Re: [pfSense Support] Internet at the lake? Rogers Mobile InternetStick (Rocket) with pfSense?

2009-03-27 Thread Tortise
Check out the Linksys wrt54g3g which I use with a 3G XU870, (cheap 2nd hand) 
works well for portable Internet connections for a 
battery of wireless notebooks.  It runs from 12V so car battery power is also 
an option.

The code is open source and published by Linksys, whether that makes the 
drivers accessible I am not sure.

Kind regards
David

- Original Message - 
From: Chris Buechler c...@pfsense.org
To: support@pfsense.com
Sent: Friday, March 27, 2009 4:51 PM
Subject: Re: [pfSense Support] Internet at the lake? Rogers Mobile 
InternetStick (Rocket) with pfSense?


On Thu, Mar 26, 2009 at 10:09 AM, Vick Khera vi...@khera.org wrote:

 When we were at BSDCon in DC last month, the local wifi provided was
 over a shared connection built this way by hand using an OpenBSD
 laptop as the gateway to the verizon network via usb stick. It worked
 quite well for the first day :-)


The first day part is key there.  :)  It fell apart after that.

pfSense doesn't support any 3G devices. The driver support on FreeBSD
in our experience is somewhere between poor and non-existent depending
on the card. The cards with driver support tend to be old ones you
can't get new anymore.

3G requires PPP support as it's functionally virtually identical to a
POTS dial up modem. PPP dial up support may appear in 2.0. 3G drivers
is a bigger problem.

There are some boxes that'll output 3G to Ethernet in some fashion
(router generally), but they aren't cheap.  $200-300 USD if I recall.
That may be the best bet. One caveat though - don't know how it is in
.ca but most providers here in the US will limit you to 5 GB and
charge an exorbitant amount per MB above that.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org 


-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Is there any reason I can't Remote desktop through an ipsec tunnel?

2009-03-27 Thread Adam Armstrong

Marty Nelson wrote:


I have an IPSec tunnel connecting my network to one of our customer 
sites, and while I can ping a computer on their network I am unable to 
remote desktop to. Currently all of our customer tunnels are setup to 
terminate in our DMZ to limit access back into our network. I have a 
second firewall (monowall) in our DMZ that then routes all traffic out 
through the tunnel. I’ve drawn a rudimentary layout of how it’s setup 
(see below).


I have the IPsec rules to pass all traffic, and currently I have it 
setup to log all traffic as well. What’s strange is that when I 
attempt to remote desktop to it, I see no traffic relating to that at 
all. Nothing passing, nothing getting blocked. Like I said, I can ping 
the box just fine (and it shows up in the log), but I am unable to 
remote desktop to it and I don’t see anything getting blocked, or passed.


Hopefully this made sense. If it’s unclear, please let me know and 
I’ll try my best to clear it up.


LAN (192.168)---[pfSenseFW]---DMZ (10.100)---[monowall]---[ipsec 
tunnel to cust site]---Cust site


I would say that it's almost certainly MTU-related. RDP always seems to 
be the first thing hit by a failure of the pmtud mechanism to work.


The IPSEC tunnel will be reducing your MTU, and when the RDP server 
tries to send out a packet it'll get dropped. Try reducing the MTU of 
the interface of the server?


This usually manifests itself by the login screen background appearing 
(presumably because it fits into  1492 bytes), but then nothing more. 
Doesn't sound exactly like what you're seeing, but RDP + IPSEC issues 
are usually MTU-related IME.


adam.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Internet at the lake? Rogers Mobile InternetStick (Rocket) with pfSense?

2009-03-27 Thread RB
On Fri, Mar 27, 2009 at 01:18, Tortise tort...@paradise.net.nz wrote:
 Check out the Linksys wrt54g3g which I use with a 3G XU870, (cheap 2nd hand) 
 works well for portable Internet connections for a
 battery of wireless notebooks.  It runs from 12V so car battery power is also 
 an option.

Actually the best 3G router option I've found is an Alix 6b2.  It has
a miniPCI Express slot you can use for the cellular connection (no
miniPCI solutions exist AFAIK) and an LX800 with 256MB of memory.
$113 for the board, $10 for the case, and $??? for a card and
continued connectivity.

I also thought the wrt54g3g would be nice and have actually spend a
considerable amount of time working with it and getting better support
for it into OpenWRT.  For the price, the hardware is anemic compared
to the 6b2.  Their implementation of a TI cardbus on the mipsel
architecture is buggy to say the least, and added to the rather awful
open source releases they made it's been impossible to get a
2.6-series linux kernel running on it.  It is one of the two remaining
piles of Broadcom fail that force *WRT to continue to support
2.4-series kernels.

