RE: [pfSense Support] New custom overlay option added for 3rd party builders

2006-07-13 Thread alan walters
Where would we find out about this redistribution agreement this is the
first that I have heard mentioned of it since we started with pfsense on
the fork from monowall.

Would love some clarification of what this means

-Original Message-
From: Scott Ullrich [mailto:[EMAIL PROTECTED] 
Sent: 13 July 2006 15:29
To: support @ pfsense. com
Subject: [pfSense Support] New custom overlay option added for 3rd party
builders

Take a look at pfSense_local.sh which now has a entry for
custom_overlay commented out.   Basically this is a field that you can
store the complete path to a .tgz.   During the build phase if this
file is found we will automatically tar extract that overlay on top of
the pfSense CVS checkout.   This allows third parties, etc to extend
the image without having to modify pfSense builder files.

Scott
PS: This option is added for your convenience only.  We do not support
the builder system unless you have a redistribution agreement in place
with us.  In the past we have been pretty willing to help but be
advised that in the future we will be firm with this policy.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] New custom overlay option added for 3rd party builders

2006-07-13 Thread Scott Ullrich

Take a look at pfSense_local.sh which now has a entry for
custom_overlay commented out.   Basically this is a field that you can
store the complete path to a .tgz.   During the build phase if this
file is found we will automatically tar extract that overlay on top of
the pfSense CVS checkout.   This allows third parties, etc to extend
the image without having to modify pfSense builder files.

Scott
PS: This option is added for your convenience only.  We do not support
the builder system unless you have a redistribution agreement in place
with us.  In the past we have been pretty willing to help but be
advised that in the future we will be firm with this policy.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] CARP - failover inconsistencies

2006-07-13 Thread Scott Ullrich

On 7/13/06, Alastair Stevens <[EMAIL PROTECTED]> wrote:





Hi Tom - thanks for this.  I've updated my advertising frequencies, such
that all interfaces on "master" are 0, and all interfaces on "backup" are
111, arbitrarily.

 But it's still not behaving correctly.  Could this be to do with VHID
groups?  At the moment, each pair of interfaces shares a VHID group, in
other words I have 4 different VHID groups, for the 4 pairs of interfaces.
Is this the wrong way to do it?  I have experimented with this before but
not achieved consistent results.


Each distinct IP must share a common VHID.  If you have 13 distinct
IP's, then you need 13 VHID's.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] CARP - failover inconsistencies

2006-07-13 Thread Alastair Stevens
Title: RE: [pfSense Support] CARP - failover inconsistencies







Hi Tom - thanks for this.  I've updated my advertising frequencies, such that all interfaces on "master" are 0, and all interfaces on "backup" are 111, arbitrarily.

But it's still not behaving correctly.  Could this be to do with VHID groups?  At the moment, each pair of interfaces shares a VHID group, in other words I have 4 different VHID groups, for the 4 pairs of interfaces.  Is this the wrong way to do it?  I have experimented with this before but not achieved consistent results.

Cheers
Alastair

-Original Message-
From: Tom Müller-Kortkamp [mailto:[EMAIL PROTECTED]]
Sent: Thu 13/07/2006 07:30
To: support@pfsense.com
Subject: Re: [pfSense Support] CARP - failover inconsistencies

Am 12.07.2006 um 14:28 schrieb Alastair Stevens:
> But do you know why we are seeing this asymmetric 'flapping' at 
> other times?  I have checked all the settings, and each CARP pair 
> has a unique VHID, and box A is set to a lower advertising 
> frequency.  My understanding is that the 'preempt' flag should 
> cause all interfaces to failover together.


Hi,

had the same problem with a fast Master and a WRAP for backup:

Go to the Slave-Servers CARP-Settings and rise the Advertising 
Frequency for each CARP-Interface above 100. This should make it a 
real "hot-standby" Slave ...
I also enabled "Load Balancing" in the CARP Settings which should 
enable net.inet.carp.arpbalance.

Tom
--
kommunity GmbH & Co.KG
Tom Müller-Kortkamp
Netzwerke & Internet
Goseriede 4
D-30159 Hannover






Re: [pfSense Support] CARP - failover inconsistencies

2006-07-13 Thread Tom Müller-Kortkamp

Am 12.07.2006 um 14:28 schrieb Alastair Stevens:

Hi - the final question I have with our current setup concerns CARP/ 
failover between our pair of boxes, each of which has 2 WAN and 2  
LAN interfaces.


What we're seeing sometimes is that box B will become "master" for  
the LAN interfaces, but not the WANs, or vice versa.  This  
obviously breaks things!


