Re: [pfSense Support] openvpn: client side uses address pool ip rather than subnet ip

2011-01-20 Thread Scott Ullrich
On Thu, Jan 20, 2011 at 4:09 PM, mayak-cq ma...@australsat.com wrote: My Lord, You're a genius! Nuking the the interface declaration solves it!! Intermediate solution yes, but a solution nonetheless! Amen! Scott - To

Re: HA: Re: HA: Re: [pfSense Support] 2.0 - don't work Ipsec!

2010-12-15 Thread Scott Ullrich
On Wed, Dec 15, 2010 at 12:11 PM, Moshe Katz mo...@ymkatz.net wrote: And the other side of the coin: http://bsd.slashdot.org/story/10/12/15/1524202/BSD-Coder-Denies-Adding-FBI-Backdoor Moshe Here is more information on this situation.

Re: [pfSense Support] Snapshot Build Logs

2010-12-15 Thread Scott Ullrich
On Wed, Dec 15, 2010 at 2:33 PM, Yehuda Katz yeh...@ymkatz.net wrote: Is there a reason the i386 build log uses EST and the AMD64 log uses UTC? - Yehuda Is there a reason? No. I just fixed it, however. In this day and age a lot of us have gotten used to GMT and didn't even think twice about

Re: [pfSense Support] SSD partition alignment in 2.0

2010-08-16 Thread Scott Ullrich
On Sat, Aug 7, 2010 at 1:07 PM, David Burgess apt@gmail.com wrote: Is the 2.0 installer aware of 4k sector discs, and does it align its partitions accordingly? I realize better SSD controllers have minimized the effects of partition boundary misalignment, but I still prefer to introduce

Re: [pfSense Support] SSD partition alignment in 2.0

2010-08-16 Thread Scott Ullrich
On Mon, Aug 16, 2010 at 2:03 PM, Scott Ullrich sullr...@gmail.com wrote: That is a good question.   The 2.0 installer uses pc-sysinstaller which I am not entirely sure if it takes into account this or not. Sorry, I meant 2.1 here, not 2.0. However I am looking at adding this utility to the pc

Re: [pfSense Support] no packages for 2.0

2010-04-19 Thread Scott Ullrich
On Mon, Apr 19, 2010 at 3:31 PM, David Burgess apt@gmail.com wrote: On Mon, Apr 19, 2010 at 1:29 PM, Jim Pingle li...@pingle.org wrote: It's probably looking for a package file that doesn't exist. Did this ever work before? It's the first time I've tried PFS on 64-bit. I'm not sure

Re: [pfSense Support] 1.2.3: dnsmasq and mac os x 10.6 snow leopard

2010-03-01 Thread Scott Ullrich
On Mon, Mar 1, 2010 at 2:38 AM, Aarno Aukia aarnoau...@gmail.com wrote: Hello, I just found out my new mac os x 10.6 snow leopard machine seems to have problems with DNS TTL 0, dnsmasqs default TTL for local entries

Re: [pfSense Support] 1.2 to 1.2.3 upgrade

2010-02-19 Thread Scott Ullrich
On Fri, Feb 19, 2010 at 10:01 AM, lloyd.aloys...@sunteltech.ca wrote: Please call me 416 479 0606 Pardon us but who is supposed to call you? Scott

Re: [pfSense Support] How to forward protocol 41

2010-02-11 Thread Scott Ullrich
On Thu, Feb 11, 2010 at 8:37 PM, Nathan Eisenberg nat...@atlasnetworks.us wrote: I'd argue that it is the role of the user to advocate for desired features, regardless of what price was paid for the software.  The fact that IPv6 support doesn't seem to be finished yet is an issue that gains

Re: [pfSense Support] OpenBGPd package on 1.2.3-release

2010-01-31 Thread Scott Ullrich
On Fri, Jan 29, 2010 at 11:03 AM, Aarno Aukia aarnoau...@gmail.com wrote: Thanks for committing, Committed. Thanks for submitting. Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands,

Re: [pfSense Support] OpenBGPd package on 1.2.3-release

2010-01-28 Thread Scott Ullrich
On Thu, Jan 28, 2010 at 10:57 AM, Aarno Aukia aarnoau...@gmail.com wrote: Hello, bgpd is started twice when booting on 1.2.3-release with the newest package. I suspect once from /usr/local/pkg/openbgpd.inc and once from /usr/local/etc/rc.d/bgpd.sh ? When commenting out the exec(bgpd) in

Re: [pfSense Support] 1:1 NAT - bind actual external IP to an optional interface?

2010-01-09 Thread Scott Ullrich
On Sat, Jan 9, 2010 at 5:39 PM, Chris Buechler cbuech...@gmail.com wrote: Yes but: http://forum.pfsense.org/index.php/topic,21606.0.html That and the fact that our snapshot server is up and down (currently DOWN) due to bad hardware. It will be swapped out in the next coming days. Scott

Re: [pfSense Support] which image?

