This used to work, but our config has significantly diverged from
m0n0. I suspect if you used a config from where we forked it'd
probably work, but assuming m0n0 changed _anything_ in their config
file since then, it's unlikely to convert over. I think we're at the
point where either someone
On 9/29/05, Dan Swartzendruber [EMAIL PROTECTED] wrote:
i assumed he had all that correct, since he said
he could see the traffic going into the pfsense
port. i was going to ask the same question,
myself. this has to be a config problem, as i'm using this exact same setup.
I agree, which is
Wrong. A parent queue denotes a child queue. Create 4 queues and
assign your rules to the two child queues. Better yet, use the
ezshaper wizard, it's there so you don't have to try and figure out
how it all works.
--Bill
On 9/29/05, Audun Brekke [EMAIL PROTECTED] wrote:
There seems to be
Not unique, we just don't have an easy way to implement ratio based
load balancing at this time. BTW, it'd be connection based anyway,
not true bandwidth balancing. I'd recommend putting some clients on
one connection, some on the other and manually balance the links using
rules.
--Bill
On
Are these two logical networks on the same physical network? I'm
noticing the request came in on both fxp0 and xl0 - that seems kinda
odd.
Sep 28 14:35:03 dhcpd: DHCPREQUEST for 192.168.2.254 (192.168.2.4)
from 00:12:79:ad:c6:fc (TRC-dc5100) via fxp0: wrong network.
Sep 28 14:35:03 dhcpd:
Probably not when certain people split a dozen or so functions out
into their own file :) 0.85.4 has all the latest fixes. At this
time, there isn't much patched post 0.85.4 (unless you try running
ipv6 tunneling :)), I'd recommend moving to it.
--Bill
On 9/27/05, Dan Swartzendruber [EMAIL
Only problems I've had with carp recently weren't actually due to
carp, but the dhcp daemon. There's a hold down timer somewhere that
won't let it come up as primary for 300 or 360 seconds (my bet is
there two different timeouts, a 60 second timeout and a 300 second
one). So if you're running a
On 9/27/05, Frimmel, Ivan (ISS South Africa) [EMAIL PROTECTED] wrote:
HI
PPPoe is on WAN .. CARP is on LAN with carp sync on OPT1.
OK so you guys are going to laugh at me. I do feel stupid. As a fault finding
procedure and just to get connectivity back I halted router2, which is UTP
Are both supposed to be selected? I suspect for this to work we'll
need to convert those to the hex values and do a bitwise AND on them.
I trust you'll be able to test any changes we make?
--Bill
On 9/27/05, William Armstrong [EMAIL PROTECTED] wrote:
The error is not on TF wizard..
I try
Oddly I haven't seen this on my wrap installs :-/
There was a broken commit of /etc/filter.inc that would have exhibited
this behavior on a wrap, but that didn't make it into 0.85.2 (just
confirmed on one of my installs)
Warning: touch(): Unable to create file /filter_dirty makes me think
we
PROTECTED] wrote:
update_file.sh /etc/inc/filter.inc
On 9/26/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote:
Scott Ullrich wrote:
Where? So I can fix on my board
regards
Rodolfo
Yep, there was a small typo in filter.inc. It's fixed now.
Scott
On 9/26/05, Bill
On 9/25/05, Jeroen Hermans [EMAIL PROTECTED] wrote:
I have the following situation at a site:
- 1 pfsense box connected to the internet and lan (194.1.1.41)
- lan behind pfsense box (nat) (194.1.1.0/24)
- proxy (squid) box in lan (194.1.1.31)
- a few clients in the lan
The last few weeks
On 9/25/05, Matt Fanady [EMAIL PROTECTED] wrote:
Hello,
I've got a PC with 3 identical NIC's in it. I have a landline internet
connection and a satellite internet connection. I would like to use PFsense
to use the landline when it's up, and then fail over to the satellite if the
On 9/25/05, Jeroen Hermans [EMAIL PROTECTED] wrote:
Hmmm...slow the first time and fast the second possibly sounds like an
issue in DNS resolution somewhere. Are you using pfSense as your DNS
server for the LAN? Can you telnet to any host via IP address and see
if the results differ?
