[pfSense Support] import monowall xml files

2005-09-28 Thread Jonathan Woodard
i know this has probably been answered in previous posts but i didn't 
see them. i'm wondering if / how i can move my monowall xml file over to 
pfsense. i tried to just restore, thinking that i had seen a previous 
post saying it was ok,  it but killed everything and i had to 
re-install. i would love to try pfsense and most likely will when i have 
more time. i just really hoped that all my configurations are not lost 
when moving over. thanks and i apologize if i wasn't detailed enough.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] import monowall xml files

2005-09-29 Thread Jonathan Woodard

Scott Ullrich wrote:


We convert m0n0wall configurations on import.   We convert the tag
names and remove the traffic shaper.But don't expect proxyarp and
things of this nature to work.

Scott


On 9/29/05, Bill Marquette <[EMAIL PROTECTED]> wrote:
 


This used to work, but our config has significantly diverged from
m0n0.  I suspect if you used a config from where we forked it'd
probably work, but assuming m0n0 changed _anything_ in their config
file since then, it's unlikely to convert over.  I think we're at the
point where either someone needs to make it work, or the restore
function rejects a m0n0 config.

--Bill

On 9/29/05, Jonathan Woodard <[EMAIL PROTECTED]> wrote:
   


i know this has probably been answered in previous posts but i didn't
see them. i'm wondering if / how i can move my monowall xml file over to
pfsense. i tried to just restore, thinking that i had seen a previous
post saying it was ok,  it but killed everything and i had to
re-install. i would love to try pfsense and most likely will when i have
more time. i just really hoped that all my configurations are not lost
when moving over. thanks and i apologize if i wasn't detailed enough.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


   



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

I agree with Bill here, I suggest at the very least right now having it 
reject the monowall file. Since this used to work there maybe more 
people out there who are trying this and having to just re-install. 
thanks to all of you for your help, i'll probably install pfsense on a 
weekend when i have time to redo it all.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] beep on ready suggestion

2005-09-29 Thread Jonathan Woodard
I don't exactly remember which version i started out with but many 
burned .iso's later we arrive at 0.85 and finally pfsense installed the 
first time without much of a problem. I wish to say congrats to the 
development people and the people in this mailing list as i have poured 
over the lists trying to get things to work. i'm very impressed with how 
things are progressing and the level of support someone can get here.


I wonder if i could make another small suggestion now, i remember using 
various firewall/router distros in the past and most all of them had a 
simple feature of beeping in some fashion to tell the user that the 
machine is up and ready for traffic. i never realized how much i liked 
that until i didn't have it with monowall. i was wondering if something 
like this could be added to pfsense. I think users with a completely 
headless machine would agree that this would be helpful. and I know I 
would appreicate it very much, thank you :-)


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] beep on ready suggestion

2005-09-30 Thread Jonathan Woodard




wow, i too am glad to see that it created as much discussion as it did.
and yes, i do believe that "sesame street" can be left alone. However
i'm completely open to the Star Wars "Imperial March".  8-)  I do think that if
you have a startup "tone"  that you have a shutdown "tone" play right
before complete shutdown. I remember some of the distros i tried had
the following  as a startup beeps.

Both the following had a beep program:
ipcop - 6-7 note beeps/notes going higher
smoothwall - 3 beep/notes increasing 

I found the FreeBSD port to this here: http://www-user.rhrk.uni-kl.de/~f_osterf/beep/
(actually with this i think "Imperial March" could be done) :-) 

astaro - 5 sequencial plain pc speaker beeps (also had power down beeps
i remember)

Sorry for the long post but i figured i should chime in to my own
disscusion, thanks again. 

Frimmel, Ivan (ISS South Africa) wrote:

  Hehe.. great to see it has created some discussion.. What about Milkdrop for the screen saver? ;_) ok I'll stop now.

I do agree a beep would be sufficient.

