Re: [pfSense Support] Over 2GB File can not copy LAN to WAN Pfsense

2010-09-07 Thread David Burgess
On Tue, Sep 7, 2010 at 8:32 AM, Michel Servaes wrote: > What happens, if you transfer the file in direct (eg. without the > pfsense in between ?) Definitely try that. pfsense has a workaround specifically for NFS on System: Advanced: Firewall and NAT (system_advanced_firewall.php). Did you try

Re: [pfSense Support] Benchmark tool

2010-09-04 Thread David Burgess
On Sat, Sep 4, 2010 at 3:58 AM, bsd wrote: > Hi, > > I am looking for a tool (or a configuration setup) that will allow me to > benchmark (performance test) couple of firewall based on pfSense, and > eventualy to compare them with other software / hard solution. > > Any idea, clue, link will be

Re: [pfSense Support] Appliance Recommendation for 100 Mbps (DOCSIS 3.0) Service

2010-09-01 Thread David Burgess
On Wed, Sep 1, 2010 at 11:17 AM, stephen at stephenjc wrote: > Supermicro twin is like that but they share a ps. I was going to suggest that it wouldn't be hard to modify a SM twin to use dual independent PicoPSU or M4-ATX or the like, but it appears the twins are all Xeon models, and perhaps a l

Re: [pfSense Support] QoS for Dummies?

2010-08-31 Thread David Burgess
On Mon, Aug 30, 2010 at 9:09 PM, Dane Reugger wrote: > I'm a long time fan of PfSense but several concepts elude me ... so I > was hopping somebody had a VoIP QoS for PfSense how-to they could > point me at. The single most important aspect of a working QoS solution is to make sure your outbound

[pfSense Support] Re: interrupt v kernel usage

2010-08-24 Thread David Burgess
Sorry, forgot to mention 2.0 nanobsd August 2 snapshot. On Wed, Aug 25, 2010 at 12:20 AM, David Burgess wrote: > I'm using a pair of onboard (vr) NICs on a net5501-80 (500 MHz Geode) > with vlans to firewall a 36/4 mlppp connection. During heavy download > top reports interrupt

[pfSense Support] interrupt v kernel usage

2010-08-24 Thread David Burgess
I'm using a pair of onboard (vr) NICs on a net5501-80 (500 MHz Geode) with vlans to firewall a 36/4 mlppp connection. During heavy download top reports interrupts around 40-50% CPU usage with most of the remainder being idle. I dropped in an Intel Pro 1000 GT (em, PCI) in place of one of the onboa

Re: [pfSense Support] SSD partition alignment in 2.0

2010-08-16 Thread David Burgess
On Mon, Aug 16, 2010 at 12:03 PM, Scott Ullrich wrote: > That is a good question.   The 2.0 installer uses pc-sysinstaller > which I am not entirely sure if it takes into account this or not. I did an install yesterday and worked on this. I manually changed geometry to 32 heads and 32 sectors an

Re: [pfSense Support] Simultaneous client connection limit / Maximum state entries per host

2010-08-16 Thread David Burgess
On Mon, Aug 16, 2010 at 8:28 AM, David Burgess wrote: > On Mon, Aug 16, 2010 at 8:21 AM, Dominic wrote: > >> My query though is, how can I test that this is working correctly? Is >> there a tool that I can >> use to make connections from a single machine? Ideally someth

Re: [pfSense Support] Simultaneous client connection limit / Maximum state entries per host

2010-08-16 Thread David Burgess
On Mon, Aug 16, 2010 at 8:21 AM, Dominic wrote: > My query though is, how can I test that this is working correctly? Is > there a tool that I can > use to make connections from a single machine? Ideally something that > provides the Would this do it? http://www.smallnetbuilder.com/lanwan/lanwan

Re: [pfSense Support] question on blocks SSH connections

2010-08-12 Thread David Burgess
On Thu, Aug 12, 2010 at 4:44 PM, Tim Dickson wrote: > Then only allow to the SSH servers you know/want?  You can go either way... > block all and allow only certain IPs > Or allow all, and block certain IPs A whitelist will work if he knows the IPs that he wants to allow. Otherwise, how does pf

Re: [pfSense Support] question on blocks SSH connections

2010-08-12 Thread David Burgess
On Thu, Aug 12, 2010 at 4:29 PM, Cinaed Simson wrote: > Hi - suppose the office LAN has one open outbound port - say IMAP on > port 143. > > I go home and configure my Linux desktop to run a SSH server on port 143. > > Now I return to the office and attempt to connect to my machine at home > via p

