Re: [pfSense Support] openvpn client export

2008-10-29 Thread Scott Ullrich
On Wed, Oct 29, 2008 at 12:00 PM, Mikel Jimenez [EMAIL PROTECTED] wrote: OK But it is available in packets... And that is a mistake for some reason. And via console or alone? I want easy way to provide to clients acces to my VPN. Vpn client export utility is my best friend. How can I do

Re: [pfSense Support] syslogd stuck at 100% cpu

2008-10-28 Thread Scott Ullrich
On 10/28/08, Ian Levesque [EMAIL PROTECTED] wrote: Hello, I'm running 1.2.1-RC1 (built on Sat Sep 13 03:53:42 EDT 2008). After about 10 days of uptime, I noticed that logs were becoming stale. It turns out that all logging functionality stopped yesterday evening. In dmesg, the last messages

Re: [pfSense Support] OpenVPN super-slow upload speeds

2008-10-25 Thread Scott Ullrich
On Sat, Oct 25, 2008 at 6:57 PM, BSD Wiz [EMAIL PROTECTED] wrote: To bad it's for v10.5 only. Coming into this thread late, please forgive me if this has been asked but can this Viscosity import a configuration file? With 1.3 we can generate a windows openvpn installer with certificates

[pfSense Support] Fwd: New Ticket - [!NHT-925796]: Server is VERY slow as previously submitted a while ago.

2008-10-22 Thread Scott Ullrich
Make sure /etc/sysctl.conf is in place and is poulated like the other machines on her machine. -- Forwarded message -- From: melissa Bailey [EMAIL PROTECTED] Date: Wed, Oct 22, 2008 at 10:24 AM Subject: New Ticket - [!NHT-925796]: Server is VERY slow as previously submitted a

Re: [pfSense Support] Ipsec over LAN

2008-10-14 Thread Scott Ullrich
On Tue, Oct 14, 2008 at 2:46 PM, BSD Wiz [EMAIL PROTECTED] wrote: With 1.2 is it possible to connect to pfsense boxes on the same subnet via an ipsec tunnel? Both boxes wan interfaces are private ip's. No, need different subnets. Scott

Re: [pfSense Support] Ipsec over LAN

2008-10-14 Thread Scott Ullrich
On Tue, Oct 14, 2008 at 2:59 PM, BSD Wiz [EMAIL PROTECTED] wrote: To be clear, both boxes lans are different subnet of course but the WANs are on the same subnets. That might work. Give it a shot. Scott - To unsubscribe,

Re: [pfSense Support] SquidGuard doesn't work

2008-10-02 Thread Scott Ullrich
On 10/2/08, Alfred Sawaya [EMAIL PROTECTED] wrote: Hello everybody ! I've some troules with SquidGuard. I've installed Squid and SquidGuard. Squid works well but SquidGuard doesn't work at all. I've joined a log as attached file. I take an example of porn website to test SquidGuard :

Re: [pfSense Support] Arrgh, zoneinfo no good

2008-10-02 Thread Scott Ullrich
On Thu, Oct 2, 2008 at 7:03 PM, Volker Kuhlmann [EMAIL PROTECTED]wrote: On Thu 02 Oct 2008 13:46:55 NZDT +1300, Scott Ullrich wrote: fetch -o /usr/share/zoneinfo.tgz http://cvs.pfsense.com/~sullrich/zoneinfo.tgz; There appears to be a problem with this tar file on some pfsense 1.2

Re: [pfSense Support] Arrgh, zoneinfo no good

2008-10-01 Thread Scott Ullrich
On Wed, Oct 1, 2008 at 8:29 PM, Volker Kuhlmann [EMAIL PROTECTED]wrote: New Zealand, like several other countries and several more countries since, has changed daylight savings rules earlier last year. pfsense's zoneinfo is dated Jan 2007 and out of date by a long shot - I remember Linux

Re: [pfSense Support] ipv6 possibility

2008-09-27 Thread Scott Ullrich
On Sat, Sep 27, 2008 at 3:15 PM, Chris Bagnall [EMAIL PROTECTED] wrote: We use pfSense in client environments. We use ISPs that offer IP6 support at no extra charge. Does anyone know how much £/€/$ would be needed to encourage the developers to move IP6 support up the development timeframe?

