Re: [pfSense Support] 1.2rc4 fresh install - Disable Paging
Guys - My bad that I had not fully read the liveCD functionality. I eliminated HDD by using a very old keychain USB with LiveCD. Hurray - No HDD now - Original Message From: Bill Marquette [EMAIL PROTECTED] To: support@pfsense.com Sent: Friday, January 25, 2008 7:29:04 PM Subject: Re: [pfSense Support] 1.2rc4 fresh install - Disable Paging On Jan 25, 2008 2:47 PM, Anil Garg [EMAIL PROTECTED] wrote: Ok. I will leave paging on. I just kind of think its silly that for one user at home I still hear my hdd constantly make noise of read-write... But then I am not technical enough to know what is causing that.. I'm reasonably confident this isn't swapping. There's very little of pfSense that can actually be swapped out to disk - less than 128M of ram. And if anything in userland is getting swapped out to disk it's likely not being used, or you have a serious shortage of ram for the kernel to operate. We recommend a minimum of 128M (and throw appropriate warnings for those with less), but can operate in 64M environments (if you know what you are doing) without swap (and without panics). Things that might make the disk write are: Excessive blocked packets - you'd have to be on an abormally busy network though 3rd party packages - ntop (this one can eat lots of ram too), squid, etc Other thoughts...maybe it's not disk? Or maybe your disk is actually going bad and just making lots of noise. During normal operation disk should actually be used very little. --Bill - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[pfSense Support] IPv6
Hello all, I was wondering if pfsense was supporting ipv6 and ipv6-in-ipv4 tunnels? If not, are there plans to support support it any time soon? If needed I am able to do some testing. Regards, Richard - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] IPv6
On Sat, Jan 26, 2008 at 01:00:52PM +0100, R. Th. Boots wrote: Hello all, I was wondering if pfsense was supporting ipv6 and ipv6-in-ipv4 tunnels? 6to4 on WAN and native IPv6 on LAN side would be nice indeed. If not, are there plans to support support it any time soon? If needed I am able to do some testing. Yes, please. Me too. -- Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org __ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Attempting to install pfSense; gets stuck
FWIW, this method of install does work with 1.2RC4 as I just did it in VMWare Server 1.0.4 on a 64bit Ubuntu host. Install was to a Sandisk Extreme III 2G card that I no longer have any use for (too small for my camera) via generic (slow) pile of crap USB - CF card reader (not sure where my good reader is right this second). This card is going in my primary firewall later this afternoon to replace the existing embedded install on it. --Bill On Jan 25, 2008 1:02 PM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Sean, I need to do a full installation to a compact flash card. I do not want an embedded install due to the lack of flexibility - e.g. no packages. I also presume the full 2 GB of my CF card would be left largely unusable. Therefore, I am booting the live ISO in VMWare, then installing to the CF card. Because it is stuck, there is no error, no log, the system is totally responsive, just not moving past this command. -Galen On Jan 25, 2008, at 9:09 AM, Sean Cavanaugh wrote: are you trying to use VMware to install straight to the CF card? if so, thats now how you install to them. http://doc.pfsense.org/index.php/HOWTO_Install_pfSense#Embedded_.28Compact_Flash.29_Installation -Sean From: [EMAIL PROTECTED] To: support@pfsense.com Date: Fri, 25 Jan 2008 09:00:33 -0800 Subject: Re: [pfSense Support] Attempting to install pfSense; gets stuck On Jan 25, 2008, at 3:51 AM, Paul M wrote: Scott Ullrich wrote: That portion of the installer takes quite a while depending on speed of the CF card, etc. Give it a bit longer. I presume the CF card is mounted noatime,async (or whatever it is in freebsd, I am thinking linux here)? I found that async makes a huge difference in speed - I had a flash memory card I though was broken as it took so long to write, then I remembered to do async and it was so much faster! I did not do anything special. I booted the live CD under vmware and everything works great, until it gets stuck. I tried booting without ACPI and left it running for 11 hours so far, and it is STILL stuck. Any ideas? -Galen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Need to know the score, the latest news, or you need your Hotmail(R)-get your fix. Check it out. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] IPv6