For a full failover simulation (ie reboot one of the boxes!)  
everything works correctly, and all 4 interfaces fail over to the  
other box, and everything carries on flowing.


But do you know why we are seeing this asymmetric 'flapping' at  
other times?  I have checked all the settings, and each CARP pair  
has a unique VHID, and box A is set to a lower advertising  
frequency.  My understanding is that the 'preempt' flag should  
cause all interfaces to failover together.



Hi,

had the same problem with a fast Master and a WRAP for backup:

Go to the Slave-Servers CARP-Settings and rise the Advertising  
Frequency for each CARP-Interface above 100. This should make it a  
real "hot-standby" Slave ...
I also enabled "Load Balancing" in the CARP Settings which should  
enable net.inet.carp.arpbalance.



Tom
--
kommunity GmbH & Co.KG
Tom Müller-Kortkamp
Netzwerke & Internet
Goseriede 4
D-30159 Hannover

Phone +49 (0)5 11 - 80 72 58 0
Fax +49 (0)5 11 - 80 72 58 10
http://www.kommunity.net


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] pppoe : mpd: [pppoe0] PPPoE connection timeout after 9 seconds

2006-07-13 Thread alan walters








The mtu on pfsense if
1492 or 1496 for the link.

Not 1460 as you have entered.

 

I have found that this problem is definitely
a windows 2000/xp problem but not all the time check the boxes registry it is
not setting it’s mtu correctly there.

It is more likely the mru that is wrong in
fact.

 

 

 









From: juan pablo burd
[mailto:[EMAIL PROTECTED] 
Sent: 12 July 2006 21:50
To: support@pfsense.com
Subject: RE: [pfSense Support]
pppoe : mpd: [pppoe0] PPPoE connection timeout after 9 seconds



 

 

I
am using rasspppoe

 

 

 



 











De: Scott Ullrich [mailto:[EMAIL PROTECTED]]

Enviado el: Miércoles, 12 de Julio
de 2006 05:05 p.m.
Para: support@pfsense.com
Asunto: Re: [pfSense Support]
pppoe : mpd: [pppoe0] PPPoE connection timeout after 9 seconds



 

The problem is with windows 2000, not pfSense.



On 7/12/06, juan pablo burd <[EMAIL PROTECTED] >
wrote:







I have installed pfsense, and I
only have a problem with Windows 2000, i config el mtu y el mru en 1460, look
for in all the forums and not find  solution the error is the following
one : (this error only with Windows 2000)

 


 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] PPPoE connection timeout after 9 seconds
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] device: DOWN event in state OPENING
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] device is now in state DOWN
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] link: DOWN event
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] LCP: Down event
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] LCP: Close event
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] LCP: state change Starting --> Initial
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] LCP: LayerFinish
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] closing link "pppoe1"...
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] IPCP: Close event
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] IPCP: state change Starting --> Initial
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] IPCP: LayerFinish
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] bundle: CLOSE event in state OPENED
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] link: CLOSE event
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] LCP: Close event
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] device: CLOSE event in state DOWN
  
 
 
  
  Jul
  12 13:53:35
  
  
  mpd:
  [pppoe1] device is now in state DOWN
  
 
 
  
  Jul
  12 13:53:36
  
  
  mpd:
  Incoming PPPoE connection request via em1: for service "*" from
  00:50:da:ce:07:61
  
 


 

 



 











De: alan walters [mailto:[EMAIL PROTECTED]] 
Enviado el: Martes, 11 de Julio de
2006 08:19 p.m.
Para: support@pfsense.com
Asunto: RE: [pfSense Support]
pppoe : mpd: [pppoe0] PPPoE connection timeout after 9 seconds







 

Well that is more specifically a question to ask Microsoft. I
can vouch for problems with all windows clients sometimes.

 

Some work fine some do not. I can't explain it sorry. You
need to align your mru and mtu settings . particularly the mru

 









From: juan pablo burd [mailto:[EMAIL PROTECTED]]

Sent: 11 July 2006 23:57
To: support@pfsense.com
Subject: [pfSense Support] pppoe :
mpd: [pppoe0] PPPoE connection timeout after 9 seconds



 

This error only ocurred in Windows 2000 profesional
/ Server …… why

 

Error in pfsense pppoe  Server log file is : mpd: [pppoe0] PPPoE connection timeout after 9 seconds

In connection Windows 2000 (Rasspppoe) : error 678

 

Please help me ……. 

 

 

 









__ Informacisn de NOD32, revisisn 1.1655 (20060712) __

Este mensaje ha sido analizado con NOD32 antivirus system
http://www.nod32.com