Linksys' releases are generically okay, but largely just pay lip
service to the open source concept.  Once you start digging into
model-specific features (like the G3G cardbus or the AG310's SIP
interface) you run into a brick wall of binary lumps that happened
to get shipped with the release instead of the source you were looking
for.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



[pfSense Support] RE: Is there any reason I can't Remote desktop through an ipsec tunnel?

2009-03-27 Thread Marty Nelson
That's a good point.  Where would I see if that was an issue?

Thanks,

-Marty

From: Fuchs, Martin [mailto:martin.fu...@trendchiller.com]
Sent: Thursday, March 26, 2009 5:11 PM
To: 'support@pfsense.com'
Subject: [pfSense Support] AW: Is there any reason I can't Remote desktop 
through an ipsec tunnel?

Perhaps some kind of MTU issue ?
RDP often has MTU issues ;-)

Regards,

Martin

Von: Marty Nelson [mailto:mnel...@transdyn.com]
Gesendet: Donnerstag, 26. März 2009 23:30
An: support@pfsense.com
Betreff: [pfSense Support] Is there any reason I can't Remote desktop through 
an ipsec tunnel?

I have an IPSec tunnel connecting my network to one of our customer sites, and 
while I can ping a computer on their network I am unable to remote desktop to.  
Currently all of our customer tunnels are setup to terminate in our DMZ to 
limit access back into our network.  I have a second firewall (monowall) in our 
DMZ that then routes all traffic out through the tunnel.  I've drawn a 
rudimentary layout of how it's setup (see below).

I have the IPsec rules to pass all traffic, and currently I have it setup to 
log all traffic as well.  What's strange is that when I attempt to remote 
desktop to it, I see no traffic relating to that at all.  Nothing passing, 
nothing getting blocked.  Like I said, I can ping the box just fine (and it 
shows up in the log), but I am unable to remote desktop to it and I don't see 
anything getting blocked, or passed.

Hopefully this made sense.  If it's unclear, please let me know and I'll try my 
best to clear it up.

LAN (192.168)---[pfSenseFW]---DMZ (10.100)---[monowall]---[ipsec tunnel to cust 
site]---Cust site

Thanks,

-Marty



RE: [pfSense Support] Internet at the lake? Rogers Mobile InternetStick (Rocket) with pfSense?

2009-03-27 Thread Chuck Mariotti
Well, I do happen to have an Alix 6b2 here... my question is, what software are 
you running to allow you to use 3G? pfSense? If so, what miniPCI Express slot 
card are you using exactly? I assume this means I could throw on a HUGE 
antenna?! All I have to do is put in a SIM and it goes type of thing? Acts like 
a regular  WAN port...?

More info PLEASE!

-Original Message-
From: RB [mailto:aoz@gmail.com] 
Sent: Friday, March 27, 2009 9:58 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] Internet at the lake? Rogers Mobile 
InternetStick (Rocket) with pfSense?

On Fri, Mar 27, 2009 at 01:18, Tortise tort...@paradise.net.nz wrote:
 Check out the Linksys wrt54g3g which I use with a 3G XU870, (cheap 2nd hand) 
 works well for portable Internet connections for a
 battery of wireless notebooks.  It runs from 12V so car battery power is also 
 an option.

Actually the best 3G router option I've found is an Alix 6b2.  It has
a miniPCI Express slot you can use for the cellular connection (no
miniPCI solutions exist AFAIK) and an LX800 with 256MB of memory.
$113 for the board, $10 for the case, and $??? for a card and
continued connectivity.

I also thought the wrt54g3g would be nice and have actually spend a
considerable amount of time working with it and getting better support
for it into OpenWRT.  For the price, the hardware is anemic compared
to the 6b2.  Their implementation of a TI cardbus on the mipsel
architecture is buggy to say the least, and added to the rather awful
open source releases they made it's been impossible to get a
2.6-series linux kernel running on it.  It is one of the two remaining
piles of Broadcom fail that force *WRT to continue to support
2.4-series kernels.

