RE: [pfSense Support] RE: [SPAM] [pfSense Support] RE: [SPAM] RE: [pfSense Support] RE: [SPAM] RE: [pfSense Support] RE: [SPAM] Re: [pfSense Support] RE: [SPAM] Re: [pfSense Support] website browsing

2009-04-16 Thread Craig Roy
Hi Juan,

My recommendation would be to do the following
1. Setup another box get it up and running with the minimum config necessary
to keep all your users happy, especially if they are paying customers or
employee's.

This will get them off your back while you troubleshoot your throughput
problems with less pressure to get them back online. When you are sure that
your normal box is stable, swap it over after giving users advance notice of
the swap over, with an expected downtime to swap 1 PC out and 1 back in and
reversed if unsatisfactory result.

2. Depending what NIC's you are using, I did use Realtek chipset Netgear
NIC's for a while. These lasted about 1 - 2 years before slowing to a
standstill. I replaced these about 6 months ago with Intel Gigabit NIC's.
Loadbalancing Dual WAN's, 2x 8MB WAN connections. When I replaced the
Realtek Chipset NIC's, 1 only was failing, but I replaced ALL 4, as they
were all the same age and Unix is hard on NIC's. I didn't want the same
thing to happen a few weeks down the track.

3. Clean install PFSense, configure the system and do a Config Backup for a
later stage. Test the throughput on your new install, PC eitherside and
confirm data transfer. On Gigabit NIC's I am getting about 100MB/Sec or more
throughput (steady on a file about 60GB).

4. If you still have issues on the older system, it's not uncommon for those
older boards to have PCI slots fail. If this is the situation, replace PC
and start again. In Australia, it's easy to get 2 or 3 year old PC's, EX
GOV, for $200 - $300 with 3GHz P4 CPU, 40 - 80GB HDD's (some IDE/SATA) and
1GB RAM. So it should be possible for you as well.

5. You might also consider replacing patch cables between NIC's and Router
and PFSense. Eliminates the unexpected.

Kindest regards,





-Original Message-
From: Juan Rivera [mailto:jriv...@americancableco.com] 
Sent: Thursday, 16 April 2009 9:50 PM
To: support@pfsense.com
Subject: [pfSense Support] RE: [SPAM] [pfSense Support] RE: [SPAM] RE:
[pfSense Support] RE: [SPAM] RE: [pfSense Support] RE: [SPAM] Re: [pfSense
Support] RE: [SPAM] Re: [pfSense Support] website browsing

hey this is getting worse we can't even get to the home page now we have
to hit refresh over and over so we can get to the home page its running
really slow I think just like dial up lol well I don't know what else to
do I called our provider and they said everything seems to be good I
connected a lap straight on the router and it loaded in 17 milliseconds
any setting on the fire wall could be wrong or you think the computer
where pfsence is installed it's not good enough the specs are  700 mhz
512 of ram and 100 mb/s nick cards let me know what you guys think   

-Original Message-
From: Juan Rivera 
Sent: Tuesday, April 14, 2009 9:44 AM
To: support@pfsense.com
Subject: [SPAM] [pfSense Support] RE: [SPAM] RE: [pfSense Support] RE:
[SPAM] RE: [pfSense Support] RE: [SPAM] Re: [pfSense Support] RE: [SPAM]
Re: [pfSense Support] website browsing

Hey Tim here are the specs of the firewall  its running on a 700 MHz
processor 512 of ram and 2 100 MB nicks is an old gateway mid tower atx

-Original Message-
From: Tim Dickson [mailto:tdick...@calistogaranch.com] 
Sent: Monday, April 13, 2009 4:19 PM
To: support@pfsense.com
Subject: [SPAM] RE: [pfSense Support] RE: [SPAM] RE: [pfSense Support]
RE: [SPAM] Re: [pfSense Support] RE: [SPAM] Re: [pfSense Support]
website browsing

It all depends on throughput levels - but yes, I can pretty much
guarantee
it can handle it. (1990's hardware can handle 70 users with modest
throughput), but if you are curious - what are your specs?
I was more wondering if you had a couple machines with malware that may
be
pegging out your connections state table, or some P2P users. 
Check your state table and make sure it isn't maxing out.  And make sure
if
you have P2P users, that they aren't maxing out your bandwidth. 