Re: [pfSense Support] freeswitch help

2010-08-12 Thread David Burgess
On Thu, Aug 12, 2010 at 4:22 PM, Ryan wrote: > So The freswitch binds to the lan interface by default? Oh, right. Sorry. I forgot one of the reasons I moved my freeswitch install from pfsense to a LAN host is because one of the limitations in 1.2.3 was not being able to create firewall or shaper

Re: [pfSense Support] freeswitch help

2010-08-12 Thread David Burgess
On Thu, Aug 12, 2010 at 3:35 PM, Ryan L. Rodrigue wrote: > 1.  Broadvox is set to go out of a certain ISP that we have on interface > opt1.  I don't see anywhere in the setting to specify this. Create a pass rule on the internal interface, selecting OPT1 as the gateway. > 2.  I assume I should

Re: [pfSense Support] /boot/loader.conf vs /system_advanced_sysctl.php in 2.0

2010-08-12 Thread David Burgess
On Thu, Aug 12, 2010 at 12:43 PM, Jim Pingle wrote: > Are you using squid? Usually the nmbclusters only helped in that case. > As for the others, it's hard to say. You should try them individually > and see which one actually makes the difference. Yeah, I'm running squid in transparent mode. I h

[pfSense Support] /boot/loader.conf vs /system_advanced_sysctl.php in 2.0

2010-08-12 Thread David Burgess
In 1.2.3 I had very good results adding the following lines to /boot/loader.conf while using the squid package in transparent mode: > hint.apic.0.disabled=1 > kern.ipc.nmbclusters="32768" > kern.maxfiles="65536" > kern.maxfilesperproc="32768" > net.inet.ip.portrange.last="65535" So far in 2.0 I h

Re: [pfSense Support] asterisk behind pfsense+remote sip clients

2010-08-11 Thread David Burgess
On Wed, Aug 11, 2010 at 1:53 PM, Victor Pasten wrote: > Hi Guys, recently I've installed a asterisk server (in my lan, behind pfsense > 1.2.3-release), everything it's ok, except for some remote sip extentions > (polycom device, and x-lite softphone) that periodically are loosing her > registra

Re: [pfSense Support] Ampro ReadyBoard fails to boot

2010-08-08 Thread David Burgess
On Sun, Aug 8, 2010 at 8:35 AM, Lyle Giese wrote: >> F6 PXE >> boot: F1 >> (spinner starts and immediately locks) Have you played with the HDD settings in the BIOS? Sometimes changing from CHS mode to LBA will do the trick. db ---

[pfSense Support] SSD partition alignment in 2.0

2010-08-07 Thread David Burgess
Is the 2.0 installer aware of 4k sector discs, and does it align its partitions accordingly? I realize better SSD controllers have minimized the effects of partition boundary misalignment, but I still prefer to introduce as little entropy as possible. Call me teutonic. db ---

Re: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread David Burgess
On Thu, Aug 5, 2010 at 9:20 PM, Chris Buechler wrote: > it's a simple fat finger to drop that traffic into your LAN. That's poetry. db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail:

Re: [pfSense Support] PFSENSE 2.0

2010-08-05 Thread David Burgess
On Thu, Aug 5, 2010 at 9:09 AM, Johan Hendriks wrote: >> does freeBSD support trim with SSDs? > as of Freebsd 8.1 it is. > > read the following: > http://www.freebsd.org/releases/8.1R/relnotes-detailed.html#DISKS Very interesting. I see this in the latest build log for 2.0: Thu Aug 5 03:00:22

Re: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread David Burgess
Paul, I understand your post up to this point: > if the switch's port are set so that connected devices can't cause them > to flip from untagged to tagged mode (in cisco speak from access to > trunk - "switchport nonegotiate" I'm looking at the help file for my switch, and thinking this section

[pfSense Support] multi-wan, multi-lan security

2010-08-04 Thread David Burgess
I've been running the 2.0 betas for a few months and I'm quite happy with it. Some network and hardware upgrades present me with a few questions, and maybe I'm overthinking it, but I thought I would ask the opinion of the wise ones. I'm running mlppp and it works beautifully. For the last 2-3 mont

Re: [pfSense Support] USB/SATA HDD - Force Delay?