2010-01-05 Thread Scott Ullrich
On Tue, Jan 5, 2010 at 11:02 AM, David Newman dnew...@networktest.com wrote: Greetings. I'd welcome recommendations for which pfSense image to install on this system, which currently runs OpenBSD: Nexcom 1563 VIA 667-MHz CPU 512 Mbytes RAM 512-Mbyte disk-on-chip (not CF) storage 3 x

[pfSense Support] Watch Chris and myself on FLOSS Weekly Live at 4:30 PM EDT

2009-12-16 Thread Scott Ullrich
http://live.twit.tv Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

Re: [pfSense Support] Virtual IP ProxyARP vs. CARP

2009-12-16 Thread Scott Ullrich
On Wed, Dec 16, 2009 at 7:14 PM, Trevor Benson tben...@a-1networks.com wrote: I noticed that when creating a CARP virtual that it requires it to be attached to an interface with the same network.  However when creating a proxy arp, it does not have this requirement.  Wouldn't it be logical to

Re: [pfSense Support] NanoBSD on WRAP

2009-12-14 Thread Scott Ullrich
On Sun, Dec 13, 2009 at 7:49 PM, Ugo Bellavance u...@lubik.ca wrote: Hi, http://doc.pfsense.org/index.php/NanoBSD_on_WRAP Has someone done the first step what would be kind enough to put the resulting image available for download?  I worked a few hours on this before discovering that

Re: [pfSense Support] Disable plugin via ssh

2009-12-14 Thread Scott Ullrich
On Mon, Dec 14, 2009 at 4:07 PM, Glenn Kelley gl...@typo3usa.com wrote: We have a plugin that is acting up quite a bit suddenly (snort) on reboot the system works for a few minutes - but then nothing We cannot gain access to the web interface @ all. Does anyone know how to disable a plugin

Re: [pfSense Support] OpenBGPD status page

2009-12-12 Thread Scott Ullrich
On Fri, Dec 11, 2009 at 7:26 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: I know it is cosmetic but it is easy to fix, please do it. 1) Status has two OpenBGPD Routing sections, one of them should be renamed to Forwarding as it shows fib not rib. 2) OpenBGPD IP section returns error

Re: [pfSense Support] pfSense 1.2.3 release now available!

2009-12-11 Thread Scott Ullrich
On Fri, Dec 11, 2009 at 1:22 PM, Oliver Hansen oliver.han...@gmail.com wrote: Sorry if I'm missing it somewhere but is there a changelog between 1.2.3-RC3 and 1.2.3-RELEASE? The notes in the blog post seem to reference anything that changed since 1.2.2. Complete list of changes is here:

Re: [pfSense Support] 1.2.3-RC3 PPPoE

2009-12-10 Thread Scott Ullrich
On Thu, Dec 10, 2009 at 1:21 PM, RB aoz@gmail.com wrote: On Thu, Dec 10, 2009 at 10:29, Tim Dressel tjdres...@gmail.com wrote: For me the issue was exactly like you are describing. Can connect and everything appears OK, but just zero traffic flow. Nothing useful in logs. Then all of a

Re: [pfSense Support] 1.2.3-RC3 PPPoE

2009-12-10 Thread Scott Ullrich
On Thu, Dec 10, 2009 at 6:54 PM, RB aoz@gmail.com wrote: Well, for posterity's sake then: if you have trouble in pfSense/FreeBSD with traffic not passing through an Intel 10/100 NIC (fxp), particularly when return/inbound packets aren't showing up in mpd or another user-level program, turn

Re: [pfSense Support] Issue upgrading from 1.2.3-RC3 to RELEASE

2009-12-10 Thread Scott Ullrich
On Thu, Dec 10, 2009 at 7:04 PM, mitch mitche...@gmail.com wrote: Same error I'm afraid, status at top says something went wrong updating the fstab entry, Log still reports same error message. Please see my response here: http://forum.pfsense.org/index.php/topic,20347.msg108712.html#msg108712

Re: [pfSense Support] Issue upgrading from 1.2.3-RC3 to RELEASE

2009-12-10 Thread Scott Ullrich
On Thu, Dec 10, 2009 at 7:12 PM, Chris Buechler cbuech...@gmail.com wrote: I don't believe there were any changes between RC3 and release though?  It's been a while since the image size changed. Yes, there where a couple NanoBSD fixes. One in particular was on Thu Sep 10 18:50:55 2009 -0400

Re: [pfSense Support] Re: PFsense + Load Balance + Squid

2009-12-04 Thread Scott Ullrich
On Fri, Dec 4, 2009 at 3:58 PM, Rafael Cristian rcristia...@gmail.com wrote: Thank you. But is version 2.0 now is available Yes, but it is alpha-alpha (soon to be alpha): http://snapshots.pfsense.org/ Scott - To

Re: [pfSense Support] PFSense advocacy

2009-12-02 Thread Scott Ullrich
On Wed, Dec 2, 2009 at 4:26 PM, Ron García-Vidal r...@millburncorp.com wrote: I realize this is a support forum, so if there is a better place to post this, I will take it there. So, I'm trying to get a pfsense box in the shop because I've enjoyed working with it on my own setup.  The boss is