Linksys' releases are generically okay, but largely just pay lip
service to the open source concept.  Once you start digging into
model-specific features (like the G3G cardbus or the AG310's SIP
interface) you run into a brick wall of binary lumps that happened
to get shipped with the release instead of the source you were looking
for.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



[pfSense Support] passive wifi repeater? Re: [pfSense Support] Internet at the lake

2009-03-27 Thread Paul Mansfield
have you thought about a passive wifi repeater?

http://www.pbs.org/cringely/pulpit/2002/pulpit_20020207_000721.html


-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



RE: [pfSense Support] Is there any reason I can't Remote desktop through an ipsec tunnel?

2009-03-27 Thread Marty Nelson
When you say to adjust the MTU on the server, forgive the question, but which 
server?

Thanks,

-Marty


-Original Message-
From: Adam Armstrong [mailto:li...@memetic.org]
Sent: Friday, March 27, 2009 2:14 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] Is there any reason I can't Remote desktop 
through an ipsec tunnel?

Marty Nelson wrote:

 I have an IPSec tunnel connecting my network to one of our customer
 sites, and while I can ping a computer on their network I am unable to
 remote desktop to. Currently all of our customer tunnels are setup to
 terminate in our DMZ to limit access back into our network. I have a
 second firewall (monowall) in our DMZ that then routes all traffic out
 through the tunnel. I've drawn a rudimentary layout of how it's setup
 (see below).

 I have the IPsec rules to pass all traffic, and currently I have it
 setup to log all traffic as well. What's strange is that when I
 attempt to remote desktop to it, I see no traffic relating to that at
 all. Nothing passing, nothing getting blocked. Like I said, I can ping
 the box just fine (and it shows up in the log), but I am unable to
 remote desktop to it and I don't see anything getting blocked, or passed.

 Hopefully this made sense. If it's unclear, please let me know and
 I'll try my best to clear it up.

 LAN (192.168)---[pfSenseFW]---DMZ (10.100)---[monowall]---[ipsec
 tunnel to cust site]---Cust site

I would say that it's almost certainly MTU-related. RDP always seems to
be the first thing hit by a failure of the pmtud mechanism to work.

The IPSEC tunnel will be reducing your MTU, and when the RDP server
tries to send out a packet it'll get dropped. Try reducing the MTU of
the interface of the server?

This usually manifests itself by the login screen background appearing
(presumably because it fits into  1492 bytes), but then nothing more.
Doesn't sound exactly like what you're seeing, but RDP + IPSEC issues
are usually MTU-related IME.

adam.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org


-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



[pfSense Support] Help with dynamic routing configuration

2009-03-27 Thread Elvis Palombizio
Hello,
I've posted this to the forum but I figured I'd try the support mailing list. 
Here is my situation:

I'm setting up a site to site openvpn between two pfsense boxes and I want to 
ensure that the following behavior be exhibited:

* Dynamic routing information passed between locations through the 
OpenVPN.

* Each pfSense should NOT advertise the WAN routes into the LAN.

* I can modify the RIP timers accordingly.

I need to be able to modify the RIP behavior and I thought I could do this in 
the GATEWAYS file, but this file is rewritten each time I turn RIP on and off.

Does anyone know how I can make changes to the dynamic routing behavior and the 
syntax?