2010-08-04 Thread David Burgess
On Wed, Aug 4, 2010 at 12:24 PM, Tim Nelson wrote: > Yes, I'm testing with the latest 2.0 BETA3. The latest is BETA4. db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@p

Re: [pfSense Support] PFSENSE 2.0

2010-07-29 Thread David Burgess
On Thu, Jul 29, 2010 at 11:29 PM, Bart Grefte wrote: > Its very hard to > find serial cable these days in comparison to DVI or VGA cables Do you have access to a couple Cisco DB-9/RJ-45 console cables (the nice baby-blue ones)? By clipping the RJ-45 end of one of these, then putting on a new

Re: [pfSense Support] RE: Heli new intall

2010-07-22 Thread David Burgess
On Thu, Jul 22, 2010 at 4:24 PM, Ujjval Karihaloo wrote: > No linux commands are working like ls, etc...only pwd& cd > > pfctl -d to shut it down is also not working... I am at the console now to > chk this bad boy out pfsense is designed to be operated from the web UI. Try connecting a browser

Re: [pfSense Support] RE: Heli new intall

2010-07-22 Thread David Burgess
On Thu, Jul 22, 2010 at 4:22 PM, Ujjval Karihaloo wrote: > There a zcat dd command to install on linux In the wiki Was your target device also your Linux boot device? Or was it another, such as a spare hard drive or compact flash card? db

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-18 Thread David Burgess
On Mon, Jul 19, 2010 at 12:34 AM, Seth Mos wrote: > There might have been a math bug that meant you went 1 period forward > instead of backwards. Except the monthly graph shows a gap from the previous week when looking at the current month. Screenshot in the forum: http://forum.pfsense.org/index

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-18 Thread David Burgess
On Sun, Jul 18, 2010 at 10:30 AM, Seth Mos wrote: > In other news, the RRD graph presentation in 2.0 has changed over the > weekend. You can now select the graph from start of the month as well as the > previous full month. > > I need some verification that the numbers add up though. Interesti

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-18 Thread David Burgess
On Wed, Jul 14, 2010 at 1:06 AM, David Burgess wrote: > July 23: Same thing, package will neither function nor delete. I see > this at the bottom of the page when trying to remove the package, even > after doing a /etc/rc.conf_mount_rw on the command line: I just updated to the July 17

Re: [pfSense Support] Minimal configuration for pfSense.

2010-07-14 Thread David Burgess
On Wed, Jul 14, 2010 at 1:17 PM, Laurentiu STEFAN wrote: > It's OKa to use an IBM Pentium MMX 200MHZ, 64MB Ram, 3GB SCSI, 3X LAN for > pfSense (Mask, firewall & load balancing whith 10 PC behind)? That CPU should be good for ~15mbps throughput if you're not loading it with vpn and such. You will

Re: [pfSense Support] FTP Server or samba server for PFSense

2010-07-14 Thread David Burgess
On Tue, Jul 13, 2010 at 6:06 PM, Laurentiu STEFAN wrote: > I want to install the PF Sense and I want to use the rest of the HDD space > for a FTP server or a SAMBA server. I think the closest you're going to come to this is through virtual machines, and obviously you aren't going to get hardware

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-14 Thread David Burgess
On Tue, Jul 13, 2010 at 4:24 PM, Jim Pingle wrote: > Updated again, but I didn't bump the version this time. Try it in about > 5 minutes. Hm. I tried the reinstall button but now the package is in limbo. pfsense thinks it's installed, but there's no longer a menu for it. Attempting to remove it

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-13 Thread David Burgess
On Tue, Jul 13, 2010 at 4:06 PM, Jim Pingle wrote: > I committed a fix and updated the package. It should be up shortly. "Parse error: syntax error, unexpected '(' in /usr/local/www/status_rrd_summary.php on line 38" That's version 1.1 db -

[pfSense Support] Re: Potential DNS rebind attack detected

2010-07-06 Thread David Burgess
On Tue, Jul 6, 2010 at 8:50 AM, David Burgess wrote: > > Any idea what's going on here? I see a thread is already active in the forum. I'll recall this post in favour of that thread. http://forum.pfsense.org/index.php/topic,26434.msg137

[pfSense Support] Potential DNS rebind attack detected

2010-07-06 Thread David Burgess
Since updating to the July 4 snapshot (and July 5 snapshot) yesterday, when I try to access my pfsense web UI via its DynDNS name I just get a message "Potential DNS rebind attack detected, see http://en.wikipedia.org/wiki/DNS_rebinding"; and the page title shows as "501". This happens in Chrome an

Re: [pfSense Support] bridge as a LAN interface : traffic blocked between interfaces

2010-07-05 Thread David Burgess
On Mon, Jul 5, 2010 at 9:57 AM, Guillaume Lederrey wrote: > I have a minor problem with my new installation of pfSense 2 : > Please check your setup against the instructions here: http://forum.pfsense.org/index.php/topic,20917.0.html Obviously you will have to adjust them to accommodate for yo

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-05 Thread David Burgess
On Thu, Jun 24, 2010 at 2:12 PM, Jim Pingle wrote: > Give it a try and see if it's still accurate. Some observations: 1. Using the June 23 nanobsd snapshot, RRD Summary reported ~330GB of traffic from June 1 to June 30. On July 3 it reported over 700GB of traffic from the 1st. In other words it

Re: [pfSense Support] upgrade failure from Beta2 to Beta3

2010-06-30 Thread David Burgess
On Wed, Jun 30, 2010 at 12:58 PM, Lyle Giese wrote: > But why would I look in the upgrade directory on the download site when I > had downloaded the nanobsd version from the nanobsd directory?  There are no > upgrade images in the nanobsd directory, you have to go into the upgrade > directory to

Re: [pfSense Support] Bandwdith usage since start of month?