Re: [pfSense Support] Migrate from Embedded

2009-11-24 Thread Scott Ullrich
On Tue, Nov 24, 2009 at 6:59 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: I have a machine that was setup as embedded but now we need packages functional so I need to migrate it to install based. Given it's the very same server, can I simply restore the xml config from the embedded

Re: [pfSense Support] throughput, haproxy

2009-11-21 Thread Scott Ullrich
On Sat, Nov 21, 2009 at 6:12 AM, Lenny five2one.le...@gmail.com wrote: Scott, Does it have to be 1.2.3? Because I have 1.2.2 installed right now. Should I upgrade before that? yes, we are moving on to 1.2.3 shortly and 1.2.2 is fading into the sunset. Scott

Re: [pfSense Support] throughput, haproxy

2009-11-19 Thread Scott Ullrich
On Thu, Nov 19, 2009 at 2:27 AM, Lenny five2one.le...@gmail.com wrote: # iperf -c 2.2.2.11 -t 1200 -i 10 -w 75000 Client connecting to 2.2.2.11, TCP port 5001 TCP window size: 73.5 KByte (WARNING: requested 73.2 KByte)

Re: [pfSense Support] throughput, haproxy

2009-11-19 Thread Scott Ullrich
On Thu, Nov 19, 2009 at 12:07 PM, Lenny five2one.le...@gmail.com wrote: I sure would. Thanks. OK, give me a bit to get it ready. Should be back to you in a couple hours. Scott - To unsubscribe, e-mail:

Re: [pfSense Support] throughput, haproxy

2009-11-19 Thread Scott Ullrich
On Thu, Nov 19, 2009 at 12:35 PM, Scott Ullrich sullr...@gmail.com wrote: OK, give me a bit to get it ready.   Should be back to you in a couple hours. Lenny, First of all make sure you backup your configuration and have installation media handy (just in case). Run this from a shell (option 8

Re: [pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread Scott Ullrich
On Thu, Nov 12, 2009 at 6:08 PM, luismi asturlui...@gmail.com wrote: As far as I see right now in the web: live support is offline Looks online here: https://portal.pfsense.org/ Scott - To unsubscribe, e-mail:

Re: [pfSense Support] PFI w/ floppy

2009-11-12 Thread Scott Ullrich
On Thu, Nov 12, 2009 at 7:34 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: Does the PFI work with a floppy? I tried it, but saw  a read error for the floppy but I am sure there is nothing wrong with the floppy, is it just not supported? It should work if it is formatted as MS-DOS. Or

Re: [pfSense Support] varnish proxy in pfsense?

2009-11-11 Thread Scott Ullrich
On Wed, Nov 11, 2009 at 9:57 AM, Paul Mansfield it-admin-pfse...@taptu.com wrote: I'd be very interested if there was a project to add varnish reverse proxy to pfsense. It claims to be both linux and freebsd compatible. http://varnish.projects.linpro.no/ One could of course hack it in

Re: [pfSense Support] varnish proxy in pfsense?

2009-11-11 Thread Scott Ullrich
On Wed, Nov 11, 2009 at 10:21 AM, Rainer Duffner rai...@ultra-secure.de wrote: varnish also works in 32bit FreeBSD. At least for test-purposes, it did for me. You have to limit the amount of RAM it grabs, though, or it will crash immediately. Even with enough memory it can cause a deadlock on

Re: [pfSense Support] throughput, haproxy

2009-11-10 Thread Scott Ullrich
On Tue, Nov 10, 2009 at 1:50 AM, Lenny five2one.le...@gmail.com wrote: At second thought, to get rid of the errors I told you about, I did 2 things: added this to /boot/loader.conf: hw.em.rxd=4096 hw.em.txd=4096 and added to /etc/sysctl.conf: dev.em.0.rx_processing_limit=1000

Re: [pfSense Support] throughput, haproxy

2009-11-10 Thread Scott Ullrich
On Tue, Nov 10, 2009 at 1:50 AM, Lenny five2one.le...@gmail.com wrote: Lenny wrote: Scott Ullrich wrote: On Mon, Nov 9, 2009 at 3:45 PM, Scott Ullrich sullr...@gmail.com wrote: Contact me off list.  I have a kernel I need you to test. In the meantime, please try increasing

Re: [pfSense Support] throughput, haproxy

2009-11-09 Thread Scott Ullrich
On Mon, Nov 9, 2009 at 12:41 AM, Lenny five2one.le...@gmail.com wrote: Now I'm totally lost:( I had this long thread this year on this issue here and eventually the only thing the guys could advise me is to buy a newer server. I did.  And while I do see an improvement in performance (it's

