Re: [pfSense] Wireless Issues

2011-09-23 Thread Chris L

On Sep 23, 2011, at 11:45 PM, Chris Brennan wrote:

> I've got pfSense 2.0 running and for the wired side of my LAN, it works fine. 
> The problem is my Wireless LAN. I can associate just fine, but none of my 
> wireless devices (Blu-Ray Player, Sony TV, iPod, Android Phone) cannot browse 
> to the internet and I cannot figure out why. I could certainly use some 
> guidance here as to why.

Umm.

On the wireless clients, check:

Assigned addresses
Assigned netmask
Assigned default gateway
Assigned DNS servers

There's not much more to it.

> 
> P.S. I'm still new to pfSense in general and 2.0 specifically, so please, be 
> kind to me :D
> > --
> > Chris Brennan
> > A: Yes.
> > >Q: Are you sure?
> > >>A: Because it reverses the logical flow of conversation.
> > >>>Q: Why is top posting frowned upon?
> > 
> http://xkcd.com/84/ | http://xkcd.com/149/ | http://xkcd.com/549/
> 
> > GPG: D5B20C0C (6741 8EE4 6C7D 11FB 8DA8  9E4A EECD 9A84 D5B2 0C0C)
> 
> 
> 
> ___
> List mailing list
> List@lists.pfsense.org
> http://lists.pfsense.org/mailman/listinfo/list

___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Wireless Issues

2011-09-23 Thread Alexandre Paradis
did u put a firewall rule to allow traffic on this interface ?

2011/9/24 Chris Brennan 

> I've got pfSense 2.0 running and for the wired side of my LAN, it works
> fine. The problem is my Wireless LAN. I can associate just fine, but none of
> my wireless devices (Blu-Ray Player, Sony TV, iPod, Android Phone) cannot
> browse to the internet and I cannot figure out why. I could certainly use
> some guidance here as to why.
>
> P.S. I'm still new to pfSense in general and 2.0 specifically, so please,
> be kind to me :D
>
> > --
> > Chris Brennan
> > A: Yes.
> > >Q: Are you sure?
> > >>A: Because it reverses the logical flow of conversation.
> > >>>Q: Why is top posting frowned upon?
> > http://xkcd.com/84/ | http://xkcd.com/149/ | http://xkcd.com/549/
> > GPG: D5B20C0C (6741 8EE4 6C7D 11FB 8DA8  9E4A EECD 9A84 D5B2 0C0C)
> 
>
>
>
> ___
> List mailing list
> List@lists.pfsense.org
> http://lists.pfsense.org/mailman/listinfo/list
>
>


-- 
Alexandre
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


[pfSense] Wireless Issues

2011-09-23 Thread Chris Brennan
I've got pfSense 2.0 running and for the wired side of my LAN, it works
fine. The problem is my Wireless LAN. I can associate just fine, but none of
my wireless devices (Blu-Ray Player, Sony TV, iPod, Android Phone) cannot
browse to the internet and I cannot figure out why. I could certainly use
some guidance here as to why.

P.S. I'm still new to pfSense in general and 2.0 specifically, so please, be
kind to me :D

> --
> Chris Brennan
> A: Yes.
> >Q: Are you sure?
> >>A: Because it reverses the logical flow of conversation.
> >>>Q: Why is top posting frowned upon?
> http://xkcd.com/84/ | http://xkcd.com/149/ | http://xkcd.com/549/
> GPG: D5B20C0C (6741 8EE4 6C7D 11FB 8DA8  9E4A EECD 9A84 D5B2 0C0C)

___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


[pfSense] Realtek integrated nic problem

2011-09-23 Thread Nenhum_de_Nos
hail,

I got a board equipped with:

re0@pci0:1:0:0: class=0x02 card=0x81051019 chip=0x813610ec rev=0x05
hdr=0x00
class  = network
subclass   = ethernet

and it is not recognized by pfsense/FreeBSD 8.1. I there a way I can use
if_re/if_rl from another FreeBSD Release (say 8.2 or 8-Stable) to try it ?

when there will be images running newer versions of FreeBSD ?

thanks,

matheus

-- 
We will call you cygnus,
The God of balance you shall be

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

http://en.wikipedia.org/wiki/Posting_style
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


[pfSense] Can't remove monitor IP from gateway

2011-09-23 Thread greg whynott
Noticed what might be a bug,  thought i'm mention it in case you are not
aware.


