Re: [pfSense Support] TCP/IP Subnetting question for pfsense, a suggestion & configuration query.

2006-10-24 Thread Bill Marquette
On 10/24/06, Sanjay Arora <[EMAIL PROTECTED]> wrote: Hello all I am a non-technical user and require load-sharing firewall gateway. Presently I am using IPcop. I have just installed pfsense 1.0 RC2 on a machine with 6 ethernet cards, to be installed as LAN, WAN, WAN2, DMZ & WiFi Zone. Last card

Re: [pfSense Support] pfsense using 4 nics?

2006-10-24 Thread Bill Marquette
On 10/24/06, Curtis Maurand <[EMAIL PROTECTED]> wrote: On linux ifconfig will give you the MAC address. That should be unique enough for you to figure out what is what. True...assuming you know the mac of the nic. Straight up dmesg showing that Intel nic 1 is eth0 and realcrap nic 1 is eth1

Re: [pfSense Support] pfsense using 4 nics?

2006-10-24 Thread Bill Marquette
On 10/24/06, Robert Goley <[EMAIL PROTECTED]> wrote: > Bus order is what changes the order here. It's certainly possible to > have em0 be em1 after inserting another em card in the machine. Be > thankful that BSD actually identifies the chipset here...I find it > impossible to figure out wth h

Re: [pfSense Support] pfsense using 4 nics?

2006-10-24 Thread Bill Marquette
On 10/24/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: I run three intel dual cards in mine, total of six ports. I like Holger's advice, too - I've always made it practice to match all the NICs in a system whenever possible. Be careful that adding the fourth NIC isn't causing the system to r

Re: [pfSense Support] Squid Access Denied

2006-10-24 Thread Bill Marquette
You might try reinstalling the squid package. There was an ACL bug that I just commited a fix for. --Bill On 10/23/06, Tim Roberts <[EMAIL PROTECTED]> wrote: I see the acl allowed_subnets src 172.16.0.0/12 . no on the http_access localnet. there is of course "http_access allow localhost" Than

Re: [pfSense Support] Howto set atacontrol mode ad0 udma4

2006-10-20 Thread Bill Marquette
http://wiki.pfsense.com/wikka.php?wakka=BootOptions On 10/20/06, Bastian Schern <[EMAIL PROTECTED]> wrote: Hello everybody, I have little trouble to install pfSense properly. My System will only produce no IDE errors when I set the DMA mode to UDMA66. #: atacontrol mode ad0 udma4 In which fil

Re: [pfSense Support] RRD writing to CF?

2006-10-20 Thread Bill Marquette
On 10/20/06, PlanAlpha <[EMAIL PROTECTED]> wrote: I was checking out the rrd graphs after a reboot and was wondering if this feature is going to kill my cf card since it's writting to it. Can I turn this off? Should I not be running PFSense on a CF? RRD writes to a ramdisk. We sync from ramdis

Re: [pfSense Support] Problems setting up a VPN Tunnel to a PIX 515e

2006-10-16 Thread Bill Marquette
On 10/16/06, J. Ryan Earl <[EMAIL PROTECTED]> wrote: Let me explain something here since I'm not making the problem clear. The problem has -nothing- at all to do with the Cisco firewall. The setsockopt errors occur -well before- any communication with the other end-point of the VPN tunnel. Case

Re: [pfSense Support] 2 squid/pfsense questions...

2006-10-15 Thread Bill Marquette
On 10/15/06, PlanAlpha <[EMAIL PROTECTED]> wrote: 1. I have pfsense installed on a cf card. I have installed the squid package. Does the diskcaching from squid write to my cf card? (worried about it killing my cf card) Full install to CF card, not an embedded image I take it. Yes, squids diskc

Re: [pfSense Support] Problems setting up a VPN Tunnel to a PIX 515e

2006-10-14 Thread Bill Marquette
On 10/14/06, Peter Allgeyer <[EMAIL PROTECTED]> wrote: You can configure nat-traversal on the PIX with: isakmp nat-traversal 20 (PIX OS 6.x) crypto isakmp nat-traversal 20 (PIX OS 7.x) Look for these lines and disable them. If the error still occurs, it might help, recompiling

Re: [pfSense Support] Problems setting up a VPN Tunnel to a PIX 515e

2006-10-14 Thread Bill Marquette
On 10/14/06, J. Ryan Earl <[EMAIL PROTECTED]> wrote: Well, I'm trying to route between a 10.2.3.0/24 and 192.168.2.0/24 network... Is that not some part of this functionality? I mean, is there any reason to not have the kernel support this? Not the point of my question. Here's my Cisco cryp

Re: [pfSense Support] Problems setting up a VPN Tunnel to a PIX 515e

2006-10-14 Thread Bill Marquette
Bingo, sounds like IPSec NAT Traversal to me. Any chance that can be disabled on the Cisco side? I don't know anything about the Cisco configs, but if you can disable it, there's a good chance this will work. --Bill On 10/14/06, J. Ryan Earl <[EMAIL PROTECTED]> wrote: No I haven't tried diffe