Re: [pfSense Support] ipv6 possibility

2008-09-27 Thread Scott Ullrich
On Sat, Sep 27, 2008 at 5:22 PM, Beat Siegenthaler [EMAIL PROTECTED] wrote: Scott Ullrich wrote: And no, a proxy is not an option. Why ? what is the difference for the firewalling stuff? The Protocol is interesting. Most of us need a IPv6 Ruleset, radvd/rtadvd and a 4in6 Tunnel

Re: [pfSense Support] ipv6 possibility

2008-09-27 Thread Scott Ullrich
On Sat, Sep 27, 2008 at 5:54 PM, Chris Bagnall [EMAIL PROTECTED] wrote: Availability is a major constraint. At least for Scott and myself, neither of us have an option to even get IPv6 connectivity on a residential grade connection. Obviously I don't know where Scott and yourself are

Re: [pfSense Support] Squidguard not working

2008-09-10 Thread Scott Ullrich
On 9/10/08, John R Puhalski [EMAIL PROTECTED] wrote: Hi, I have pfsense with Squid guard installed which was always working fine. I was trying to add schedules and rules and had the Squid guard services turned off temporarily. When I turned it back on it wasnt working. It was like there

Re: [pfSense Support] rule not working correctly

2008-09-06 Thread Scott Ullrich
On Sat, Sep 6, 2008 at 4:23 PM, BSD Wiz [EMAIL PROTECTED] wrote: after doing considerable research with tcpdump on my WAN interface and DMZ interface i see that the traffic is indeed passing but my phone is not ringing sometimes. i have no idea why this is happening but it appears that pfsense

Re: [pfSense Support] rule not working correctly

2008-09-06 Thread Scott Ullrich
On Sat, Sep 6, 2008 at 4:52 PM, BSD Wiz [EMAIL PROTECTED] wrote: i should enable static nat on the interface that my voip router is on, which is my dmz correct? That is correct. Enable advanced outbound NAT, edit the entry and click the static port box. Save and clear the states related to the

Re: [pfSense Support] Re: uninstalling the snort package

2008-08-15 Thread Scott Ullrich
On Fri, Aug 15, 2008 at 6:29 PM, Curtis LaMasters [EMAIL PROTECTED] wrote: Any way we can reenable the package for a short time so I can try the uninstall. Curtis LaMasters http://www.curtis-lamasters.com http://www.builtnetworks.com Run this from a shell: fetch -o

Re: [pfSense Support] LiveCD Serial Console Support?

2008-08-05 Thread Scott Ullrich
On Mon, Aug 4, 2008 at 7:29 PM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I'm currently testing the pfSense LiveCD as a Recovery CD In case of a hard drive failure. This is working about 99%, i just can't get the serial console to work on the LiveCD. Searching around a little more, it

Re: [pfSense Support] squidGuard not starting

2008-08-02 Thread Scott Ullrich
On Sat, Aug 2, 2008 at 7:18 PM, Michel Servaes [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Any idea as why the squidguard won't start ? As soon as I add an url to download the blacklists, the squidguard won't start anymore... I can select the blacklists though,

Re: [pfSense Support] DNS cache poisoning

2008-07-21 Thread Scott Ullrich
On Mon, Jul 21, 2008 at 4:58 AM, sai [EMAIL PROTECTED] wrote: checkpoint firewalls seem to have a problem in not randomising (or even de-randomising) dns request source port [1] do we have a similar problem with pfSense? I did 3 digs to 198.6.1.1, 198.6.1.2 and 198.6.1.3 ( I have 2 isps,

Re: [pfSense Support] RRD Graphs problem.

2008-07-17 Thread Scott Ullrich
On Thu, Jul 17, 2008 at 11:52 AM, Jose Hernandez [EMAIL PROTECTED] wrote: Hi there, I have created a couple of new queues in the traffic shaper, and now when I try the RDD graph for the queue it fails, asking you to look at the system logs, the system logs say as follows, Jul 17

Re: [pfSense Support] Tracking a specific user

2008-07-14 Thread Scott Ullrich
On Mon, Jul 14, 2008 at 1:02 PM, Joshua Galvez [EMAIL PROTECTED] wrote: I'm managing a firewall on DSL connection, and every so often I see something like this where I'm almost certain one user is downloading and maxing out the connection, this happens sometimes with downloads, and sometimes

Re: [pfSense Support] Broken RRD Graphs

2008-07-08 Thread Scott Ullrich
On Tue, Jul 8, 2008 at 5:50 PM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I'm having a problem with RRD Graphs freezing/crashing on my embedded pfsense boxes. Below is the log, apon restarting RRD, I got a file system full message. I can see that /cf is at 107% capacity. I know that RRD data

[pfSense Support] 1.2.1-BETA testing snapshots now available!

2008-07-06 Thread Scott Ullrich
Please see http://blog.pfsense.org/?p=207 for more information. Thanks! - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

[pfSense Support] 1.3-ALPHA-ALPHA testing snapshots now available!

2008-07-06 Thread Scott Ullrich
1.3-ALPHA-ALPHA testing snapshots are now available. Please see http://blog.pfsense.org/?p=208 for more information. Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Please don't switch to FreeBSD7 in pfSense1.2.1

2008-06-30 Thread Scott Ullrich
On Mon, Jun 30, 2008 at 4:02 PM, Adam Van Ornum [EMAIL PROTECTED] wrote: I personally am looking forward to pfSense on FreeBSD7, however I also understand and agree with the original post for the most part. Generally it seems that a release like 1.2.1 would be considered a maintenance release

Re: [pfSense Support] Makefile.RELENG_1_2

2008-06-28 Thread Scott Ullrich
On Sat, Jun 28, 2008 at 1:28 PM, Angelo Turetta [EMAIL PROTECTED] wrote: The port php4-standard is unknown, while php4-tokenizer is listed twice. I have been working on this nonstop. Please give me a week or so. Scott - To

Re: [pfSense Support] Load Balancing with Embedded version?