Re: [pfSense Support] throughput, haproxy

2009-11-09 Thread Scott Ullrich
On Mon, Nov 9, 2009 at 3:45 PM, Scott Ullrich sullr...@gmail.com wrote: Contact me off list.  I have a kernel I need you to test. In the meantime, please try increasing these sysctl's: pfSense:~# sysctl -a | grep rx_processing_limit dev.em.0.rx_processing_limit: 100 dev.em.1

Re: [pfSense Support] snort issue w/ memory

2009-11-08 Thread Scott Ullrich
On Sat, Nov 7, 2009 at 9:53 PM, Glenn Kelley gl...@typo3usa.com wrote: No such luck Scott - if it helps - you guys had us (via paid support) upgrade to the rc version due to BGP implementation Thanks, I will forward this to the snort maintainer. Maybe he can help. Scott

Re: [pfSense Support] snort issue w/ memory

2009-11-08 Thread Scott Ullrich
On Sat, Nov 7, 2009 at 9:53 PM, Glenn Kelley gl...@typo3usa.com wrote: No such luck Scott - if it helps - you guys had us (via paid support) upgrade to the rc version due to BGP implementation BTW: did the error message change after reinstalling the package with my changes? Scott

Re: [pfSense Support] snort issue w/ memory

2009-11-08 Thread Scott Ullrich
On Sun, Nov 8, 2009 at 5:39 PM, Glenn Kelley gl...@typo3usa.com wrote: Any clue how to remove an ip that is blocked w/o having the gui ? We uninstalled but still have some IP's blocked - Reinstalled - same thing Try /usr/local/sbin/expiretable -v -t 1 virusprot Scott

Re: [pfSense Support] snort issue w/ memory

2009-11-07 Thread Scott Ullrich
On Fri, Nov 6, 2009 at 10:57 PM, Glenn Kelley gl...@typo3usa.com wrote: Grace and Peace Friends: In Snort we are seeing the following: Fatal error: Allowed memory size of 33554432 bytes exhausted (tried to allocate 74957108 bytes) in /usr/local/pkg/snort.inc on line 1488 When we attempt to

Re: [pfSense Support] why delete captive portal accts on expiry?

2009-10-09 Thread Scott Ullrich
On Fri, Oct 9, 2009 at 1:23 PM, Pete Boyd petes-li...@thegoldenear.org wrote: Why are captive portal accounts automatically deleted when they expire? To my mind, it would be more useful if they were left in place, but expired, so that to re-enable them for the admin person was an easy task of

Re: [pfSense Support] Re: Static routes

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 11:13 AM, Aarno Aukia aarnoau...@gmail.com wrote: Replying to myself, sorry. On Thu, Oct 8, 2009 at 16:21, Aarno Aukia aarnoau...@gmail.com wrote: I would propose to compare the old {$g['vardb_path']}/routes.db to the current set of configured static routes and route

Re: [pfSense Support] CARP switchover to backup because of high traffic

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 11:24 AM, Evgeny Yurchenko evg.yu...@rogers.com wrote: Yesterday it happened twice on one of my production firewalls. CPU load was less than 10%. Did not pay attention at the moment but accoring to RRD number of states was not unusual - 4-5k. I reproduced it in my lab -

Re: [pfSense Support] CARP switchover to backup because of high traffic

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 11:42 AM, Evgeny Yurchenko evg.yu...@rogers.com wrote: Thanks I will. 20 Mbit/s is nothing though... I agree but you failed to mention how much traffic you are pushing. Scott - To unsubscribe, e-mail:

Re: [pfSense Support] CARP switchover to backup because of high traffic

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 12:51 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: Yes, sorry. It was about 100Mb/s During heavy load what does this sysctl show? sysctl net.inet.ip.intr_queue_drops Scott - To unsubscribe, e-mail:

Re: [pfSense Support] Block rule creates syntax error

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 6:58 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: I all of a sudden am getting syntax errors in the logs which I don't recall seeing before with respect to a few generic block rules I have on an opt interface. Action: Reject Interface: OPT2 Protocol: Any

Re: [pfSense Support] Strange DNS problem

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 9:00 PM, Philippe LeCavalier supp...@plecavalier.com wrote: Hi Everyone, As of late, pfsense somehow maps dns entries intended for remote hosts to my local samba server. When I try to SSH to a clients network I'm logged into my office file server. I'm not sure what

Re: [pfSense Support] Problem with apinger

2009-10-06 Thread Scott Ullrich
On Tue, Oct 6, 2009 at 9:41 AM, Matthias Niggemeier m...@thias.de wrote: Any news on this topic? It takes 2-12 hours for my load balancer pools to go offline; unfortunately I cannot go back to 1.2.2 since some VoIP connections do not work with 1.2.2. Is there a URL that can be geted

Re: [pfSense Support] pfSense and SpamD

2009-10-06 Thread Scott Ullrich
On Tue, Oct 6, 2009 at 1:32 PM, Fabian Abplanalp fabian.abplan...@bug.ch wrote: Is this in any way changeable? If it's a configfile or so... Unfortunately it is not. I will look into what is required to change once I catch up on a few other outstanding projects. Scott