Re: [pfSense Support] OpenNTPD error on pfSense 1.0 Release

2006-10-14 Thread Bill Marquette
There was a bug report on this in cvstrac that I replied to. But for the benefit of the list do the following from the shell: /etc/rc.conf_mount_rw pw group add -n _ntp -g 123 pw user add -n _ntp -u 123 -g 123 -c 'NTP daemon' -d /var/empty -s /sbin/nologin /etc/rc.conf_mount_ro On 10/14/06, kel

Re: [pfSense Support] Mini pci wifi G card

2006-10-09 Thread Bill Marquette
On 10/9/06, Donald Pulsipher <[EMAIL PROTECTED]> wrote: Can anyone recommend a decent cheap mini pci wireless G card that I can drop into my soekris hardware that would be supported by pfSense ? Wistron CM-9's work like a champ: http://www.netgate.com/product_info.php?cPath=26_34&products_id=

Re: [pfSense Support] Passing incoming ipSec traffic through firewall

2006-10-08 Thread Bill Marquette
On 10/8/06, Kristofer Kiik <[EMAIL PROTECTED]> wrote: > Filtering outbound from pfSense may protect your > network, but leaves your firewall (and it's management interface) open > to attack. So to remedy leaving the management interface open to attack, you decided to leave management interface A

Re: [pfSense Support] Passing incoming ipSec traffic through firewall

2006-10-08 Thread Bill Marquette
the tunnel, yer screwed. --Bill On 10/8/06, Bill Marquette <[EMAIL PROTECTED]> wrote: On 10/8/06, Kristofer Kiik <[EMAIL PROTECTED]> wrote: > On 10/8/06, SDamron <[EMAIL PROTECTED]> wrote: > > All traffic coming in through a tunnel is encrypted. The only way to > >

Re: [pfSense Support] Passing incoming ipSec traffic through firewall

2006-10-08 Thread Bill Marquette
On 10/8/06, Kristofer Kiik <[EMAIL PROTECTED]> wrote: On 10/8/06, SDamron <[EMAIL PROTECTED]> wrote: > All traffic coming in through a tunnel is encrypted. The only way to > limit this traffic is to terminate it and pass it through some kinda > of other firewall, or IDS. It is encrypted when it

Re: [pfSense Support] Passing incoming ipSec traffic through firewall

2006-10-08 Thread Bill Marquette
On 10/8/06, Kristofer Kiik <[EMAIL PROTECTED]> wrote: Hi, There does not seem to be a GUI option to limit traffic coming in through IPSEC. Once you have IPSEC negotiated, all traffic that comes through that connection has a green light to all of your lan/dmz/whatever. I have an IPSEC traffic co

Re: [pfSense Support] Port-Forwarding

2006-10-06 Thread Bill Marquette
On 10/6/06, Holger Bauer <[EMAIL PROTECTED]> wrote: It's under firewall>nat, portforward. Should be pretty obvious what to do there. Additionally turn on nat reflection at the very bottom of system>advanced. This will make the internal server reachable from the wan by it's public IP. Holger

Re: [pfSense Support] re: ath-hal

2006-10-05 Thread Bill Marquette
-Original Message- From: Bill Marquette [mailto:[EMAIL PROTECTED] Sent: 05 October 2006 19:10 To: support@pfsense.com Subject: Re: [pfSense Support] re: ath-hal On 10/5/06, Alan Walters <[EMAIL PROTECTED]> wrote: > Been looking at the ath hal version on pfsense and considering tes

Re: [pfSense Support] re: ath-hal

2006-10-05 Thread Bill Marquette
On 10/5/06, Alan Walters <[EMAIL PROTECTED]> wrote: Been looking at the ath hal version on pfsense and considering testing latest version from sam but can not seem to find how to add this into our Build routine. We are running "0.9.16.16" in pfsense and "0.9.18.0" is the latest. How could we add

Re: [pfSense Support] Problem connecting to MSN,Outlook and hotmail.com...

2006-10-05 Thread Bill Marquette
On 10/5/06, Brian Quinn <[EMAIL PROTECTED]> wrote: Hi, I just migrated from monowall where I has happy enough until it started to lockup and had to be manually rebooted every few days. I restored the monowall config.xml in to pfsense and all seemed to be working. Or so I thought. Users can no

Re: [pfSense Support] Application filtering over HTTP

2006-10-04 Thread Bill Marquette
On 10/4/06, Captain Bablam <[EMAIL PROTECTED]> wrote: I have pushed Openvpn through a bluecoat successfully, Do you know if it is a configuration option or does it kill the connection irrespective of configuration? Wade B Not sure why it doesn't work. I can get the initial connect

Re: [pfSense Support] Application filtering over HTTP

2006-10-04 Thread Bill Marquette
On 10/4/06, Benoît Beaujault <[EMAIL PROTECTED]> wrote: Hello, More and more applications, due to firewall filtering, move to HTTP, is it in the roadmap of pfsense to propose a fonctionnality to filter some applications over HTTP (peer-to-peer, MSN, ICQ and so on) ? Start by forcing all your us

Re: [pfSense Support] WLAN interface and IPSEC

2006-10-03 Thread Bill Marquette
On 10/3/06, Fuchs, Martin <[EMAIL PROTECTED]> wrote: Hi ! Does anyone have the same problem: Traffic to IPSEc remote LAN works via from LAN subnet, but nor from WLAN subnet (with atheros chipset) ? Any try to get it running fails... Even with LAN: all to all rule and WLAN all to all rule !?