I added Alternative monitor IPs to check on the gateway's health.   we have
3 gateways configured into a gateway group.  After a day of being
configured,  i started getting complaints parts of the internet were not
accessible.  Looking at the logs i seen many "DSL0*down"(due to latency),
which are the names of my modems.  I was monitoring our gateway IP/DNS IP at
the ISP.  Because the modems were being maxed out,  i assumed the latency
incurred by a busy line was causing the monitor to assume the modem
dropped.instead of increasing or playing around with the tunable
options,  i elected to remove the monitor IPs and have it use the modem
itself (as is the default).

was able to removed the monitor IP from DSL01 and DSL03,  but DSL02 refuses
to let go,  even tho it claims my changes have been accepted.  if you come
back to the section,  the monitor ip is back in there.

this line shows up in the logs every time i attempt to remove the monitor IP
(which is the 66.49.x.x IP below)

Sep 23 15:18:42 fw01 php: /system_gateways.php: Removing static route for
monitor 66.49.167.135 and adding a new route through 10.101.101.12

and netstat -rn will show there is a route to that IP via .12.



to make things a bit more odd,  DSL01 and DSL02 via the web gui indicate the
monitor IP has been removed,  only DSL03 won't let go.   but if you ssh into
the box and check the routing tables,  all 3 IPs used for monitors still
have static routes to them via the modem they were once assigned to.


area i'm in:

System > Routing > Gateways

click on "E" for one of the listed gateways,  clear "alternative monitor
IP",   click "Save",  click "Apply changes"


not a show stopper,  just wanted to share my experience.

have a great weekend,
greg
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] redirect outgoing

2011-09-23 Thread Chris Buechler
On Fri, Sep 23, 2011 at 8:56 AM, Nick Upson  wrote:
>
> ok now I'm REALLY confused, http://www.whatismyip.com/  now reports the
> correct address, and I hadn't changed anything since the last time I looked
>

Not a good way to check, browsers use persistent TCP connections and
don't like to let go of them. Use wget or fetch
http://pfsense.org/ip.php instead to ensure you're using a new TCP
connection.
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Strange hard disk size issue

2011-09-23 Thread Seth Mos

On 23-9-2011 16:00, Stefan Baur wrote:

Hi list,




Which makes me wonder :
1) Why did the installer only use 248M of the available 512M? Is there
any particular reason for only using half of the available disk space,
or did I make a mistake back when I installed the system?


You selected to create a swap partition.

Regards,

Seth
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


[pfSense] Strange hard disk size issue

2011-09-23 Thread Stefan Baur

Hi list,

a bout a year and a half ago, I installed pfSense 1.2.3 in a virtual 
environment. I didn't use the VMware Image provided on the pfsense web 
site, as I am using a different virtualization solution (Linux kvm, in 
case anyone wonders).


I created the virtual environment with a 512 Megabyte virtual hard disk, 
and the system has been running smoothly ever since.


A few days ago, I tried upgrading to pfSense 2.0 and the upgrade failed 
hard - the machine just wouldn't start after a reboot.
Checking the console, I received a message that the system was unable to 
find the kernel.


So I restored the image from a backup and tried upgrading again, this 
time from the command line.

What I saw was that the system was running out of disk space:
Firmware upgrade in progress...

..
/: write failed, filesystem is full
.
/: write failed, filesystem is full
.
/: write failed, filesystem is full
.

After restoring the image to its previous state (again *sigh*), I 
decided to log in and check how much disk space is available, and df -h 
tells me:

/dev/ad0s1a248M110M118M48%/

Which makes me wonder :
1) Why did the installer only use 248M of the available 512M? Is there 
any particular reason for only using half of the available disk space, 
or did I make a mistake back when I installed the system?


2) Is there any way to recover from this situation that saves me from 
having to do a full re-install? Like, enlarging the partition/slice and 
the filesystem on it from inside the running pfSense 1.2.3 system?  
(Having to reboot it a few times during the preparations for the upgrade 
would be acceptable.)  I have to admit I'm a little spoiled from what 
I've seen with Linux and ext2/ext3 - Resize the partition, reboot so the 
kernel can figure out the new partition table, enlarge the filesystem 
while it is mounted, that's how it works there.  Surely FreeBSD has a 
similar procedure?


For those of you that want to take a closer look, I copied the output of 
various fdisk commands and made them available here:

http://pastebin.com/Mhdvgh4k

Kind Regards,
Stefan
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] redirect outgoing

2011-09-23 Thread Nick Upson
On 23 September 2011 13:53, Nick Upson  wrote:

>
>
> On 23 September 2011 13:46, Jesse Vollmar  wrote:
>
>>
>>
>> On Fri, Sep 23, 2011 at 8:40 AM, Nick Upson  wrote:
>>
>>>
>>>
>>> On 22 September 2011 16:41, Jesse Vollmar  wrote:
>>>
  On Thu, Sep 22, 2011 at 11:00 AM, Nick Upson  wrote:

>
> Hi,
>
> I must be missing something, all I want is:
>
> all outgoing traffic to 192.168.x.y goes out WAN2 except 192.168.111.x
> & 192.168.112.x which goes out the IPSEC interface (which is attached to
> WAN1)
>
> tracert from my desktop actually show this correctly as WAN2 with my
> present setup but visit anywhere that shows the IP I'm coming from and its
> WAN1
>
> using 1.2.3
>
>
>
 There needs to be a firewall rule that specifies the gateway you want to
 send the traffic out.


