1 ? Thanks. Michael Schuh escribió: Hi Matias,

[pfSense Support] random lock up - Now with high CPU usage

2008-09-24 Thread Matias Surdi
Finally, we've migrated to 1.2.1 RC1 and seems to be working, at least for now. But, we are seeing that the CPU keeps on 50% use, and a top shows that it's being used by interrupt. The hardware is the same.(exactly the same, we reinstalled 1.2.1 on the same disk where was 1.2) The driver

Re: [pfSense Support] Re: random lock up

2008-09-24 Thread Ermal Luçi
Try a SMP kernel. On Wed, Sep 24, 2008 at 5:37 PM, Matias Surdi [EMAIL PROTECTED] wrote: Even more info: # dmesg Copyright (c) 1992-2007 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All

Re: [pfSense Support] random lock up - Now with high CPU usage

2008-09-24 Thread Anil Garg
Have you installed a package called Dashboard? I noticed high CPU usage with some of its applets. Have since disabled that through a brand new install. - Original Message From: Matias Surdi [EMAIL PROTECTED] To: support@pfsense.com Sent: Wednesday, September 24, 2008 10:43:03 AM

Re: [pfSense Support] blocking spammers xml

2008-09-24 Thread Claus Marxmeier
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 it should look something like this: http://www.netsecdb.de/index.php?q=node/996 question: can i merge aliases with upload of xml-config? I would like to let the rulesets unchanged and only exchange dedicated aliases in firewalls. headers and

Re: [pfSense Support] random lock up - Now with high CPU usage

2008-09-24 Thread Chris Buechler
On Wed, Sep 24, 2008 at 1:43 PM, Matias Surdi [EMAIL PROTECTED] wrote: Finally, we've migrated to 1.2.1 RC1 and seems to be working, at least for now. But, we are seeing that the CPU keeps on 50% use, and a top shows that it's being used by interrupt. That's indicative of a maxed out box.

Re: [pfSense Support] Re: random lock up

2008-09-24 Thread Chris Buechler
On Wed, Sep 24, 2008 at 11:27 AM, Matias Surdi [EMAIL PROTECTED] wrote: The console is absolutely frozen.Can't do anything. That's one of two things: 1) Hardware problem, usually RAM, possibly any number of other things. 2) FreeBSD bug specific to your hardware. First I'd try 1.2.1, and if it

Re: [pfSense Support] Re: random lock up

2008-09-24 Thread Glenn Kelley
Chris is right on this - we had the same thing happen - Changed to 1.2.1 added ram - switched kernel and voila - works Best wishes Glenn On Sep 24, 2008, at 4:15 PM, Chris Buechler wrote: On Wed, Sep 24, 2008 at 11:27 AM, Matias Surdi [EMAIL PROTECTED] wrote: The console is absolutely

Re: [pfSense Support] ipv6 possibility

2008-09-24 Thread Chris Buechler
On Wed, Sep 24, 2008 at 3:23 AM, R. Th. Boots [EMAIL PROTECTED] wrote: Hello, As Pfsense is derived from Monowall and monowall has recently, in the 1.3beta12, incorporated ipv6, I was wondering how difficult it is going to be to port the changes in monowall to pfsense? The two are vastly

[pfSense Support] Re: RBL checks - was Re: [pfSense Support] blocking china

2008-09-24 Thread Chris Buechler
On Wed, Sep 24, 2008 at 5:57 AM, Paul Mansfield [EMAIL PROTECTED] wrote: Chris Buechler wrote: Gmail has been sending about 10-20% of the list messages to spam the http://www.robtex.com/rbl/ try wacking in IP addresses of relays and see what turns up Only one mail server sends out mail

Re: [pfSense Support] ipv6 possibility

2008-09-24 Thread RB
As Pfsense is derived from Monowall and monowall has recently, in the 1.3beta12, incorporated ipv6, I was wondering how difficult it is going to be to port the changes in monowall to pfsense? This question comes back up every few months, and every time I wonder: what is the justification case

Re: [pfSense Support] ipv6 possibility

2008-09-24 Thread BSD Wiz
Amen. -phil On Sep 24, 2008, at 5:22 PM, RB wrote: As Pfsense is derived from Monowall and monowall has recently, in the 1.3beta12, incorporated ipv6, I was wondering how difficult it is going to be to port the changes in monowall to pfsense? This question comes back up every few

Re: [pfSense Support] ipv6 possibility

2008-09-24 Thread David Rees
On Wed, Sep 24, 2008 at 3:22 PM, RB [EMAIL PROTECTED] wrote: Who has put off rolling out pfSense or a similar platform because it didn't implement IPv6? Anything for the US Government is required to be IPv6 ready. What about the fact that for the huge majority of users, the magical IPv6 land

Re: [pfSense Support] ipv6 possibility

2008-09-24 Thread RB
On Wed, Sep 24, 2008 at 16:26, David Rees [EMAIL PROTECTED] wrote: On Wed, Sep 24, 2008 at 3:22 PM, RB [EMAIL PROTECTED] wrote: Who has put off rolling out pfSense or a similar platform because it didn't implement IPv6? Anything for the US Government is required to be IPv6 ready. Accepted and

[pfSense Support] ftpsesame errors?

2008-09-24 Thread Joe Laffey
I keep getting these messages in my logs, even after reboot: ftpsesame[850]: drop: short capture Perhaps it started when I set up openVON. I couldn't find much on google about them. Any clue what causes these? The errors persist after a reboot. Thanks, -- Joe Laffey|

Re: [pfSense Support] ipv6 possibility

2008-09-24 Thread Glenn Kelley
for the IPV6 stuff we run - we happily use vYatta not as nice - but works well. We can wait. :-) On Sep 24, 2008, at 6:26 PM, David Rees wrote: On Wed, Sep 24, 2008 at 3:22 PM, RB [EMAIL PROTECTED] wrote: Who has put off rolling out pfSense or a similar platform because it didn't implement

[pfSense Support] Re: ipv6 possibility

2008-09-24 Thread R. Th. Boots
RB wrote: This question comes back up every few months, and every time I wonder: what is the justification case for IPv6? Aside from those home hackers that are desperate for a full 128 bits of addressing to route the twelve devices on their network (never mind my public wifi network that eats