Blank MTU in your config is fine - that means it will be at 1500 - which
is
the standard on most connections (at least in the US).

You didn't answer if all was well when bypassing the pfSense box.  If it
is,
then start segregating things.  Try it with JUST your machine - pfSense
-
Modem, and see how that works... this is granting your box is malware
free
:) - if in doubt, grab an Ubuntu LiveCD (or variant) and boot it up on
your
machine to test.

Good luck!
-Tim


-Original Message-
From: Juan Rivera [mailto:jriv...@americancableco.com] 
Sent: Monday, April 13, 2009 12:57 PM
To: support@pfsense.com
Subject: [pfSense Support] RE: [SPAM] RE: [pfSense Support] RE: [SPAM]
Re:
[pfSense Support] RE: [SPAM] Re: [pfSense Support] website browsing

Yeah just called my ISP they are checking on the modem to see if there
is something wrong with it  as the MTU was blank before I made any
changes to it, now it got me thinking I have more than 70 computers
connecting to my free BSD you think it can't handle that many ?

-Original Message-
From: Tim 

RE: [pfSense Support] Balancing

2006-11-12 Thread Craig Roy
Hi Josep,

In the WAN and OPT1 NAT rules the ! symbol makes the reverse sense of the
rule, (means that it is an inbound rule, where the rule without the ! is an
outbound rule).

The Last WAN and OPT1 Rule that applies to * Port and * Destination is the
default rule which is made automatically. I found that by deleting this rule
the system became unstable, so I made it the last rule.

The LAN Rules also are in Outbound traffic and Inbound traffic for both WAN
and OPT1 to pass through, although the default LAN rule should be placed as
the LAST rule to be applied. (I will have to check the document and update
it if this is not so).

PROTO   SOURCE  PORTDestination PORTGATEWAY DESCRIPTION
* 192.168.1.0/24 ***BalancerDefault

When I wrote the document referred to below, the Rules where take from an
actual working PFSense Firewall. I still use the same configuration to this
day.

I hope that this has been helpful.

Kindest Regards,
 
Craig Roy
Horizon IT Consultants

-Original Message-
From: Josep Pujadas i Jubany [mailto:[EMAIL PROTECTED] 
Sent: Monday, 13 November 2006 8:04 AM
To: pfSense
Subject: [pfSense Support] Balancing

Hello!

I'm configuring pfSense with balancing for my Internet connections. I don't 
understand very well the outbound NAT and firewall rules explained at:

http://doc.pfsense.org/contrib/PFSENSE-LoadBalance-FailOver-V3.pdf

Outbound NAT


Interface Source Source Destination  Destination
 PortPort 

WAN2  192.168.1.0/24 *  186.165.20.0/24  *
WAN   192.168.1.0/24 *  182.165.30.0/24  *
WAN   192.168.1.0/24 *  !182.165.30.0/24 *
WAN2  192.168.1.0/24 *  !186.165.20.0/24 *
WAN   192.168.1.0/24 *  ** 

  
192.168.1.0/24 is the LAN, 182.165.30.0/24 is the WAN and 186.165.20.0/24  
is the WAN2 (OPT1). Why 3 rules for WAN? Isn't enough the last? Why 2 rules 
for WAN2? Why not one rule like the last (for WAN) for WAN2 too?

LAN Firewall rules
==

Proto  Source  Port Destination  Port Gateway

*  192.168.1.0/24  ***Balancer
*  192.168.1.0/24  *186.165.20.2/24  *Balancer
*  !192.168.1.0/24 *!186.165.20.2/24 *Balancer
*  192.168.1.0/24  *182.165.30.2/24  *Balancer
*  !192.168.1.0/24 *!182.165.30.2/24 *Balancer

Isn't enough the first rule to ensure traffic to the ADSL routers?