Thanks,
E



BEGIN:VCARD
VERSION:2.1
X-MS-SIGNATURE:YES
N;LANGUAGE=en-us:Palombizio;Elvis
FN:Elvis Palombizio
TITLE:Senior Systems Engineer
TEL;WORK;VOICE:(860) 331-3052
TEL;CELL;VOICE:(860) 202-9226
X-MS-OL-DEFAULT-POSTAL-ADDRESS:1
EMAIL;PREF;INTERNET:elvis.palombi...@primeadvisors.com
X-MS-TEXT;CUSTOM2:MCSE/A
X-MS-CARDPICTURE;TYPE=PNG;ENCODING=BASE64:
 iVBORw0KGgoNSUhEUgAAAOgAAABcCAYAAABk8vkbAXNSR0IArs4c6QRnQU1B
 AACxjwv8YQUgY0hSTQAAeiYAAICEAAD6gOgAAHUwAADqYAAAOpgAABdwnLpRPAAA
 PYFJREFUeF7tffdbVNm27X1/4vvl3XtPtzm2OUcUFUFAEMk551DknHPOOedcQJGTwnhjrrKw
 QGzQLm3P6V3fV5/dVNXea6+15pppzDH/D/j6L+2lzYA2A7/mDIiAai9tBrQZ+DVn4L9+zWFp
 o9JmQJsBZd1q06DNgDYDv+4MaALNNjJtBjQN+ivtgd2tFXyY7/3bhrQ91YiPS2N/2/21
 G385A5oG/RV2xe4OtoYLsVxhD0OlCxYN89jZ2fm5I9vdxVLeAywknsRqvS92ttZ+7v21ux06
 A5qA/g0bY2dr2eyuu9joTkRz3AP4OFtjpcYVjTUlWF9f/6kj2/2wiY6Iy4j0fInRmFNYLrXF
 1sZnId1Zn/+p49FuZpwBTUB/8k6Qjb6UeR3bC0PY3dnF9mwbOnQP4ePphs62RqzWuqMkMwbz
 C/PYpVb7Wa+d9QW0hl1AY2MjcnSBmE29isX2RGxtbeHj2hwW0//A1my3GrP2+nkzoAnoz5tr
 dae1xkDM607AUPoWq6srWKZA+rvZoKOjA0P9XVir80BBcihmZ2d/qjB8WJlBT+QFdHd3Y2Bg
 AH0FPljMe4i5mQmsNoVxzCdhKKCGX1n+qQfHT16eX+52moD+xCX5uDaLvsgzSPG6A0PaZYx3
 FKE79Qmys7MxNDSE5fkJ7DT6Iz3WH1NTUz/VD/2wOoeBmEvo6uqCYXERs2M9WCl7gZG6JCxk
 30X4u3swJJ7ATHep0qra6+fMgCagP2ee1V3W26OR4HIFrXUlWMq6gYl8G2QFP1dCMTc/h83F
 CWy2RyIuMgCTk5P4uPPxp43uw9Y6ZtJvobmpDqsrq1hbW1PafabQBu0xN5CWloaxjEeYznuF
 hYUFTYv+pJXRBPQnTPTu5hJ2P25jPv06okN90dnZicWSV1itfouEYGf09fVhjUGhrZkWLDSE
 oDzFF/NtqdgYKMD2ZD12ty0fUd3d5v3GqrDRlYSNjlisdSZiMfcBOmuysbS8jA8fPmC5PU5p
 0bzAe6ivr8dwdQyjvKcw3N2CzeVZzpzmj/7o7aMJ6A+eYQkKLWZcxcZgIer9T6C8vBzj4+NY
 agrGZqMfIkP9MDw0gA19L9a7dVhvCMBg5is0RVxHbcB5ZVY2pLgogbHka2OyBdNxJ1Dh9Rsa
 /X/HSNQJLCSdgSHvCRZGmvDxwzZWB4uVgGYFWysfeXp8kMGiy2jNeK9M9K3p9p9qhlvy+f9d
 rqUJ6A9eqY3uVCVkhuSzKA64id7eXpqIBqPm6ozBcG0UxhviER9gC2fH13C0t4WT01uEhYWh
 PPI5Sj3+haioSMwbFiwqDNv0I+viXyIn1hNR0dEI8PfDO0dbuL26iVzPS1gotsFqnbsS0NxI
 e/T09FCzMqhVQAEWQeYz6ctcsLyyopm7P3APaQL6AydXTMDl/Eco9DiDxdQLKAq6j/7+fuXf
 bfamYr0rHpmRb+HgYIfq6molBK2trehoqsJE3huUePwG57cOKvUhPqolwQsfP3zE0OAgikIf
 YrDYH91d7cr0lvtX19RAF+GDXgawRECbUp0wyO9ubG1iqfglRuIvocr3JOaSzmKYkeft7e0f
