Re: [pfSense Support] monitoring bandwidth usage of individual lan addresses

2008-06-17 Thread Bill Marquette
On Tue, Jun 17, 2008 at 2:54 PM, Patrick M. Murray, M.F.A.
<[EMAIL PROTECTED]> wrote:
> is there any noticeable speed increase or decrease?

Over an hdd given the box it's on, it boots WAY faster.  I'm using a
2GB Sandisk Extreme II card, so it's pretty blazing fast for pfSense.
For normal operations, there's no noticable difference in speed as all
the disk IO (for config writes) ends up being buffered by the OS
anyway.

--Bill

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] monitoring bandwidth usage of individual lan addresses

2008-06-17 Thread Patrick M. Murray, M.F.A.

is there any noticeable speed increase or decrease?

Patrick M. Murray, M.F.A.
http://www.patrickmurray.net




On 17 Jun 2008, at 15:28-0400, Bill Marquette wrote:


On Tue, Jun 17, 2008 at 10:34 AM, Patrick M. Murray, M.F.A.
<[EMAIL PROTECTED]> wrote:
I'm going to run the CF card and see how long it lasts :)  they are  
cheaper
each day - wouldn't be a big loss and i can always yank the card  
and back it

up anytime.


It's not great uptime yet and I'm not running packages on it, so YMMV,
but I've been running a full install since January or so w/out any
issues.

--Bill

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] monitoring bandwidth usage of individual lan addresses

2008-06-17 Thread Bill Marquette
On Tue, Jun 17, 2008 at 10:34 AM, Patrick M. Murray, M.F.A.
<[EMAIL PROTECTED]> wrote:
> I'm going to run the CF card and see how long it lasts :)  they are cheaper
> each day - wouldn't be a big loss and i can always yank the card and back it
> up anytime.

It's not great uptime yet and I'm not running packages on it, so YMMV,
but I've been running a full install since January or so w/out any
issues.

--Bill

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] DHCP ranges

2008-06-17 Thread Reza Ambler
Also, is it possible to set DHCP options? I know the new Wyse thin client
v10L looks for certain DHCP options to be configured in order for it to
automatically pull new firm ware. So I was hoping to accomplish this with
our pfSense machines. Would it be possible to set them manually in the
config, or would it be wiped?
Thanks,

-Original Message-
From: news [mailto:[EMAIL PROTECTED] On Behalf Of Matias Surdi
Sent: Tuesday, June 17, 2008 9:37 AM
To: support@pfsense.com
Subject: [pfSense Support] DHCP ranges

Is it possible to specify more than one dhcp range?
If not, will it be available in 1.3?

Sorry for making so much questions, but I'm trying to migrate our 
firewalls here, and I've to find work arounds for every feature we need.

Thanks for your patience.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] DHCP ranges

2008-06-17 Thread Matias Surdi

Is it possible to specify more than one dhcp range?
If not, will it be available in 1.3?

Sorry for making so much questions, but I'm trying to migrate our 
firewalls here, and I've to find work arounds for every feature we need.


Thanks for your patience.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Non power user

2008-06-17 Thread Gary Buckmaster

Hiren Joshi wrote:

Hello all,
 
I know this goes against best practise but would it be possible to 
have a non-admin user for the web interface on PFsense? Basically I 
would like to allow people to see the RDD graphs but no be able to 
make any changes to the setup etc.
 
Any idea how this could be done?
 
Many Thanks,
 
Hiren.
This *exact* feature is coming in 1.3 as part of the user manager setup. 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] monitoring bandwidth usage of individual lan addresses

2008-06-17 Thread Patrick M. Murray, M.F.A.
I'm going to run the CF card and see how long it lasts :)  they are  
cheaper each day - wouldn't be a big loss and i can always yank the  
card and back it up anytime.


Patrick M. Murray, M.F.A.
http://www.patrickmurray.net




On 17 Jun 2008, at 10:14-0400, Christopher Iarocci wrote:

I stuck a 60GB hard drive in a NET5501 and run the full install.   
Works
beautifully and I'm not worried about killing my CF card.  Maybe  
Patrick is

doing the same or could do the same if he is not.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of  
Chris

Buechler
Sent: Monday, June 16, 2008 3:11 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] monitoring bandwidth usage of  
individual lan

addresses

On Mon, Jun 16, 2008 at 3:07 AM, David Rees <[EMAIL PROTECTED]> wrote:
On Sun, Jun 15, 2008 at 5:43 PM, Daniel Lloyd <[EMAIL PROTECTED]>  
wrote:

The bandwithd package does just that.