Thanks in advance,

Josep Pujadas-Jubany


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG.
Version: 7.5.431 / Virus Database: 268.14.3/531 - Release Date: 12/11/2006
7:34 PM
 

-- 
No virus found in this outgoing message.
Checked by AVG.
Version: 7.5.431 / Virus Database: 268.14.3/531 - Release Date: 12/11/2006
7:34 PM
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] Setting up m0n0mon for Multiwan/Multiinterface

2006-06-30 Thread Craig Roy
Interesting find. Anything like this planned for PF in the future at all?
Not that I would actually use it myself at present, but it may be helpful
for someone that has a few PF firewalls to monitor.

Kindest Regards,
 
Craig Roy
Horizon IT Consultants

-Original Message-
From: Holger Bauer [mailto:[EMAIL PROTECTED] 
Sent: Friday, 30 June 2006 9:22 PM
To: support@pfsense.com
Subject: [pfSense Support] Setting up m0n0mon for Multiwan/Multiinterface

Just in case you have multiwan and are interested in live views of all your
lines on your desktop ;-)

I just found out that with the new m0n0mon version you can have several
instances running with it's own configfile each like

monomon.exe -config:path\wan1.conf
monomon.exe -config:path\wan2.conf


Set up each instance to show another WAN and mark them as autorun
Connection. Then check start with windows and automatically start all
connections marked as autorun. You also can use additional parameters (
http://monomon.matf.de/para_new.php ) to set it up.

Just wanted to let you know that it's not limited to monitoring one
interface only (which it was previously as the configuration was stored in
the registry and thus no different configs could coexist).

Holger


Virus checked by G DATA AntiVirusKit


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.394 / Virus Database: 268.9.7/379 - Release Date: 29/06/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.394 / Virus Database: 268.9.7/379 - Release Date: 29/06/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] traffic usage on LAN

2006-06-07 Thread Craig Roy
In the Traffic Graph section, use the drop down box and select LAN. It is
there by default. This is an over all traffic flow graph, but it does not
show individual users traffic. 

Kindest Regards,
 
Craig Roy
Horizon IT Consultants
[EMAIL PROTECTED]
 
AUSTRALIAN RESELLER
 FOR

-Original Message-
From: Jack Pivac [mailto:[EMAIL PROTECTED] 
Sent: Thursday, 8 June 2006 9:46 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] traffic usage on LAN

Can one please elaborate on this a bit? I've tried a bit of googling but 
not sure exactly where to start.

At the moment ntop only seems to be monitoring my WAN side.

Cant seem to find anything in the wiki or documentation, but I might be 
looking in the wrong place.

All help much appreciated.

Kind Regards,
Jack

on 08/06/06 11:10 Holger Bauer said the following:
 Yes.
 
 
-Original Message-
From: Jack Pivac [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 08, 2006 12:08 AM
To: support@pfsense.com
Subject: [pfSense Support] traffic usage on LAN


Hi Team,

Looking to try and monitor traffic usage to LAN clients. Is this 
possible with something like NTOP?

Cheers,
-- 
Jack Pivac
Delphinus Technology
http://www.delphinus.co.nz/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


 
 
 
 Virus checked by G DATA AntiVirusKit
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 


-- 
Jack Pivac
Delphinus Technology
http://www.delphinus.co.nz/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.394 / Virus Database: 268.8.3/358 - Release Date: 7/06/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.394 / Virus Database: 268.8.3/358 - Release Date: 7/06/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] usb nic

2006-05-12 Thread Craig Roy
http://www.intel.com/network/connectivity/products/pro1000mt_dual_server_ada
pter.htm

http://www.intel.com/network/connectivity/products/pro1000mt_quad_server_ada
pter.htm

These may not necessarily be your cheapest solution, but they will most
likely be the most reliable.

I saw listed in ebay a couple of these for under $50 and sold for that much.
You may need to keep an eye open for them, as they don’t come up often. As
they are 64bit PCI-X slot compatible and they should also work with 32 bit
PCI slots.

