Re: [pfSense Support] DHCP : interface not found

2008-09-26 Thread Alfred Sawaya
Sure : Config file of my interfaces : ... LAN and WAN ... xl0 DINIAE 192.168.22.1 24 00:16:d4:a2:3c:da And my dhcp server config file : 192.168.22.100 192.168.22.150

Re: [pfSense Support] DHCP : interface not found

2008-09-26 Thread Chris Buechler
On Fri, Sep 26, 2008 at 7:17 PM, Alfred Sawaya <[EMAIL PROTECTED]> wrote: > Hello, > > I've some troubles with pfsense : I would like to enable the DHCP server > on one of my interface (xl0). I've 3 interfaces : 2 LAN (fxp0 and xl0), > 1 WAN (rl0). > > I do everything right to enable DHCP but I've

Re: [pfSense Support] Doesnt work make install Command

2008-09-26 Thread Chris Buechler
On Fri, Sep 26, 2008 at 7:51 PM, Koray AGAYA <[EMAIL PROTECTED]> wrote: > Hi All; > > I installed all freebsd ports collection under /usr/ports/*.* But I didnt > use make install command How Can I do work it ? Please help me > You can't. Use pkg_add. ---

[pfSense Support] Doesnt work make install Command

2008-09-26 Thread Koray AGAYA
Hi All; I installed all freebsd ports collection under */usr/ports/*.** But I didnt use make install command How Can I do work it ? Please help me For example, To install the Nano text editor $ cd /usr/ports/editors/nano $ make install Error : bash: make: command not found information

[pfSense Support] DHCP : interface not found

2008-09-26 Thread Alfred Sawaya
Hello, I've some troubles with pfsense : I would like to enable the DHCP server on one of my interface (xl0). I've 3 interfaces : 2 LAN (fxp0 and xl0), 1 WAN (rl0). I do everything right to enable DHCP but I've this in log : Sep 27 00:57:04 dhcpd: xl0: not found Why doesn't it found my inte

Re: [pfSense Support] ipv6 possibility

2008-09-26 Thread Beat Siegenthaler
RB wrote: > > This question comes back up every few months, and every time I wonder: > what is the justification case for IPv6? Maybe it's the simple argument: Jump on the Train!!! Hype or not, IPv6 is coming. Let the "we get out of IP's" yells beside this time. It's like talk about that a ce

[pfSense Support] darkstat - nevermind.

2008-09-26 Thread JJB
Actually it is working... My apologies. Joel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

[pfSense Support] darkstat - reverse dns lookups?

2008-09-26 Thread JJB
Since ntop isn't working, I installed darkstat, which seems to pretty much do the job that I wanted ntop to do. I set it to track the LAN interface. For some reason I'm getting DNS resolution for all the external websites, but not for internal ip addresses. Is there any way to get dns names for

Re: [pfSense Support] ntop still not installing

2008-09-26 Thread JJB
Thanks! - Joel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

RE: [pfSense Support] ntop still not installing

2008-09-26 Thread Tim Dickson
Just my 2cents, but ntop is VERY unstable right now (and not maintained as you can see) I would avoid putting it on your box... instead run it on a separate box if you want to use it. I've never had it crash my pfSense box, but keeping it(ntop) running is a whole nother story... you'll be lucky if

[pfSense Support] ntop still not installing

2008-09-26 Thread JJB
There does not seem to be any stuck processes. Also, as I understand it the install process seems to use the local web browser to do the download and install, if you navigate away from the page the install will not complete. Other packages install just fine. Could there be a problem with wherev

Re: [pfSense Support] importing from multiple iptables ... BOUNTY $100

2008-09-26 Thread Glenn Kelley
RB RE Snort: its actually back with rc 1.2.1rc glenn On Sep 26, 2008, at 1:20 PM, RB wrote: On Tue, Sep 23, 2008 at 10:29, Glenn Kelley <[EMAIL PROTECTED]> wrote: sorry - did not mean to sound Ape-ish :-) I am pretty easy to get along with - or so I hope. I was a tad harsh; I just think t

Re: [pfSense Support] "rule label too long" and ipsec?