Re: [pfSense Support] pfSense and SpamD

2009-10-05 Thread Scott Ullrich
On Mon, Oct 5, 2009 at 7:16 AM, Fabian Abplanalp fabian.abplan...@bug.ch wrote: Hi I'm trying to setup pfSense with SpamD (Greylisting and tarpit). In the first setup with the real Mailserver behind the NAT it works perfectly, but if I setup the forwarding to a server with a public IP no

Re: [pfSense Support] Pfsense 1.2.3 alix 2d13 IDE disk installation problem

2009-10-05 Thread Scott Ullrich
On Mon, Oct 5, 2009 at 11:19 AM, ozan ucar m...@ozanucar.com wrote: to abandon. Install pfsense embedded image on 4 GB CF disk, how to i resize image. I search script for 4 GB resize image , can you send me CF disk resize ( 4 GB ) script ?

Re: [pfSense Support] One check-box is missing in Rules-Edit-Advanced of 1.2.3-RC3 snapshot

2009-09-30 Thread Scott Ullrich
On Wed, Sep 30, 2009 at 5:21 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: May I send you screenshot? It will not do any good. I just downloaded 1.2.2 from: ftp://reflection.ncsa.uiuc.edu/pub/pfSense/updates/pfSense-Full-Update-1.2.2.tgz [su:~/Desktop/pfSense-Full-Update-1.2.2] sullrich%

Re: [pfSense Support] One check-box is missing in Rules-Edit-Advanced of 1.2.3-RC3 snapshot

2009-09-30 Thread Scott Ullrich
On Wed, Sep 30, 2009 at 5:27 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: Well, I am sorry for confusion... but could you please confirm that this is from 2.0 filter.inc, starting at line 1961:                       if ($type == pass) {                               if

Re: [pfSense Support] 1.2.3-RC2 IPSec SPD is not updated if you disable IPSec tunnel

2009-09-25 Thread Scott Ullrich
On Fri, Sep 25, 2009 at 10:39 AM, Evgeny Yurchenko evg.yu...@rogers.com wrote: Hi all! probably it is fixed in the latest snapshots but in 1.2.3-RC2 built on Mon Aug 31 06:09:28 UTC 2009 it is a problem. If you disable IPSec tunnel SPD entries for this tunnel are not removed. I was struck by

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Scott Ullrich
On Tue, Sep 22, 2009 at 12:32 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: I know it looks stupid, but... 1.2.3-RC1 LAN=10.29.1.19/24 WAN(PPPoE)=x.x.x.106 remote LAN=10.29.11.1/24 remote WAN=x.x.x.225 Tunnel is up. When I do from pfSense itself ping -S 10.29.1.19 10.29.11.1

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Scott Ullrich
On Tue, Sep 22, 2009 at 12:39 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: So, it is impossible to use IPSec with PPPoE on WAN? Eugene That would be news to me. It should work fine. Scott - To unsubscribe, e-mail:

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Scott Ullrich
On Tue, Sep 22, 2009 at 12:46 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: Then sorry Scott, I do not understand your statement: Traffic on the firewall itself prefers the system routing table.  Clients behind the firewall will prefer the IPSEC tunnel. In my case traffic initiated on the

Re: [pfSense Support] Quad NIC's?

2009-09-22 Thread Scott Ullrich
On Tue, Sep 22, 2009 at 8:26 PM, Luke Jaeger ad...@pvpa.org wrote: Hello, Are there any known issues with quad NIC cards on a pfSense box? I'm looking at a Proliant DL360 G3 with an Intel Pro 1000 GT Quad Port adapter

Re: [pfSense Support] Is pfsense.org down?

2009-09-19 Thread Scott Ullrich
On Sat, Sep 19, 2009 at 2:58 PM, Jostein Elvaker Haande jehaa...@gmail.com wrote: http://downforeveryoneorjustme.com/pfsense.org Sorry folks. Our datacenter had a power blip and our UPS battery has died. One of our switches did not reset correctly after the blip. We have moved one of our

Re: [pfSense Support] Crazy Session State requirement

2009-09-18 Thread Scott Ullrich
On Fri, Sep 18, 2009 at 1:26 PM, Ermal Luçi ermal.l...@gmail.com wrote: Activate sticky option on 1.2.3-RC* installations. http://snapshots.pfsense.org has the RC3 file. Scott - To unsubscribe, e-mail:

Re: SV: [pfSense Support] Running out of memory

2009-09-16 Thread Scott Ullrich
On Wed, Sep 16, 2009 at 11:42 AM, Oliver Hansen oliver.han...@gmail.com wrote: a_subscribti...@fiberby.dk wrote: That immediately reduced the memory use from 50% -22% But as you state, it doesn't solve the underlying problem. Thanks, I just committed a change to prevent this from being a

Re: [pfSense Support] Help with physdiskwrite

2009-09-02 Thread Scott Ullrich
On Wed, Sep 2, 2009 at 2:46 PM, Victor Padrovpa...@gmail.com wrote: Hello everyone! I wonder if someone could send me the physdiskwrite EXE, because I can't access to the m0n0.ch website, I don't know if it's down or what is wrong with it, and I am in the middle of a embeded Pfsense install

Re: [pfSense Support] Problems with installation Developers-2.0

2009-09-02 Thread Scott Ullrich
On Wed, Sep 2, 2009 at 4:38 PM, Evgeny Yurchenkoevg.yu...@rogers.com wrote: Trying to install from pfSense-Developers-2.0-ALPHA-ALPHA-20090901-1924.iso on HP DL380 G4. MD5 is correct. Tried to burn another CD. Tried to install it in VMWare - result is the same. I see lots of errors like: ...