I already have an Intel 64bit NIC located in a 32bit slot and has been
running for about 2 years (in an ms workstation) 

Kindest Regards,
 
Craig Roy
Horizon IT Consultants
[EMAIL PROTECTED]
 
AUSTRALIAN RESELLER
 FOR

-Original Message-
From: Ispánovits Imre [mailto:[EMAIL PROTECTED] 
Sent: Friday, 12 May 2006 8:20 PM
To: support@pfsense.com
Subject: [pfSense Support] usb nic

Hi,

Does anybody can recommend usb ethernet nic which works with pfsense?
O.K. I know that is not a correct solution ,but there is no way to put more
cards in my box (there are 5 nic's already)


Best regards
Imre

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.392 / Virus Database: 268.5.6/337 - Release Date: 11/05/2006
 
  

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.392 / Virus Database: 268.5.6/337 - Release Date: 11/05/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] Load balance dude

2006-05-10 Thread Craig Roy








Hi,



I havent seen or heard of anyone
getting a Rare Thins, unless someone has posted this error
message in the forums at some point.



I experience regularly OPT and WAN
Interfaces attempting to sync but does not sync until I reset the ADSL routers
a couple of times to get them reconnected. I dont know if it is the NICs
or routers or PF.



Is this the problem you are experiencing?
Would take a screen dump and give as much information as possible.





Kindest Regards,



Craig Roy

Horizon IT Consultants



AUSTRALIAN RESELLER


FOR













From: Overpeer ---
[mailto:[EMAIL PROTECTED] 
Sent: Thursday, 11 May 2006 12:37
AM
To: support@pfsense.com
Subject: [pfSense Support] Load
balance dude





Hi!

I'm try to configure a load balance in pfsense BETA3, but .. although i have
read some pdf documents in the tutorials secction, this documents are ... too
much specific for the examples, no explain what is the meaning of each section
and variable and i don't know if i have a configuration mistake or if this
feature don't work fine, somebody has some documentation about load balacing in
pfsense?? 

When i configured the load balance pool, it do a not equal balanced, but rare
thins occurs ... for example, if i disconnect the WAN interface... all traffic
go to OPT1, this is good, but when plug again WAN ... then ... is rare, in the
traffic graphic i see that WAN outbound traffic is equal to OPT1 inbound
traffic ... and if i disconnect OPT1 ... keeps on giving the same result
althought OPT is disconnected xD 

I know that it is a beta :) but... is it a know bug? or maybe a mistake
configuration?

Regards.

--
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.392 / Virus Database: 268.5.5/335 - Release Date: 9/05/2006








--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.392 / Virus Database: 268.5.5/335 - Release Date: 9/05/2006
 

  


RE: [pfSense Support] Re: Booting problem

2006-04-22 Thread Craig Roy
Hi db,

I did a fresh install of PFSense last Monday (in Australia) when it was
released. I have not had a problem with installation or booting with the
problems that you are experiencing.

My suggestion would be to download the ISO again from another mirror, just
in case their image has become corrupted.

Normally a Hex error message may either indicate a hardware or software
problem and a given location, but seeing you have installed another O/S,
then I would suggest that it may be your ISO.

If you press the Pause Break key when it starts to run the garbage hex, will
it pause so that you can get the start of it to find the address of the
error to assist in diagnosis?

Kindest Regards,
 
Craig Roy
Horizon IT Consultants

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Saturday, 22 April 2006 9:15 PM
To: support@pfsense.com
Subject: [pfSense Support] Re: Booting problem

Right after trying to boot I get a lof of junk (registers and their values
in
hex) running endlessly down the screen. Any idea what's wrong?

I've just installed FreeBSD 6.1 RC1 on the gateway and it boots fine, so the
problem must be with pfSense's kernel or boot manager?

br
db

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.5/321 - Release Date: 21/04/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.5/321 - Release Date: 21/04/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] Re: Booting problem

2006-04-22 Thread Craig Roy
Hi DB,

Just had another thought that you may want to run a MEMTEST86 on your system
to make sure that your RAM is ok and that it does not have a minor problem. 

If you have not used MEMTEST86 before, it is a bootable CD and only about
5MB ISO and can take from a few minutes to a few hours to run.

RAM problems can make all sorts of strange errors. 

