Re: [pfSense Support] OpenNTPD fails to start at boot-up

2006-11-06 Thread Scott Ullrich
Terminating... I wonder why. Scott On 11/6/06, Jeroen [EMAIL PROTECTED] wrote: On 11/2/06, Jeroen [EMAIL PROTECTED] wrote: After booting the openntpd log shows lines like this: Nov 2 11:23:52 ntpd[1517]: Lost child: child exited Nov 2 11:23:52 ntpd[1517]: dispatch_imsg in main: pipe

Re: [pfSense Support] Any planned support for BASE?

2006-11-01 Thread Scott Ullrich
There are many discussions about this in the forum. Please visit forum.pfsense.com On 11/1/06, Sean Cavanaugh [EMAIL PROTECTED] wrote: I think it would be a good idea to add the Basic Analysis and Security Engine (BASE) to augment the snort port as it makes analyzing the logs a lot easier.

Re: [pfSense Support] Problem with build_updates.sh

2006-11-01 Thread Scott Ullrich
GZSIG is what we use to sign the images. You can remove the commands from your scripts. On 11/1/06, Kelvin Chiang [EMAIL PROTECTED] wrote: Hi, I have tried to run the script build_updates.sh to get an iso with latest image, but it prompted me for gzsig. I downloaded gzsig.tgz and try to

Re: [pfSense Support] OpenNTPD fails to start at boot-up

2006-11-01 Thread Scott Ullrich
You are missing the _ntp user if you upgraded. Search the forum for _ntp Scott On 11/1/06, Jeroen [EMAIL PROTECTED] wrote: As the title notes, OpenNTPD fails to start at boot-up. When i go to the services menu after the boot, it says its not started. Forcing a start works however. What

Re: [pfSense Support] 1.0.1 and snort

2006-10-31 Thread Scott Ullrich
On 10/31/06, Jason J. Ellingson [EMAIL PROTECTED] wrote: Snort worked fine until I installed 1.0.1 (from 1.0) Now, I see the normal startup messages for snort in the system logs and get the usual memory and CPU use as before, but nothing seems to actually trigger a snort alert or add anything

Re: [pfSense Support] VLAN/Subnet Question

2006-10-31 Thread Scott Ullrich
On 10/31/06, Lee Hetherington [EMAIL PROTECTED] wrote: Thats fantastic. Works like a charm!! Thanks John Did it require a reboot? Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL

Re: [pfSense Support] Snort

2006-10-30 Thread Scott Ullrich
Not a bug, Snort will copy the needed files once you set it up. You need to select at minimum an interface to listen on and click save. On 10/30/06, Brookenmire [EMAIL PROTECTED] wrote: Hi, I have loaded the snort into pfsense 1.01 but I was unable to start it. The logs show the

Re: [pfSense Support] Traffic Shaper 1.0.1

2006-10-30 Thread Scott Ullrich
On 10/30/06, Dimitri Rodis [EMAIL PROTECTED] wrote: Hey guys-- Grats on release. I noticed in the changelog the following: PF does not know about congestion flags, remove from shaper What does that mean? It is a TCP flag. It never worked to begin with. Also, I still have a customer who

Re: [pfSense Support] 1.0.1 embedded upgrade breaks serial console?

2006-10-30 Thread Scott Ullrich
It is a known issue and the update has been pulled. On 10/30/06, Braden McGrath [EMAIL PROTECTED] wrote: I was running 1.0-release with miniupnpd installed. Last night I downloaded and applied the 1.0.1 mini-update. The system wrote to flash and rebooted, and I watched it post and all of

Re: [pfSense Support] 1.0.1 embedded upgrade breaks serial console?

2006-10-30 Thread Scott Ullrich
On 10/30/06, Braden McGrath [EMAIL PROTECTED] wrote: OK, will a full flash resolve it, or is it a bug with 1.0.1 embedded in general? Yes and yes. -Original Message- From: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Monday, October 30, 2006 12:36 PM To: support@pfsense.com Subject

Re: [pfSense Support] Re: HW support for Netgear WG311V2 Rev A2

2006-10-30 Thread Scott Ullrich
D-link does this more than I change socks... Really do not recommend their nics at all. I know they are nice and cheap and look attractive but fight the urge and use a vendor that does not pull these dirty tricks. On 10/30/06, Holger Bauer [EMAIL PROTECTED] wrote: Sometimes hardwarevendors

Re: [pfSense Support] Help! Won't boot...

2006-10-27 Thread Scott Ullrich
Check out http://wiki.pfsense.com/wikka.php?wakka=BootTroubleShooting On 10/27/06, PlanAlpha [EMAIL PROTECTED] wrote: I'm trying to install onto a Transcend DOM and I'm not having any success. The system boots the livecd just fine and I option 99 to install onto the DOM. The install seems to go

Re: [pfSense Support] pfsense - Speed up SNORT blocked rules page?