2010-06-18 Thread David Burgess
On Fri, Jun 18, 2010 at 10:20 AM, Nenhum_de_Nos wrote: > vnstat does that. but not for past time (before it is installed). Anybody know if vnstat is compact flash friendly? I'm using the nanobsd image since burning out one CF already, and this vnstat sounds handy. db --

Re: [pfSense Support] root not found on cold boot 2.0

2010-06-10 Thread David Burgess
On Thu, Jun 10, 2010 at 1:21 AM, Seth Mos wrote: > Intruiging, I have a Soekris net5501 from one of the first series. It always > fails to cold boot when it's been off for an hour or so. All the LEDs on the > front of the Soekris stay lit. > > Then I pull the plug and reinsert after 10 seconds or

[pfSense Support] root not found on cold boot 2.0

2010-06-09 Thread David Burgess
I'm running the 2.0 nanobsd image. This release is coming together nicely. One problem I've had with multiple builds from May as well as June 4 is that on a cold boot pfsense fails to find the root partition. I've never had the same problem on a reboot, even on a firmware update, I think. On a col

Re: [pfSense Support] Creating a PPTP connection through PUTTY

2010-06-09 Thread David Burgess
On Wed, Jun 9, 2010 at 6:23 PM, Chris Buechler wrote: > Putty strictly does SSH and telnet, you can't do PPTP using it. You > can do SSH port forwards if you just need to access specific port(s) > reachable from the firewall. You could perhaps tunnel a PPTP connection through ssh using putty, bu

Re: [pfSense Support] Is it possible?

2010-06-08 Thread David Burgess
On Tue, Jun 8, 2010 at 10:33 AM, Tiago wrote: > How can I block some sites through the IP address? > > For instance: I need to block www.hotmail.com  only for IP 172.16.0.54 Any site can be blocked by IP address in the firewall. For example, create a block rule on LAN with source address 172.16.

Re: [pfSense Support] 2.0 beta2 on Soekris net4801

2010-06-07 Thread David Burgess
On Mon, Jun 7, 2010 at 2:57 PM, Lyle Giese wrote: > I tried to enable the ssh server.  I can find sshd running with ps, but > don't seem to find it with netstat and can not connect to it. > > I am not that familar with the FreeBSD command line to help more, but > can anyone point me to that it's

Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-03 Thread David Burgess
On Thu, Jun 3, 2010 at 10:18 PM, justino garcia wrote: > How does one go by blocking facebook twitter and youtube also how does > one autoblock malicous sites opendns is one way. - To unsubscribe, e-mail: support-unsubscr...@pf

Re: [pfSense Support] pfSense 1.2.3 / squid performance issue.

2010-05-22 Thread David Burgess
On Fri, May 21, 2010 at 10:04 PM, Chris Buechler wrote: > > http://doc.pfsense.org/index.php/Squid_Package_Tuning Also http://forum.pfsense.org/index.php/topic,7186.msg59302.html#msg59302 db - To unsubscribe, e-mail: support

[pfSense Support] 2.0 traffic shaper reference

2010-05-06 Thread David Burgess
Is there a tutorial on the traffic shaper in 2.0? I read the related FAQ or wiki page (now I forget which), I ran the wizard and found the results not only confusing, but inconsistent with my responses, and I have scoured the forums. I don't understand why there is a floating interface, which is w

Re: [pfSense Support] Reboot request

2010-04-30 Thread David Burgess
On Fri, Apr 30, 2010 at 9:45 AM, Gary Buckmaster wrote: > When you have a moment, would you power cycle the 1u device in our rack > labeled "tyr.fp.s4f.com"?  Thank you. I feel like an idiot, but I'm standing here looking at our rack, and for the life of me can't see a label that even remotely re

Re: [pfSense Support] Firewall not blocking ip after adding it to rules

2010-04-28 Thread David Burgess
On Tue, Apr 27, 2010 at 4:37 PM, Chris Flugstad wrote: > I block an ip in the fw rules on lan and wan, and then reset states, but > traffic is still being passed to and from that ip > > did i miss something? Your rules are probably wrong then. A common mistake is to enter a source port for the bl