If you choose to do this test, it is an autostart and unless you halt the
test it will continue indefinitely. Normally the test when run once
completely and show OK, further tests may not make any difference to the
results.

This diagnostic utility is FREE and works well with all RAM types, except it
does not recognise VGA RAM, unfortunately. Hope that this is helpful.

http://www.memtest.org/


Kindest Regards,
 
Craig Roy
Horizon IT Consultants
[EMAIL PROTECTED]
 
AUSTRALIAN RESELLER
 FOR


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Saturday, 22 April 2006 9:15 PM
To: support@pfsense.com
Subject: [pfSense Support] Re: Booting problem

Right after trying to boot I get a lof of junk (registers and their values
in
hex) running endlessly down the screen. Any idea what's wrong?

I've just installed FreeBSD 6.1 RC1 on the gateway and it boots fine, so the
problem must be with pfSense's kernel or boot manager?

br
db

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.5/321 - Release Date: 21/04/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.5/321 - Release Date: 21/04/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] Re: Booting problem

2006-04-22 Thread Craig Roy
Hi DB,

Have you been able to install PFSense on that machine at all ever? As it
sound more like a hardware issue or incompatibility with something in your
hardware arrangement.

However, it is not uncommon to have new RAM fail out of the box. I have
experienced that before. It will at least confirm that you have known good
RAM.

What other Hardware is in your system and brands and chipsets etc, so that
anyone else may have an idea if it is an incompatibility problem that you
may be experiencing. So then be able to give you some sound advice.

I had a customer a few years ago that was using a propriety system and tried
to run a Linux version on it, but had similar issues, it happened to be the
system. And hardware incompatibility with that O/S.

Does it appear to be doing a memory dump and unloading or is it continuing
to load? What happens after you see the hex, does it eventually reboot by
itself or just hang?

Kindest Regards,
 
Craig Roy
Horizon IT Consultants

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Saturday, 22 April 2006 10:53 PM
To: support@pfsense.com
Cc: Craig Roy
Subject: RE: [pfSense Support] Re: Booting problem

Citat Craig Roy [EMAIL PROTECTED]:

 My suggestion would be to download the ISO again from another mirror, just
 in case their image has become corrupted.

I have a beta 2 iso and it fails the same way.
 
 If you press the Pause Break key when it starts to run the garbage hex,
 will
 it pause so that you can get the start of it to find the address of the
 error to assist in diagnosis?

Sorry but no :-(

Thanks anyway :-)

Best regards
db

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.5/321 - Release Date: 21/04/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.5/321 - Release Date: 21/04/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] pfSense Beta3 available Screen Dump

2006-04-19 Thread Craig Roy
Hi Scott, Just a brief note, I reread what I had written to Bill earlier
today, it did read as though the screen dumps were from a previous Beta. 

But they are from BETA3 and the Original Screen Dumps that you asked me to
upload also were from the Beta3 install as was the ones that I attached to
reassure Bill that they were from BETA3 including the system page clearly
showing BETA3 plus update in the image.

Anyway has been working all afternoon since I updated and I changed the
Gateway Rule on WAN from Balancer to WAN GW and OPT1 from Balancer to OPT1
GW.

I have not had any more errors at this stage. But I have not rebooted
either. So I have not looked for the Bad Load Balance Monitor IP Address
Error either. Hopefully it was just a Loop Error message that I had caused.

Kindest Regards,
 
Craig Roy
Horizon IT Consultants

-Original Message-
From: Scott Ullrich [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 19 April 2006 11:36 PM
To: support@pfsense.com
Subject: Re: [pfSense Support] pfSense Beta3 available Screen Dump

Please redo them on beta3.

On 4/19/06, Craig Roy [EMAIL PROTECTED] wrote:
 Hi Bill, same ISO as before Beta 3 as you can see in the screen dumps, and
 load balance pool.

 I can redo the Load Balance Pool, but I don't know that it will help, as I
 do not import a previous config file as I have had problem each time I
have
 imported, so I have created new every time since about version .84.