But he's running on a ALIX board, isn't he most likely using the
embedded version which does not support packages?



Ah, missed that. No way currently to run packages on embedded, it's
not capable of saving data for things of this nature because of the
limits of CF. Some people do full installs on CF and run that way,
it's not recommended because theoretically it'll kill your CF. In
practice, I know of a number of people running that way and have yet
to hear from one who killed a CF card.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Non power user

2008-06-17 Thread Hiren Joshi
Hello all,
 
I know this goes against best practise but would it be possible to have
a non-admin user for the web interface on PFsense? Basically I would
like to allow people to see the RDD graphs but no be able to make any
changes to the setup etc.
 
Any idea how this could be done?
 
Many Thanks,
 
Hiren.


RE: [pfSense Support] monitoring bandwidth usage of individual lan addresses

2008-06-17 Thread Christopher Iarocci
I stuck a 60GB hard drive in a NET5501 and run the full install.  Works
beautifully and I'm not worried about killing my CF card.  Maybe Patrick is
doing the same or could do the same if he is not.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris
Buechler
Sent: Monday, June 16, 2008 3:11 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] monitoring bandwidth usage of individual lan
addresses

On Mon, Jun 16, 2008 at 3:07 AM, David Rees <[EMAIL PROTECTED]> wrote:
> On Sun, Jun 15, 2008 at 5:43 PM, Daniel Lloyd <[EMAIL PROTECTED]> wrote:
>> The bandwithd package does just that.
>
> But he's running on a ALIX board, isn't he most likely using the
> embedded version which does not support packages?
>

Ah, missed that. No way currently to run packages on embedded, it's
not capable of saving data for things of this nature because of the
limits of CF. Some people do full installs on CF and run that way,
it's not recommended because theoretically it'll kill your CF. In
practice, I know of a number of people running that way and have yet
to hear from one who killed a CF card.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Re: Destination NAT

2008-06-17 Thread Matias Surdi

Bill Marquette escribió:

On Tue, Jun 17, 2008 at 4:34 AM, Matias Surdi <[EMAIL PROTECTED]> wrote:

In our current firewall (using iptables) we have a set of rules that makes a
DNAT redirectin ALL outgoing udp port 53 (DNS) traffic to an internet DNS
server, so that everybody is forces to use it.

Is it possible to accomplish the same thing with pfSense?
If yes, which is the correct/recommended way to do it?


Firewall->NAT->Port Forward - there were numerous discussions on
changing the titles of our NAT entries, no concensus was reached so it
got left alone ;)  Create a rule there and assign it to your LAN
interface.  Don't forget TCP port 53 while you're at it.

--Bill


Thanks, that worked correctly.

Maybe in a few days we will have our new pfSense powered firewall :-)


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Destination NAT

2008-06-17 Thread Bill Marquette
On Tue, Jun 17, 2008 at 4:34 AM, Matias Surdi <[EMAIL PROTECTED]> wrote:
> In our current firewall (using iptables) we have a set of rules that makes a
> DNAT redirectin ALL outgoing udp port 53 (DNS) traffic to an internet DNS
> server, so that everybody is forces to use it.
>
> Is it possible to accomplish the same thing with pfSense?
> If yes, which is the correct/recommended way to do it?

Firewall->NAT->Port Forward - there were numerous discussions on
changing the titles of our NAT entries, no concensus was reached so it
got left alone ;)  Create a rule there and assign it to your LAN
interface.  Don't forget TCP port 53 while you're at it.

--Bill

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Destination NAT

2008-06-17 Thread Matias Surdi

Hi,

In our current firewall (using iptables) we have a set of rules that 
makes a DNAT redirectin ALL outgoing udp port 53 (DNS) traffic to an 
internet DNS server, so that everybody is forces to use it.


Is it possible to accomplish the same thing with pfSense?
If yes, which is the correct/recommended way to do it?

Thanks a lot.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]