Re: [pfSense Support] msntp (update)

2006-10-03 Thread Bill Marquette
lol. Oh well, too late, it's been beheaded. --Bill On 10/3/06, Roberto Greiner <[EMAIL PROTECTED]> wrote: I don't know exactly how or why, but after about 14 hours reporting errors, suddenly msntp decided to work and updated the timeinfo properly. Oct 3 14:52:53 msntp[82526]: msntp: 2006 Oc

Re: [pfSense Support] Startup script for quagga

2006-09-28 Thread Bill Marquette
On 9/28/06, Captain Bablam <[EMAIL PROTECTED]> wrote: OK good to know thank you, Are there plans to support quagga? I thought I saw that on the list a while back? Time. 'nuf said. --Bill - To unsubscribe, e-mail: [EMA

Re: [pfSense Support] IPSEC Client Gateway Support

2006-09-28 Thread Bill Marquette
On 9/28/06, Matthew Grooms <[EMAIL PROTECTED]> wrote: All, I had recently been contacted by a user that was attempting to use my free 2K/XP IPSEC client with pfsense. The racoon key daemon was tripping up over a modecfg exchange that wasn't supported by the version of ipsec-tools install

Re: [pfSense Support] pfsense on a PowerEdge 850?

2006-09-27 Thread Bill Marquette
On 9/27/06, Oscar Rylin <[EMAIL PROTECTED]> wrote: We've got it running on a 1850 at the office (gigabit pipe; we've been able to push about 600Mbps, but that's probably because we can't find anything better to push against! ;-) ) What type of CPU load while hitting 600Mbit? Using the builtin

Re: [pfSense Support] pf optimisation

2006-09-27 Thread Bill Marquette
Yep. The good news is that we already bind rules to interfaces so skip steps should work pretty darn good :) We may consider doing the -oo optimization when FreeBSD imports a newer version of PF. --Bill On 9/27/06, Peter Curran <[EMAIL PROTECTED]> wrote: Guys Interesting article (1st of 3) b

Re: [pfSense Support] User management

2006-09-27 Thread Bill Marquette
On 9/27/06, Roberto Greiner <[EMAIL PROTECTED]> wrote: There is a feature in monowall that I can't seem to locate in pfSense, which is 'User Management'. Is it not available? (I'm using 1.0rc2). That didn't appear in m0n0 until after we'd branched for 1.0. --Bill -

Re: [pfSense Support] Alert! Virus spreading through pfSense-support list

2006-09-27 Thread Bill Marquette
Maybe gmail is the virus ;-P --Bill On 9/26/06, Scott Ullrich <[EMAIL PROTECTED]> wrote: On 9/26/06, SDamron <[EMAIL PROTECTED]> wrote: > I really don't care...I do not use that OS that they are written > for...and I use GMail :o) Ditto here on gmail. Not only that I deinstalled that VML expl

Re: [pfSense Support] Re: Solved :howt to remove access Controls from squid?

2006-09-27 Thread Bill Marquette
What does that have to do with the topic of this thread? --Bill On 9/27/06, Augusto Jobim Badaraco <[EMAIL PROTECTED]> wrote: Hi ... How can i use the spamassassin solution of Pfsense with my actual Postfix Server? Thanks -

Re: [pfSense Support] YAOI (yet another openvpn issue) [Resolved]

2006-09-26 Thread Bill Marquette
On 9/26/06, Jonathan Horne <[EMAIL PROTECTED]> wrote: thank you bill. rather than creating a new vpn tunnel, i just changed the vpn subnet to 192.168.125.112/28 (techically within the 192.168.125.64/26 footprint). this has caused vpn clients to be able to traverse to my 192.168.125.0/26 site1 n

Re: [pfSense Support] YAOI (yet another openvpn issue)

2006-09-26 Thread Bill Marquette
On 9/26/06, Jonathan Horne <[EMAIL PROTECTED]> wrote: > On 9/26/06, Jonathan Horne <[EMAIL PROTECTED]> wrote: >> > On 9/26/06, Rob Terhaar <[EMAIL PROTECTED]> wrote: >> >> On 9/26/06, Jonathan Horne <[EMAIL PROTECTED]> wrote: >> >> > i know there has been a million threads about openvpn lately, s

Re: [pfSense Support] YAOI (yet another openvpn issue)

2006-09-26 Thread Bill Marquette
On 9/26/06, Rob Terhaar <[EMAIL PROTECTED]> wrote: On 9/26/06, Jonathan Horne <[EMAIL PROTECTED]> wrote: > i know there has been a million threads about openvpn lately, so its time > to throw mine into the mix too. > > i have 2 sites, with an ipsec tunnel between them. site 1 is > 192.168.125.0/

Re: [pfSense Support] Routing and VPN tunnels

2006-09-26 Thread Bill Marquette
On 9/26/06, Rob Evers <[EMAIL PROTECTED]> wrote: Hi All, I have a problem with routing and IPSEC VPN tunnels, attached is a picture of the setup. There is a firewall cluster in the main office, the firewalls in the branch offices all connect through IPSEC with the main office. So A <-> B is a I