On 9/25/05, Mojo Jojo [EMAIL PROTECTED] wrote:
Ever heard of CARP? We have that you know.
Yes, it's one of the reasons I chose your product over others.. However, I
was going to set it up in case of unplanned failure of hardware or software.
In this case, I am basically planning on
Nope, it's not possible to aggregate a single TCP flow over multiple
connections. With load balancing you can at least get number of WAN
link TCP flows going at full speed, but you won't bet a single flow
at the speed of all connections.
--Bill
On 9/22/05, Robo.K. [EMAIL PROTECTED] wrote:
Hi,
On 9/20/05, raphael [EMAIL PROTECTED] wrote:
Does anyone already tested and validated the dual wan using pppoe on thefirst link ?
Yes, that's my configuration at home. PPPOE on WAN and DHCP
(cable) on OPT1. LAN is my internal network (gee imagine that)
and OPT2 is my DMZ.
BTW, I downgraded my
On 9/19/05, Mojo Jojo [EMAIL PROTECTED] wrote:
Any idea why my Pf died in the middle of running? I didn't do an upgrade, itwas a system running on a fresh install of 0.84 days before.Also, besided the booting problem, I am wondering why it just stopped
working which is what caused me to reboot it
One of the two PPPOE connections will need to be terminated on a router unless I missed a major change recently.
--BillOn 9/18/05, [EMAIL PROTECTED] [EMAIL PROTECTED]
wrote:
hello
I read the archives and found 2 posts in
relation with my question :
over the static mappingregards..Damien
--- Bill Marquette [EMAIL PROTECTED] a écrit: This works for me, can you try your update_file.sh again? # update_file.sh
/usr/local/www/services_dhcp_edit.php trying to fetch latest /usr/local/www/services_dhcp_edit.php # --Bill On 9/16/05, Damien Dupertuis
You might be able to create a proxy arp address on that interface
(virtual IPs screen) and then create an outbound nat that matches your
dsl modems IP address and source it from the proxy arp address.
--BillOn 9/17/05, Jeroen Geusebroek [EMAIL PROTECTED] wrote:
Hi,I have an DSL modem with a web
On 9/16/05, Robo.K. [EMAIL PROTECTED] wrote:
Version
0.84.6
1./
In traffic shaper is
still problem as described here -
http://marc.theaimsgroup.com/?l=pfsense-supportm=112662324102230w=2
Fixed in CVS, must have missed the 0.84.6 release.
2./
In Queues
isn`t displayed three boxes for
On 9/16/05, Robo.K. [EMAIL PROTECTED] wrote:
Version
0.84.6
If I have connected
computer /Celer 2.4Ghz, 256MB RAM, 100Mbps 3COM TX interface/ directly to test
computer via crossover cable, or both are in some switch,
ping time response
is from bellow 1ms to 9-10 msand abou 700 - 900ms
Please create a ticket, this has been reported before.
--BillOn 9/16/05, Robo.K. [EMAIL PROTECTED] wrote:
0.84.6
After attempt to
configure PFSTAT after save options there i gett screen with error
messages:
$value =
$_POST['location0'];$value = $_POST['counters0'];$value =
On 9/16/05, Robo.K. [EMAIL PROTECTED] wrote:
I know that kernel in monowall 4.xx is faster than 5.xx
used in PFSENSE. But from this
For the archives. pfSense uses FreeBSD 6, not FreeBSD 5.
--Bill
Oddly, the upgrade should have moved that setting to the right
place. :-/ I'll look into this a little more as this
shouldn't have bitten you.
--BillOn 9/16/05, Damien Dupertuis [EMAIL PROTECTED] wrote:
It is done thank you...--- Scott Ullrich [EMAIL PROTECTED] a écrit : Rerun the EZ Shaper
This works for me, can you try your update_file.sh again?
# update_file.sh /usr/local/www/services_dhcp_edit.php
trying to fetch latest /usr/local/www/services_dhcp_edit.php
#
--BillOn 9/16/05, Damien Dupertuis [EMAIL PROTECTED] wrote:
Okay,I've done it but it didn't worked...here is what
On 9/15/05, Mojo Jojo [EMAIL PROTECTED] wrote:
So, if I am reading you right, this is something I
should mostly ignore and not worry about too much?