-Original Message-
From: Holger Bauer [mailto:[EMAIL PROTECTED]] 
Sent: Friday, September 30, 2005 2:11 PM
To: support@pfsense.com
Subject: AW: [pfSense Support] beep on ready suggestion

I don't think we need something other than beeps, but they have to be unique so you know that it's a "ready" beep and not something caused by the bios or a system going down beep. We can leave the sesame street theme to other more "colourful" firewalls ;-)

Holger

-Ursprüngliche Nachricht-
Von: Scott Ullrich [mailto:[EMAIL PROTECTED]]
Gesendet: Freitag, 30. September 2005 13:55
An: support@pfsense.com
Betreff: Re: [pfSense Support] beep on ready suggestion


So when we boot up should we play the Sesame Street theme?

/me ducks

Scott


On 9/30/05, Frimmel, Ivan (ISS South Africa) <[EMAIL PROTECTED]> wrote:
  
  
I remember being able to play mods through the pc speaker ;)

>From this thread :
http://lists.freebsd.org/pipermail/freebsd-multimedia/2003-April/30.html

mplayer -ao oss:/dev/pcaudio -vo aa  .. but I suspect oss is not turn on in the kernel?


-Original Message-
From: Andrew Harvey [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 30, 2005 9:05 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] beep on ready suggestion

That would simply require that when the menu displays for the first
time, you echo the ^G character?

That menu is PHP, isn't it? So that should be simple enough

Andrew


On 30/09/2005, at 4:58 PM, Oscar Forsström wrote:



  I agree! That would be a great feature!

Jonathan Woodard wrote:
  
  
I don't exactly remember which version i started out with but many
burned .iso's later we arrive at 0.85 and finally pfsense installed
the first time without much of a problem. I wish to say congrats to
the development people and the people in this mailing list as i have
poured over the lists trying to get things to work. i'm very
impressed with how things are progressing and the level of support
someone can get here.
I wonder if i could make another small suggestion now, i remember
using various firewall/router distros in the past and most all of
them had a simple feature of beeping in some fashion to tell the user
that the machine is up and ready for traffic. i never realized how
much i liked that until i didn't have it with monowall. i was
wondering if something like this could be added to pfsense. I think
users with a completely headless machine would agree that this would
be helpful. and I know I would appreicate it very much, thank you :-)
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  
  -
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
  


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



  
  
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Virus checked by G DATA AntiVirusKit


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  





Re: [pfSense Support] beep on ready suggestion

2005-09-30 Thread Jonathan Woodard
LOL, thanks bill. however, i'm about as dumb as a brick when it comes to 
bsd. i was just hoping that a particular start/stop sequence could be 
added to the pfsense .iso. i'd be happy to help accomplish this if 
someone would point me in the direction or add it and allow me to test 
it. also, i realize that there might be some people who don't like it, i 
would think there needed to be a simple way to disable it if desired. 
thank you very much again for your interest in my idea.


Bill Marquette wrote:


Note sure if/where we install
http://pfsense.com/cgi-bin/cvsweb.cgi/tools/pfPorts/beep/ to, but use
 and friends to beep to your hearts content.

--Bill


On 9/30/05, Jonathan Woodard <[EMAIL PROTECTED]> wrote:
 


I don't exactly remember which version i started out with but many
burned .iso's later we arrive at 0.85 and finally pfsense installed the
first time without much of a problem. I wish to say congrats to the
development people and the people in this mailing list as i have poured
over the lists trying to get things to work. i'm very impressed with how
things are progressing and the level of support someone can get here.

I wonder if i could make another small suggestion now, i remember using
various firewall/router distros in the past and most all of them had a
simple feature of beeping in some fashion to tell the user that the
machine is up and ready for traffic. i never realized how much i liked
that until i didn't have it with monowall. i was wondering if something
like this could be added to pfsense. I think users with a completely
headless machine would agree that this would be helpful. and I know I
would appreicate it very much, thank you :-)

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


   



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] why beep(1) when you can speaker(4)

2005-10-03 Thread Jonathan Woodard
scott, is the beep script active, i upgraded to 0.86 which i'm assuming 
is the right one. when i rebooted i heard nothing. just wondering if/how 
i get it active, thanks :)


Scott Ullrich wrote:


Hrm.   Good point.  I didn't honestly know you could echo items to
/dev/speaker to have it play sounds.   Currently we are using beep
from the FreeBSD ports tree with a small wrapper script that plays
tones going up (machine is up) or tones going down (machine is on its
way down).

Thanks to Seth Mos for putting together the script.