 Oov/5ItrAvoDV/+jYRhjMScRGuiNmewHKI94ooRwzTClhHO2KRL+Ho6or63GSH8n9IN1WGiK
 xlzmXcQ5nEZoSLAyLcfGxrC5uXmskYqvi49Hf1dyrAKGEMHLDnmN0ZS7MLTqYKB5Ozc1hImh
 TrTkBigBnS16g4H+PmxwDMv0ndPen0dhgo/Sor3lsVhhukh7/ZgZ0AT0x8yruupmfw5yXU+h
 tKwMI+V+6M54g97uDqwN5FBA47AmQtpIE7fKB0sVzlgufobZlKuIe3sRObm5Kicp0dyNjY1j
 m5Ef9J2Y7S451vdFSDc2NzA9PYO8MBuMRp3EAnO0EzxURuIuQk+wwnKJlRLSmeYErCwtYKXi
 NUJcn6OyvJSf/8E00UuVs7Wkdv+BS/Jvd2lNQH/gkq3WuCPZz5hGmeoifK/BGyudOiy2xCDc
 2xYP7t6Era0dvH184O8fgAB3e0zrziPJkcGb8jIKzrTKOX4LomijN50gA2+lHY/zO6OQbqI1
 ywMVPqdhb2cDd3cPBAcHw9fXF95Oz1EYeAvLFNKVaicslVgjIoQmMQ+P2dL36Is+p7TwNoNK
 2svyM6AJqOXnlCkVYyJ/Ke8xosICMDw8DMMUTcT2CEzVh+P1i0eIj49HGTVrc3OzChwNdtRg
 LMsabs/OIiAgwGgK01f91pccCr3JT5VW+/jxmHlUZkskt5kc7oZanR06mmuUryzpn/b2duRS
 m6cEvFRCOpX3HOmpyZigZjd050KvO4PKykqsLy9861C17x9jBjQBPcYkfdNXWJmyVGCF9b4s
 BZXLy8lUJuT6wijWO+Pg+dYKmZlZaGlpwcT4KBZHm7DUEITygD/g8saKaZgKJRQzMzPflVpZ
 yrmDwZjzFLA+bH4D4kc0tWjsovwsasw70NeGYGWyQ0H79HN6pTH78t5jpsAapcUFCiu8OlqL
 JaZdiqPfYCHtCtaWDcfS2t80n//wL2sCauENsENQwmIy0xBJpxRaqDA3kxHYeWzOdmC1MwGp
 MT4YbMzBckcK0xge9PGeI9HzDnS6BGUqjo6OYsFg+K7IqAAaJmJPQZ9wAnWVxd+kgcXUlWis
 gBSGqPGzQmwwR/ztUs5dYnFDsNxXCH1TLKtcXqCuLAOLhAOuj1ZhiTne+U9pl56GAuUvay/L
 zYAmoJabS3UlCdKMRp9AR+gZLGXfREFGPObm5rDen0W0Tjza8n0Q5PoU7o5WCHr3GD2x1xWQ
 obMqXQWEVmnW7nz8vlrQ7dlO5HtcVNHVmpxIJUTf+pJ7r82PYSH5HPJdf4fz04vwtrsN3btL
 NMGNaZfJmhCV9lkn0mkp6zqqfU+pOtKGNHf19+P4vt86rn/q9zUBtfDKb/bnosjjJHRRQZjL
 uYeq7FAYBsqxQjid51trvH3rhIqKCuXfDTflYT7jJiJtTyCGYAHRnH8lGrrRk4bMiHdKezel
 vfvu6OqHjx9QoXuHgdg/UFOWi7a2NmV2JybEoSzyKZbLbTAz2MSAVyIaIm7A/s1rzFGgG+Os
 MDExcXzf18Jz/594OU1ALbyqay1hyPW6iNraWgyVBWChys0IgPd7QzM2ETUEAYgpq+/Ihj79
 BrxfnENQULDySReXiNn9CzWgK9VuKMhKxhz9wabYRxgjpPDYgSKzeZBDYoZBppQwFwzEX8VU
 bzX90DkFUaytqcZA1musVL5hysUOAc5PVbBLn8p7ht80RnQ14ILFdpUmoBabSl6I0dvVOm/k
 +d5RUdjJnkoC4p0xXuIOLy8PNDY1YWa4Eyst4eiKuQJn65vIy8tT6B0xb/98Yx8BTJfgVPYd
 NBdGYyb/NXojz6sxbG1/X2mYACOk5C0vLR5VARc45ihsri4os7m7uVhFdGfynyEsJFAFkBby
 nqI++BK6O1oJqvi5bBCWXMJf7VqagFpoRYQyRARkKfc+CgIeqKJnw/SgqliJd3+I0sIs6FuY
 7K+0w3LuHcLlLqIxN9RYakbtJMI5VhHEQm4HdKc7oD/LESvlDhjOfoOKaEZOA29An3EL8zX+
 +Lg688Wod0g4NsBa05aUtxgvD1BA+PrqclUlY/7aXhzFeL4jS90c1X2mC+2xWOaAgfJImtf7
 