Mostly, don't worry about it too much. I'd keep an eye on them as
it's possible it's part of a stealth scan. But I wouldn't put too
much
Tier 2 platform, don't even both with it until it's a Tier 1 platform unless you like fixing things.
http://www.freebsd.org/platforms/ppc.html
I'd also like to point out that we've had nothing but issues with usb
keyboards and that's all that currently works in the PPC port.
Wait another year and
ack, I'll poke at this shortly. I had some interesting
experiences with the bandwidth fields when writing the wizard.
They shouldn't be needed - realtime/upperlimit/linkshare are supposed
to be better. What I found was that bandwidth is needed so that
pfctl doesn't bitch about bandwidth being over
On 9/12/05, Tom Müller-Kortkamp [EMAIL PROTECTED] wrote:
What about pound as LB? It works greate on several Sites !(http://www.apsis.ch/pound/)
One of the requirements was that we didn't proxy the traffic. It
appears that pound proxies the traffic. Feel free to make a
package for this.
--Bill
Username 'admin' works too.
--BillOn 9/10/05, Scott Ullrich [EMAIL PROTECTED] wrote:
Use the username root and the pfsense webConfigurator password.On 9/10/05, Robo.K. [EMAIL PROTECTED] wrote: When I use a PUTTY for Windows and I`m tying acces pfesnese via SSh,Putty
ask for me user name and for
I'm still somewhat working on the shaper and since I've taken about a
much needed 2 month break from it, I'm going to have to do a little
re-education.
Here's a little info right from the pf.conf man page:
The hfsc scheduler supports some additional options: realtime _sc_
Are you using traffic shaping and filling the downstream queue?
--BillOn 9/10/05, Robo.K. [EMAIL PROTECTED] wrote:
Why is so slow
response from menu of PF ? Time is from 3 to 5 seconds on 100TX 3COM
cardfull duplexin PFsense drop down menu.
In mettalic is
responses more slower.
Classic
Yup, I have SBC's static offering. With the Cayman router that
comes with that offering you can terminate PPPOE on the modem and allow
for the 5 addresses to be used on the ethernet side with pfSense.
You then have the option of bridging those IPs to inside (or DMZ) and
putting real addresses on
a
standard Speedstream 5360 modem that has no routing or firewall
capabilities.
Bill Marquette wrote:
Yup, I have SBC's static offering. With the Cayman router
that
comes with that offering you can terminate PPPOE on the modem and allow
for the 5 addresses to be used on the ethernet side
.
--BillOn 9/9/05, Darin [EMAIL PROTECTED] wrote:
Its just a bridge. Its a pretty old modem with very basic functions.
About 3-4 years old.
http://www.chipweb.de/dsl/index.php?menu=2id2=33
Darin -
Bill Marquette wrote:
Right now I'm running on a borrows 5100a which bridges the
PPPOE
only
Technically, we do put the interface in the rule when it's
created. But I can guarantee we'll only snag the first one.
So, while you can enter the same IP multiple times in a pool
(artificially creating a ratio based round robin) I'd be willing to bet
that we don't correctly support this on one
Not all CF cards are created equal. Some are better than others.
http://www.m0n0.ch/bsd/#knownprobs
http://lists.soekris.com/pipermail/soekris-tech/2004-October/022017.html
--Bill
PS. Scott, note the especially Lexar in the m0n0 page? Wasn't
it Lexar cards we were trying to use at the hackathon
I don't believe slb is fully integrated into the outbound load
balancer. If you don't have a load balanced server you probably
won't see anything in the logs at this time.
--BillOn 9/2/05, Daniel Solsona [EMAIL PROTECTED] wrote:
Well, awesome job guys for the work on the outbound load balancer
Hmmm, that's a seriously high interrupt load. How much traffic
goes through this box? What type of NICs and CPU do the boxes
have?
--BillOn 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote:
second part.Now backup is completly frozer,here top:last
pid: 737;load
averages:0.97,0.43,0.17up
0.81 contained a number of load balancer fixes.