2008-06-26 Thread Scott Ullrich
On Thu, Jun 26, 2008 at 6:21 PM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Is load balancing supported with the embedded version? I ask because when I try to add a load balancing pool, I hit save and apply changes. But no pool is listed, it's like PFsense is refusing to add it for some

Re: [pfSense Support] Load Balancing with Embedded version?

2008-06-26 Thread Scott Ullrich
On Thu, Jun 26, 2008 at 6:52 PM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Okay, but I'm still having the problem of not being able to add a load balancing pool. I really care more about fail over then load balancing. I'm going to play around with a box that is not on a live network

Re: [pfSense Support] Lot of files missing from latest snapshots

2008-06-25 Thread Scott Ullrich
On Wed, Jun 25, 2008 at 5:51 AM, Angelo Turetta [EMAIL PROTECTED] wrote: Separate host from pfSense? You mean during build or in the resulting image? Maybe I'm dumb, but I can't understand why the binaries that compose the base pfSense image should be installed on a non-standard prefix. That

Re: [pfSense Support] Lot of files missing from latest snapshots

2008-06-25 Thread Scott Ullrich
On Wed, Jun 25, 2008 at 11:44 AM, Angelo Turetta [EMAIL PROTECTED] wrote: So, I think I've not explained myself clearly enough. Those listings were from snapshots downloaded from http://snapshots.pfsense.com/FreeBSD6/RELENG_1_2/, they are not built by me. I've long ago stopped trying to build

Re: [pfSense Support] Lot of files missing from latest snapshots

2008-06-25 Thread Scott Ullrich
On Wed, Jun 25, 2008 at 12:07 PM, Scott Ullrich [EMAIL PROTECTED] wrote: [snip] I've long ago stopped trying to build from source, because the build environment is too absurd (i.e. doing a rm -Rf /home/pfsense/pfsense before every build is enough to prohibit maintaining local modifications

Re: [pfSense Support] Lot of files missing from latest snapshots

2008-06-25 Thread Scott Ullrich
On Wed, Jun 25, 2008 at 12:47 PM, Angelo Turetta [EMAIL PROTECTED] wrote: Please accept my apologies for being too harsh in my comment. It was not my intention to be offensive. No problem. Since I have been working on this in every free second that I have since thursday evening I am starting

Re: [pfSense Support] Lot of files missing from latest snapshots

2008-06-24 Thread Scott Ullrich
On Tue, Jun 24, 2008 at 9:54 AM, Bill Marquette [EMAIL PROTECTED] wrote: On Tue, Jun 24, 2008 at 8:52 AM, Bill Marquette [EMAIL PROTECTED] wrote: Thanks for the report. I think we actually stopped building snaps until the dust settles a little (although our internal builds are looking a lot

Re: [pfSense Support] pfSense Book?

2008-06-13 Thread Scott Ullrich
On 6/13/08, Tim Nelson [EMAIL PROTECTED] wrote: In a recent thread... I see note of a pfSense book. Is there a timeline when this will be available? Also, any more information on topics, chapter descriptions, etc? I'm looking forward to such a book... :-) Chris Buechler is writing the book.

Re: [pfSense Support] Backup of Configuration Script

2008-06-03 Thread Scott Ullrich
On 6/3/08, Rodrigo Micheletto [EMAIL PROTECTED] wrote: Hi everyone... I manage too many firewalls with pfsense and i´d like to know if there is a way to automate the backup of the configuration (the XML config file)!!! Yes, search the archives. I have given wget syntax in the past. Scott

Re: [pfSense Support] dev iso: overlay not working

2008-05-29 Thread Scott Ullrich
On 5/29/08, sai [EMAIL PROTECTED] wrote: custom overlay was not working for me (used to work until a few weeks ago). in builder-scripts/builder_common.sh the overlay directory is copied across to $CVS_CO_DIR. I changed this so that it would get copied across to $PFSENSEBASEDIR and that seems

Re: [pfSense Support] RELENG_1 embedded and serial console

2008-05-27 Thread Scott Ullrich
On 5/26/08, Angelo Turetta [EMAIL PROTECTED] wrote: I tried booting one of my NexCom NSA-1042 with a nightly RELENG_1 (20080526-0555). As soon as the kernel loads (just after the press enter to boot /boot/kernel/kernel), the console output stops. After some tens seconds, I hear the usual

Re: [pfSense Support] RE: Atheros 5212 throwing tons of errors

2008-05-16 Thread Scott Ullrich
On 5/16/08, Chris Buechler [EMAIL PROTECTED] wrote: not sure, Scott would know. It's probably essentially the same, though the 500K size diff indicates it's not identical. Use the newer one, I know it works. Yeah, use the newest image. I am simply copying newer images into the directory