2006-10-27 Thread Scott Ullrich
I fixed this recently. Reinstall snort. On 10/27/06, Darren Cockburn [EMAIL PROTECTED] wrote: Hi, I love pfsense - really - I've been using it for about 5 months and it's the best software gateway I have ever used! Any way ... Any idea how to Speed up the snort blocked rules page? It takes

Re: [pfSense Support] pfsense - Speed up SNORT blocked rules page?

2006-10-27 Thread Scott Ullrich
/inc/pkg-utils.inc(444) : eval()'d code on line 1 Snort seemed to be uninstalled. Went to packages and installed it. Works. - Jason -Original Message- From: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Friday, October 27, 2006 12:10 PM To: support@pfsense.com Subject: Re: [pfSense

Re: [pfSense Support] two PHP processes running?

2006-10-27 Thread Scott Ullrich
Yes. Fast-CGI. On 10/27/06, Darren Cockburn [EMAIL PROTECTED] wrote: Hi, Are there suppose to be two PHP processes running? I killed the first one and things seem fine ??? - Darren TOP OUTPUT: last pid: 43326; load averages: 3.20, 3.14, 2.26 up 1+17:17:46 15:02:00 35 processes: 3

Re: [pfSense Support] pfsense - Speed up SNORT blocked rules page?

2006-10-27 Thread Scott Ullrich
- can get in via ssh I ran /usr/local/etc/rc.d/snort.sh stop - and still cannot get in via a browser. - Darren. -Original Message- From: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Friday, October 27, 2006 2:33 PM To: support@pfsense.com Subject: Re: [pfSense Support] pfsense - Speed up

Re: [pfSense Support] mini update

2006-10-25 Thread Scott Ullrich
On 10/24/06, Craig Silva [EMAIL PROTECTED] wrote: Hi - couldn't find any info on this in the wiki or whatever so here goes. Luckily I have a test wrap so I though t I would try the firmware update option with the mini embedded update to see what mileage I got - previously I have reflashed a new

Re: [pfSense Support] FTP and Loadbalancer

2006-10-25 Thread Scott Ullrich
On 10/25/06, Patric Lichtsteiner [EMAIL PROTECTED] wrote: Hi all, I'm using the load balancer functionality from pfSense to split our traffic to 2 different WAN lines. This works very good so far. Since 1.0-release I have troubles with ftp traffic. Connecting to a ftp server and executing

Re: [pfSense Support] RRD graph status.

2006-10-24 Thread Scott Ullrich
On 10/24/06, Robert Goley [EMAIL PROTECTED] wrote: Just noticed the final version was out yesterday, Do you have any news on the RRD graphs for OPTx interfaces? There have been no changes. Scott - To unsubscribe, e-mail:

Re: [pfSense Support] Is NAT-T working?

2006-10-23 Thread Scott Ullrich
No, unfortunately NAT-T did not make it into 1.0. Scott On 10/23/06, Tommaso Di Donato [EMAIL PROTECTED] wrote: Hi all! Sorry, i've benn out for a while, so I misse the important news and I'm trying to get in touch now. Just a question: with the new release, the NAT-T is working or not?

Re: [pfSense Support] Howto set atacontrol mode ad0 udma4

2006-10-23 Thread Scott Ullrich
On 10/23/06, Bastian Schern [EMAIL PROTECTED] wrote: Thanks, the wiki helps. I disable DMA in /boot/loader.conf and it works. But I have still two questions: 1. Will a firmware update modify the loader.conf? No, it shouldn't. 2. Which file I must edit to go enable UDMA4 mode?

Re: [pfSense Support] Maximums

2006-10-18 Thread Scott Ullrich
I don't recall being a set number. If there is, its in the hundreds. On 10/18/06, Brookenmire [EMAIL PROTECTED] wrote: Hi all, Is there any information of maximum values within PfSense V1.0 ? In particular, I was wondering what is the maximum number of networks that can be added to a

Re: [pfSense Support] Need to reboot system to get firewall rules to take effect, PPTP, authentication

2006-10-17 Thread Scott Ullrich
On 10/17/06, Robert Perciaccante, CISSP [EMAIL PROTECTED] wrote: I have a very odd question. In order for firewall rules to be saved and put into effect, i need to reboot the box, even after hitting apply, and there are no indications that I can see (read: pfsense noob) of a problem. When

Re: [pfSense Support] Need to reboot system to get firewall rules to take effect, PPTP, authentication

2006-10-17 Thread Scott Ullrich
On 10/17/06, Robert Perciaccante, CISSP [EMAIL PROTECTED] wrote: Thanks for the quick response! Here is the output of those commands. $ ps awux | grep check_reload_status | grep -v grep | wc -l 0 $ cat /tmp/check_reload_status /tmp/rc.newwanip As it turns out, the port changes (for

Re: [pfSense Support] Need to reboot system to get firewall rules to take effect, PPTP, authentication