--BillOn 8/30/05, Holger Bauer [EMAIL PROTECTED] wrote:
It
can be done the way you describe it and I have this setup at home in my
testenvironment (however, I use different subnets on my wans, but it
should work with your setup too as far as I
Interestingly the WRAP image is supposed to be mounted read-only
anyway. Only /cf should normally get mounted r/w and then only
for changes.
--BillOn 8/30/05, Fleming, John (ZeroChaos) [EMAIL PROTECTED] wrote:
Just an FYI this is why you see the error message. You should only beworried if you see
I noticed this behaviour this morning. https didn't work, http sent
me to the login page, but ping worked (usually) and I could SSH
through the firewall. Oddly, last night after I setup CP, it worked
as intended.
--Bill
On 8/23/05, Tobias Frank [EMAIL PROTECTED] wrote:
Hello,
when trying
iy yi yi...I can't ever begin to remember what bugs lurked back that
far. Any chance you can upgrade to current? We're fixing stuff left
and right, I'm not going to go back through the last three months
changelogs to see if we've already fixed whatever might be affecting
you (if anything). If
suspended: connect to
kundt.homeip.net[213.191.40.68]: Connection timed out
-- Forwarded message --
From: Bill Marquette [EMAIL PROTECTED]
To: Bastian Schern [EMAIL PROTECTED]
Date: Mon, 22 Aug 2005 18:18:24 -0500
Subject: Re: [pfSense Support] Virtual IPs not working
On 8
There was a nasty bug in .79 that partially reverted the config file
version. This left a config file that had newer syntax and an older
version number. Upgrading past .79 w/out taking some corrective
measure will break your system. Again, if you installed or upgraded
to .79 and plan on using
On 8/23/05, Scott Ullrich [EMAIL PROTECTED] wrote:
I'll check it out. I really need to rip out the interfaces crap and
redo it completely. But no time and a feature freeze. GRR.
Yeah, I think this work is slated for 2.x / next hackathon or
something. The right way to do this requires a
On 8/23/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
As a test, I tried to create a rule to send all VNC traffic over the
OPT1 WAN interface, but it always used the default WAN interface.
I must be missing something. How can this be done when the second WAN
interface has a static
On 8/22/05, Bastian Schern [EMAIL PROTECTED] wrote:
Hi,
SNIP
I'm using pfSense Version 0.79.2 and my Virtual IPs are not functional.
It's not possible to ping any Virtual Interface. Most important thing is
to get the external IPs back to work. Because all of them should be
forwarded to
What SSH client are you using? Is it configured for 'keyboard-interactive' ?
--Bill
On 8/20/05, Giorgio Ducci [EMAIL PROTECTED] wrote:
Hi,
I get installed the last embedded release 0.78 on a WRAP 1E board and
now all the minor webgui problem related to status==interfaces are
ok. Wonderful!!
I've had coworkers report the same issue. The solution was to remove
the entire IPSEC section in the XML file (actually, if you know
exactly what to remove, you don't need to, but this is the easier more
generic way describing the fix). At some point in one of the versions
right after the
No. Use the new Virtual IP screen to create virtual IPs that are
either proxy arp or other depending on whether those IPs are routed
to the physical subnet the box is on or to it directly.
--Bill
On 8/15/05, Paulus Edwin Prasetya [EMAIL PROTECTED] wrote:
So, it is really because of realtek, so
On 8/16/05, Howard Virag [EMAIL PROTECTED] wrote:
Hello,
This is likely not strictly (or loosely) a pfSense problem.
Can someone venture a guess as to why simple port forwarding is failing for
me?
In short, It works to my Linux PC, an older AMD 800 MHz machine, but
port forwards to my
On 8/12/05, Chris Buechler [EMAIL PROTECTED] wrote:
On 8/12/05, Bill Marquette [EMAIL PROTECTED] wrote:
Let me guess, the hosts initiating the PING are running Windows? I'm
pretty sure we've recently fixed this bug. Care to try it?
With ipfilter 3.x (and hence m0n0wall) it doesn't
Hrm..I've got a GX110 sitting on my desk here that I installed FreeBSD
on just fine. If I can dig up another HD, I'll try the install on it.
