Re: [pfSense Support] Re: multi-wan, multi-lan security

2010-08-07 Thread Tortise
- Original Message - 
From: Dave Warren dave-use...@djwcomputers.com

To: support@pfsense.com
Sent: Saturday, August 07, 2010 5:58 PM
Subject: [pfSense Support] Re: multi-wan, multi-lan security



In message b8ab6ffcb532416f938e8d117b87e...@dp2000xp Tortise
tort...@paradise.net.nz was claimed to have
wrote:



- Original Message - 
From: Dave Warren dave-use...@djwcomputers.com

To: support@pfsense.com
Sent: Saturday, August 07, 2010 4:51 PM
Subject: [pfSense Support] Re: multi-wan, multi-lan security



In message 24b7224eff7c4e19b1a43fd4df416...@dp2000xp Tortise
tort...@paradise.net.nz was claimed to have
wrote:


My ISP advised us not use common private LAN addresses for this
(common problem) reason.  (I now use randomly generated addresses)


I do hope you never need to contact the legitimate owner of whatever IPs
you're using...

Personally, if my provider gave me such advice (not just a single rep,
but the provider's official policy) I'd find competent provider.


Woops - sorry for being misleading.  I meant (and use) random numbers taken
from within the private address ranges.  (10.x.x.x etc)


In that case, excellent advice and one I would absolutely agree with.

I'm possibly overly sensitive on this particular issue just because I'm
tired of dealing with it professionally, one of $DAYJOB's partners used
to give out advice like this and we spent untold hours cleaning up.

I hope no offense was taken, certainly none was intended on my part and
if I came across to harshly, I do apologize.



Hey no worries, I accept I could have been a little less ambiguous, dangerous 
to assume anything when communicating...!

An interesting discussion.  I was using random numbers to minimise the risk of arp poisoning, a dead connection is best avoided! 
The comments about minimal increased security from using random nos (within private network ranges!) was not on my mind however its 
food for thought. 



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



[pfSense Support] SSD partition alignment in 2.0

2010-08-07 Thread David Burgess
Is the 2.0 installer aware of 4k sector discs, and does it align its
partitions accordingly?

I realize better SSD controllers have minimized the effects of
partition boundary misalignment, but I still prefer to introduce as
little entropy as possible. Call me teutonic.

db

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org