2006-10-17 Thread Scott Ullrich
On 10/17/06, Robert Perciaccante, CISSP [EMAIL PROTECTED] wrote: the latest times it has done the result was sleeping... I've commited some code to work around the bug. It will be included in 1.0.1 which will be published in a couple weeks. Scott

Re: [pfSense Support] Problems setting up a VPN Tunnel to a PIX 515e

2006-10-16 Thread Scott Ullrich
Sounds like this http://cvstrac.pfsense.com/tktview?tn=1129,6 On 10/16/06, J. Ryan Earl [EMAIL PROTECTED] wrote: Let me explain something here since I'm not making the problem clear. The problem has -nothing- at all to do with the Cisco firewall. The setsockopt errors occur -well before- any

Re: [pfSense Support] boot crash

2006-10-16 Thread Scott Ullrich
Known problem with pr440fx's. Install pfSense to the hard drive running on a alternative system then move the hard drive back over. This works great for all our pentium pro based machines. Scott On 10/16/06, Jure Pečar [EMAIL PROTECTED] wrote: Hi all, I'm trying to install pfsense 1.0

Re: [pfSense Support] Default route on Wan

2006-10-14 Thread Scott Ullrich
Do this from Diagnotics - Command - PHP Command: unset($config['interfaces']['wan']['gateway']); write_config(); On 10/14/06, Chris Buechler [EMAIL PROTECTED] wrote: Captain Bablam wrote: Good morning all, I have replaced a linux box as my core distribution router with a PFsense box. I

Re: [pfSense Support] Two issues experienced on 1.0-RC3

2006-10-11 Thread Scott Ullrich
Remove the custom --ping-restart command. On 10/11/06, Captain Bablam [EMAIL PROTECTED] wrote: Good morning Rob, No I am running this over TCP, I can lower the ping time and see if that makes a difference. Wade B On 10/11/06, Rob Terhaar [EMAIL PROTECTED] wrote: On 10/10/06, Captain

Re: [pfSense Support] Routing problem

2006-10-11 Thread Scott Ullrich
On 10/11/06, Pierre Frisch [EMAIL PROTECTED] wrote: Thank you very much that did the trick. May be we should have a more obvious setting -:) It is the exact same as m0n0wall. We are not changing this. Scott - To

Re: [pfSense Support] Problems with OpenVPN and saving changes.

2006-10-11 Thread Scott Ullrich
Upgrade to 1.0-RC3e. Apply a, b, c, d then e in that order. On 10/11/06, Kyle Mott [EMAIL PROTECTED] wrote: Hi, I'm running RC3, and every time I save my config, the webgui hangs. I deleted my tun0 interface, but it looks like it's still trying to bring up the tun0 interface which is hosing

Re: [pfSense Support] embedded update problem

2006-10-10 Thread Scott Ullrich
That is correct. Not everyone has enough ram to update with a 33 megabyte update file. On 10/10/06, Alan Walters [EMAIL PROTECTED] wrote: Embedded update does not include new binarys. Recent update of openntpd was not included in the mini update

Re: [pfSense Support] System overload

2006-10-09 Thread Scott Ullrich
I have no idea about this one.. However the ipfw messages are related to the captive portal. swap_pager_getswapspace(n): failed means you have run out of ram. All that I can think of is run a top and post the output when it goes nuts. On 10/9/06, Roberto Greiner [EMAIL PROTECTED] wrote: Hi,

Re: [pfSense Support] 1.0-RC3 ?

2006-10-08 Thread Scott Ullrich
I really dont see how on earth this is possible. What browser? On 10/8/06, David Strout [EMAIL PROTECTED] wrote: Is it my imagination or has the web interface slowed down? I just upgraded to the official RC3 and the GUI (webConfigurator) seems MUCH, MUCH slower a screen redraws and refreshes.

Re: Re: [pfSense Support] 1.0-RC3 ?

2006-10-08 Thread Scott Ullrich
I cannot reproduce this. Please use Wink and record a session with it blinking. The webConfigurator has been tested with ie7, firefox 2, firefox 1, and safari and I don't see anything even remotely close to what you describe. And how does flashing have anything to do with being slow? On

Re: [pfSense Support] OpenVPN and (save)config.xml

2006-10-08 Thread Scott Ullrich
On 10/8/06, Fuchs, Martin [EMAIL PROTECTED] wrote: Hi ! When I configure OpenVPN and save the config without packages, pfsense does not save the openvpn settings, in the config.xml the settings are stored under packages. Should this be the intended behaviour ? No. From the PHP command

Re: [pfSense Support] Radius Session-Timeout

2006-10-06 Thread Scott Ullrich
Apparently this is a rather new feature to even m0n0wall and may be broken. Please let me know as we will need to remove its option if this is the case. On 10/6/06, Roberto Greiner [EMAIL PROTECTED] wrote: Ok, monday morning I will try it. The system is scheduled to enter production midday,

Re: [pfSense Support] Script Errors

2006-10-05 Thread Scott Ullrich
Please try and upload this fix: http://www.pfsense.com/~sullrich/pfSense-1.0-RC3d-Full-Embedded.tgz to System - Firmware. In terms of the reboot and halt issues, this is generally ACPI related, make sure your BIOS is up to date and check out http://wiki.pfsense.com/wikka.php?wakka=BootOptions

Re: [pfSense Support] re: ath-hal

2006-10-05 Thread Scott Ullrich
Newest version will not apply to 6.1, it is meant for RELENG_6/FreeBSD 6.2. Scott On 10/5/06, Alan Walters [EMAIL PROTECTED] wrote: Been looking at the ath hal version on pfsense and considering testing latest version from sam but can not seem to find how to add this into our Build routine.