>>> I've currently put one in place that specifies the source must be my PC
>>> address (to avoid affecting others). If I go to
>>> http://www.whatismyip.com/ or similiar it tells me the wrong IP,
>>> tracerte on my PC (win7) tells me it went out the correct IP, I'm confused
>>>
>>> --
>>> Nick Upson
>>>
>>>
>>> ___
>>> List mailing list
>>> List@lists.pfsense.org
>>> http://lists.pfsense.org/mailman/listinfo/list
>>>
>>>
>> Sounds like it still isn't going out the correct gateway. Can you post the
>> IP of the computer you are testing from and the firewall rule that is
>> supposed to send packets out the correct gateway?
>>
>>
> my IP is 10.0.0.108, the rule is 'any' everywhere except source (my IP) and
> gateway (the IP address I want it to go out of)
> logging is enabled and says that this rule is used for my outgoing traffic
>
>
ok now I'm REALLY confused, http://www.whatismyip.com/  now reports the
correct address, and I hadn't changed anything since the last time I looked

-- 
Nick Upson
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] redirect outgoing

2011-09-23 Thread Nick Upson
On 23 September 2011 13:46, Jesse Vollmar  wrote:

>
>
> On Fri, Sep 23, 2011 at 8:40 AM, Nick Upson  wrote:
>
>>
>>
>> On 22 September 2011 16:41, Jesse Vollmar  wrote:
>>
>>>  On Thu, Sep 22, 2011 at 11:00 AM, Nick Upson  wrote:
>>>

 Hi,

 I must be missing something, all I want is:

 all outgoing traffic to 192.168.x.y goes out WAN2 except 192.168.111.x &
 192.168.112.x which goes out the IPSEC interface (which is attached to 
 WAN1)

 tracert from my desktop actually show this correctly as WAN2 with my
 present setup but visit anywhere that shows the IP I'm coming from and its
 WAN1

 using 1.2.3



>>> There needs to be a firewall rule that specifies the gateway you want to
>>> send the traffic out.
>>>
>>>
>> I've currently put one in place that specifies the source must be my PC
>> address (to avoid affecting others). If I go to
>> http://www.whatismyip.com/ or similiar it tells me the wrong IP, tracerte
>> on my PC (win7) tells me it went out the correct IP, I'm confused
>>
>> --
>> Nick Upson
>>
>>
>> ___
>> List mailing list
>> List@lists.pfsense.org
>> http://lists.pfsense.org/mailman/listinfo/list
>>
>>
> Sounds like it still isn't going out the correct gateway. Can you post the
> IP of the computer you are testing from and the firewall rule that is
> supposed to send packets out the correct gateway?
>
>
my IP is 10.0.0.108, the rule is 'any' everywhere except source (my IP) and
gateway (the IP address I want it to go out of)
logging is enabled and says that this rule is used for my outgoing traffic

-- 
Nick Upson
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] redirect outgoing

2011-09-23 Thread Jesse Vollmar
On Fri, Sep 23, 2011 at 8:40 AM, Nick Upson  wrote:

>
>
> On 22 September 2011 16:41, Jesse Vollmar  wrote:
>
>>  On Thu, Sep 22, 2011 at 11:00 AM, Nick Upson  wrote:
>>
>>>
>>> Hi,
>>>
>>> I must be missing something, all I want is:
>>>
>>> all outgoing traffic to 192.168.x.y goes out WAN2 except 192.168.111.x &
>>> 192.168.112.x which goes out the IPSEC interface (which is attached to WAN1)
>>>
>>> tracert from my desktop actually show this correctly as WAN2 with my
>>> present setup but visit anywhere that shows the IP I'm coming from and its
>>> WAN1
>>>
>>> using 1.2.3
>>>
>>>
>>>
>> There needs to be a firewall rule that specifies the gateway you want to
>> send the traffic out.
>>
>>
> I've currently put one in place that specifies the source must be my PC
> address (to avoid affecting others). If I go to http://www.whatismyip.com/or 
> similiar it tells me the wrong IP, tracerte on my PC (win7) tells me it
> went out the correct IP, I'm confused
>
> --
> Nick Upson
>
>
> ___
> List mailing list
> List@lists.pfsense.org
> http://lists.pfsense.org/mailman/listinfo/list
>
>
Sounds like it still isn't going out the correct gateway. Can you post the
IP of the computer you are testing from and the firewall rule that is
supposed to send packets out the correct gateway?
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] redirect outgoing

2011-09-23 Thread Nick Upson
On 22 September 2011 16:41, Jesse Vollmar  wrote:

> On Thu, Sep 22, 2011 at 11:00 AM, Nick Upson  wrote:
>
>>
>> Hi,
>>
>> I must be missing something, all I want is:
>>
>> all outgoing traffic to 192.168.x.y goes out WAN2 except 192.168.111.x &
>> 192.168.112.x which goes out the IPSEC interface (which is attached to WAN1)
>>
>> tracert from my desktop actually show this correctly as WAN2 with my
>> present setup but visit anywhere that shows the IP I'm coming from and its
>> WAN1
>>
>> using 1.2.3
>>
>>
>>
> There needs to be a firewall rule that specifies the gateway you want to
> send the traffic out.
>
>
I've currently put one in place that specifies the source must be my PC
address (to avoid affecting others). If I go to
http://www.whatismyip.com/or similiar it tells me the wrong IP,
tracerte on my PC (win7) tells me it
went out the correct IP, I'm confused

-- 
Nick Upson
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list