Re: [pfSense Support] pfSense on Wrap - Issues

2008-07-24 Thread Chris Buechler
On Thu, Jul 24, 2008 at 8:06 AM, Matt Brown [EMAIL PROTECTED] wrote:
 Hi,

 For some time now I have been running monowall on a Wrap board on CF without
 issues, however I came across some rather lovely features of pfSense I would
 love to have, mainly:

 * Support for my Wireless mini-pci card - Wiston
 * Rule Schedules
 * RDD Graphs

 and more 

 However, after installing pfSense (1.2 STABLE) and getting it all setup with
 my /29 range etc, I ran into a couple of small snags.

 1. I have a Server called 'Max' - when adding this to the aliases (as I have
 prev done under  mono) I would get an error on the reload of the config :(
 It would appear I am unable to add this host name as an alias. I presume max
 is a reserved word ? However the only workaround I can do is not to have an
 alias for this host and enter the ip address for now - which I can live with
 (Just wanted to point out in case this was a bug or error).


There are certain keywords that can't be used in an alias, looks like
our input validation missed one. Ticket opened, thanks for the report.


 2. Outbound NAT - As I have 3 mail servers here, I wanted each server to go
 out on its own IP address rather than the default interface address, simple
 enough (and currently have working under mono) - however as much as I try
 all IP's are presented as my firewall IP :(

 I have the relevant entries in Virtual IPs (Proxy ARP) and set the required
 rules for Outbound NAT - but they seem to get ignored, however as I said I
 do have this working fine at the mo under mono so I think its correct how I
 have it setup :(


It's the same to configure as in m0n0, and it works fine. How do you
have it setup?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] pfSense on Wrap - Issues

2008-07-24 Thread Matt Brown

Hi Chirs,

1. I have a Server called 'Max' - when adding this to the aliases  
(as I have
prev done under  mono) I would get an error on the reload of the  
config :(
It would appear I am unable to add this host name as an alias. I  
presume max
is a reserved word ? However the only workaround I can do is not to  
have an
alias for this host and enter the ip address for now - which I can  
live with

(Just wanted to point out in case this was a bug or error).



There are certain keywords that can't be used in an alias, looks like
our input validation missed one. Ticket opened, thanks for the report.


No worries, glad it helped :)



I have the relevant entries in Virtual IPs (Proxy ARP) and set the  
required
rules for Outbound NAT - but they seem to get ignored, however as I  
said I
do have this working fine at the mo under mono so I think its  
correct how I

have it setup :(



It's the same to configure as in m0n0, and it works fine. How do you
have it setup?


Ok... well under m0n0 I have the following:

.190 is the firewall WAN IP

Under Proxy ARP I have

.186
.187
.188
.189

So I created these under the Virtual IP section in the interface - and  
selected ARP as the option ?. (Working from memory here, please bear  
with me)


In m0no:

Under NAT - OUTBOUND NAT I have the following entries.

INTERFACE - SOURCE - DESTINATION - TARGET - DESC

WAN - 192.168.102.3/32 - * - x.x.x.186 - Orion - .186

WAN - 192.168.102.10/32 - * - x.x.x.187 - Pegasus - .187

WAN - 192.168.102.2/32 - * - x.x.x.188 - Max - .188

WAN - 192.168.102.14/32 - * - x.x.x.189 - Lyra - .189

So if I SSH into any of these boxes and launch $ lynx http://www.whatismyip.com 
  - each box reports the correct WAN IP I require... so appears to be  
fine.


However under pfSense - all the boxes report (using the same method  
above) .190 - which is the firewall WAN IP


Enable advanced outbound NAT - Ticked

Thanks for you help with this...

Regards

Matt

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] pfSense on Wrap - Issues

2008-07-24 Thread Chris Buechler
On Thu, Jul 24, 2008 at 5:06 PM, Matt Brown [EMAIL PROTECTED] wrote:

snip

 In m0no:

 Under NAT - OUTBOUND NAT I have the following entries.

 INTERFACE - SOURCE - DESTINATION - TARGET - DESC

 WAN - 192.168.102.3/32 - * - x.x.x.186 - Orion - .186

 WAN - 192.168.102.10/32 - * - x.x.x.187 - Pegasus - .187

 WAN - 192.168.102.2/32 - * - x.x.x.188 - Max - .188

 WAN - 192.168.102.14/32 - * - x.x.x.189 - Lyra - .189

 So if I SSH into any of these boxes and launch $ lynx
 http://www.whatismyip.com  - each box reports the correct WAN IP I
 require... so appears to be fine.

 However under pfSense - all the boxes report (using the same method above)
 .190 - which is the firewall WAN IP

 Enable advanced outbound NAT - Ticked


Config looks fine. Do you have any packages installed?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] pfSense on Wrap - Issues

2008-07-24 Thread Matt Brown

In m0no:

Under NAT - OUTBOUND NAT I have the following entries.