Re: [pfSense Support] ping_hosts.sh in infinite loop

2008-05-06 Thread Scott Ullrich
On 5/6/08, David Rees [EMAIL PROTECTED] wrote: Thought so. ;-) Anyone have any ideas on the ping_hosts.sh getting stuck and apparently looping? It's still doing it 8 hours later - I'd like to kill the process to let the box rest a bit, but if someone has any requests for information or

Re: [pfSense Support] ping_hosts.sh in infinite loop

2008-05-06 Thread Scott Ullrich
On 5/6/08, David Rees [EMAIL PROTECTED] wrote: root 59637 5.7 0.5 1744 1216 ?? S 7:51PM 58:41.28 /bin/sh /etc/ping_hosts.sh root1510 0.0 0.3 1268 732 ?? Is2:06PM 0:00.04 minicron 240 /var/run/ping_hosts.pid /etc/ping_hosts.sh root 59636 0.0 0.5 1716

Re: [pfSense Support] ping_hosts.sh in infinite loop

2008-05-06 Thread Scott Ullrich
On 5/6/08, David Rees [EMAIL PROTECTED] wrote: All the files appear to be empty. No files are large. I suspect that whatever triggered the issue has since resolved itself, otherwise we'd have ping_hosts.sh scripts piling up every 5 minutes. My best guess is that it's somehow gotten stuck

Re: [pfSense Support] ping_hosts.sh in infinite loop

2008-05-06 Thread Scott Ullrich
On 5/6/08, David Rees [EMAIL PROTECTED] wrote: I did some checking in the PHP code - it does look like there are various locations where the /conf/config.xml or {$g['conf_path']}/config.xml or /cf/conf/config.xml are written just using a plain fopen, write, close. This does leave you open

Re: [pfSense Support] limited per IP

2008-05-01 Thread Scott Ullrich
On 5/1/08, Luiz Vaz [EMAIL PROTECTED] wrote: Hi, I made this simple script and works fine for me. #!/bin/sh #Configuration SUBNET=192.168.XXX.XXX/24 LIMIT_PIPEIN=250Kbit/s LIMIT_PIPEOUT=250Kbit/s #Load ipfw echo -n Loading IPFW: if [ `kldstat | grep -i ipfw | wc -l` -eq

Re: [pfSense Support] limited per IP

2008-05-01 Thread Scott Ullrich
On 5/1/08, Luiz Vaz [EMAIL PROTECTED] wrote: Yes, a have a whole bunch of redirections on WAN port. And with virtual ip's too. I don´t have this problem because the pipe only works in LAN subnet. It can be obvious, but if you flush the ipfw pipes, all subnet will freeze. Only a

Re: [pfSense Support] limited per IP

2008-05-01 Thread Scott Ullrich
On 5/1/08, Luiz Vaz [EMAIL PROTECTED] wrote: Of course! i can do this tomorow, because i need to be on site. If anything goes wrong i need to be there... Can you send some sample of rules that you are trying? Yep, they are located in the package:

Re: [pfSense Support] spamd package

2008-05-01 Thread Scott Ullrich
On 5/1/08, Michel Servaes [EMAIL PROTECTED] wrote: So you don't config anything in the SpamD settings at all ? The nextMTA shouldn't be your mailserver ?? I tried with and without, but still no mail gets delivered... Yep. If I send a mail (from a spamless address), should the mail be

Re: [pfSense Support] limited per IP

2008-05-01 Thread Scott Ullrich
On 5/1/08, Luiz Vaz [EMAIL PROTECTED] wrote: Well, in my tests, any to any pipes hanged all the time. And the via setting don't worked well too. The pipe creation order are a problem too. The manual don't talk about this, but you need to create the pipe before apply the mask.

Re: [pfSense Support] BSD Magazine Electronic and Printed versions Subscription

2008-04-29 Thread Scott Ullrich
On Tue, Apr 29, 2008 at 5:36 PM, Siju George [EMAIL PROTECTED] wrote: Hi, There is a new magazine dedicated to BSD. http://www.bsdmag.org/ You can subscribe for electronic as well as printed versions from here. http://buyitpress.com/en/index.php?p=2kat=26 Also, pfSense 1.2 is

Re: [pfSense Support] PPTP Ipsec

2008-04-29 Thread Scott Ullrich
On 4/29/08, Wade Blackwell [EMAIL PROTECTED] wrote: Good morning PFsense fans, Greetings from the starting to get sunny Northwest. I am not sure if what I am trying can be done or not. In concept I know it's possible but I am not seeing the desired results where the rubber meets the

Re: [pfSense Support] CP Issue

2008-04-27 Thread Scott Ullrich
On Sat, Apr 26, 2008 at 3:51 AM, Tim Dickson [EMAIL PROTECTED] wrote: Setting up the Rule to put traffic to the interface address out the default gateway did not work Setting the gateway to JUST the second WAN (non-loadbalance) failed Setting the gateway to DEFAULT worked... (With Squid