 Kindest Regards,

 Craig Roy
 Horizon IT Consultants
 [EMAIL PROTECTED]

 AUSTRALIAN RESELLER
  FOR


 -Original Message-
 From: Bill Marquette [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, 19 April 2006 3:07 PM
 To: support@pfsense.com
 Subject: Re: [pfSense Support] pfSense Beta3 available

 Craig, based on your screenshots in the forum, you weren't running
 Beta3 when you took them.  I suspect your issue is related to bugs
 pre-beta3 in the load balance code.  Can you delete your pools and
 recreate them?  Thanks

 --Bill

 On 4/18/06, Craig Roy [EMAIL PROTECTED] wrote:
  Hi Bill,
 
  Yes it is during boot, Network for WAN and OPT are up then they are
pulled
  down during Hardware load, then after that Bad Monitor IP Error MSG,
then
  loads the LAN, WAN, OPT and firewall rules etc.
 
  There is no record of it in the System Log, and it does not seem to be a
  problem. Don't mind me, I'm a bit of a perfectionist. If I supply a
 PFSense
  box to customers then if they watch this they may start trying to fix
 things
  but make things worse.
 
  Is it possible to boot PFSense step by step asking to confirm so that I
 can
  get the exact point it occurs, if need be?
 
  Kindest Regards,
 
  Craig Roy
  Horizon IT Consultants
  [EMAIL PROTECTED]
 
  AUSTRALIAN RESELLER
   FOR
 
 
  -Original Message-
  From: Bill Marquette [mailto:[EMAIL PROTECTED]
  Sent: Wednesday, 19 April 2006 1:53 PM
  To: support@pfsense.com
  Subject: Re: [pfSense Support] pfSense Beta3 available
 
  Can you clarify the Monitor IP is Bad IP address error?  I don't
  know where you're seeing that (other than during boot).
 
  --Bill
 
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
  --
  No virus found in this incoming message.
  Checked by AVG Anti-Virus.
  Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date:
18/04/2006
 
 
  --
  No virus found in this outgoing message.
  Checked by AVG Anti-Virus.
  Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date:
18/04/2006
 
 
 
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]

 --
 No virus found in this incoming message.
 Checked by AVG Anti-Virus.
 Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006


 --
 No virus found in this outgoing message.
 Checked by AVG Anti-Virus.
 Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006




 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006
 
  
attachment: SystemOverviewBETA3.jpg

RE: [pfSense Support] pfSense Beta3 available

2006-04-18 Thread Craig Roy
Hi,

I downloaded the same file and unzipped it on Win XP using WinRAR, it
extracts to a folder then the PFSense.ISO is in the folder. Use that to
create your bootable Disc.

Installed Beta3 this afternoon and using it now.

Kindest Regards,
 
Craig Roy
Horizon IT Consultants

-Original Message-
From: Guilherme Oliveira [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, 18 April 2006 9:08 PM
To: support@pfsense.com
Subject: Re: [pfSense Support] pfSense Beta3 available

Hi.

I can find the pfSense-1.0-BETA3-LiveCD-Installer.iso.gz file but if I
gunzip it I will end with distribution files. Not the ISO ...

Is everything right ?

[]'s

On 4/18/06, Holger Bauer [EMAIL PROTECTED] wrote:
 Hi community,

 we just got some reports that Beta3 was spotted at the mirrors! Get it
while it's hot and check
http://pfsense.blogspot.com/2006/04/beta-3-is-here.html for releaseinfo.

 Cheers,
 Holger

 
 Virus checked by G DATA AntiVirusKit


 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.3/317 - Release Date: 18/04/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.3/317 - Release Date: 18/04/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] pfSense Beta3 available

2006-04-18 Thread Craig Roy
Hi Bill,

Thanks for the info on the update, but the error msg is back on boot up
stating the Monitor IP is Bad IP address. But no record of it is mentioned
in the System Log and No errors displayed so far.

Time will tell I suppose.

Kindest Regards,
 
Craig Roy
Horizon IT Consultants

-Original Message-
From: Bill Marquette [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 19 April 2006 10:55 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] pfSense Beta3 available

On 4/18/06, Holger Bauer [EMAIL PROTECTED] wrote:
 Hi community,

 we just got some reports that Beta3 was spotted at the mirrors! Get it
while it's hot and check
http://pfsense.blogspot.com/2006/04/beta-3-is-here.html for releaseinfo.

