[pfSense Support] State Problems

2006-01-26 Thread Lawrence Farr
I'm using pfsense to protect a number of web/mail/ftp servers, which it does fantastically. Since upgrading to the 1.0 Betas it seems to be running out of available states very quickly. I've upped the state table to 2 and it's run out within a few hours. Most of the states seem to be http

Re: [pfSense Support] State Problems

2006-01-26 Thread William Armstrong
Tente utilizar outro micro com freebsd para efetuar esse sincronismo para testar se nao é alguma incompatibilidade com o seu sistema atualmente e instalado 2006/1/26, Lawrence Farr [EMAIL PROTECTED]: I'm using pfsense to protect a number of web/mail/ftp servers, which it does

Re: [pfSense Support] State Problems

2006-01-26 Thread Chris Buechler
Lawrence Farr wrote: I'm using pfsense to protect a number of web/mail/ftp servers, which it does fantastically. Since upgrading to the 1.0 Betas it seems to be running out of available states very quickly. I've upped the state table to 2 and it's run out within a few hours. Most of the

Re: [pfSense Support] State Problems

2006-01-26 Thread Scott Ullrich
On 1/26/06, Chris Buechler [EMAIL PROTECTED] wrote: That kind of looks like a potential DoS or DDoS. That many successive connections from a single host that never get closed should typically never happen on a web server. Looks malicious to me, but I'd be curious to see what others think.

RE: [pfSense Support] State Problems

2006-01-26 Thread Lawrence Farr
-Original Message- From: Chris Buechler [mailto:[EMAIL PROTECTED] Sent: 26 January 2006 17:27 To: support@pfsense.com Subject: Re: [pfSense Support] State Problems Lawrence Farr wrote: I'm using pfsense to protect a number of web/mail/ftp servers, which it does fantastically.

RE: [pfSense Support] State Problems

2006-01-26 Thread Lawrence Farr
Modify the firewall rule for the NAT port forward and utilize some of these features from the advanced section of the rule: * Simultaneous client connection limit * Maximum state entries per host * Maximum new connections / per second Thanks Scott, are there any recommended levels for

Re: [pfSense Support] State Problems

2006-01-26 Thread Scott Ullrich
On 1/26/06, Lawrence Farr [EMAIL PROTECTED] wrote: Thanks Scott, are there any recommended levels for these, or shall I just keep an eye on it and see how I get on? Take an average of your workload of how many states per host average and then set Maximum state entries per host to some number a

[pfSense Support] Help with PPPoE server

2006-01-26 Thread Kido NOAGBODJI
Hello I am very new to pfSense but have been interested in it to set up a pppoe server. I manage to install it. I thought it configured it right. When i launch the connection on a Windows machine, it does the authentication right but when it is suppose the Registering on Network popup wome,

Re: Re: [pfSense Support] IPSec enhancements ??s

2006-01-26 Thread David Strout
Case-in-point -- David L. Strout Engineering Systems Plus, LLC - Original Message - Subject: Re: [pfSense Support] IPSec enhancements ??s From: [EMAIL PROTECTED] To: support@pfsense.com Date: 01-26-2006 3:46 pm On 1/26/06, David Strout [EMAIL PROTECTED] wrote: Then my question

Re: [pfSense Support] IPSec enhancements ??s

2006-01-26 Thread Gary Buckmaster
David, You have to understand that this project is a labor of love and since everyone is doing this as a volunteer basis, adding features that aren't interesting, that up until now, nobody has asked for, especially when they're working very hard to get 1.0 released is pretty unrewarding. It's

Re: Re: [pfSense Support] IPSec enhancements ??s

2006-01-26 Thread Pedro Paulo
Let's stop blaming each other for some missing feature. In the wiki you can create an feature desired list. Pedro Paulo Oliveira Jr [EMAIL PROTECTED] http://www.netfilter.com.br -Original Message- From: David Strout[EMAIL PROTECTED] Sent: 26/1/06 21:50:15 To:

Re: [pfSense Support] IPSec enhancements ??s

2006-01-26 Thread Randy B
Long time listener, first time caller. Bearded, black-wearing, anti-social, White Zombie Otep-listening security professional. I'm not going to quote the precise statement because it's not worth repeating, but it's rather obvious that you're not making much headway with your suggestion

[pfSense Support] Change/Update syslog configuration

2006-01-26 Thread Insik Lee
Hi all, Right now I'm having some issues with networking and I'm trying to track down the problem but the log files are so short that I can't find anything wrong, it might be that there's nothing to find but I need to see for myself. I want to turn off the circular logging and make it permanent