R. Th. Boots wrote: I was wondering if pfsense was supporting ipv6 and ipv6-in-ipv4 tunnels? It is my understanding that the kernel that runs under pfsense has supported IPv6 fully for a long time. If not, are there plans to support support it any time soon? If needed I am able to do some testing. You should be able to get something working through shell scripted configurations. Those configuration options need to be integrated into the web front-end however for pfsense to properly support IPv6. -- Graham Beneke Apolix Internet Services E-Mail/MSN/Jabber: [EMAIL PROTECTED] Skype: grbeneke VoIP: 087-750-5696 Cell: 082-432-1873 http://www.apolix.co.za/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] config.xml example / avoid serial terminal
I've modified the configuration file to point to vr0/vr1/vr2 as appropriate, however there is no active IP where I expect it, on any of the ports. If anybody could confirm the interface names or provide a working sample of config.xml, it would be much appreciated. -Galen On Jan 26, 2008, at 3:25 PM, [EMAIL PROTECTED] wrote: Ah ha! I knew it was not working. I will see if I can adjust the configuration for the vr0 interface. Also, I would love to see an example of a file like this... -Galen On Jan 26, 2008, at 12:56 PM, Fernando Sanchez wrote: You do have to use the serial port to assign interfaces on ALIX boards, since they were changed to vr0, I wish they would apply the m0n0wall patch which fixes because I don't have any motherboards with serial ports. On Jan 26, 2008 12:53 PM, Vivek Khera [EMAIL PROTECTED] wrote: On Jan 26, 2008, at 10:32 AM, [EMAIL PROTECTED] wrote: I am having trouble with this point and would appreciate a example configurational file that will allow at least one of the ethernet ports to grab an IP via DHCP, or just have a static IP... something... anything. The basic problem is that I don't have a serial cable anywhere! (I thought I was done with such old technologies!) by default, the LAN answers as 192.168.1.1 so just take a laptop or other computer, right it to IP 192.168.1.2, and then configure your box as you see fit. or you can ssh into it and set the IP that way if you prefer. you don't *have* to have the serial port to do the initial config. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[pfSense Support] Re: IPv6
Graham Beneke wrote: R. Th. Boots wrote: I was wondering if pfsense was supporting ipv6 and ipv6-in-ipv4 tunnels? It is my understanding that the kernel that runs under pfsense has supported IPv6 fully for a long time. This is what I have noticed aswell. You can provide it on a network level with ipv6 addresses. tunneling to a broker works aswell If not, are there plans to support support it any time soon? If needed I am able to do some testing. You should be able to get something working through shell scripted configurations. Those configuration options need to be integrated into the web front-end however for pfsense to properly support IPv6. The problem is indeed that none of your configurations show up in the web interface of pfsense and that you are also not able to create any firewall rules on those interfaces. Regards, Richard - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] config.xml example / avoid serial terminal
if the m0n0 is known to work then you could install the m0n0 image and then use the gui to change the firmware to pfSense. sai On 1/28/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I've modified the configuration file to point to vr0/vr1/vr2 as appropriate, however there is no active IP where I expect it, on any of the ports. If anybody could confirm the interface names or provide a working sample of config.xml, it would be much appreciated. -Galen On Jan 26, 2008, at 3:25 PM, [EMAIL PROTECTED] wrote: Ah ha! I knew it was not working. I will see if I can adjust the configuration for the vr0 interface. Also, I would love to see an example of a file like this... -Galen On Jan 26, 2008, at 12:56 PM, Fernando Sanchez wrote: You do have to use the serial port to assign interfaces on ALIX boards, since they were changed to vr0, I wish they would apply the m0n0wall patch which fixes because I don't have any motherboards with serial ports. On Jan 26, 2008 12:53 PM, Vivek Khera [EMAIL PROTECTED] wrote: On Jan 26, 2008, at 10:32 AM, [EMAIL PROTECTED] wrote: I am having trouble with this point and would appreciate a example configurational file that will allow at least one of the ethernet ports to grab an IP via DHCP, or just have a static IP... something... anything. The basic problem is that I don't have a serial cable anywhere! (I thought I was done with such old technologies!) by default, the LAN answers as 192.168.1.1 so just take a laptop or other computer, right it to IP 192.168.1.2, and then configure your box as you see fit. or you can ssh into it and set the IP that way if you prefer. you don't *have* to have the serial port to do the initial config. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] config.xml example / avoid serial terminal