Scott


On 10/3/05, Vivek Khera <[EMAIL PROTECTED]> wrote:
 


I was just browsing the kernel config files for pfsense and noticed
that the speaker pseudo device is built in.  Then I recalled the
'beep' discussion... which got me to thinking:  Why use beep when you
can just echo strings into /dev/speaker and play lots of nice
tunes?   You could even make the theme music customizable :-)



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


   



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Menu prompt time, Etc..

2005-12-19 Thread Jonathan Woodard
Hello all, I just upgraded to 0.96.4 and I now notice the new freeBSD 
menu. I'm wondering what file or how I edit it to make the startup menu 
prompt shorter. Instead of 10, I would like to turn it down to 1-2 seconds.


Also, I have noticed that I used to have startup/shutdown beeps, now 
these seem to be gone. I just wondered if they had been removed or just 
quit working for me for some reason. Not a big thing, however I did 
enjoy them very much.


Thanks everyone for the great mailing list and to the developers for 
your time in making such a great product. :-)


P.S. Instead of upgrading the firmware, I upgraded 0.96.4 by 
re-installing completely. I didn't know if that would make a difference 
or not.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Menu prompt time, Etc..

2005-12-20 Thread Jonathan Woodard

Ok, so to fix the shorter menu prompt I should DL the latest upgrade?
The Dallas mirror shows the same version however with the current date.

Scott Ullrich wrote:

On 12/19/05, Jonathan Woodard <[EMAIL PROTECTED]> wrote:
  

Hello all, I just upgraded to 0.96.4 and I now notice the new freeBSD
menu. I'm wondering what file or how I edit it to make the startup menu
prompt shorter. Instead of 10, I would like to turn it down to 1-2 seconds.



This is fixed in the latest ISO.  I forgot to re-apply a patch.

  

Also, I have noticed that I used to have startup/shutdown beeps, now
these seem to be gone. I just wondered if they had been removed or just
quit working for me for some reason. Not a big thing, however I did
enjoy them very much.



I'll check into it.

Scott

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


!DSPAM:43a8d84e236181432588612!

  


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: AW: [pfSense Support] beeps gone?

2006-01-04 Thread Jonathan Woodard




Thanks for fixing this from me as well, I enjoy the beeps as well. On a
side note, I would again like to throw my vote for Star Wars "Imperial
March".  :-)  

Holger Bauer wrote:

  They'll work again with 1.0beta2 which isn't released yet.

Holger

  
  
-Ursprüngliche Nachricht-
Von: Vinc Duran [mailto:[EMAIL PROTECTED]]
Gesendet: Mittwoch, 4. Januar 2006 08:14
An: support@pfsense.com
Betreff: [pfSense Support] beeps gone?


Hi, I'm trying out the beta and I don't hear the very helpful startup
beeps anymore. I don't see an option in the gui. Did the beeps get
taken out or is it some problem on my machine only?
Thanks,
Vinc

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



  
  

Virus checked by G DATA AntiVirusKit


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  





Re: AW: AW: [pfSense Support] beeps gone?

2006-01-04 Thread Jonathan Woodard
It was just a thought, lol... I know I for one would feel much more 
secure with it as my startup beep.  What's good enough for Lord Vader is 
good enough for me. :-D


Holger Bauer wrote:

I'm not sure if we get a free license for that one *lol*

Holger
-Ursprüngliche Nachricht-
Von: Jonathan Woodard [mailto:[EMAIL PROTECTED]
Gesendet: Mittwoch, 4. Januar 2006 09:05
An: support@pfsense.com
Betreff: Re: AW: [pfSense Support] beeps gone?


Thanks for fixing this from me as well, I enjoy the beeps as well. On a side note, I would again like to throw my vote for Star Wars "Imperial March". :-) 

Holger Bauer wrote: 
They'll work again with 1.0beta2 which isn't released yet.


Holger

  
-Ursprüngliche Nachricht-

Von: Vinc Duran [mailto:[EMAIL PROTECTED]
Gesendet: Mittwoch, 4. Januar 2006 08:14
An: support@pfsense.com
Betreff: [pfSense Support] beeps gone?