Re: [pfSense Support] Correct rules for DMZ? opt1

2006-09-26 Thread Bill Marquette
Does your DMZ interface actually have an address? The destination field is curiously empty in your screenshot. --Bill On 9/26/06, Michael Schuh <[EMAIL PROTECTED]> wrote: Hi, i again, now i have an complete other error, if it is an. i configure the rules for DMZ interface (opt1) so that the D

Re: [pfSense Support] YAOI (yet another openvpn issue)

2006-09-26 Thread Bill Marquette
On 9/26/06, Jonathan Horne <[EMAIL PROTECTED]> wrote: > On 9/26/06, Rob Terhaar <[EMAIL PROTECTED]> wrote: >> On 9/26/06, Jonathan Horne <[EMAIL PROTECTED]> wrote: >> > i know there has been a million threads about openvpn lately, so its >> time >> > to throw mine into the mix too. >> > >> > i ha

Re: [pfSense Support] Kaiomy ethernet board

2006-09-25 Thread Bill Marquette
On 9/25/06, Roberto Greiner <[EMAIL PROTECTED]> wrote: Hi, I'm trying to install pfSense (1.0rc2) on a machine, but one of the boards, despite being identified during installation, does not seem to work. The leds show no signal of traffic, and a ping to the gateway gets no answer, neither from o

Re: [pfSense Support] OpenVPN Clients and FW ACL's

2006-09-25 Thread Bill Marquette
by the fact that my pfsense had been upgraded repeatedly since beta 3. Since then, i've done a fresh install to the 9-4 snapshot, and am now running the 9-22 snapshot. so ether i'm retarded- or there's an issue somewhere ;) On 9/25/06, Bill Marquette <[EMAIL PROTECTED

Re: [pfSense Support] OpenVPN Clients and FW ACL's

2006-09-25 Thread Bill Marquette
On 9/25/06, Rob Terhaar <[EMAIL PROTECTED]> wrote: not sure if this is going to be helpful- but after an update to 9-22-snapshot and a reboot this morning on our pfsense, users were complaining that they were able to do anything on the vpn connection after they were authenticated via openvpn. I

Re: [pfSense Support] Developer Edition bootstrap error

2006-09-25 Thread Bill Marquette
http://www.freesbie.org/cvs.html might be of help. --Bill On 9/25/06, Fuchs, Martin <[EMAIL PROTECTED]> wrote: After pressing "enter" it shows: cvs [login aborted]: connect to cvs.freesbie.org(83.149.156.188):2401 failed: Operation timed out any idea ? Martin ___

Re: [pfSense Support] file server

2006-09-25 Thread Bill Marquette
On 9/25/06, Marc Boisis-Delavaud <[EMAIL PROTECTED]> wrote: Günter Müller a écrit : > Enable SSH (System->Advanced) on pfSense and you will have scp and sftp > access ... > > > I'm sorry but scp and sftp does'nt work. Did you turn it on? --Bill

Re: [pfSense Support] Office hours type setup.

2006-09-24 Thread Bill Marquette
no. The OpenBSD pf list (don't recall if it's on misc@ or the pf list) has some comments on how to implement this. --Bill On 9/24/06, SDamron <[EMAIL PROTECTED]> wrote: Just out of curiousity, would this be the place to start to implement something like this? DIOCXCOMMIT struct pfioc_trans *i

Re: [pfSense Support] OpenVPN Clients and FW ACL's

2006-09-24 Thread Bill Marquette
I think you misread. --Bill On 9/24/06, Rob Terhaar <[EMAIL PROTECTED]> wrote: so just to make sure i understand what's going on... there was vpn firewall controls in pfsense for a bit, but now after 9-21 snapshots this ability is out? On 9/24/06, Scott Ullrich <[EMAIL PROTECTED]> wrote: > Sa

Re: [pfSense Support] 1.0 RC2

2006-09-22 Thread Bill Marquette
On 9/22/06, Volker Kuhlmann <[EMAIL PROTECTED]> wrote: > >I didn't yet test, but does the shaper wizzard now check the correct > >interfaces for SQF(?) capability? There was no code change there. > > SQF? Yep, spelt "A L T Q" :) In beta4 I had to comment this out in traffic_shaper_wizard.xml

Re: [pfSense Support] net to net

2006-09-21 Thread Bill Marquette
On 9/21/06, Rob Terhaar <[EMAIL PROTECTED]> wrote: Yes, pfsense can do dual WAN. No, you can not add the bandwidth from two ISPs to increase your total bandwidth. Correct, not for a single transfer. Use a multi-threaded download manager and you might actually get load balanced across both link

Re: [pfSense Support] Load balancer problem

2006-09-19 Thread Bill Marquette
On 9/19/06, Heath Henderson <[EMAIL PROTECTED]> wrote: This is probably a question which doesn't require an answer, but I am a little leary about updating to the http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-09-18-06/ I was curious of how to go about the udpate. I see two files which look like

Re: [pfSense Support] Dynamic Rule

2006-09-18 Thread Bill Marquette
On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: Thanks, I am going to go the SSH route first. I will have access to setup VPN in about 2 months. I just don't have the time currently, and this person's system is in California and I am not. I haven't setup the ssh tunnel before, so if any