Re: [pfSense Support] Firewall not blocking ip after adding it to rules

2010-04-27 Thread David Burgess
Are you using squid as transparent? If so you have to override the GUI anti-lockout rule. Be sure to make alternate arrangements to get into the GUI, or you'll lock yourself out. db On 4/27/10, Chris Flugstad wrote: > I block an ip in the fw rules on lan and wan, and then reset states, but > tra

Re: [pfSense Support] no packages for 2.0

2010-04-19 Thread David Burgess
On Mon, Apr 19, 2010 at 2:03 PM, Evgeny Yurchenko wrote: > Can you trace what request is generated by your pfSense when you try to > access list of available packages? Where would I find that? db - To unsubscribe, e-mail: supp

Re: [pfSense Support] no packages for 2.0

2010-04-19 Thread David Burgess
On Mon, Apr 19, 2010 at 1:29 PM, Jim Pingle wrote: > It's probably looking for a package file that doesn't exist. Did this > ever work before? It's the first time I've tried PFS on 64-bit. > I'm not sure if there are any 64-bit packages setup in the repo yet. That's possible, and unfortunate.

[pfSense Support] no packages for 2.0

2010-04-19 Thread David Burgess
The Available Packages page for 2.0 beta x86_64 full snapshot from Friday shows no packages, with the warning "Unable to communicate with www.pfsense.com. Please verify DNS and interface configuration, and that pfSense has functional Internet connectivity." My DNS works. I don't see anything relate

Re: [pfSense Support] pfSense 2.0 / Motorola SB6120 / Comcast = No DHCP ?

2010-04-17 Thread David Burgess
Did you power-cycle the modem? db On 4/17/10, Jeppe Øland wrote: > Hi there, > > Hopefully somebody can help me with how to diagnose this problem. > > I recently switched to Comcast, and I have been running great with > them for a few weeks. > They supplied me with a Ubee cablemodem, and last we

Re: [pfSense Support] Is this doable?

2010-04-12 Thread David Burgess
On Mon, Apr 12, 2010 at 3:35 AM, Chris Buechler wrote: > Yes, that will work fine. It looks like you'll probably want to trunk > different VLANs to each one, but that should be doable with any > managed switch. You could also do this with a single pfsense box If you can move a NIC from one pfse

Re: [pfSense Support] WAN Interface Errors - Bad Checksum

2010-03-24 Thread David Burgess
On Mon, Mar 22, 2010 at 7:15 PM, Jason Stuart wrote: > I am running pfsense 1.2.3 as a full install on a Dell 1U server.  I > am having some issues with interface errors on the WAN input.  I have > reviewed the switch logs that the interface is connected to and have > not seen any errors reported

Re: [pfSense Support] OT: VLAN

2010-03-12 Thread David Burgess
On Fri, Mar 12, 2010 at 9:13 AM, Michel Servaes wrote: > Guys, > > What would I need to transport WAN & LAN over one network cable ? > I was thinking about setting up two VLAN's (but since my cablemodem > isn't VLAN aware, I guess this setup isn't the right way to go ?) > > Basically, I have a cab

[pfSense Support] root partition trouble (2.0)

2010-03-08 Thread David Burgess
I decided to update from 1.2.3 to 2.0 Beta 1. Instead of updating in place, I took advantage of the opportunity to update to a newer hard drive at the same time, leaving my 1.2.3 install intact. This is for a net5501, so I put the new hdd in another machine and booted from the PFS live CD and inst

Re: [pfSense Support] Slow TCP connection

2010-03-02 Thread David Burgess
On Tue, Mar 2, 2010 at 10:45 AM, Hiren Joshi wrote: > On second thoughts, I'll take that back. It looks like the front end is > matching all hosts with that IP, now I'm stumped... I don't understand. You have several remote hosts with the same IP address and same host name? db -

Re: [pfSense Support] Slow TCP connection

2010-03-02 Thread David Burgess
On Tue, Mar 2, 2010 at 8:54 AM, Hiren Joshi wrote: > I'm using the "packet capture" bit in pfsense. Is there a way of doing > this via the shell (I'm new to BSD, more of a Linux person) and leaving > it running (filtered by hostname) for a few hours/days? This way I can > dump it all and analyse

Re: [pfSense Support] client requirement and a Q

2010-02-25 Thread David Burgess
On Thu, Feb 25, 2010 at 8:46 AM, Brent Clark wrote: > Is that the same as from (Under Network Address Translation (NAT) ): > http://www.pfsense.org/index.php?option=com_content&task=view&id=40&Itemid=43 > > 1:1 NAT for individual IPs or entire subnets. Effectively similar, but not entirely. With