Hi, I'm trying out the beta and I don't hear the very helpful startup
beeps anymore. I don't see an option in the gui. Did the beeps get
taken out or is it some problem on my machine only?
Thanks,
Vinc

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






Virus checked by G DATA AntiVirusKit


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  



Virus checked by G DATA AntiVirusKit


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: AW: AW: [pfSense Support] beeps gone?

2006-01-04 Thread Jonathan Woodard
Someone needs to write that so we can have the option. We could even 
have a section where people upload and download startup/shutdown "tones" 
for their machine. I realize that's kinda deviating from the true 
purpose of the project but hey we have themes, why not beeps 8-)


Bill Marquette wrote:

Back in my BBS days I had GnR Sweet Child of Mine as the sysop page
themeanyone care to figure that one out?  Oh god, I can see it 
now, we're going to have to have a 'beep' theme!  Anyone writes

alternate beeps and I'll add the option (but ONLY after I get Sweet
child of mine) ;-P

--Bill

On 1/4/06, Gary Buckmaster <[EMAIL PROTECTED]> wrote:
  

I'd be perfectly content with the theme from Army of Darkness, or maybe
Knight Rider. . .

-----Original Message-
From: Jonathan Woodard [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 04, 2006 2:19 AM
To: support@pfsense.com
Subject: Re: AW: AW: [pfSense Support] beeps gone?


It was just a thought, lol... I know I for one would feel much more
secure with it as my startup beep.  What's good enough for Lord Vader is
good enough for me. :-D


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


  

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Free IPsec client software, suggestions?

2006-04-13 Thread Jonathan Woodard
Is there a free IPsec VPN client I can use with Windows 2000/XP to 
connect to pfsense through IPsec. I have been using PPTP but I 
understand it's not as secure and I'm having trouble getting connected 
with it on my Linux desktop. I realize this is a bit off topic for 
Pfsense, but someone else might use this discussion later. Thank you 
very much for any help and please keep up the outstanding work on this 
project. It's coming along great and I see it really making a name for 
itself.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] pptp server and passthrough status?

2006-06-04 Thread Jonathan Woodard
I was just wondering if there has been anymore work done this issue. I 
updated to the June 4th build and I am still having problems. I run a 
pptp server and connect to a pptp server remotely. I was initally able 
to connect but re-connecting will not work and hangs with the typical 
619 error. I understand this is a persistent problem that has been 
looked at for quite sometime and I noticed that in the blog that some 
pptp fix was committed. Forgive me if I sound pushy but I just wondered 
if anything else has been discovered on it.


Viva La PFsense, I love it!

Jonathan

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Wireless suggestions (dual wireless?)

2006-06-16 Thread Jonathan Woodard
Thank you all for your help. Unfortunately the library has a very very 
limited budget. I have ordered 2 supported wireless cards and I am going 
to be testing them for myself as dual AP's. In the end, probably they 
will go with 2 very cheap AP's attached to separate OPT ports on the 
router. However, all of you have given me things to dream about testing 
some day. :-)


Jonathan


Yuri Lukin wrote:

I see to recall reading somewhere that hostapd supports multiple SSIDs on
the same radio

Nelson Papel wrote ..
  

I have tested a Cisco 1010AP (lightweight model) with a Cisco 2000 Airespace
wireless controller.  It did allow multiple wireless VLAN's, which could
then be trunked out to a managed switch, or right into pfsense via an 802.1q
trunk.  I believe the controller itself could manage up to 16 1000 series
AP's.  It's not the cheapest solution but works great over a larger area
(using multiple AP's).  

 


Also, the Cisco 1200 AP doesn't need a controller, it supports up to 16
SSID/VLAN pairs per radio, which again are 802.1q trunked out to a managed
switch, or directly into pfsense.

 


Nelson Papel

 

  _  

From: mOjO [mailto:[EMAIL PROTECTED] 
Sent: Friday, June 16, 2006 01:14

To: support@pfsense.com
Subject: Re: [pfSense Support] Wireless suggestions (dual wireless?)

 


A more expensive WAP (I know Cisco does, not sure about Proxim) will allow
you to run multiple SSID's off the same unit. (i.e. one unprotected and
the
other protected)  Then I think you could go so far as to assign different
VLAN's to each wireless network.  pfSense should recognize the VLAN's and
allow you to define different rules (Most of this is speculation, someone
might prove me wrong here.)  Or potentially a VLAN capable managed switch
could allow you to separate the two networks, isolating them and allowing
you to pipe them through different interfaces on pfSense. 

very speculative but something to look into... 