Re: [pfSense Support] Dynamic Rule

2006-09-18 Thread Bill Marquette
On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: I have a user who sits outside of our Office network. I need to open up a port for them to access Filemaker Through. I want to eventually get a VPN setup, but he has a Mac and I am not certain of how well the VPN will work with X.4 right no

Re: [pfSense Support] 1.0 RC2

2006-09-18 Thread Bill Marquette
On 9/18/06, Volker Kuhlmann <[EMAIL PROTECTED]> wrote: I didn't yet test, but does the shaper wizzard now check the correct interfaces for SQF(?) capability? There was no code change there. SQF? --Bill - To unsubscribe, e-mai

Re: [pfSense Support] Firewall on WRAP

2006-09-17 Thread Bill Marquette
On 9/16/06, BW <[EMAIL PROTECTED]> wrote: Hi all, I have a WRAP 2C with 1 ethernet port and 1 wireless card. I have it set with WAN on ethernet port and LAN on wireless and configured it with transparent firewall. I have one computer connected to the WAN port then wireless serial servers connec

Re: [pfSense Support] Interface ip alias

2006-09-15 Thread Bill Marquette
For now use one of the virtual IP types in the Firewall menu. --Bill On 9/15/06, Augusto Jobim Badaraco <[EMAIL PROTECTED]> wrote: How i can create a alias ip like i have in my actual servers like = ifconfig_vr0_alias.. ? ---

Re: [pfSense Support] PPTP password check too strict

2006-09-14 Thread Bill Marquette
On 9/13/06, Jesse Peterson <[EMAIL PROTECTED]> wrote: On line 67 of vpn_pptp_users_edit.php of pfSense RC2 the preg_match() to check for a valid password is too strict for my use. I circumvented it by backup/manual edit of config/restoring the config. Specifically I needed an exclamation point

Re: [pfSense Support] Editing firewall rules outside of the GUI

2006-09-12 Thread Bill Marquette
On 9/12/06, Fuchs, Martin <[EMAIL PROTECTED]> wrote: But nevertheless, you can filter packets outgoing to the internet... Uhhh, no you can't. pfSense filters inbound only. Bill, is there a consideration to make rules for packets going into the firewall ? This is the behaviour we follow a

Re: [pfSense Support] Editing firewall rules outside of the GUI

2006-09-12 Thread Bill Marquette
On 9/12/06, Doug Poland <[EMAIL PROTECTED]> wrote: On Tue, September 12, 2006 13:20, Scott Ullrich wrote: > On 9/12/06, Doug Poland <[EMAIL PROTECTED]> wrote: >> >> Can I edit the firewall rules outside the GUI? If so, what are the >> implications? Am I missing something? > > Considering that t

Re: [pfSense Support] pfsense, core-duo support?

2006-09-09 Thread Bill Marquette
On 9/9/06, Robert Carr <[EMAIL PROTECTED]> wrote: I realize pfsense isn't SMP-capable, but would it run on a core-duo (or core-solo processor)? Or are these processors totally unsupported for now? If FreeBSD 6.1 runs on it, pfSense should be able to. --Bill --

Re: [pfSense Support] Intel PWLA8494MT support with latest update of RC2

2006-09-06 Thread Bill Marquette
On 9/6/06, Pierre Frisch <[EMAIL PROTECTED]> wrote: So if I understand correctly you are porting pfsense to 6.2 instead of back porting the driver? That looks like a fabulous solution and quite a bit more sustainable for the future. Exactly. And takes the risk out of a backport (which looked l

Re: [pfSense Support] CARP Load balance

2006-09-06 Thread Bill Marquette
On 9/6/06, Robert Mortimer <[EMAIL PROTECTED]> wrote: I accept that I have an unusual layout. In some ways it was based on the CARP documentation so it is not a great surprise that it includes "about the _only_ legitimate use for this feature". I am OK with the fact that what I am doing is unsupp

Re: [pfSense Support] Intel PWLA8494MT support with latest update of RC2

2006-09-05 Thread Bill Marquette
me more than a day or two (work is eating up a lot of my hacking time right now) to retool our build/patch system - at that point I can send a test kernel your way. --Bill On 9/1/06, Pierre Frisch <[EMAIL PROTECTED]> wrote: Let me know your conclusions and will talk. Pierre On 1-Sep

Re: [pfSense Support] CARP Load balance

2006-09-05 Thread Bill Marquette
Robert has about the _only_ legitimate use for this feature. And an interesting network layout to boot. I suspect we don't allow for duplicate VHIDs though which would be required to make this work. Other than that, in his case, I'd expect that this should more or less "do the right thing" - as

Re: [pfSense Support] pfsense snapshot 09-03-06 embedded

2006-09-04 Thread Bill Marquette
On 9/4/06, Craig FALCONER <[EMAIL PROTECTED]> wrote: Why not call them 1.0-SNAPSHOT-2006-09-03? At least they'll sort correctly in a listing. Or are we really talking about the 8th and 9th of march 2006? It proves that pfSense is a global programme, when date representation issues arise :) A

Re: [pfSense Support] Intel PWLA8494MT support with latest update of RC2

2006-09-01 Thread Bill Marquette
On 9/1/06, Pierre Frisch <[EMAIL PROTECTED]> wrote: If all it takes is $50 I would be happy to oblige the board did cost me $500 and it is worthless without a driver. Understood, they aren't cheap boards. To be clear, what I'm offering is to provide a replacement kernel (that can be uploaded a