Re: [pfSense Support] Script Errors

2006-10-05 Thread Scott Ullrich
or menu the settings are saved, so it seems to be a gui error !? MArtin -Ursprüngliche Nachricht- Von: Scott Ullrich [mailto:[EMAIL PROTECTED] Gesendet: Donnerstag, 5. Oktober 2006 18:16 An: support@pfsense.com Betreff: Re: [pfSense Support] Script Errors Please try and upload this fix: http

Re: [pfSense Support] Script Errors

2006-10-05 Thread Scott Ullrich
I've fixed the BCMOD error. Will be reposting the update again shortly. On 10/5/06, Roberto Greiner [EMAIL PROTECTED] wrote: Roberto Greiner wrote: Scott Ullrich wrote: Please try and upload this fix: http://www.pfsense.com/~sullrich/pfSense-1.0-RC3d-Full-Embedded.tgz to System - Firmware

Re: [pfSense Support] Script Errors

2006-10-05 Thread Scott Ullrich
Update reposted. Please download again and upload to System - Firmware. On 10/5/06, Scott Ullrich [EMAIL PROTECTED] wrote: I've fixed the BCMOD error. Will be reposting the update again shortly. On 10/5/06, Roberto Greiner [EMAIL PROTECTED] wrote: Roberto Greiner wrote: Scott Ullrich wrote

Re: [pfSense Support] Script Errors

2006-10-05 Thread Scott Ullrich
Woops, please try again. It works now. On 10/5/06, Roberto Greiner [EMAIL PROTECTED] wrote: Scott Ullrich wrote: Update reposted. Please download again and upload to System - Firmware. I'm getting a corrupt image error. Something is wrong with this image. Roebrto

Re: [pfSense Support] re: ath-hal

2006-10-05 Thread Scott Ullrich
Alan, Edit pfsense_local.sh . You will see the settings in there. Scott On 10/5/06, Alan Walters [EMAIL PROTECTED] wrote: I think I understand you bill I could just start a 6.2 branch and see if I have success with build there? Yes? Will try this out don't know if I want to go that far

Re: [pfSense Support] Script Errors

2006-10-05 Thread Scott Ullrich
) -Ursprüngliche Nachricht- Von: Scott Ullrich [mailto:[EMAIL PROTECTED] Gesendet: Donnerstag, 5. Oktober 2006 20:45 An: support@pfsense.com Betreff: Re: [pfSense Support] Script Errors How about providing the GUI error? On 10/5/06, Fuchs, Martin [EMAIL PROTECTED] wrote: I have installed 3 new systems

Re: [pfSense Support] Script Errors

2006-10-05 Thread Scott Ullrich
Alright, the latest version I just posted should hopefully do the trick. Just tested it at work. Scott On 10/5/06, Roberto Greiner [EMAIL PROTECTED] wrote: Scott Ullrich wrote: Update reposted. Please download again and upload to System - Firmware. I'm getting a corrupt image error

Re: [pfSense Support] Application filtering over HTTP

2006-10-04 Thread Scott Ullrich
On 10/4/06, Benoît Beaujault [EMAIL PROTECTED] wrote: Hello, More and more applications, due to firewall filtering, move to HTTP, is it in the roadmap of pfsense to propose a fonctionnality to filter some applications over HTTP (peer-to-peer, MSN, ICQ and so on) ? Squid is our first starting

Re: [pfSense Support] ? cvs.pfsense.com down

2006-10-04 Thread Scott Ullrich
CVS is not public. Use CVSUP instead. Scott On 10/4/06, Thorsten Zenker [EMAIL PROTECTED] wrote: problem on my or pfsense.com side? - Torsten - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail:

Re: [pfSense Support] Multiple IP on WAN (ipconfig alias)

2006-10-03 Thread Scott Ullrich
On 10/3/06, D.Pageau [EMAIL PROTECTED] wrote: I need to add a second IP to my WAN interface. I use to do it with ifconfig alias on FreeBSD but can't find any option to do it with pfSense GUI. The purpose is to have my pfSense OpenVPN server available on two different IP for some time. For

Re: [pfSense Support] Openvpn issues on snapshot 1.0-SNAPSHOT-09-21-06

2006-10-03 Thread Scott Ullrich
On 10/3/06, Kyle Mott [EMAIL PROTECTED] wrote: It's not required, but it is nice to have, as you can monitor traffic on it via SNMP. Can we leave it assigned without harmful effects? Doubt it. But it all depends on what services you use from pfSense. Anything that uses tunX will end up