Two large bugs were quickly uncovered after beta 3 release.  It's
worth pulling down the hotfix update we just released - it's a mere
19K and will work on _both_ embedded and full installs (sorry, CD-ROM
users will just have to wait until we start releasing snapshots
again).  It fixes the DF-bit option being broken (multiple random-id
keywords on the scrub line) and a bug with disabled rules with no
description showing up in the rule file anyway.

The update is in the updates directory on the mirrors (or will be
within the hour) with the filename:
pfSense-BETA3-update-for-random_id-and-blank_rule-issues-on-embedded-and-ful
l.tgz

--Bill

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] pfSense Beta3 available

2006-04-18 Thread Craig Roy
Hi Bill,

Yes it is during boot, Network for WAN and OPT are up then they are pulled
down during Hardware load, then after that Bad Monitor IP Error MSG, then
loads the LAN, WAN, OPT and firewall rules etc.

There is no record of it in the System Log, and it does not seem to be a
problem. Don’t mind me, I'm a bit of a perfectionist. If I supply a PFSense
box to customers then if they watch this they may start trying to fix things
but make things worse.

Is it possible to boot PFSense step by step asking to confirm so that I can
get the exact point it occurs, if need be?

Kindest Regards,
 
Craig Roy
Horizon IT Consultants
[EMAIL PROTECTED]
 
AUSTRALIAN RESELLER
 FOR


-Original Message-
From: Bill Marquette [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 19 April 2006 1:53 PM
To: support@pfsense.com
Subject: Re: [pfSense Support] pfSense Beta3 available

Can you clarify the Monitor IP is Bad IP address error?  I don't
know where you're seeing that (other than during boot).

--Bill

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] pfSense Beta3 available

2006-04-18 Thread Craig Roy
Sorry Bill, but they are of Beta 3 as I took them this morning when Scott
asked for them. 

Kindest Regards,
 
Craig Roy
Horizon IT Consultants
[EMAIL PROTECTED]
 
AUSTRALIAN RESELLER
 FOR


-Original Message-
From: Bill Marquette [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 19 April 2006 3:07 PM
To: support@pfsense.com
Subject: Re: [pfSense Support] pfSense Beta3 available

Craig, based on your screenshots in the forum, you weren't running
Beta3 when you took them.  I suspect your issue is related to bugs
pre-beta3 in the load balance code.  Can you delete your pools and
recreate them?  Thanks

--Bill

On 4/18/06, Craig Roy [EMAIL PROTECTED] wrote:
 Hi Bill,

 Yes it is during boot, Network for WAN and OPT are up then they are pulled
 down during Hardware load, then after that Bad Monitor IP Error MSG, then
 loads the LAN, WAN, OPT and firewall rules etc.

 There is no record of it in the System Log, and it does not seem to be a
 problem. Don't mind me, I'm a bit of a perfectionist. If I supply a
PFSense
 box to customers then if they watch this they may start trying to fix
things
 but make things worse.

 Is it possible to boot PFSense step by step asking to confirm so that I
can
 get the exact point it occurs, if need be?

 Kindest Regards,

 Craig Roy
 Horizon IT Consultants
 [EMAIL PROTECTED]

 AUSTRALIAN RESELLER
  FOR


 -Original Message-
 From: Bill Marquette [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, 19 April 2006 1:53 PM
 To: support@pfsense.com
 Subject: Re: [pfSense Support] pfSense Beta3 available

 Can you clarify the Monitor IP is Bad IP address error?  I don't
 know where you're seeing that (other than during boot).

 --Bill

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]

 --
 No virus found in this incoming message.
 Checked by AVG Anti-Virus.
 Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006


 --
 No virus found in this outgoing message.
 Checked by AVG Anti-Virus.
 Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006



 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.4.4/318 - Release Date: 18/04/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] RE: Attention MultiWan and Load Balancing Users!