Re: [pfSense Support] CP Issue

2008-04-24 Thread Scott Ullrich
On 4/24/08, Tim Dickson [EMAIL PROTECTED] wrote: Ah, so I was wondering about that So do I have to send it out default? Or can I pick, say - DSL2? You can add a rule forcing CP only out the default gateway prior to any load balancing rules which might fix this. Please try this and if

Re: [pfSense Support] CP Issue

2008-04-24 Thread Scott Ullrich
On 4/24/08, Tim Dickson [EMAIL PROTECTED] wrote: (I'll be back on site tomorrow and will test) So it would be on the GUEST LAN: Proto: TCP Source: GuestLan Destination: Interface Address ports 8000 and 8001 Gateway: Default Or are you saying SOURCE should be the Interface

Re: [pfSense Support] snort error

2008-04-19 Thread Scott Ullrich
On 4/19/08, DLStrout [EMAIL PROTECTED] wrote: I am running the latest 1.2 and have had snort installed since back in the 1.2SNAP days (a good 6-8 months). After to upgrading to 1.2 STABLE, I get the following error every time I go to the Snort update rules page. Warning:

Re: [pfSense Support] 3-way CARP

2008-04-17 Thread Scott Ullrich
On 4/17/08, Chris Buechler [EMAIL PROTECTED] wrote: [snip] That's something Scott has discussed changing for 1.3, but I'm not sure if that'll happen or not. HEAD has greatly enhanced support for this. I need to look at backporting it to RELENG_1 sooner or later. Scott

Re: [pfSense Support] check_reload_status.log

2008-04-16 Thread Scott Ullrich
On 4/16/08, Tortise [EMAIL PROTECTED] wrote: What is check_reload_status intended to do and achieve? It is responsible for reloading various subsystems after changes, etc. Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For

Re: [pfSense Support] DROP database

2008-04-14 Thread Scott Ullrich
On 4/14/08, Chris Buechler [EMAIL PROTECTED] wrote: [snip] On Mon, Apr 14, 2008 at 10:27 AM, Vivek Khera It would be nice if we could move to a nanobsd or similar build system which supports that. It's probably not likely to get a lot of our attention though, unless someone directs our

Re: [pfSense Support] DROP database

2008-04-13 Thread Scott Ullrich
On 4/9/08, Curtis LaMasters [EMAIL PROTECTED] wrote: Is there an easy way to implement the DROP (http://www.spamhaus.org/drop/index.lasso) database into pfSense? I'd be ok with running a CRON to update the list just as long as I could see it in the GUI (the list, not CRON). Not currently.

Re: [pfSense Support] blocking to destination ports

2008-04-11 Thread Scott Ullrich
On 4/11/08, Jan Zorz [EMAIL PROTECTED] wrote: Don't bother with this. I ran through a small flame-war with Scott about this, wrote my own patches for pfsense, that were working flawlessly on 1.0.1 and were applying rules on out-traffic, but politic persuation on dev's side prevented those

Re: [pfSense Support] Multimple WAN ftp server thing.

2008-04-10 Thread Scott Ullrich
On 4/10/08, David Cavanaugh [EMAIL PROTECTED] wrote: Hello all and greetings: We've recently switched to pfsense to, among other things, take advantage of the multiple WAN feature. So, we have two interfaces defined thusly: wan ifem0/if mtu/ blockpriv/

Re: [pfSense Support] limited per IP

2008-04-08 Thread Scott Ullrich
On 4/8/08, Curtis LaMasters [EMAIL PROTECTED] wrote: Walk through the traffic shaper wizard and take note of how the penalty box rule is setup. You should be able to replicate that rule for other IP's. What are you trying to accomplish? I would imagine he is wanting WFQ+ which we do not

Re: [pfSense Support] Typo in make.conf*7* (pfSense commit http://cvstrac.pfsense.org/chngview?cn=21678)

2008-03-26 Thread Scott Ullrich
Thanks On 3/26/08, Angelo Turetta [EMAIL PROTECTED] wrote: grep for WITOUT WTITHOUT Bye, Angelo. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Traffic Shaper Issue

2008-03-26 Thread Scott Ullrich
On 3/26/08, Curtis LaMasters [EMAIL PROTECTED] wrote: I setup trixbox at my home with Teliax as my VoIP provider with relative ease. However, I though it would be a good idea to QoS the traffic to and from my asterisk server. When I did so, the voice became very choppy. I used the traffic

Re: [pfSense Support] DHCP on WAN

2008-03-26 Thread Scott Ullrich
On 3/26/08, Dimitri Rodis [EMAIL PROTECTED] wrote: Any workaround for getting DHCP to work on the WAN interface? Not at the moment. Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL

Re: [pfSense Support] cvs checkout: [17:33:57] waiting for root's lock in /home/pfsense/cvsroot/pfSense/usr/local/www/javascript/extjs/build/widgets/form

2008-03-24 Thread Scott Ullrich
On 3/24/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: 15 minutes later: same message. did a cvs process forget to clean up? The problem is on your end. Remove the stale lock. - To unsubscribe, e-mail: [EMAIL PROTECTED] For

Re: [pfSense Support] Constant reboots in 1.2-RC4

2008-03-23 Thread Scott Ullrich
On 3/23/08, Andy Dills [EMAIL PROTECTED] wrote: rl2: discard oversize frame (ether type 0 flags 3 len 29807 max 1514) That is a rather large packet?Jumbo frames? Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For

Re: [pfSense Support] Any chance of pfsense being a port?