Re: [pfSense Support] IGMPproxy and Router Alert option

2009-09-01 Thread Scott Ullrich
On Tue, Sep 1, 2009 at 1:05 AM, Evgeny Yurchenkoevg.yu...@rogers.com wrote: This is again about igmpproxy. As I mentioned earlier to be RFC compliant (RFC 2236 IGMP V2 and 3376 IGMP V3) we must send IGMP packets with Router Alert in IP header (RFC 2113). It is very easy to code but a problem

Re: [pfSense Support] IGMPproxy and Router Alert option

2009-09-01 Thread Scott Ullrich
On Tue, Sep 1, 2009 at 12:13 PM, Evgeny Yurchenkoevg.yu...@rogers.com wrote: If I were to work on it should I install http://snapshots.pfsense.org/FreeBSD_RELENG_7_2/pfSense_HEAD/livecd_installer/pfSense-Developers-2.0-ALPHA-ALPHA-20090831-1029.iso.gz ? As I understand changes would be done in

Re: [pfSense Support] Load Balancing on vlans

2009-08-27 Thread Scott Ullrich
On Thu, Aug 27, 2009 at 11:05 AM, Jesse Vollmarvollm...@gmail.com wrote: I tried again this morning to change the allow rule on a vlan interface to send traffic out on a gateway other than default and after about five minutes of working like it should, all traffic stopped. Hosts on that vlan

Re: [pfSense Support] Ticket #1931: NAT reflection bug

2009-08-27 Thread Scott Ullrich
On Thu, Aug 27, 2009 at 2:15 PM, David Reesdree...@gmail.com wrote: I've recently run into the issue described on ticket #1931 and on the forum thread below: http://cvstrac.pfsense.org/tktview?tn=1931 http://forum.pfsense.org/index.php/topic,16314.0.html Even though we only have about 200

Re: [pfSense Support] 1.2.3-RC1-embedded dhcp relay windows XP broadcast flag

2009-08-26 Thread Scott Ullrich
On Wed, Aug 26, 2009 at 11:28 AM, Chris Kleeschultechris.kleeschu...@it.libertydistribution.com wrote: I can dhcp relay all my hosts except for Windows-based hosts. I narrowed the problem down to the Windows machine setting the broadcast flag on the dhcp initial request. I also know that

Re: [pfSense Support] Routing Between VLANs

2009-08-26 Thread Scott Ullrich
On Wed, Aug 26, 2009 at 9:29 PM, Jesse Vollmarvollm...@gmail.com wrote: Okay I deleted that vlan and now there is a system error and the web gui doesn't work. I'm on my phone now (no internet from pfsense). The error is xml error: opt cannot occur more than once. I opened a shell and then

Re: [pfSense Support] IGMP packet out of WAN

2009-08-23 Thread Scott Ullrich
On Sun, Aug 23, 2009 at 9:23 PM, Evgeny Yurchenkoevg.yu...@rogers.com wrote: Gentlemen, Please take a look at http://forum.pfsense.org/index.php/topic,16943.15.html last post from the6thday. It seems after reinstalling igmpproxy package he still has old version (which does not have this

Re: [pfSense Support] tcsh problem

2009-08-22 Thread Scott Ullrich
On Sat, Aug 22, 2009 at 3:02 PM, Zhu Sha Zangzhushaz...@yahoo.com.br wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, what this problem? Enter an option: 8 tcsh: Cannot open /etc/termcap. tcsh: using dumb terminal settings. # I don't change nothing, and this message

Re: [pfSense Support] IGMP packet out of WAN

2009-08-21 Thread Scott Ullrich
On Fri, Aug 21, 2009 at 3:41 AM, Ermal Luçiermal.l...@gmail.com wrote: Send a merge request to mainline. If you do not succeed i will merge it manually. Item has been merged. Thanks! Scott - To unsubscribe, e-mail:

Re: [pfSense Support] Triple CARP setup

2009-08-18 Thread Scott Ullrich
On Tue, Aug 18, 2009 at 10:28 AM, Veiko Kukkveiko.k...@krediidipank.ee wrote: How should I configure pfsync if I want to use three machines? ## Synchronize to IP Enter the IP address of the firewall you are synchronizing with. ## Should I list there all IP-s I want to sync to? Separated by