Re: [pfSense Support] RC3 issue on reboot from terminal

2006-10-02 Thread Scott Ullrich
On 10/2/06, Alvaro Pietrobono [EMAIL PROTECTED] wrote: Enter an option: 5 Terminated tcsetpgrp failed, errno=25 This is the message that pfsense RC3 diplay on terminal when you choose option 5, then It's reboot normally. This is a FreeBSD bug. We've tried and tried and tried and tried

Re: [pfSense Support] RC3 issue

2006-10-01 Thread Scott Ullrich
On 10/1/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: G'day all, I just downloaded the upgrade to RC3 and installed it on my pfSense firewall. Everything appears to be ok except when I click on the LAN tab under Firewall = Rules I only shown 13.5 of my rules. The 14th rule only shows Proto,

Re: [pfSense Support] RC3 issue

2006-10-01 Thread Scott Ullrich
On 10/2/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: G'day again, ok I cleared the cache and rebooted my machine however I am still getting the same error. With IE it shows me the td class=... line as mentioned originally, however with firefox it just stops displaying the page half-way down

Re: [pfSense Support] RC3 issue

2006-10-01 Thread Scott Ullrich
On 10/2/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I am only using IE 6, however if you can't reproduce it even in firefox then I'll try a complete full re-install. If I do a backup of my current configuration, re-install, then restore my configuration - that would be the correct procedure

Re: [pfSense Support] RC3 issue

2006-10-01 Thread Scott Ullrich
On 10/2/06, Scott Ullrich [EMAIL PROTECTED] wrote: On 10/2/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I am only using IE 6, however if you can't reproduce it even in firefox then I'll try a complete full re-install. If I do a backup of my current configuration, re-install, then restore

Re: [pfSense Support] Openvpn issues on snapshot 1.0-SNAPSHOT-09-21-06

2006-09-30 Thread Scott Ullrich
On 9/30/06, Captain Bablam [EMAIL PROTECTED] wrote: Good afternoon, Anyone get a chance to look at the attached and make sense of it? Thanks everyone. Yes, the documentation that was posted to our sites was incorrect. You need to be running on the most recent snapshot and you need to

Re: [pfSense Support] there is an typo in the squid-config

2006-09-29 Thread Scott Ullrich
On 9/29/06, Michael Schuh [EMAIL PROTECTED] wrote: Hi Scott, a little bit late but better then never. Here are the two patches for the squid config's. Back to my other question about proxyarp net.link.ether.inet.proxyall=1 now i know put this setting in /etc/sysctl.conf makes it not

Re: [pfSense Support] there is an typo in the squid-config

2006-09-29 Thread Scott Ullrich
No, you need to look at the shellcmd. On 9/29/06, Michael Schuh [EMAIL PROTECTED] wrote: Hi Scott, Thanks for the patch. In terms of the command that you need to run on bootup, take a look at http://faq.pfsense.com/index.php?sid=120897lang=enaction=artikelcat=10id=38artlang=en thank you

[pfSense Support] We need help testing squid package!

2006-09-29 Thread Scott Ullrich
All-- RC3 is right around the corner and we would like to get the squid package nailed down and working 100%. If you feel like helping us out, that would be great. Here's what we need: Install the latest snapshot from http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-09-27-06/ Install the squid

Re: [pfSense Support] Openvpn issues on snapshot 1.0-SNAPSHOT-09-21-06

2006-09-28 Thread Scott Ullrich
? In addition the RC2 worked fine for about 12 hours, I disconnected and then tried to reconnect, I never could get it to reconnect. Thanks. Wade B On 9/26/06, Scott Ullrich [EMAIL PROTECTED] wrote: On 9/26/06, Captain Bablam [EMAIL PROTECTED] wrote: Upon rolling back to RC2 everything works

Re: [pfSense Support] Openvpn issues on snapshot 1.0-SNAPSHOT-09-21-06

2006-09-28 Thread Scott Ullrich
? Thanks Scott, Wade B On 9/28/06, Scott Ullrich [EMAIL PROTECTED] wrote: This problem is related to connectivity: Thu Sep 28 09:34:01 2006 us=993530 Attempting Basic Proxy-Authorization Thu Sep 28 09:34:01 2006 us=993541 Send to HTTP proxy: 'Proxy-Authorization: Basic

Re: [pfSense Support] Startup script for quagga

2006-09-28 Thread Scott Ullrich
with crunched down timers for fast convergence. It works awesome. The two others peers are an openwrt box and an FC5 box all running quagga. No static, all dynamic, the daemon just has to come up for that to work ;~) -W On 9/28/06, Scott Ullrich [EMAIL PROTECTED] wrote: Quagga is not working as of yet

Re: [pfSense Support] Startup script for quagga

2006-09-28 Thread Scott Ullrich
On 9/28/06, Captain Bablam [EMAIL PROTECTED] wrote: Someone listed a link to the ports tree, So I installed it. Let me know if I can help you out getting it mainstream. Only packages that appear in System - Packages are supported.