Re: [pfSense Support] Intel PWLA8494MT support with latest update of RC2

2006-09-01 Thread Bill Marquette
On 9/1/06, Pierre Frisch <[EMAIL PROTECTED]> wrote: Hi Bill, How much was the bounty? Not sure...probably only $50 or so. The thread was removed from the forum at some point. I guess I don't understand the problem. Why had the driver got to be backported for each version? How is pfsense bui

Re: [pfSense Support] Intel PWLA8494MT support with latest update of RC2

2006-09-01 Thread Bill Marquette
On 9/1/06, Pierre Frisch <[EMAIL PROTECTED]> wrote: What is the status support of the Intel PWLA8494MT. I had it working with a special build sent by Bill Marquette including Intel driver 6.0.5. However this has disappeared from the latest update. Is it going to come back with the ne

Re: [pfSense Support] Oddness

2006-08-30 Thread Bill Marquette
Where's this log coming from? The NLB boxes, or the pfSense box? --Bill On 8/30/06, Scott Williamson <[EMAIL PROTECTED]> wrote: Example of the log: Aug 30 14:19:16 Grey_Skull 172.16.50.102:3292 172.16.50.109:443 TCP -

Re: [pfSense Support] vpnc - client for cisco3000 VPN Concentrator

2006-08-30 Thread Bill Marquette
Not sure how FAST_IPSEC solves this problem, but FWIW it's already enabled in the pfSense kernel. Why doesn't the builtin IPSec work for you (if it's due to the Cisco proprietary goo on the other end then no need to answer)? --Bill On 8/30/06, Alvaro Pietrobono <[EMAIL PROTECTED]> wrote: Hi,

Re: [pfSense Support] CARP Load balance

2006-08-25 Thread Bill Marquette
On 8/25/06, Robert Mortimer <[EMAIL PROTECTED]> wrote: > You'll want to reboot after making that change. This naturally isn't > supported, but if you understand how carp balancing works, it's still > configurable. This is the case outlined in the Docs Yeah, see, the problem is that most peopl

Re: [pfSense Support] CARP Load balance

2006-08-25 Thread Bill Marquette
On 8/25/06, Robert Mortimer <[EMAIL PROTECTED]> wrote: Carp is the simple way to balance across this setup. Is there a way to use the load balancer on the CAP NIC instead. All examples seem to have a 1 box solution Is the ADSL PPPOE? If so, does the PPPOE terminate on the DSL modem, or the pfS

Re: [pfSense Support] CARP Load balance

2006-08-24 Thread Bill Marquette
On 8/24/06, Robert Mortimer <[EMAIL PROTECTED]> wrote: > On 8/24/06, Robert Mortimer <[EMAIL PROTECTED]> wrote: > > I have 2 ADSL lines each with it's own pfsense box. > > > > I have set up CARP to provide a common LAN address shared > between the two > > boxes > > > > Should this configuration l

Re: [pfSense Support] BGP troubleshooting with Openbgp

2006-08-23 Thread Bill Marquette
I'd post this on freebsd-net or an openbgp mailing list (is there one?)...OpenBSD which develops openbgp has fixed numerous bugs since OpenBSD 3.7 released, I'd be willing to bet that OpenBSD 3.9 w/ OpenBGP 3.9 (if we consider the version of OpenBGP to be the same as the OS it was developed on) wo

Re: [pfSense Support] Help with openbgpd 3.9 installation

2006-08-23 Thread Bill Marquette
On 8/23/06, bablam <[EMAIL PROTECTED]> wrote: Good afternoon all, I have just removed openbgpd 3.7_2 from my pfsense box and installed 3.9. When I attempt to run bgpd I get the following error; /libexec/ld-elf.so.1: Shared object "libc.so.7" not found, required by "bgpd" How can I instal

Re: [pfSense Support] Developer CD

2006-08-18 Thread Bill Marquette
On 8/18/06, Scott Ullrich <[EMAIL PROTECTED]> wrote: On 8/18/06, Robert Mortimer <[EMAIL PROTECTED]> wrote: > Developer CD Questions > > Is there fuller documentation on the use of the pfSense or similar > development setups around? > > More specifically > > 1) Is the developer CD supposed to pro

Re: [pfSense Support] port forwarding problem while using dual-wan with same ISP/gateway

2006-08-17 Thread Bill Marquette
No reason this shouldn't work. --Bill On 8/17/06, Raja Subramanian <[EMAIL PROTECTED]> wrote: I'm sorry if this is common knowledge, I did not get anywhere by trawling the forum and mailing list archives. I have a dual wan setup (WAN, OPT1), my ISP has provided me two public IP addresses in t

Re: [pfSense Support] DNS - Problems

2006-08-16 Thread Bill Marquette
The DNS override only works for items querying pfsense, not for pfsense itself. It and the daemon that does the DNS overriding (dnsmasq) use resolv.conf which should be populated with your ISPs DNS servers. You appear to have a bit of a catch-22. Since you have a FULL resolver internal to your