2008-03-19 Thread Scott Ullrich
On 3/19/08, B. Cook [EMAIL PROTECTED] wrote: Hello all, was just talking over somethings with people.. What could the future ever be for pfsense as a port? (/usr/ports/ security/pfsense) (m0n0wall and freenas as well).. it depends on pfsense, php, httpd.. (possibly) could read

Re: [pfSense Support] DHCP Server Issues

2008-03-19 Thread Scott Ullrich
On 3/19/08, Chris Buechler [EMAIL PROTECTED] wrote: We don't let DHCP run on WAN for obvious reasons, though maybe we need a hidden config option to allow this since it is useful in some circumstances. Can you submit a feature request ticket at http://cvstrac.pfsense.org ? We do allow it

Re: [pfSense Support] Fatal trap 12 during installation

2008-03-19 Thread Scott Ullrich
On 3/19/08, Mike Lever [EMAIL PROTECTED] wrote: The last line before the error is: ste0: Dlink DL10050 10/100BaseTX) port 0.2100-021ff irq 11 at device 4.0 on pci3 Try removing one of the dlink 4 port cards. I get similar panics when trying to use 2 PCI-E 4-port intel gigabit cards as

Re: [pfSense Support] Fatal trap 12 during installation

2008-03-19 Thread Scott Ullrich
On 3/19/08, Mike Lever [EMAIL PROTECTED] wrote: Done ! removed them and it works fine. I put the 2 x Dlinks into an old P4 its boots up fine ! So then the problem is the board ? processor ? Can you suggest a board that you know for certain works with either the dlinks or Intel 4 port

Re: [pfSense Support] Trouble installing on old Dell 6450

2008-03-19 Thread Scott Ullrich
On 3/19/08, Sean Cavanaugh [EMAIL PROTECTED] wrote: The system is 32-bit only and I only have required devices enabled. I have tried it with many different configurations of devices turned on or off as well as with ACPI mode on or off. Either its frozen in best case, or Kernel Trap in worst

Re: [pfSense Support] Trouble installing on old Dell 6450

2008-03-19 Thread Scott Ullrich
On 3/19/08, Sean Cavanaugh [EMAIL PROTECTED] wrote: I just find it odd that straight FreeBSD will install fine on it but FreeSBIE and pfsense freeze or crash. Straight FreeBSD does not use GEOM for labeling the various partitions. The two do not operate the same, so there is nothing strange

Re: [pfSense Support] Web Console Quits responding

2008-03-16 Thread Scott Ullrich
On 3/16/08, Neal Lawson [EMAIL PROTECTED] wrote: I have tried pfsense 1.2 on several different machines, each time with the same result. after the initial install everything works fine, but after a couple of days the Web console quits responding (eg: no page ever loads). rebooting the box

Re: [pfSense Support] TinyDNS package not installing on 1.2 release

2008-03-14 Thread Scott Ullrich
On 3/14/08, Bryan Derman [EMAIL PROTECTED] wrote: /tmp (2008-03-12 @ 18:02:23) admin # cat pkg_mgr_dns-server.log --- Beginning package installation. Downloading package configuration file... ucspi-tcp-0.88_1 Array ( [0] = Requested space: 988 bytes, free space: 22818713600 bytes

Re: [pfSense Support] XML error: OPTXXX at line 115 cannot occur more than once

2008-03-14 Thread Scott Ullrich
On 3/14/08, EchoB [EMAIL PROTECTED] wrote: i am getting a bizzare error: XML error: OPTXXX at line 115 cannot occur more than once .. i cant use any options on the console menu, nor the web interface it happened as i was trying to delete OPT1 (using the web interface) Im using 1.2

Re: [pfSense Support] Using pfSense to redirect traffic from a dead server

2008-03-12 Thread Scott Ullrich
On 3/12/08, Chris Bagnall [EMAIL PROTECTED] wrote: Thanks for your reply Scott. I was under the impression the load balancer was CARP-based, and CARP required a dedicated interface for heartbeating between the servers? One of the servers will not be on the LAN, and may have a latency of

Re: [pfSense Support] TinyDNS package not installing on 1.2 release

2008-03-12 Thread Scott Ullrich
On 3/12/08, Bryan Derman [EMAIL PROTECTED] wrote: On a functioning pfSense 1.2 release, attempting to install the Tiny DNS package via the web-based interface yields: --- Installing dns-server and its dependencies. --- Downloading package configuration file... done. Saving updated

Re: [pfSense Support] FreeRADIUS Package

2008-03-06 Thread Scott Ullrich
On 3/6/08, Dimitri Rodis [EMAIL PROTECTED] wrote: Is there a better place to post/email this stuff? I don't seem to be getting much in the way of responses. I have some nice additions to the FreeRADIUS package that I want to submit, but I would like to add the logging support before I do.