You cannot upgrade to pfsense from m0n0wall from the gui, its in the faq somewhere. On Jan 27, 2008 10:49 PM, sai [EMAIL PROTECTED] wrote: if the m0n0 is known to work then you could install the m0n0 image and then use the gui to change the firmware to pfSense. sai On 1/28/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I've modified the configuration file to point to vr0/vr1/vr2 as appropriate, however there is no active IP where I expect it, on any of the ports. If anybody could confirm the interface names or provide a working sample of config.xml, it would be much appreciated. -Galen On Jan 26, 2008, at 3:25 PM, [EMAIL PROTECTED] wrote: Ah ha! I knew it was not working. I will see if I can adjust the configuration for the vr0 interface. Also, I would love to see an example of a file like this... -Galen On Jan 26, 2008, at 12:56 PM, Fernando Sanchez wrote: You do have to use the serial port to assign interfaces on ALIX boards, since they were changed to vr0, I wish they would apply the m0n0wall patch which fixes because I don't have any motherboards with serial ports. On Jan 26, 2008 12:53 PM, Vivek Khera [EMAIL PROTECTED] wrote: On Jan 26, 2008, at 10:32 AM, [EMAIL PROTECTED] wrote: I am having trouble with this point and would appreciate a example configurational file that will allow at least one of the ethernet ports to grab an IP via DHCP, or just have a static IP... something... anything. The basic problem is that I don't have a serial cable anywhere! (I thought I was done with such old technologies!) by default, the LAN answers as 192.168.1.1 so just take a laptop or other computer, right it to IP 192.168.1.2, and then configure your box as you see fit. or you can ssh into it and set the IP that way if you prefer. you don't *have* to have the serial port to do the initial config. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] config.xml example / avoid serial terminal
WOW is late, I mean You cannot upgrade to pfsense from the m0n0wall gui. On Jan 27, 2008 11:07 PM, Fernando Sanchez [EMAIL PROTECTED] wrote: You cannot upgrade to pfsense from m0n0wall from the gui, its in the faq somewhere. On Jan 27, 2008 10:49 PM, sai [EMAIL PROTECTED] wrote: if the m0n0 is known to work then you could install the m0n0 image and then use the gui to change the firmware to pfSense. sai On 1/28/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I've modified the configuration file to point to vr0/vr1/vr2 as appropriate, however there is no active IP where I expect it, on any of the ports. If anybody could confirm the interface names or provide a working sample of config.xml, it would be much appreciated. -Galen On Jan 26, 2008, at 3:25 PM, [EMAIL PROTECTED] wrote: Ah ha! I knew it was not working. I will see if I can adjust the configuration for the vr0 interface. Also, I would love to see an example of a file like this... -Galen On Jan 26, 2008, at 12:56 PM, Fernando Sanchez wrote: You do have to use the serial port to assign interfaces on ALIX boards, since they were changed to vr0, I wish they would apply the m0n0wall patch which fixes because I don't have any motherboards with serial ports. On Jan 26, 2008 12:53 PM, Vivek Khera [EMAIL PROTECTED] wrote: On Jan 26, 2008, at 10:32 AM, [EMAIL PROTECTED] wrote: I am having trouble with this point and would appreciate a example configurational file that will allow at least one of the ethernet ports to grab an IP via DHCP, or just have a static IP... something... anything. The basic problem is that I don't have a serial cable anywhere! (I thought I was done with such old technologies!) by default, the LAN answers as 192.168.1.1 so just take a laptop or other computer, right it to IP 192.168.1.2, and then configure your box as you see fit. or you can ssh into it and set the IP that way if you prefer. you don't *have* to have the serial port to do the initial config. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