Re: [pfSense Support] Startup script for quagga

2006-09-28 Thread Scott Ullrich
On 9/28/06, Captain Bablam [EMAIL PROTECTED] wrote: OK good to know thank you, Are there plans to support quagga? I thought I saw that on the list a while back? I am not sure at this point. - To unsubscribe, e-mail:

Re: [pfSense Support] kernel panic on 1.0RC2

2006-09-27 Thread Scott Ullrich
You really should proceed with the snapshot, but its your machine... Scott On 9/27/06, Roberto Greiner [EMAIL PROTECTED] wrote: Yes, I know about the upgrade procedure. I was just thinking that if the new version was due to release, it would be no problem for me wait, say, a couple of

Re: [pfSense Support] User management

2006-09-27 Thread Scott Ullrich
On 9/27/06, Roberto Greiner [EMAIL PROTECTED] wrote: There is a feature in monowall that I can't seem to locate in pfSense, which is 'User Management'. Is it not available? (I'm using 1.0rc2). Thank you, This feature is not in 1.0 for pfSense. It is in our development tree and will be

Re: [pfSense Support] Does portforwarding not use aliases?

2006-09-26 Thread Scott Ullrich
On 9/26/06, Michael Schuh [EMAIL PROTECTED] wrote: Hi, i would configure portforwarding with an aliased Host-Address. The aliased ports shows me to work, but the aliased host ip doesnt work. the interface get me the correct completition, but if i press save i get the error message in the

Re: [pfSense Support] Openvpn issues on snapshot 1.0-SNAPSHOT-09-21-06

2006-09-26 Thread Scott Ullrich
On 9/26/06, Captain Bablam [EMAIL PROTECTED] wrote: Good morning all, I upgraded from rc2 to 1.0-SNAPSHOT-09-21-06 built on Sat Sep 23 00:46:42 UTC 2006. Since that time I have seen sporadic issues connecting to my openvpn server running on TCP/443 (I tried 80 as well) stright connect and

Re: [pfSense Support] Boot WRAP with etherboot (PXE)

2006-09-26 Thread Scott Ullrich
On 9/26/06, Alvaro Pietrobono [EMAIL PROTECTED] wrote: Can anyone help me? I have to access to a corrupted Cf with a non bootable system. I got etherboot rom image from http://rom-o-matic.net but unsuccessfully. I read some doc but I didn't find a solution. thanx in advance. Etherbooting +

Re: [pfSense Support] Openvpn issues on snapshot 1.0-SNAPSHOT-09-21-06

2006-09-26 Thread Scott Ullrich
On 9/26/06, Captain Bablam [EMAIL PROTECTED] wrote: Thanks Scott, So in looking closer I was actually on the openvpn-2.0.7-gui-1.0.3 (winXP). I uninstalled and reinstalled this and atempted to connect with the same results. Next steps; 1. anyone experienced anything like this? 2. How can I

Re: [pfSense Support] Openvpn issues on snapshot 1.0-SNAPSHOT-09-21-06

2006-09-26 Thread Scott Ullrich
On 9/26/06, Captain Bablam [EMAIL PROTECTED] wrote: Yup, I did, and changed the listening port to 443 and 80, same result. Keeping in mind this worked flawlessly on rc2 with no fw rules. And I am logging the permits so I can see the traffic being permitted. -W Please email me

Re: [pfSense Support] Boot WRAP with etherboot (PXE)

2006-09-26 Thread Scott Ullrich
On 9/26/06, Rolf Sommerhalder [EMAIL PROTECTED] wrote: After spending some time on this earlier this year, I finally got OpenBSD's pxeboot to successfully net-boot OpenBSD on my WRAPs. The problem was with the Etherboot binary which is included within the BIOS v1.08 and v1.10 from PCengines. I

Re: [pfSense Support] compile pfsense kernel with modified configuration file

2006-09-26 Thread Scott Ullrich
On 9/26/06, Aggelis Aggelis [EMAIL PROTECTED] wrote: i have installed pfsense embedded snapshot 09/22/2006. during the boot of the system , the kernel crashes (curiously not at every boot) and the system reboots. The problem is as far as i can see the usb subsystem. i would like to try to

Re: [pfSense Support] compile pfsense kernel with modified configuration file

2006-09-26 Thread Scott Ullrich
On 9/26/06, Aggelis Aggelis [EMAIL PROTECTED] wrote: On 9/27/06, Scott Ullrich [EMAIL PROTECTED] wrote: The kernel configuration file is: http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/builder_scripts/conf/pfSense.6?rev=1.33 The patches file is: http://cvs.pfsense.com/cgi-bin/cvsweb.cgi