2008-09-26 Thread Rob Terhaar
On Fri, Sep 26, 2008 at 11:14 AM, Paul Mansfield <[EMAIL PROTECTED]> wrote: > Rob Terhaar wrote: >> I know that the rule label too long bug has been around in varying >> 500 keep state label "IPSEC: RDI ->2nd lan - outbound isakmp" > > try taking out the '>', I have been bitten by a bug with it not

Re: [pfSense Support] importing from multiple iptables ... BOUNTY $100

2008-09-26 Thread RB
On Tue, Sep 23, 2008 at 10:29, Glenn Kelley <[EMAIL PROTECTED]> wrote: > sorry - did not mean to sound Ape-ish :-) > > I am pretty easy to get along with - or so I hope. I was a tad harsh; I just think there are better ways to deal with spam and attackers than blanket deny rules for whole regions.

Re: [pfSense Support] strategies for an internet cafe

2008-09-26 Thread lartc
hi all, thanks for all your thoughts ... this was actually a case of an unsuspecting microf...ing windblowz user infected with a fakealert virus -- sending thousands of e-mails. i'm thinking about creating an `untrusted` subnet on a free pfsense port and proxying 25 & 465 to a postfix/amavis se

Re: [pfSense Support] "rule label too long" and ipsec?

2008-09-26 Thread Paul Mansfield
Rob Terhaar wrote: > I know that the rule label too long bug has been around in varying > 500 keep state label "IPSEC: RDI ->2nd lan - outbound isakmp" try taking out the '>', I have been bitten by a bug with it not quoting XML reserved chars before --

[pfSense Support] "rule label too long" and ipsec?

2008-09-26 Thread Rob Terhaar
I know that the rule label too long bug has been around in varying degrees for a while... but this one might be unique (?) We're using 1.2 release. Here's what happening: php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:289: rule label too long (max 63 chars) /tmp/r

RE: [pfSense Support] strategies for an internet cafe

2008-09-26 Thread Raylund Lai
Try the solution from Untangle. Set it up with spam filtering and as transparent bridge in between your lan and pfsense. -Raylund -Original Message- From: Joe Laffey [mailto:[EMAIL PROTECTED] Sent: Friday, September 26, 2008 9:52 AM To: support@pfsense.com Subject: Re: [pfSense Support]

Re: [pfSense Support] strategies for an internet cafe

2008-09-26 Thread RB
>> Just plain disallow direct to port 25 connections. There's no reason >> for it for random client machines. If they need to use their own ISP >> or office mail server, they can use the SMTP submission port, or a >> VPN. Ditto; most SMTP service providers recognize that 25 outbound is disallowe

Re: [pfSense Support] strategies for an internet cafe

2008-09-26 Thread VĂ­ctor Pasten
If you install your own spam-filter?? -Original Message- From: Joe Laffey <[EMAIL PROTECTED]> To: support@pfsense.com Date: Fri, 26 Sep 2008 08:52:07 -0500 (CDT) Subject: Re: [pfSense Support] strategies for an internet cafe > On Fri, 26 Sep 2008, Vivek Khera wrote: > > > On Fri, Sep 26,

Re: [pfSense Support] strategies for an internet cafe

2008-09-26 Thread Joe Laffey
On Fri, 26 Sep 2008, Vivek Khera wrote: On Fri, Sep 26, 2008 at 8:45 AM, lartc <[EMAIL PROTECTED]> wrote: hi all, i've got a small internet cafe on a lan behind pfsense (soekris net 4801). works great. yesterday (not the first time) someone connected up their laptop, that started spewing spam

Re: [pfSense Support] strategies for an internet cafe

2008-09-26 Thread Vivek Khera
On Fri, Sep 26, 2008 at 8:45 AM, lartc <[EMAIL PROTECTED]> wrote: > hi all, > > i've got a small internet cafe on a lan behind pfsense (soekris net > 4801). works great. > > yesterday (not the first time) someone connected up their laptop, that > started spewing spam mail. Just plain disallow dire

[pfSense Support] strategies for an internet cafe

2008-09-26 Thread lartc
hi all, i've got a small internet cafe on a lan behind pfsense (soekris net 4801). works great. yesterday (not the first time) someone connected up their laptop, that started spewing spam mail. is there a suggested config for rate limiting smtp connections, and the like, for a `public` connectio