Re: [pfSense Support] CARP Documentation

2008-03-04 Thread Scott Ullrich
On 3/4/08, Dimitri Rodis [EMAIL PROTECTED] wrote: Several recent forum posts regarding CARP refer to the following page: http://doc.pfsense.org/index.php/Setting_up_CARP_with_pfSense [snip] Try http://olddoc.pfsense.org/index.php/Setting_up_CARP_with_pfSense Scott

Re: [pfSense Support] Wiki Account Documentation

2008-03-01 Thread Scott Ullrich
Yes, fully agree. Please email [EMAIL PROTECTED] and we will set an account up. Thanks for helping out! Scott On 3/1/08, David Rees [EMAIL PROTECTED] wrote: There was some changes I wanted to make to the wiki (notably the Multi WAN 1.2 docs have some instructions backwards for the failover

Re: [pfSense Support] Load kernel error

2008-02-28 Thread Scott Ullrich
On 2/28/08, Mike Lever [EMAIL PROTECTED] wrote: Hi Gary, Thanks for that info. I am using a standard installation not an embedded device (I think, I'm working off a standard desktop, HDD, no CF) I also tried a fresh re-install and it installs fine, then boots up. I noticed the problem.

Re: [pfSense Support] DHCPDISCOVER

2008-02-28 Thread Scott Ullrich
On 2/28/08, Mike Lever [EMAIL PROTECTED] wrote: Looking at my system log I see repeated messages dhclient[12649]: DHCPDISCOVER on rl0 to 255.255.255.255 port 67 interval 13 Now rl0 is statically configured and should be needing any form of DHCP, where is this coming from ? and how do I

Re: [pfSense Support] upgrade woes ...

2008-02-26 Thread Scott Ullrich
On Tue, Feb 26, 2008 at 12:44 PM, Jure Pečar [EMAIL PROTECTED] wrote: Hello, I rushed to 1.2 as many others did I presume ;) I'm running 1.0-RELEASE on my home fw (simple adsl and two subnets). And I am not able to upgrade it to 1.2 by any means. Why where you not on 1.0.1? Firmware

Re: [pfSense Support] upgrade woes ...

2008-02-26 Thread Scott Ullrich
On 2/27/08, Chris Buechler [EMAIL PROTECTED] wrote: [snip] 1. fetch the upgrade file fetch http://files.pfsense.org/mirror/updates/pfSense-Full-Update-1.2-RELEASE.tgz 2. Run the upgrade command /etc/rc.firmware pfSenseupgrade pfSense-Full-Update-1.2-RELEASE.tgz Sorry to jump in, but

Re: [pfSense Support] 1.2 full version

2008-02-23 Thread Scott Ullrich
On 2/23/08, Odd Kåre Qvam Trøen [EMAIL PROTECTED] wrote: Hi list! Does anyone know if I can consider v1.2 as fully released now? Look here: http://snapshots.pfsense.org/FreeBSD6/RELENG_1_2/updates/ and

Re: [pfSense Support] enabling high performance tcp - freebsd

2008-02-21 Thread Scott Ullrich
On 2/21/08, Paul M [EMAIL PROTECTED] wrote: apparently since kernel 2.6.17 linux auto-tunes, so this advice is a bit out of date... in fact it might be really bad advice because usign setsockopt and setting RCVBUF and SNDBUF will actually disable autotuning. pfSense does not use linux and

Re: [pfSense Support] delay problem when traffic shaper is enabled

2008-02-20 Thread Scott Ullrich
On 2/20/08, Rossella Mariotti-Jones [EMAIL PROTECTED] wrote: Hi all, we're running pfsense v. 1.2-rc4 with Snort and for a while we have noticed delay problems when the traffic shaper is enabled. Ping times from LAN to the gateway vary greatly and often are all over the place, as soon as we

Re: [pfSense Support] syslogd parameters in /etc/inc/system.inc

2008-02-18 Thread Scott Ullrich
On Feb 18, 2008 6:18 AM, Paul M [EMAIL PROTECTED] wrote: can the system script be modified, please to tell syslogd to only bind to localhost? # diff system.inc.orig system.inc 412c412 $retval = mwexec(/usr/sbin/syslogd -s -f {$g['varetc_path']}/syslog.conf); ---