2006-03-22 Thread Craig Roy
Hi Scott,

PFSense Version Beta2 Full Install
2WAN + Lan

Myself being a MultiWan and Load Balancing User I thought that you may
appreciate some feed back.

I first did the CVS update on the 19th or 20th March when you announced the
changes. 

PFSense box already configured, as a working load balance. I created the
Static Routes and checked to use the Interface as a GW. (I remembered seeing
this available in the Snapshot Releng 03-10-2006, it didn’t work for me
then). I had to reinstall to be able to continue business for the following
day.

I retried the newer CVS update 03-20-2006 and re-setup the Static routes for
the Interfaces and DNS addresses per Interface. But it made no difference to
being able to Fail-Over DNS. I associated this to be a conflict with my
working DualWAN (Round Robin). Reinstalled for next work day.

23Mar06. 3.30AM
I reinstalled PFSense and did an update via cvs_sync.sh releng_1. This
produced a couple of errors at the end of the update, failed to open debug
in path /usr/local/lib/php/extensions/no-debug-non-zts-20020429/ I went
looking for the file manually via the CVSTrack but found that the reason why
it could not open the file is that it had not been updated. I presumed that
this was known and I continued ignoring the error MSG.

SETUP Load Balance + Failover
I first setup the Interfaces to allocate IP Addresses.
I then setup the Load Balance
I setup the Static Routes allocating the Wan and Opt interfaces as Gateways
I then configured the NATs for all interfaces
Then the Firewall Rules for All Interfaces

Results:

There was a Failover of sorts, the remaining interface would not resolve the
URL immediately but with coaxing a couple of times it would eventually find
the page.

Modifying NATs and Rules made no positive differences to the viewing of any
page.

I then left the PFSense configured with the DualWan Load Balance + FailOver
ready for work at 5.15AM.

When Staff began work at 7.15AM the PFSense box was not passing traffic in
any direction and could not ping any outside IP or host from the console. A
restart was performed and tried again. Again the traffic only flowed for a
short time period before stalling.

To continue operations for the day, a complete reinstall was done
reconfigured by using a restore of the working config, but this did not pass
traffic (seems to be a problem in Beta2 for some reason as I have tried this
a number of times with the same results, it unsuccessfully restores).
Another reinstall was done and manually configured DualWan Load Balanced,
NATTED and Ruled in 20 minutes.

If it is any help, when I next do a DualWan Load Balance + Failover I can
send you a copy of the config in File.txt. I don’t think that it would tell
you anything that you would not already be aware of though. But it may
confirm in my mind that I have not forgotten or overlooked something.

In case this has been an oversight, the Subnet in the Rules pages are Max of
31 not 32 as in all other events of the subnet. So a Static Internet IP is
unable to be selected to create rules for. If it is intentional, then you
must have a reason for it. 

Anyway, thanks for a great Firewall.

BTW, Endian announced their release yesterday and the Features are not half
as good as PFSense. I looked at theirs before I discovered PFSense. Now that
I'm here, I wont use anything else.  www.efw.it 

Kindest Regards,
 
Craig Roy
Horizon IT Consultants
[EMAIL PROTECTED]
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.2.6/288 - Release Date: 22/03/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Dynamic DNS Client setup for DUAL WAN

2006-03-15 Thread Craig Roy
Hi All,

I have now managed to get working DUAL WAN (partially), so far its not a
fail over Link. 

I am having an issue with no DNS to resolve names when WAN goes down. 

Will allowing full inbound NAT to the opt interface allow the use of my
ISP’s DNS pool?

OR

Do I have to setup Dynamic DNS Client regardless to make it so that when WAN
goes down OPTxx will continue to have access to a DNS pool? 

Also how do I go about setting up the Dynamic DNS Client? (I am waiting to
find out if my ISP will allow me access to their DNS to negate having to use
a third party DNS Host).

To assist in this project, I will make a tutorial in configuring Dual Wan
Load Balancing when I have got the DNS working correctly for both WAN and
OPT interfaces.

Kindest Regards,
 
Craig Roy
Horizon IT Consultants
[EMAIL PROTECTED]

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.1.384 / Virus Database: 268.2.4/282 - Release Date: 15/03/2006
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]