Re: [pfSense Support] Internet at the lake? Rogers Mobile InternetStick (Rocket) with pfSense?

2009-03-27 Thread RB
On Fri, Mar 27, 2009 at 08:45, Chuck Mariotti cmario...@xunity.com wrote:
 Well, I do happen to have an Alix 6b2 here... my question is, what software 
 are you running to allow you to use 3G? pfSense? If so, what miniPCI Express 
 slot card are you using exactly? I assume this means I could throw on a HUGE 
 antenna?! All I have to do is put in a SIM and it goes type of thing? Acts 
 like a regular  WAN port...?

 More info PLEASE!

Unfortunately, the project died on the vine before I could get a
miniPCI-E card purchased (was using the sierra 595 with the G3G and
the sierra 860 on a laptop), but Sierra Wireless cards all work quite
well.

Generally speaking (as has been noted here), they appear as USB serial
devices that you use as a PPP device and dial a short (*99# for US
ATT) number.  We were using OpenWRT, in which the 'comgt' package
provides sane defaults for most 3G setups, including EVDO.  Since
OpenWRT is packaged for x86, there's no reason it won't run on the
6b2; of course, there's also no reason you shouldn't be able to use
pfSense as well.  All you need is a card that comes up as a USB serial
device (some require special drivers and don't very well), and you
should be able to run PPP on your platform of choice.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Internet at the lake? Rogers Mobile Internet Stick (Rocket) with pfSense?

2009-03-27 Thread Dave Donovan
On Wed, Mar 25, 2009 at 11:31 PM, Chuck Mariotti cmario...@xunity.com wrote:
 I have the option of staying/working from a home on a the Lake for a number 
 of weeks this summer here in Ontario/Canada. Nice and relaxed. Unfortunately, 
 the only internet access is dialup, which is not acceptable (of course).

 After much poking around, I borrowed my wife's iPhone, went up to the highest 
 point in the house, stuck it up against each window, and low and behold with 
 one of those windows... one bar of 3G. 3G / Edge jumped In and Out, but it 
 was definitely there. Some tests were pretty good... 2mbit down, 500kup... 
 others, pretty bad... very bad... 3G signal would go down, etc... but it's 
 there!

Hey Chuck,

I've got an HTC TyTn II.  I think you told me that you had the same
one, or a similar one.  It has a connector for 2 external antennae.
One is for GPS, I think the other is for cellular.  The external
antenna may also solve the all-or-nothing issue with your 3g phone by
giving you a bit of a boost.

There is a registry hack to make the device support WiFi tethering.
In this case, you would be turning the phone into a WiFi AP and you
could just connect to the phone using pfSense and any supported
wireless card, including your Alix.  Bridging 3g to WiFi with a
commodity phone simplifies that part of the equation.  Make sure to
turn off the Bluetooth radio as it seems to interfere with reception.
(this may also help on the Iphone)

I know a TyTn isn't exactly cheap but if you don't have one already,
you might be able to get one cheap with a screen defect or something.
It's also quite possible that other, older/cheaper models would serve
as well but I can only speak for what I've got.

You could also jail break the Iphone and tether to it.  Signal
strength is an issue as you pointed out.  I haven't seen an external
antenna connector on the Iphone.  I don't know how your wife would
feel about you putting her Iphone in a tupperware container and
hoisting it up a pole just so you could have Internet access.  :-)

If you were doing wireless tethering, you wouldn't strictly need
pfSense in this arrangement.  One benefit to using it would be
tunneling, with OpenVPN or IPsec, back to work/home.  If you turn on
compression you could boost your effective throughput with some types
of traffic and possibly reduce your cellular data usage.

Good luck,

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Internet at the lake? Rogers MobileInternetStick (Rocket) with pfSense?

2009-03-27 Thread Tortise
Actually the best 3G router option I've found is an Alix 6b2.  It has
a miniPCI Express slot you can use for the cellular connection (no
miniPCI solutions exist AFAIK) /

Would the Dell 3G Mini PCI Express modules used in their notebooks work?  

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Internet at the lake? Rogers MobileInternetStick (Rocket) with pfSense?

2009-03-27 Thread RB
On Fri, Mar 27, 2009 at 14:39, Tortise tort...@paradise.net.nz wrote:
 Actually the best 3G router option I've found is an Alix 6b2.  It has
 a miniPCI Express slot you can use for the cellular connection (no
 miniPCI solutions exist AFAIK) /

 Would the Dell 3G Mini PCI Express modules used in their notebooks work?

Probably, but I have no idea what the actual chipset is.  The 6b2's
Express slot is USB-only (remember that Mini PCI Express is either
PCI-E or USB-2.0), so you'd have to make sure that you get a card that
supports the USB side.  That said, I seem to have seen a lot more
USB-based than PCI based mP-E cards, so your chances are good.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org