Re: [pfSense Support] OpenBGPD package: impossible to edit group in use but it can easily be deleted

2009-08-16 Thread Scott Ullrich
On Sat, Aug 15, 2009 at 7:32 PM, Evgeny Yurchenkoevg.yu...@rogers.com wrote: 1) When a BGP group is in use it is impossible to modify group's parameters. Click 'Save' gives you Sorry this group is in use... and can not be deleted Probably it is intended behavior but then we have to change the

Re: [pfSense Support] OpenBGPD package: excessive } if if neighbor does not belong to a group

2009-08-16 Thread Scott Ullrich
On Sun, Aug 16, 2009 at 1:18 AM, Evgeny Yurchenkoevg.yu...@rogers.com wrote: Again me -((( found one more bug in OpenBGPD. When you add/modify neighbor which does not belong to any group you get excessive } in bgpd.conf after neighbor{} block. # diff -rub openbgpd.inc.20090816.bak

Re: [pfSense Support] Small remarks about OpenBGPD packaget

2009-08-15 Thread Scott Ullrich
On Sat, Aug 15, 2009 at 11:15 AM, Evgeny Yurchenkoevg.yu...@rogers.com wrote: I do not know why but your commit put my piece of code in slightly wrong place (1 line higher than needed). Please correct this. Thanks. [snip] Fixed, thanks!

Re: [pfSense Support] IGMP packet out of WAN

2009-08-12 Thread Scott Ullrich
On Tue, Aug 11, 2009 at 8:02 PM, Evgeny Yurchenkoevg.yu...@rogers.com wrote: cd /usr/ports/devel/git make install -- Ends with === Configuring for git-1.6.4 === Building for git-1.6.4 GIT_VERSION = 1.6.4 * new build flags or prefix ... many compilations here ...

Re: [pfSense Support] IGMP packet out of WAN

2009-08-12 Thread Scott Ullrich
On Wed, Aug 12, 2009 at 10:57 AM, Scott Ullrichsullr...@gmail.com wrote: On Tue, Aug 11, 2009 at 8:02 PM, Evgeny Yurchenkoevg.yu...@rogers.com wrote: cd /usr/ports/devel/git make install -- Ends with ===  Configuring for git-1.6.4 ===  Building for git-1.6.4 GIT_VERSION = 1.6.4     * new

Re: [pfSense Support] 1.2.3-RC1 Web gui logout

2009-08-12 Thread Scott Ullrich
On Wed, Aug 12, 2009 at 1:10 PM, David Burgessapt@gmail.com wrote: You could use a different browser for pfsense. It's an inconvenience, but probably more convenient than closing all your tabs. Install the Web Developer Toolbar for firefox and then select Miscellaneous - Clear Private Data

Re: [pfSense Support] IGMP packet out of WAN

2009-08-11 Thread Scott Ullrich
On Tue, Aug 11, 2009 at 8:16 AM, Evgeny Yurchenkoevg.yu...@rogers.com wrote: All my production boxes are 1.2-release so FreeBSD 6.2. But I am planning to move to the latest 1.2.3 and I will do it as soon as I find out why my HPs hung during high load with 1.2.3-RC1. To answer your question -

Re: [pfSense Support] Kernelbug on Triple Core Processor

2009-08-08 Thread Scott Ullrich
On Sat, Aug 8, 2009 at 2:56 PM, Walter Kuglere9126...@student.tuwien.ac.at wrote: Hello! About myself: I have no great knowledge about FreeBSD. I use mostly the WebGUI of pfSense, but i have some years experience on Debian GNU/Linux, including building a custom kernel. My Problem: I have

Re: [pfSense Support] Small remarks about OpenBGPD packaget

2009-08-06 Thread Scott Ullrich
On Thu, Aug 6, 2009 at 10:48 AM, Evgeny Yurchenkoevg.yu...@rogers.com wrote: I'll ask very trivial question but please bear with me as I am new here. What does 'commited this' mean? Does it mean that it is in

Re: [pfSense Support] Small remarks about OpenBGPD packaget

2009-08-05 Thread Scott Ullrich
On Wed, Aug 5, 2009 at 12:35 AM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: Hi! 1) I find it a little bit inconvenient that you can not add a neighbor when you do not have any group configured. Suppose I want to add just two neighbors without messing with groups set up. This small

Re: [pfSense Support] Problem with apinger

2009-08-04 Thread Scott Ullrich
On Tue, Aug 4, 2009 at 10:56 AM, Matthias Niggemeierm...@thias.de wrote: Von: Matthias Niggemeier [mailto:m...@thias.de] Gesendet: Dienstag, 4. August 2009 08:47 An: support@pfsense.com Betreff: [pfSense Support] Problem with apinger Hi there, since the upgrade to 1.2.3-RC2 (July 23) parts