Jonathan Woodard wrote: 


I'm hoping someone can help me with this and save me some time. It's a
bit
complicated to explain so bear with me. I have also enclosed a diagram
of
the layout and my idea to give you a better idea. 



I maintain the network for a local library. Currently, they have a wired
network and one AP. The AP is both used by the public for Internet and
also
by the employees. I would like to separate this. I do not like the idea
of
someone coming in and having access to the private network with a laptop
I
can't lockdown. My inital plan was the enclosed diagram with 2 AP's, one
secured for private use and one open for public use. However, I am wondering
if this is the only option, if not, is it the best option? I am comfortable
with networks but there always seems to be capabilities I am unaware of
that
I would like to experiment with. 


I wonder if there is some way in Pfsense to separate the 2 (public/private)
on the one AP? I am thinking not since I want to secure one and not the
other but I would just like verification on this. 


Can I install 2 supported wireless cards and separate them that way? This
would be really cool since everything is still in the one box. 



On a semi-side note. Can anyone give me any experience on Pfsense as an
AP?
I realize this possibly is based on the particular card but, on average,
how
do you feel it compares to a typical home AP (range, connection stability,
etc.) 


Thank you for all your help. I have never found a more helpful group of
people as the people in this project. Between the forums, IRC, mailing
lists
and everything else I have always found an answer to any problems. I am
certain that this will, over time, put Pfsense above all others. 

Jonathan 





  _  

 




 






  _  




 
-

To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



  



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Wireless suggestions (dual wireless?) UPDATE

2006-06-19 Thread Jonathan Woodard
since this is still open I would provide what I have tested so far. I 
used a combination of wireless cards in my router to do a public/private 
setup. Currently they are separated by firewall and the public card is 
using captive portal for a initial "terms and conditions of use" page. 
I'm looking at trying to do DHCP relay to the private side for an easier 
time and a few other tweaks that pfsense allows. Everything is going 
well "so far" and I seem to have just as good of performance and range 
as I do with the consumer AP in my room. It's still very much a work in 
progress but I'm mostly happy with how things are going so far. The main 
limitation I am finding is the inability to bridge the wireless card to 
any other interface. However, I am under the understanding that this is 
a driver limitation and not a pfsense problem. Still thought I would 
provide that to anyone attempting testing in this direction. I hope to 
provide more as I play around with this.


Jonathan


Eric W. Bates wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



mOjO wrote:
  

A more expensive WAP (I know Cisco does, not sure about Proxim) will
allow you to run multiple SSID's off the same unit. (i.e. one
unprotected and the other protected)  Then I think you could go so far
as to assign different VLAN's to each wireless network.  pfSense should
recognize the VLAN's and allow you to define different rules (Most of
this is speculation, someone might prove me wrong here.)  Or potentially
a VLAN capable managed switch could allow you to separate the two
networks, isolating them and allowing you to pipe them through different
interfaces on pfSense.

very speculative but something to look into...



The Colubris MSC units do precisely that. From their interface one
creates a 'virtual AP'.  It can support multiples of these virtual AP's
and each can have a very separate config: different SSID, different
encryption policy, different authentication, etc.  All of this on a
single radio. Typically each of the virtual AP's tags the traffic with a
different VLAN; so you then run it to something like pfsense that can
sort it.

A typical application is to set up one virtual AP with the public SSID
and a second one with an un-broadcast SSID and WPA for each of the
employees. Since the traffic leaving is on separate vlan's you can then
set rules in pfsense to disallow the 'public' traffic to 'staff' LAN.

Caveat: I got hired to suss this out for a WISP. It is working on my
bench right now; but we haven't beat on it hard yet.

  

Jonathan Woodard wrote:


I'm hoping someone can help me with this and save me some time. It's a
bit complicated to explain so bear with me. I have also enclosed a
diagram of the layout and my idea to give you a better idea.