Re: [pfSense Support] IPSEC and Traffic Shaping

2008-02-18 Thread Scott Ullrich
On Feb 18, 2008 5:09 PM, Tim Nelson [EMAIL PROTECTED] wrote: Please forgive me if I've missed any release notes recently... Does traffic shaping currently work on IPSEC tunnels? In the past, I remember it did NOT work. Only on 1.3. Also, is there an ETA for the 1.2-FINAL version? Soon is

Re: [pfSense Support] IPSEC and Traffic Shaping

2008-02-18 Thread Scott Ullrich
On 2/18/08, Tim Nelson [EMAIL PROTECTED] wrote: Thank you for the update. I just found a post on the forum over at: http://forum.pfsense.org/index.php?topic=2718.msg44515#msg44515 Is that post incorrect regarding IPSEC traffic shaping? It is correct. Did you read the thread? Those features

Re: [pfSense Support] FreeRADIUS Package

2008-02-14 Thread Scott Ullrich
On 2/11/08, Dimitri Rodis [EMAIL PROTECTED] wrote: The FreeRadius log seems to be located at /var/log/radius.log. According to the current package, there is no logging set up in the package, so you basically have to ssh into pfSense to look at the log. What's involved in web enabling the

Re: [pfSense Support] FreeRADIUS Package

2008-02-11 Thread Scott Ullrich
On 2/11/08, Dimitri Rodis [EMAIL PROTECTED] wrote: Where would I go if I wanted to grab the source of the FreeRADIUS package and potentially add some features? http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/packages/ I am looking to add some support for additional parameters to return to

Re: [pfSense Support] FreeRADIUS Package

2008-02-11 Thread Scott Ullrich
On 2/11/08, Dimitri Rodis [EMAIL PROTECTED] wrote: Once I have changes made, how should I go about getting these changes into a pfSense install to test before I send any patches up? Should I be using the dev iso? Look in the packages are on the forum where there is a good howto. Scott

Re: [pfSense Support] BGP status

2008-02-11 Thread Scott Ullrich
On Feb 11, 2008 8:12 AM, Royce Mitchell III [EMAIL PROTECTED] wrote: Okay, please forgive my ignorance, but if you have two redundant routers servicing your BGP, how will they decide who is going to handle a packet without some sort of CARP/VRRP communication between them? OpenBSD does play

Re: [pfSense Support] proxy ARP on pfSense Embedded

2008-02-10 Thread Scott Ullrich
On 2/10/08, Diego [EMAIL PROTECTED] wrote: I have installed pfSense Embedded 1.0.; I would like to know if it is allowed install the additional proxy ARP package on this version of pfSense and, in case, how to proceed. Thanks. 1.0?! You really don't want to be using that. Use 1.2-RC4.

Re: [pfSense Support] router failover

2008-02-08 Thread Scott Ullrich
On 2/8/08, Chris Flugstad [EMAIL PROTECTED] wrote: Im not quite following. i only have 1 WAN connectino, at this time. and want to setup a router just to do basic tasks. I'd also like to setup a 2nd router, in case the 1st one stops or hangs up. I guess I'm not familiar with pfsense to

Re: [pfSense Support] Bandwidthd to listen on more than one interface

2008-02-07 Thread Scott Ullrich
On Feb 7, 2008 9:30 AM, Ugo Bellavance [EMAIL PROTECTED] wrote: Hi, Would it be possible to make bandwidthd listen on more than one interface, like darkstats? No. Check the known bugs section on source forge. Last time I checked this was a known issue. Scott

Re: [pfSense Support] Multiple servers behind NAT'd firewall

2008-02-06 Thread Scott Ullrich
On Feb 6, 2008 3:29 PM, Sean Cavanaugh [EMAIL PROTECTED] wrote: you have internal NAT reflection turned off? -Sean Toggle System - Advanced - Disable Reflection This question is coming up weekly now. How can we (the developers) make this situation more clear? Scott

Re: [pfSense Support] pfSense and Compact Flash size

2008-02-04 Thread Scott Ullrich
On Feb 4, 2008 12:24 PM, Chris Bagnall [EMAIL PROTECTED] wrote: Greetings list, Are there any benefits to using larger than 128MB compact flash cards in pfSense installs? I have a load of spare 128MB cards lying around, and whilst they'll be okay with current versions, if there are plans

Re: [pfSense Support] Carp FW Rules?

2008-01-31 Thread Scott Ullrich
On 1/31/08, William Armstrong [EMAIL PROTECTED] wrote: Good Afternoon I have configured 2 IP virtual in virtual IP as Carp mode. I configure the necessary ports in the Nat options for the services that desire to use. In the Internet side all services function ok however I cannot connect

Re: [pfSense Support] Big Bug

2008-01-30 Thread Scott Ullrich
On 1/30/08, Léo Goehrs [EMAIL PROTECTED] wrote: Hey Guys, I found a bug running from RC1, when PfSense is installed on an Alix Board with a Geode proc, the os will not boot to the end. I troubleshooted and I found out that the problem came from watchdogd. I commented out the line and

<    1   2   3   4   5   6   7   8   9   10   >