Re: [pfSense Support] Native VLAN Question

2007-02-23 Thread Alan Walters
i would do the latter and leave the parent interface with no ip address

On Thu, 2007-02-22 at 16:12 -0400, Esteban Zarikian wrote:
 Hi, I was wondering, if I'm going to use one NIC for access to 5 VLANs
 through a 802.1q trunk, what is the proper way to access the native
 VLAN in PFSense.
 
 I am using some SRW248G4 linksys switches and they force VLAN1 to be
 present on all trunks, also I don't know where the setting is, but I'm
 pretty sure the native VLAN on these trunks is VLAN1. The native VLAN
 is the VLAN where the trunk port sees frames that come in untagged to
 the Trunk port.
 
 Since I'm using VLAN1, I want to make the Firewall's trunk port so
 that it sees VLANs 1,2,3,10 and 11, but I'm unsure if I should be
 using xl0 (the parent interface to the trunk port) as the port for
 VLAN1 or set up a vlan type interface for VLAN1, that way the two
 options are:
 
 xl0-VLAN1
 vlan0-VLAN2
 vlan1-VLAN3
 vlan2-VLAN10
 vlan3-VLAN11
 
 and the other is
 
 vlan0-VLAN1
 vlan1-VLAN2
 vlan2-VLAN3
 vlan3-VLAN10
 vlan4-VLAN11
 
 Do you have any tips on doing this?
 
 thanks in advance guys!
 
 Regards,
 
 Esteban Zarikian
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 


[pfSense Support] DST 2007-ready?

2007-02-23 Thread LJ Rand

Hi,

How can I tell that my pfsense firewalls are DST 2007-ready?  What to do if 
not?  I am running  1.0.1-SNAPSHOT-01-19-2007.
JR




 

Have a burning question?  
Go to www.Answers.yahoo.com and get answers from real people who know.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] DST 2007-ready?

2007-02-23 Thread Scott Ullrich

Both FreeBSD 6.1 and 6.2 are already ready for this change IIRC.

If you are in doubt, update to this months snapshot which is based on
6.2 and definitely has support for congresses half-brained decision.

Scott


On 2/23/07, LJ Rand [EMAIL PROTECTED] wrote:


Hi,

How can I tell that my pfsense firewalls are DST 2007-ready?  What to do if 
not?  I am running  1.0.1-SNAPSHOT-01-19-2007.
JR






Have a burning question?
Go to www.Answers.yahoo.com and get answers from real people who know.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Squid missmatch parsing config

2007-02-23 Thread William Armstrong

Was looking at the rules that webgui makes and verified an
imperfection in the positioning of the rules of cache_mem, cache_dir
and cache_replacement_policy heap , memory_replacement_policy .


cache_dir diskd /var/squid/cache 4000 16 256
cache_mem 8 MB

maximum_object_size 5 KB
minimum_object_size 0 KB

cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF

in these positions squid first reads the directive of cache_dir and
the cache_mem  placed for use of squid.
However squid reads this and assumes policing DEFAULT LRU. And ignores
the variables of control

cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF

that the directive are defined in the configuration after cache_dir
and cache_mem.

I verified this with the command.

# squidclient mgr:storedir
HTTP/1.0 200 OK
Server: squid/2.6.STABLE5
Date: Sat, 24 Feb 2007 00:50:36 GMT
Content-Type: text/plain
Expires: Sat, 24 Feb 2007 00:50:36 GMT
Last-Modified: Sat, 24 Feb 2007 00:50:36 GMT
X-Cache: MISS from cerberus.biosystems.ath.cx
Via: 1.0 cerberus.biosystems.ath.cx:3128 (squid/2.6.STABLE5)
Proxy-Connection: close

Store Directory Statistics:
Store Entries  : 6745
Maximum Swap Size  :  4096000 KB
Current Store Swap Size:   132968 KB
Current Capacity   : 3% used, 97% free

Store Directory #0 (diskd): /var/squid/cache
FS Block Size 2048 Bytes
First level subdirectories: 16
Second level subdirectories: 256
Maximum Size: 4096000 KB
Current Size: 132968 KB
Percent Used: 3.25%
Current load metric: 100 / 1000
Filemap bits in use: 6718 of 16384 (41%)
Filesystem Space in use: 142272/9430356 KB (2%)
Filesystem Inodes in use: 10833/1224702 (1%)
Flags: SELECTED
Pending operations: 0
Removal policy: lru
LRU reference age: 11.06 days


Now I manually modified squid.conf and modified the position of the
rules and it's work OK unless you it makes a reboot.

cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF

cache_dir diskd /var/squid/cache 4000 16 256
cache_mem 8 MB

maximum_object_size 5 KB
minimum_object_size 0 KB

# squidclient mgr:storedir
HTTP/1.0 200 OK
Server: squid/2.6.STABLE5
Date: Sat, 24 Feb 2007 00:53:47 GMT
Content-Type: text/plain
Expires: Sat, 24 Feb 2007 00:53:47 GMT
Last-Modified: Sat, 24 Feb 2007 00:53:47 GMT
X-Cache: MISS from cerberus.biosystems.ath.cx
Via: 1.0 cerberus.biosystems.ath.cx:3128 (squid/2.6.STABLE5)
Proxy-Connection: close

Store Directory Statistics:
Store Entries  : 6745
Maximum Swap Size  :  4096000 KB
Current Store Swap Size:   132968 KB
Current Capacity   : 3% used, 97% free

Store Directory #0 (diskd): /var/squid/cache
FS Block Size 2048 Bytes
First level subdirectories: 16
Second level subdirectories: 256
Maximum Size: 4096000 KB
Current Size: 132968 KB
Percent Used: 3.25%
Current load metric: 100 / 1000
Filemap bits in use: 6718 of 16384 (41%)
Filesystem Space in use: 142272/9430356 KB (2%)
Filesystem Inodes in use: 10833/1224702 (1%)
Flags:
Pending operations: 0
Removal policy: heap



--
- = - = - = - = - = - = - = - = - = -
.  Of course it runs William David Armstrong
|==   Bio Systems Security Networking
' NetBSD, OpenBSD or FreeBSD MSN / GT  biosystems  gmail . com
--

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]