Re: [pfSense Support] Status of MLPPP in 2.0

2010-02-24 Thread David Burgess
On Wed, Feb 24, 2010 at 7:21 PM, Chris Bagnall wrote: > Has there been any progress since then, and are there any plans to make this > an official feature in 2.0? Is anyone interested in adding full support (i.e. > GUI integration), and if so, what sort of bounty would it take? Is anyone > int

[pfSense Support] mlppp

2010-02-23 Thread David Burgess
I have a single ADSL connection that is mlppp capable. I'm running pfsense 1.2.3-Release on a net5501+Intel Pro/1000 GT (4 * 10/100 + 1 * 100/1000). I would like to eventually add more ADSL connections for loadbalancing, which is simple enough to set up when using NAT. However, I would like to idea

Re: [pfSense Support] OT: physical interface v vlan

2010-02-15 Thread David Burgess
On Mon, Feb 15, 2010 at 10:42 PM, Chris Buechler wrote: > This depends on how much you trust your switches, and more so, how > much you trust your admins. It's usually easier to inadvertently > configure something on the wrong VLAN than it is to plug something > into the wrong switch. Especially

[pfSense Support] multiple pppoe interfaces?

2010-02-15 Thread David Burgess
I'm considering a setup with multiwan where more than one WAN connection would require pppoe. This does not appear to be possible in 1.2.3, as my OPT interfaces only give "static" and "dhcp" options. Am I doing something wrong? Is this something that will be supported in the future? Or am I laughab

[pfSense Support] OT: physical interface v vlan

2010-02-15 Thread David Burgess
I would like to know if somebody can tell me an advantange, other than raw throughput, of a router with multiple interfaces when compared with a router using few physical interfaces but vlans in their place. I cannot come up with one. db ---

Re: [pfSense Support] 32-bit counter limitation

2010-02-12 Thread David Burgess
On Fri, Feb 12, 2010 at 12:45 AM, Seth Mos wrote: > Do the RRD graphs not provide you with this information? > Silly me. It's all right there. Thanks. db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional

[pfSense Support] 32-bit counter limitation

2010-02-11 Thread David Burgess
What would it take to get counters on the interface page to not roll over at 4GB? Is that something that will just happen when PFS moves to a 64-bit platform? If so, is that a change that will happen with 2.0? What is the best solution in the interim? I'm looking at the darkstat package and guessi

Re: [pfSense Support] can't reach modem on opt interface

2010-02-10 Thread David Burgess
On Wed, Feb 10, 2010 at 2:01 AM, Chris Buechler wrote: > On Wed, Feb 10, 2010 at 3:55 AM, David Burgess wrote: >> On Wed, Feb 10, 2010 at 1:26 AM, Chris Buechler wrote: > The modem doesn't know how to get to your LAN subnet so you need to > NAT that traffic to an IP on

Re: [pfSense Support] can't reach modem on opt interface

2010-02-10 Thread David Burgess
On Wed, Feb 10, 2010 at 1:26 AM, Chris Buechler wrote: > You probably don't have a gateway configured on the OPT interface, so > it's being treated as a LAN/internal interface, and the traffic isn't > being NATed. If the modem is on the same subnet as the interface I don't understand why I would

[pfSense Support] can't reach modem on opt interface

2010-02-10 Thread David Burgess
Greetings, I have an ADSL modem that is not currently in use, but will be soon. When said modem is connected directly by cable to pfsense's WAN, and the appropriate address/netmask assigned statically to the WAN (192.168.1.0/24), I can reach the modem's web interface at its assigned address (192.1

Re: [pfSense Support] Windows Deployment Services - DHCP options 60/66/67

2009-12-19 Thread David Burgess
On Sat, Dec 19, 2009 at 4:52 AM, Michel Servaes wrote: > Might it be, that these options should be possible to add to pfSense. > I can add options 66 & 67 (boot-server & boot-filename)... but option 60 > would be the name which should be set to (PXEClient) > > I guess that would be the reason, for

Re: [pfSense Support] ALIX 'idle' CPU utilization

2009-12-17 Thread David Burgess
On Thu, Dec 17, 2009 at 11:22 AM, Keenan Tims wrote: > I have an ALIX 2d3 running a full install of 1.2.3-RC2 on some industrial > CF. When it's passing very little traffic (~150pps, ~600kbps) I'm seeing an > average of about 15% CPU usage. That doesn't look out of line to me. I have a net5501 (

Re: [pfSense Support] Squid Cache management does'nt save config

2009-12-11 Thread David Burgess
On Fri, Dec 11, 2009 at 3:52 PM, Nathaniel Simch de Morais wrote: > Well, i can make any changes in squid, but in the tab "Cache management" > just don't save. I put all info about cache i want and when i click "save" > the screen returns to default. > > Does anyone seen this? I get this in Chro

Re: [pfSense Support] hybrid storage?