Re: [pfSense Support] Alert! Virus spreading through pfSense-support list

2006-09-26 Thread Scott Ullrich
On 9/26/06, SDamron [EMAIL PROTECTED] wrote: I really don't care...I do not use that OS that they are written for...and I use GMail :o) Ditto here on gmail. Not only that I deinstalled that VML exploit weeks ago and scanned my computers and no viruses exist. I would say your ISP's virus

Re: [pfSense Support] file server

2006-09-25 Thread Scott Ullrich
On 9/25/06, Marc Boisis-Delavaud [EMAIL PROTECTED] wrote: I'm sorry but scp and sftp does'nt work. Yes it does. For other reply, I want fileserver because at home I have'nt a lot of hardware, so I want fileserver and firewall on the same hardware. And I know the risks !! Please search

Re: [pfSense Support] OpenVPN Clients and FW ACL's

2006-09-25 Thread Scott Ullrich
On 9/25/06, Rob Terhaar [EMAIL PROTECTED] wrote: not sure if this is going to be helpful- but after an update to 9-22-snapshot and a reboot this morning on our pfsense, users were complaining that they were able to do anything on the vpn connection after they were authenticated via openvpn. I

Re: [pfSense Support] OpenVPN Clients and FW ACL's

2006-09-24 Thread Scott Ullrich
On 9/24/06, Kyle Mott [EMAIL PROTECTED] wrote: Yeah, I just installed it yesterday (1.0-SNAPSHPT-09-21-06). Even with no rules on tun0, all clients get full access to any internal system. Has anyone else run into this? Same situation with IPSEC, there is not fine control of traffic yet. We

Re: [pfSense Support] Captive portal issue with pfSense-Full-Update-1.0-SNAPSHOT-09-20-2006

2006-09-24 Thread Scott Ullrich
and the error below is from Internet Explorer. The error only occurs after logon and no traffic will pass through the portal then. FYI I use the portal tied into IAS for radius authentication. -Original Message- From: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Friday, September 22, 2006 9:42

Re: [pfSense Support] Office hours type setup.

2006-09-24 Thread Scott Ullrich
On 9/24/06, Bill Marquette [EMAIL PROTECTED] wrote: no. The OpenBSD pf list (don't recall if it's on misc@ or the pf list) has some comments on how to implement this. This goes over the situation quite well: http://archive.openbsd.nu/?ml=openbsd-pfa=2005-01t=635485 Scott

Re: [pfSense Support] Office hours type setup.

2006-09-24 Thread Scott Ullrich
On 9/24/06, Scott Ullrich [EMAIL PROTECTED] wrote: On 9/24/06, Bill Marquette [EMAIL PROTECTED] wrote: no. The OpenBSD pf list (don't recall if it's on misc@ or the pf list) has some comments on how to implement this. This goes over the situation quite well: http://archive.openbsd.nu/?ml

Re: [pfSense Support] OpenVPN Clients and FW ACL's

2006-09-24 Thread Scott Ullrich
On 9/24/06, Kyle Mott [EMAIL PROTECTED] wrote: No worries, I just wanted to make sure others were aware of it, so they aren't under the same assumption I was. Is there somewhere that I can file a bug (for both OpenVPN and IPSEC) so this can be tracked and fixed in a future release (hopefully)?

Re: [pfSense Support] NAT-T in following versions

2006-09-22 Thread Scott Ullrich
On 9/22/06, Fuchs, Martin [EMAIL PROTECTED] wrote: Hi, Scott ! I saw on the timeline-site that you wrote RC3 without NAT-T... 22:17 • Check-in [14437]: We are releasing RC3 without NAT-T (By sullrich) 17:17 • Check-in [14436]: Time to release RC3 minus NAT-T (By sullrich) Will NAT-T be

Re: [pfSense Support] Captive portal issue with pfSense-Full-Update-1.0-SNAPSHOT-09-20-2006

2006-09-22 Thread Scott Ullrich
On 9/22/06, Ronald Henriksen [EMAIL PROTECTED] wrote: Has any thing changed for the captive portal feature with snap shot pfSense-Full-Update-1.0-SNAPSHOT-09-20-2006 after login from the portal I get a fatal error. I had to revert to pfSense-Full-Update-RC2.tgz to get the captive portal

[pfSense Support] OpenVPN

2006-09-22 Thread Scott Ullrich
Who out there actually uses OpenVPN and it works for them? Please either respond here and describe your setup or reply privately to me. We have a influx of OpenVPN problem reports and I am starting to wonder if it works correctly at all.

Re: [pfSense Support] Master Browser

2006-09-20 Thread Scott Ullrich
On 9/20/06, cmaurand [EMAIL PROTECTED] wrote: Hello, my pfsense box seems to think its a domain master browser on my SAMBA network. Its constantly messing up my network neighborhood. What gives? I don't have samba installed on that box. I don't seen anything in the docs and I don't see a

Re: [pfSense Support] Load balancer problem

2006-09-19 Thread Scott Ullrich
On 9/19/06, Bill Marquette [EMAIL PROTECTED] wrote: Hmm, there is a README in the same directory that explains quite a bit. README?! What's that!? Shouldn't I just be asking questions and not READING!? - To unsubscribe,

[pfSense Support] Any NAT-T users out there?