Re: [pfSense Support] Squid package

2006-08-12 Thread Bill Marquette
On 8/12/06, Samer Chaer <[EMAIL PROTECTED]> wrote: Dear Sirs, Where to download the squid package for PFsense, is there any documentation about installing it and running it? As you've been told on IRC, you need to be running a Full Install. The LiveCD is basically for demo purposes. --Bill

Re: [pfSense Support] install PFsense on USB keydrive

2006-08-12 Thread Bill Marquette
On 8/12/06, Samer Chaer <[EMAIL PROTECTED]> wrote: Dear Sirs, I want to install PFsense 1RC2 on a 256MB USB KEYDRIVE is that possible? Shall I use the same menu option 98 from the LiveCD? Thanks, Samer Why don't you try it and report back? --Bill --

Re: [pfSense Support] Updateing to HEAD

2006-08-11 Thread Bill Marquette
On 8/11/06, Robert Mortimer <[EMAIL PROTECTED]> wrote: I want to check my changes against a running version of HEAD. I have a running RC2 for development. What is the best way to update to HEAD now cvs_sync.sh is no more? Should I just nuke the box and install the developer edition? If so is cvs

Re: [pfSense Support] alias bug

2006-08-10 Thread Bill Marquette
On 8/10/06, Reuel ben Yisrael <[EMAIL PROTECTED]> wrote: On 8/10/06, Reuel ben Yisrael <[EMAIL PROTECTED]> wrote: > Bill Marquette wrote: > > > On 8/10/06, Reuel ben Yisrael <[EMAIL PROTECTED]> wrote: > > > >> Bill Marquette wrote: > >> >

Re: [pfSense Support] If ISC DHCP is not providing RFC 2136 updates what is?

2006-08-10 Thread Bill Marquette
On 8/10/06, Reuel ben Yisrael <[EMAIL PROTECTED]> wrote: Bill Marquette wrote: > On 8/10/06, Reuel ben Yisrael <[EMAIL PROTECTED]> wrote: > >> Bill Marquette wrote: >> >> > >> > I think it's in /etc/inc/services.inc - most of our non-G

Re: [pfSense Support] If ISC DHCP is not providing RFC 2136 updates what is?

2006-08-10 Thread Bill Marquette
On 8/10/06, Reuel ben Yisrael <[EMAIL PROTECTED]> wrote: Bill Marquette wrote: > > I think it's in /etc/inc/services.inc - most of our non-GUI related > code is in /etc/inc. > > --Bill Where is the code that generates /tmp/rules.debug? I want to help find the alias b

Re: [pfSense Support] If ISC DHCP is not providing RFC 2136 updates what is?

2006-08-10 Thread Bill Marquette
On 8/10/06, Robert Mortimer <[EMAIL PROTECTED]> wrote: I've had a quick look at the OpenBSD docs and they indicate it runs dhclient-script in the same way as ISC's dhc client so all should be OK can anyone tell me where the file containing the function services_dhcpd_configure() and it's friends

Re: [pfSense Support] L2TP VPN?

2006-08-10 Thread Bill Marquette
On 8/10/06, Tommaso Di Donato <[EMAIL PROTECTED]> wrote: Hi all! I've just installed RC2, and I've seen there is the demon l2tpd.. is it working? I know there is not a menu section, but is it possible to use it? Thank you! Tom The code for that is only in HEAD. --Bill

Re: [pfSense Support] If ISC DHCP is not providing RFC 2136 updates what is?

2006-08-09 Thread Bill Marquette
On 8/9/06, Scott Ullrich <[EMAIL PROTECTED]> wrote: On 8/9/06, Robert Mortimer <[EMAIL PROTECTED]> wrote: > Flash of understanding > > Updates are tied into DHCP CLIENT to update changes to pfsense's interfaces > Updates are not tried into DHCPD to update information on leases issued > > Sorry fo

Re: [pfSense Support] Can't get basic routing to work.

2006-08-04 Thread Bill Marquette
On 8/4/06, A. Jones <[EMAIL PROTECTED]> wrote: When you send (initiate) a packet out on port abc, and it is allowed through, the firewall opens up a "hole" (which is stored in the state table) that allows a response from the IP the packet was sent to on the return port specified in the packet. Y

Re: [pfSense Support] Can't get basic routing to work.

2006-08-04 Thread Bill Marquette
Not for inbound traffic it isn't. --Bill On 8/4/06, A. Jones <[EMAIL PROTECTED]> wrote: The original rule on the firewall is already good for that. >From: "Bill Marquette" <[EMAIL PROTECTED]> >Reply-To: support@pfsense.com >To: support@pfsense.com >S

Re: [pfSense Support] Can't get basic routing to work.