I maintain the network for a local library. Currently, they have a
wired network and one AP. The AP is both used by the public for
Internet and also by the employees. I would like to separate this. I
do not like the idea of someone coming in and having access to the
private network with a laptop I can't lockdown. My inital plan was the
enclosed diagram with 2 AP's, one secured for private use and one open
for public use. However, I am wondering if this is the only option, if
not, is it the best option? I am comfortable with networks but there
always seems to be capabilities I am unaware of that I would like to
experiment with.

I wonder if there is some way in Pfsense to separate the 2
(public/private) on the one AP? I am thinking not since I want to
secure one and not the other but I would just like verification on this.

Can I install 2 supported wireless cards and separate them that way?
This would be really cool since everything is still in the one box.


On a semi-side note. Can anyone give me any experience on Pfsense as
an AP? I realize this possibly is based on the particular card but, on
average, how do you feel it compares to a typical home AP (range,
connection stability, etc.)

Thank you for all your help. I have never found a more helpful group
of people as the people in this project. Between the forums, IRC,
mailing lists and everything else I have always found an answer to any
problems. I am certain that this will, over time, put Pfsense above
all others.

Jonathan







-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
  


- --
Eric W. Bates
[EMAIL PROTECTED]
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFElsQpD1roJTQ4LlERAndNAKCYYQXHYkoVbk8YrYLuL+R9JhXVUQCdFl37
apFptt59NY1HCcD613h44IY=
=j3WN
-END 

[pfSense Support] Just plain praise

2006-06-19 Thread Jonathan Woodard
I just thought I would take some time and let it be said here how much I 
appreciate the work that has gone into this project. The people that are 
a part of this I have found to be nothing less than open to suggestions 
and very helpful. Between the mailing lists, forums, AND irc I have 
always found an answer to any problem I'm having. I currently use 
Pfsense in the 3 library locations I admin along with 2 at my home. I 
have also talked several "geek" friends into trying it and they have all 
been very happy with it's ease of use and very comprehensive features. I 
have only ran into 2 limitations in the time I have worked with this 
project and neither have been limitations of Pfsense but rather in 
either drivers or something else.


If anyone doubts the reliability of this project I would tell them I 
have a Cisco 841 broadband router in my closet collecting dust. Pfsense 
is MUCH easier to manage and provides just as much uptime. Also, in the 
6 months that Pfsense has been installed at the 3 library locations I 
have yet to receive a call concerning their routers. One of these 
locations also deals with constant power failures as well, and still 
never a call. (that router is on a UPS now...lol)



Guess I could have said everything in 2 words but I liked this better. :-)

THANK YOU!

Jonathan

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Dual Wireless results for Bill M.

2006-06-22 Thread Jonathan Woodard
I was testing a box with 2 wireless cards to try possible separate AP's 
in the same box and I promised I would give my results here.


I have a test desktop and a test laptop. The desktop carries a "b" card 
while the laptop is "g" and both Pfsense cards are "g" Atheros cards 
(Dlink and Edimax). Under light load they seem to perform fine. However, 
I connected the desktop to the Dlink card and Dl'd a iso while just 
browsing with the laptop on the Edimax card. I began to notice pages 
would stall while loading and some would timeout alltogether. I didn't 
notice a problem with the iso downloading. I tried to put the dlink card 
on channel 1 and move the Edimax card to 11 but this was no help.


It was suggested to try channel 1 & 6 as they interfere less but I 
haven't tested this yet, however, I do plan to. After seeing how things 
went last night unless more people can give me good success with this 
kind of setup I will probably not be putting this kind of setup into use 
anywhere.



Jonathan

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Wireless bridging IS possible?

2006-06-22 Thread Jonathan Woodard
Ok, I was under the assumption that bridging a wireless interface 
running in AP mode to anything wasn't possible yet because of a driver 
limitation. However, right now I am running on my laptop connected to my 
PFsense AP that is running in AP mode and bridged to the LAN interface. 
This would all mean that I was wrong so would some one be kind enough to 
tell me my limitations with bridging a wireless interface? I'm sorry if 
this has been answered before.


Jonathan

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Wireless problems

2006-06-24 Thread Jonathan Woodard
I know my saga with wireless the last few weeks might be getting old to 
some but anyways I'm having issues.