--Bill
On 8/11/05, Wesley Joyce [EMAIL PROTECTED] wrote:
I'm in the same boat as well on Dell GX 110's. I have followed the 'upgrade
solution' of
You won't find one until that work is complete. How it should work is
not how it currently works - it's a functioning work in progress.
--Bill
On 8/8/05, alan walters [EMAIL PROTECTED] wrote:
Just looking for a quick blah on how the incoming load balancer should
work
On 8/5/05, Paul Taylor [EMAIL PROTECTED] wrote:
While looking through the config.xml file to see if I could spot anything
unusual (to help me fix the last issue I posted about), I noticed the
FreeRadius config...
The problem that I saw is that the passwords are stored in clear text. I
On 8/5/05, Paul Taylor [EMAIL PROTECTED] wrote:
Bill,
Well, yes, I realize that base64encoding doesn't provide much in the
way of security... But it's better than the data being completely in the
clear... I have some encryption/decryption code around here somewhere that
could
-
From: Bill Marquette [mailto:[EMAIL PROTECTED]
Sent: Friday, August 05, 2005 11:17 AM
To: Paul Taylor
Cc: support@pfsense.com
Subject: Re: [pfSense Support] FreeRadius Package - slight security issue
On 8/5/05, Paul Taylor [EMAIL PROTECTED] wrote:
Bill,
Well, yes, I realize
It sure does :) I had an ISP failure last night, quite annoying :)
I've now got a duplicate of all my rules with different gateways
setup. I enable/disable the rules depending on which ISP I need/want
the traffic to head out at that time. Can't wait 'til this weekend so
we can make all that
On 8/2/05, Paul Taylor [EMAIL PROTECTED] wrote:
Woops - I was trying to paste this in after like so: when I accidentally
sent the email... :)
Last 50 captive portal log entries
Aug 2 13:44:33 LOGIN: pault, 00:50:da:b2:42:36, 192.168.1.254
Aug 2 13:45:29 LOGIN: pault, 00:10:4b:76:91:4e,
On 8/2/05, Scott Muller [EMAIL PROTECTED] wrote:
Is it possible to enable the Routing daemon (routed). Our pfsense box
sits on a network that uses rip v2. I have manually started
/sbin/routed -q (-q means listen only)
from the shell prompt but need an integrated way to do this, or is
On 7/29/05, Scott Ullrich [EMAIL PROTECTED] wrote:
On 7/29/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
- I created a Virtual IP using the same IP address as my WAN interface,
trying to get the router to accept (or redirect) ICMP (I want my system
pingable). I failed in doing that.
Use the EZ-Shaper wizard. It will do exactly what you want.
--Bill
On 7/24/05, Xtian [EMAIL PROTECTED] wrote:
Hi,
I have done my best to read the FAQs, documentation, and mailing list
archives for both pfSense and Monowall, and have not found any information on
this, hence I am asking
On 7/25/05, Christian Rohrmeier [EMAIL PROTECTED] wrote:
I haven't found that to be true. It doesn't create any rules for SSH.
pfSense has a wide selection of games and P2P software that it will make
rules and queues for, but not SSH, unless I overlooked something.
Certainly trying to SSH
On 7/21/05, alan walters [EMAIL PROTECTED] wrote:
I would like to try and test an inbound round robin to our test web servers.
This isn't currently a feature, it's being worked on.
Would it be possible to put a shell command In to do this.
Please tell me if you figure something
Yikes...why aren't you using proxy arp? At any rate, carp will work
for that too - it'll be somewhat noisy, but'll work just fine. In
fact...what the hell I recommend it, there, I said it...;-P
--Bill
On 7/18/05, ijez [EMAIL PROTECTED] wrote:
Hi,
1. config all your public IPs as
Try http://www.pfsense.com/downloads/pfSense-Full-Update-0.70.2.tgz
and another useful URL :) http://www.pfsense.com/downloads/
On 7/17/05, David Strout [EMAIL PROTECTED] wrote:
I saw the post on the BLOG about ver 0.70.2
but can seem to find it on the updates link or in
the downloads
701 - 769 of 769 matches
Mail list logo