2009-12-11 Thread David Burgess
On Fri, Dec 11, 2009 at 10:30 AM, Jim Pingle wrote: > On 12/11/2009 12:22 PM, Paul Mansfield wrote: >> can you do overlay file systems on freeBSD, so that the base OS and >> config is read-only and you overlay a read-write file system at a very >> late stage in booting IF that overlay is uncorrupt

Re: [pfSense Support] hybrid storage?

2009-12-11 Thread David Burgess
On Fri, Dec 11, 2009 at 9:20 AM, Manny A. Wise wrote: > My needs were exactly like yoursFreeSwitch and Squid... > > I am pretty good with hardware, but terrible with software... :( My software background is a lot more linux than BSD, but a person can learn ;) Some cursory investigation reve

Re: [pfSense Support] hybrid storage?

2009-12-11 Thread David Burgess
On Fri, Dec 11, 2009 at 9:13 AM, Jim Pingle wrote: >> (cold-reset resiliency, > The moment you have a drive mounted rw, you lose this. :-) Well you lose it on the rw partitions, but if the core system is mounted to RAM from a read-only filesystem, then at least the core system has that resilienc

[pfSense Support] hybrid storage?

2009-12-11 Thread David Burgess
I've been happily using 1.2.3-RC1 for many months now on a Soekris net5501 and a 100GB 2.5" SATA drive. I like the idea of an embedded system on a CF card, but that's not possible or advisable for me as I'm running the squid and freeswitch packages. I was wondering however, if it would be difficul

Re: [pfSense Support] PFSense advocacy

2009-12-02 Thread David Burgess
On Wed, Dec 2, 2009 at 2:26 PM, Ron García-Vidal wrote: > Since I've never worked extensively with Cisco, can someone give me a few > salient points to throw at him. I already used the cost argument, he wants > more. The support for PFSense is top notch. Between the mailing list and the forums

Re: [pfSense Support] Wake On LAN

2009-12-01 Thread David Burgess
On Tue, Dec 1, 2009 at 9:27 AM, Pete Boyd wrote: > If this is so, is it the default in Windows XP Pro? because all workstations > we have that have a WOL setting in the BIOS, successfully do WOL, without us > changing anything in Windows from a fresh install. I believe it is driver dependant, al

Re: [pfSense Support] Wake On LAN

2009-12-01 Thread David Burgess
On Tue, Dec 1, 2009 at 9:05 AM, Pete Boyd wrote: > What does it have to do with the operating system? if the computer is > powered off then the operating system doesn't come into play. Are you > confusing this with wake from standby? No, your computer will not wake from off if it is disabled in

Re: [pfSense Support] Weird msg in pfsense logs

2009-11-30 Thread David Burgess
On Mon, Nov 30, 2009 at 8:25 AM, Gabriel - IP Guys wrote: > Pfsense is the only setup that has complained about this setup, and if it > drops packets because of it, I’ve got a real problem, and I’ll have to go > back to a previous working setup without pfsense. I did something similar once and h

Re: [pfSense Support] Split DNS Setup

2009-11-27 Thread David Burgess
On Fri, Nov 27, 2009 at 9:11 AM, Ron Lemon wrote: > Sounds good to me. Where do I find the host file? > /etc/hosts

Re: [pfSense Support] WAN + OpenVPN - Failover

2009-11-25 Thread David Burgess
On Wed, Nov 25, 2009 at 2:01 PM, Dominic wrote: > However my query is, is there any way I could automate this failover? ie: > automate > the routing changes or similar? My goal is to automate the failover as > transparently > as possible. I think this document applies equally to any multi-wan se

Re: [pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread David Burgess
I support you. Stick to your guns, no matter what! db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

[pfSense Support] svg errors in chrom(ium) browser?

2009-10-18 Thread David Burgess
I'm using the chromium browser on Ubuntu and when I try to view PFSense's traffic graphs I don't see the graph, just a box with the following error: "This page contains the following errors: error on line 2 at column 1: Document is empty Below is a rendering of the page up to the first error." S

Re: [pfSense Support] potential pfsense hardware

2009-10-16 Thread David Burgess
On Fri, Oct 16, 2009 at 12:42 PM, Ryan wrote: > I have actually looked at this.  We use supermicro for some of our servers > and they make a great product.  This has 2 onboard nics, but they are both > realtek.  I guess I am too picky.  Realtek seems ok in a regular desktop pc, > but for a router

Re: [pfSense Support] VLAN Capable switch

2009-10-04 Thread David Burgess
On Sun, Oct 4, 2009 at 9:24 PM, Anil Garg wrote: > David > > I am not very technical. My server room is far away from my internet > connection at my home. So there is only one cable going from the internet to > server room.  I am still reading about VLAN so that I understand its working > better.