2006-08-04 Thread Bill Marquette
On 8/4/06, A. Jones <[EMAIL PROTECTED]> wrote: I have a whole subnet, routing is what I need. The computers also MUST have public IP addresses assigned to their interfaces. That will also screw me over when one of the subnets needs to talk to the other subnet using public IPs http://faq.pfsen

Re: [pfSense Support] Bridged Multi-Wan Load Balancing Failover

2006-08-04 Thread Bill Marquette
On 8/4/06, Nick Smith <[EMAIL PROTECTED]> wrote: Gary Buckmaster wrote: > Scott Ullrich wrote: >> On 8/3/06, Gary Buckmaster <[EMAIL PROTECTED]> wrote: >>> Aren't those Opteron based? If so, then you're out of luck, because >>> pfSense is currently not an x64 platform. >> >> Opterons will run ju

Re: [pfSense Support] Trouble accessing console via serial connection

2006-08-04 Thread Bill Marquette
On 8/3/06, Jonathan Wanak <[EMAIL PROTECTED]> wrote: Hi, I'm trying to get the serial console to work. I'm running pfSense RC2, on the hard drive on a PII Dell Optiplex, connected to my Windows XP machine with a null modem cable. Connection settings are 9600/8/N/1/HW handshaking. I have ver

Re: [pfSense Support] cant reset password

2006-08-02 Thread Bill Marquette
On 8/2/06, Nick Smith <[EMAIL PROTECTED]> wrote: Bill Marquette wrote: > On 8/2/06, Bill Marquette <[EMAIL PROTECTED]> wrote: >> Not with that error message you aren't. That came from HEAD. Please >> reinstall. Thanks > > PS. for those still wondering

Re: [pfSense Support] cant reset password

2006-08-02 Thread Bill Marquette
On 8/2/06, Bill Marquette <[EMAIL PROTECTED]> wrote: Not with that error message you aren't. That came from HEAD. Please reinstall. Thanks PS. for those still wondering why cvs_sync.sh is gone...here you go. --Bill -

Re: [pfSense Support] cant reset password

2006-08-02 Thread Bill Marquette
On 8/2/06, Nick Smith <[EMAIL PROTECTED]> wrote: Im getting this error when trying to reset the admin password via the console: Error: cannon determine root pwd in sync_webgui_passwords(). Effectively locking me out of the firewall. Is there anyway to correct this? I was hoping to upgrade to

Re: [pfSense Support] 1.0 RC2

2006-08-01 Thread Bill Marquette
Works here on 6.0.2800.1106.xpsp2.050301-1526CO SP1; Q822925; Q837009; Q867801; Q903235 --Bill On 8/1/06, macafee <[EMAIL PROTECTED]> wrote: My IE Browse version is 6.0.2900.2180.xpsp_sp2_rtm.040803-2158 The IE ERROR IS "Line:324 Char:1 Error:Object expected Code:0 URL:http://mypfsenseip/firew

Re: [pfSense Support] 64 MB Warning!!! Don't use systems with less than 128 MB RAM !

2006-07-28 Thread Bill Marquette
On 7/27/06, Tim Roberts <[EMAIL PROTECTED]> wrote: Amen. found out only after buying 10 wrap 2cs with 64mb :) now their justoffce aps :(Life is moderately better with the changes we made in CVS - it'll be in RC2.  _BUT_ I think it's safe to say that 64M machines are last on our list for getting att

Re: [pfSense Support] jitter? ... it's the fiber again!

2006-07-28 Thread Bill Marquette
On 7/28/06, Jure Pečar <[EMAIL PROTECTED]> wrote: On Fri, 28 Jul 2006 16:08:51 +0200"Espen Johansen" <[EMAIL PROTECTED]> wrote:> The only time I have seen behaviour like this is when either the nic > or the cable has issue, when everything stopped it was the card> trying to autosense half duplex be

Re: [pfSense Support] Max. outbound PPTP sessions currently limited to 1

2006-07-27 Thread Bill Marquette
On 7/27/06, David Strout <[EMAIL PROTECTED]> wrote: http://forum.pfsense.org/index.php/topic,1383.0.htmlI am baffled by the above post on the forum.  Likeit or not pfS devs ... PPTP is here to stay and has it place in networking.  I am not a bigsupporter of it personally and I am fully aware ofits

Re: [pfSense Support] Problem with Intel PRO/100 82562GT Network Adapter

2006-07-27 Thread Bill Marquette
Post full dmesg please.  Thanks--BillOn 7/27/06, Carlos Silva <[EMAIL PROTECTED]> wrote: Hi Scott.Doesn't have Sound device on my machine.And not find pnp or Plug and Play entries on Bios Setup.I have two onboard network adapters.1) Intel PRO/100 82562GT.2) Broadcom Gigabit BCM5721KFBG. freebsd# if

Re: [pfSense Support] Pfsense and Netbios problem

2006-07-26 Thread Bill Marquette
RFC1918 or bogon filter on wan most likely.--BillOn 7/26/06, Pedro Paulo de Magalhaes Oliveira Junior < [EMAIL PROTECTED]> wrote:VITBOX is a equipment of the ISP that provides NAT The PPTP server is outside DSL in other cityThe firewall is full OPEN-Mensagem original-De: Holger Bauer [mailt

Re: [pfSense Support] pfsense 1.0!!??!?!?!?

2006-07-26 Thread Bill Marquette
On 7/26/06, Scott Ullrich <[EMAIL PROTECTED]> wrote: On 7/26/06, Rob Terhaar <[EMAIL PROTECTED]> wrote: > i'm curious, what sort of things have been found wrong with cvs_sync.sh in > RELENG_1? Personally, I've been doing cvs_sync.sh on one of my routers at > the office here for a couple months wi

<    1   2   3   4   5   6   7   8   9   10   >