INTERFACE - SOURCE - DESTINATION - TARGET - DESC

WAN - 192.168.102.3/32 - * - x.x.x.186 - Orion - .186

WAN - 192.168.102.10/32 - * - x.x.x.187 - Pegasus - .187

WAN - 192.168.102.2/32 - * - x.x.x.188 - Max - .188

WAN - 192.168.102.14/32 - * - x.x.x.189 - Lyra - .189

So if I SSH into any of these boxes and launch $ lynx
http://www.whatismyip.com  - each box reports the correct WAN IP I
require... so appears to be fine.

However under pfSense - all the boxes report (using the same method  
above)

.190 - which is the firewall WAN IP

Enable advanced outbound NAT - Ticked



Config looks fine. Do you have any packages installed?


Nope, just using the Embedded version onto a CF (1GB).

Matt

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] pfsense on WRAP

2007-01-04 Thread nix4me

Timo Boettcher wrote:

* nix4me [EMAIL PROTECTED] wrote:
  

I have a WRAP board (266mhz 128mb ram).  I've read where pfsense takes
up more resources than the 1.22 version of m0n0wall but I don't see
any talk of how much more.

Will pfsense run ok on my WRAP for my home 10mbit/1mbit cable
connection?


Works for me here (same wrap, 10Mbit/1MBit DSL-line). Didn't do any load
test other than throughput, though. Especially, I didn't test high
packetrate apps (p2p-filesharing) or crypto-stuff (vpn).
  Timo

  
Well it seems to be holding its own.  At idle, it reports ~5% CPU and 
~40% memory usage.  With a full 10mbit download, it was up to ~50% / 
50%.  So it seems to be working within its limits.  Im running ftp 
server but no p2p.


The configuration webpage speed is a tad sluggish, but I can live with 
that as long as it routes without slowdown.


Mark

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] pfsense on WRAP

2007-01-03 Thread Scott Ullrich

Minimum requirements are located here: http://www.pfsense.com/index.php?id=43

That configuration should be fine for 10 megabit.

Scott


On 1/3/07, nix4me [EMAIL PROTECTED] wrote:

I have a WRAP board (266mhz 128mb ram).  I've read where pfsense takes
up more resources than the 1.22 version of m0n0wall but I don't see any
talk of how much more.

Will pfsense run ok on my WRAP for my home 10mbit/1mbit cable
connection?  I don't necessarily need the traffic shaper running but it
would be a plus if it works better than m0n0wall.  I can run a shaper on
the Linux server if need be, seems to work better that way.

Thanks for any thoughts,

Mark

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] pfSense on WRAP

2005-10-17 Thread Walter C. Pelissero
 Sebastian == Sebastian Rodriguez [EMAIL PROTECTED] writes:

Sebastian I've succesfully isntalled pfsense on a wrap, you only
Sebastian have to take out the cf and flash the image via an
Sebastian adapter installerd on your computer

Thanks.  I thought, due to the existence of a tutorial, that it could
be more complicated.

-- 
walter pelissero
http://www.pelissero.de

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] pfSense on WRAP

2005-10-15 Thread Sebastian Rodriguez
I've succesfully isntalled pfsense on a wrap, you only have to take out
the cf and flash the image via an adapter installerd on your computerOn 10/14/05, Walter C. Pelissero [EMAIL PROTECTED]
 wrote:Scott Ullrich writes:  No, not at this time.What's wrong with the flash tutorial?
Nothing beside the fact that I'd have to go through the lengthyprocess of installing some Linux compatibility package on my FreeBSDto be able to run the bloated Macromedia Flash player (no, the GPLedone doesn't play the tutorial).Anyhow, a player I'd have no use for,
beside watching some silly animation the most uninteresting web pagesseem to be littered with.But I suppose that's just my problem.--walter pelisserohttp://www.pelissero.de
-To unsubscribe, e-mail: [EMAIL PROTECTED]For additional commands, e-mail: 
[EMAIL PROTECTED]-- Sébastien Rodriguez


Re: [pfSense Support] pfSense on WRAP

2005-10-14 Thread Walter C. Pelissero
Scott Ullrich writes:
  No, not at this time.  What's wrong with the flash tutorial?

Nothing beside the fact that I'd have to go through the lengthy
process of installing some Linux compatibility package on my FreeBSD
to be able to run the bloated Macromedia Flash player (no, the GPLed
one doesn't play the tutorial).  Anyhow, a player I'd have no use for,
beside watching some silly animation the most uninteresting web pages
seem to be littered with.

But I suppose that's just my problem.

-- 
walter pelissero
http://www.pelissero.de

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] pfSense on WRAP

2005-10-13 Thread Scott Ullrich
No, not at this time.  What's wrong with the flash tutorial?

On 10/13/05, Walter C. Pelissero [EMAIL PROTECTED] wrote:
 Is there any non-flash tutorial that explains how to install pfSense
 on a PCEngines WRAP?

 Thanks,

 --
 walter pelissero
 http://www.pelissero.de

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]