2006-09-19 Thread Scott Ullrich
Please contact me. I have something for you. Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Any NAT-T users out there?

2006-09-19 Thread Scott Ullrich
On 9/19/06, Pedro Paulo de Magalhaes Oliveira Junior [EMAIL PROTECTED] wrote: BTW, I know since the guy in the room beside me is working on it. Well, have them contact me. We need to get NAT-T tested. (It's done, needs testing).

Re: [pfSense Support] Load balancer problem

2006-09-18 Thread Scott Ullrich
On 9/19/06, Catalin Epure [EMAIL PROTECTED] wrote: I have settled the load balancer section to use 2 isp connections. For some reason the log looks like this: Sep 19 03:10:13 slbd[297]: Service Balancer changed status, reloading filter policy Sep 19 03:10:13

Re: [pfSense Support] Load balancer problem

2006-09-18 Thread Scott Ullrich
On 9/19/06, Catalin Epure [EMAIL PROTECTED] wrote: v.1 R.C.2 Catalin Please upgrade to http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-09-18-06/ and see if this solves the problems. Thanks! - To unsubscribe, e-mail: [EMAIL

Re: [pfSense Support] traffic shapper: status queues broken as of 9-7 snapshot?

2006-09-14 Thread Scott Ullrich
On 9/14/06, Rob Terhaar [EMAIL PROTECTED] wrote: So the reason why i started to dig into the status screen is because we've started to have issues with the traffic shaper- After about a day, it seems like the traffic shaper falls asleep, which manifests it's self in drop outs on our VOIP

Re: [pfSense Support] IPSEC behind Firewall

2006-09-12 Thread Scott Ullrich
On 9/12/06, Alvaro Pietrobono [EMAIL PROTECTED] wrote: Hi, It's possible to configure a vpn lan-to-lan with ipsec and pfSense behind firewall? I'm trying some different configurations but unsuccessful. Thanx in advance. pfSense does not have nat traversal support for IPSEC. Doubt it will

Re: [pfSense Support] traffic shapper: status queues broken as of 9-7 snapshot?

2006-09-12 Thread Scott Ullrich
On 9/12/06, Rob Terhaar [EMAIL PROTECTED] wrote: I'm not sure if it was due to a reboot, mis-alignment of the planets, or the snapshot, but my queue status page is busted for me in the latest 1.0 snapshots. I'm currently running the 9-10 snapshot, and when i browse to the queue status page, all

Re: [pfSense Support] IPSEC behind Firewall

2006-09-12 Thread Scott Ullrich
On 9/12/06, Alvaro Pietrobono [EMAIL PROTECTED] wrote: I'm sorry Scott, but I don't explained the problem very well. Pfsense is behind a firewall and I'm trying to establish vpn lan-to-lan with an Ipsec compliant (Cisco Concentrator in this case) with a public ip. Few minutes ago I found the

[pfSense Support] More FTP issues

2006-09-09 Thread Scott Ullrich
http://forum.pfsense.org/index.php/topic,2053.0.html - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] pfsense, core-duo support?

2006-09-09 Thread Scott Ullrich
On 9/9/06, Robert Carr [EMAIL PROTECTED] wrote: I realize pfsense isn't SMP-capable, but would it run on a core-duo (or core-solo processor)? Or are these processors totally unsupported for now? I don't see any reason it wouldn't work. But I have to admit that none of the developers have any

[pfSense Support] OpenSSL vulernability - attack on PKCS #1 v1.5 signatures

2006-09-07 Thread Scott Ullrich
Due to the recent OpenSSL issue we strongly advise anyone utilizing OpenSSL (HTTPS, SSH, OpenVPN, etc) to immediately upgrade to the newest snapshot located at http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-09-07-06/ For more information on this issue please visit

Re: RV: [pfSense Support] PPTP server

2006-09-05 Thread Scott Ullrich
On 9/5/06, Nicolas A. Fabris [EMAIL PROTECTED] wrote: Somebody? Thks! -Mensaje original- De: Nicolas A. Fabris [mailto:[EMAIL PROTECTED] Enviado el: lunes, 04 de septiembre de 2006 17:16 Para: support@pfsense.com Asunto: [pfSense Support] PPTP server Hi folks! We are testing PPTP

Re: [pfSense Support] [announce] NYC*BUG Wed Sept 6th (fwd)

2006-09-05 Thread Scott Ullrich
Ike is indeed a excellent speaker. I caught his jails presentation at BSDCan a couple years ago and really enjoyed listening to him speak. He also had a really thought out presentation. Scott On 9/5/06, Charles Sprickman [EMAIL PROTECTED] wrote: Just in case we have any pfsense users in the

<    3   4   5   6   7   8   9   10   11   12   >