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-30 Thread Scott Ullrich
On Thu, Jul 30, 2009 at 8:21 AM, Eugen Leitleu...@leitl.org wrote: On Thu, Jul 30, 2009 at 02:08:38PM +0300, Veiko Kukk wrote: This is a good example, why bottom-posting sucks... God gracious help us. What's wrong with interleaved posting? Why do i need to scroll past all previous teks i

Re: [pfSense Support] BGP status

2009-07-30 Thread Scott Ullrich
On Thu, Jul 30, 2009 at 2:19 PM, Chris Flugstadch...@cascadelink.com wrote: Any word on BGP status.  or a simple alternative, until pfsense has BGP function? BGP has existed in system - packages for 2+ years. Scott - To

[pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
http://www.caliburn.nl/topposting.html http://idallen.com/topposting.html Thank you Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
On Wed, Jul 29, 2009 at 1:25 PM, Curtis LaMasterscurtislamast...@gmail.com wrote: Thanks Scott. I know what top posting is...I just don't know why you think I did.  I hit reply, type my message and go forth.  Didn't think it needed to be any harder than that. I did not think anything -- This

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
On Wed, Jul 29, 2009 at 1:31 PM, iggd...@gmail.com wrote: Unfortunately Gmail top posts by default.  So expecting bottom posting to be and to remain the default behavior may be an exercise in futility.  proper ettiquite or not, some people just bang off replies and figure everything is a-ok. 

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
On Wed, Jul 29, 2009 at 1:42 PM, Curtis LaMasterscurtislamast...@gmail.com wrote: On Wed, Jul 29, 2009 at 12:41 PM, David Burgessapt@gmail.com wrote: On Wed, Jul 29, 2009 at 11:38 AM, Curtis LaMasterscurtislamast...@gmail.com wrote: And this is bottom posting.  Correct? Well, I don't

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
On Wed, Jul 29, 2009 at 1:45 PM, Curtis LaMasterscurtislamast...@gmail.com wrote: Gotta tell you guys...this is out right frustrating.  Is it the fact that I'm using Gmail or that by definition, threading in email is broken by design.  I would have imagined that the Spamassassin mailing list

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
On Wed, Jul 29, 2009 at 1:54 PM, Curtis LaMasterscurtislamast...@gmail.com wrote: I actually find that to be annoying to read.  However, in the spirit of good internetship, I'll oblige. Sorry any problems I may have caused. Let me know if I did that correctly. That looks correct.

Re: [pfSense Support] OT: web based performance testing

2009-07-25 Thread Scott Ullrich
On Sat, Jul 25, 2009 at 4:26 PM, Chris Buechlerc...@pfsense.org wrote: Looking for something, preferably open source but commercial is an option, sort of like a host your own private speed test site. The idea is when someone connects in via VPN they can easily hit a URL on a server across the

Re: [pfSense Support] OT: web based performance testing

2009-07-25 Thread Scott Ullrich
On Sat, Jul 25, 2009 at 4:31 PM, Chris Buechlerc...@pfsense.org wrote: Saw that, doesn't have latency or loss though. That's the piece that's missing from all the options I've seen. Maybe this will fit the bill. Kinda expensive. http://www.ookla.com/linequality.php Scott

Re: [pfSense Support] IGMP packet out of WAN

2009-07-25 Thread Scott Ullrich
On Sun, Jul 26, 2009 at 12:42 AM, Evgeny Yurchenkoevgeny.yurche...@frontline.ca wrote: Can somebody please say whether pfSense's kernel was compiled with MROUTING option or not? [pfsense-org:tools/builder_scripts/conf] sullrich% pwd /Users/sullrich/pfSense_GIT/tools/builder_scripts/conf

Re: [pfSense Support] Patch: Realtek 8102EL support for Dell Mini 10v (1010)

2009-07-24 Thread Scott Ullrich
On Fri, Jul 24, 2009 at 2:37 PM, Ingmar Huppingmar.h...@semperian.co.uk wrote: pfSense 1.2.3-RC1. FreeBSD RELENG_7_2 doesn't have support for this as far as I can tell (but FreeBSD HEAD [8.0] does as I've just noticed). Thanks, I have committed this and snapshots should start building them

Re: [pfSense Support] tcsetpgrpfailed ?

2009-07-23 Thread Scott Ullrich
On Thu, Jul 23, 2009 at 9:10 PM, Chris Buechlerc...@pfsense.org wrote: On Thu, Jul 23, 2009 at 9:09 PM, Lyle Giesel...@lcrcomputer.net wrote: I setup a pfSense embedded using 1.2.3 rc1.  When I connect to the console port, I get tcsetpgrpfailed, errno=25 It's normal and cosmetic only (and

Re: [pfSense Support] seperate gui and console password

2009-07-20 Thread Scott Ullrich
On Mon, Jul 20, 2009 at 10:29 AM, Nick Smithnick.smit...@gmail.com wrote: Ive read on this list that you cant add another user to pfsense 1.2 and its single user only. but is there a way to seperate the gui password from the root console password? i know that freebsd has a toor account,

  1   2   3   4   5   6   7   8   9   10   >