Re: [pfSense Support] VLAN Capable switch

2009-10-04 Thread David Burgess
On Sun, Oct 4, 2009 at 6:15 PM, Anil Garg wrote: > I have a pfsense with two 10/100 PCI cards (acting as LAN & WAN router). > I have a 4 port (quad) 10/100 PCI (ZNYX ZX374) card. > If I were to add this card into the box and then add those ports and bridge > them with each other (completely away f

Re: [pfSense Support] squid clobbering performance

2009-10-01 Thread David Burgess
On Thu, Oct 1, 2009 at 7:57 AM, Jim Pingle wrote: > mayak chunder-qwern wrote: >> hi all, >> >> any reason (or what can i look at) to see why squid transparent proxying >> is heavily slowing web access ... (w/out proxy, dell.fr takes 3-5 secs, >> with proxy, dell.fr takes 20+ or more) My connect

Re: [pfSense Support] How to backup pfSense complete?

2009-09-09 Thread David Burgess
On Wed, Sep 9, 2009 at 2:22 PM, Dominik Schips wrote: > Hello, > > I'd like to ask how to backup pfSense the correct way? There is a backup package you can install that allows you to back up directories that you specify. db - To

Re: [pfSense Support] GBE toe

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 12:27 PM, Nathan Eisenberg wrote: > Looks like it was 1.2.1 when I tried: > http://www.mail-archive.com/support@pfsense.com/msg15181.html > I think the newer intel chipsets are supported in FBSD 7.x, or PFS 1.2.3. Don't anybody run buy one on my advice though. db

Re: [pfSense Support] 1.2.3-RC1-embedded dhcp relay windows XP broadcast flag

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 9:28 AM, Chris Kleeschulte < chris.kleeschu...@it.libertydistribution.com> wrote: > > I also know that Microsoft claims this is a problem in Vista, but all my > hosts are XP and the flag seems to be set there too. > I believe xp SP3 did this. For sure it created vista-like

Re: [pfSense Support] Load Balancer Interfaces

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 9:24 AM, Jesse Vollmar wrote: > On Wed, Aug 26, 2009 at 11:19 AM, David Burgess wrote: > > I have entered the ISP's gateway (They actually have two due to us > using multiple subnets) and when I do, pfsense can only ping that > address. Packets to any

Re: [pfSense Support] GBE toe

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 9:12 AM, Nathan Eisenberg wrote: > FWIW - I have not been able to get these to work in PFSense -at all-. > > http://www.newegg.com/Product/Product.aspx?Item=N82E16833106019 > http://www.newegg.com/Product/Product.aspx?Item=N82E16833106018 > http://www.newegg.com/Product/Pro

Re: [pfSense Support] Load Balancer Interfaces

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 8:57 AM, Jesse Vollmar wrote: > > The route for that OPT1 interface is showing up it is em2. > > $ netstat -nr > Routing tables > > Internet: > DestinationGatewayFlagsRefs Use Netif Expire > default67.38.60.77UGS 0

Re: [pfSense Support] Load Balancer Interfaces

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 7:42 AM, Jesse Vollmar wrote: > > It seems like this is related to that OPT interface not having the > "gateway" specified on it. That interface is however working and sending > traffic out to my ISP's gateway. > At the risk of looking like the N00b that I am, I don't see

Re: [pfSense Support] Re: 1.2.3-RC1 Web gui logout

2009-08-12 Thread David Burgess
On Wed, Aug 12, 2009 at 11:10 AM, Joseph L. Casale wrote: > Can ff be setup to do this? In Windows FF3.5 Tools>Clear Recent History>Details>Active Logins I believe that should do it. db - To unsubscribe, e-mail: support-unsub

Re: [pfSense Support] 1.2.3-RC1 Web gui logout

2009-08-12 Thread David Burgess
On Wed, Aug 12, 2009 at 11:00 AM, Joseph L. Casale wrote: > Argh, that means I have to close my browser:) I always have so much open > like Nagios etc in other tabs... You could use a different browser for pfsense. It's an inconvenience, but probably more convenient than closing all your tabs. d

Re: [pfSense Support] Multiwan - no loadbalance needed

2009-08-12 Thread David Burgess
On Wed, Aug 12, 2009 at 4:36 AM, Michel Servaes wrote: > To put it simple (I think), is that OPT1 should be treated as incoming > traffic, and WAN should only be used for outgoing traffic (eg. > internet, radio, downloading, ...) Looks good to me. Was there a question, or just checking for sanity

<    1   2   3   >