I have my main router with a wireless card in AP mode bridged to my LAN. 
I have 2 pc's, one a desktop with a "b" card and the other is my laptop 
with a "g" card. My laptop can connect fine and get and IP address from 
DHCP, however the desktop cannot. It can however connect to the AP fine. 
I've tried messing with the various wireless settings but to no avail. 
Also, For some reason I have noticed it seems like the connection in my 
laptop seems to be slower (IE: pages tend to load significantly slower) 
I have turned off all other AP's in the house except for one that I 
tried to make sure everything there is working fine. This one was only 
turned on after the pfsense wireless showed issues. Any help would be 
very appreciated.


Jonathan

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Wireless problems

2006-06-24 Thread Jonathan Woodard
Well, I am able to get an IP with the desktop now so I would assume that 
fixed it. I would still like to know what was happening but if no one 
knows I'll be happy it works for now. :-)


thanks for the quick help Scott.

Jonathan

Scott Ullrich wrote:

On 6/24/06, Ispánovits Imre <[EMAIL PROTECTED]> wrote:

On Sat, 24 Jun 2006 14:50:39 -0400
"Scott Ullrich" <[EMAIL PROTECTED]> wrote:
>
> We recently fixed a number of wireless issues, please run cvs_sync.sh
> releng_1 from a shell.
>
Can the above be applied on embedded version as well?


No, sorry.  Look for the new snapshot that will be posted today in
http://www.pfsense.com/~sullrich/RELENG_1_SNAPSHOT-06-24-2006/

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Wireless problems...spoke too soon

2006-06-24 Thread Jonathan Woodard




Well, apparantly that didn't fix it completely. I can no longer get an
IP from the wireless. Again, the AP connects fine but dhcp will not
give me an IP. I tried with my laptop and it didn't work then i moved
it closer and it gave me an address so I'm assuming is a range issue.
However everything suggests that the range is very good to excellent. I
walked farther away with my laptop and got an IP but the connections
timed out several times when I tried browsing the internet. Again any
suggestions would be appreciated.

Btw, this is the card I'm using. It is an Atheros chipset. EDIMAX
EW-7325IG PCI Wireless LAN Card - Retail 

Jonathan


Scott Ullrich wrote:
On 6/24/06, Jonathan Woodard
<[EMAIL PROTECTED]> wrote:
  
  Well, I am able to get an IP with the desktop
now so I would assume that

fixed it. I would still like to know what was happening but if no one

knows I'll be happy it works for now. :-)


thanks for the quick help Scott.

  
  
Let's just say there where some pretty obvious bugs with non ath cards.
  
  
Scott
  
  
-
  
To unsubscribe, e-mail: [EMAIL PROTECTED]
  
For additional commands, e-mail: [EMAIL PROTECTED]
  
  





Re: [pfSense Support] Wireless problems...spoke too soon

2006-06-24 Thread Jonathan Woodard
I also have a router that is on my workbench that is acting as a 
wireless client and it is also giving the same problems. I live in the 
middle of 3 acres in a very small town so I know there is no other AP's 
in distance. There is really nothing else here that causes a problem. 
When I turn my old netgear "b" AP on everything works great with it. The 
AP card might very well be crappy but it would surpsrise me since it's 
worked like a champ until now. Thank you for your suggestions however. 
:-) Any other advice I would welcome.


Jonathan

Holger Bauer wrote:

Sounds like noise to me. Check out your neighbourhood for interfering channels 
(you can do so for example by scanning with http://netstumbler.com/ for other 
accesspoint). Also other devices can interfere with wireless that won't be 
listed with netstumbler (like for example wireless home video transmitters; 
Check your environment for devices that might cause noise). Also maybe the 
wireless card of the client that is having issues is just crappy as another one 
works.

Holger
-Original Message-----
From: Jonathan Woodard [mailto:[EMAIL PROTECTED]
Sent: Sunday, June 25, 2006 1:30 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] Wireless problems...spoke too soon


Well, apparantly that didn't fix it completely. I can no longer get an IP from 
the wireless. Again, the AP connects fine but dhcp will not give me an IP. I 
tried with my laptop and it didn't work then i moved it closer and it gave me 
an address so I'm assuming is a range issue. However everything suggests that 
the range is very good to excellent. I walked farther away with my laptop and 
got an IP but the connections timed out several times when I tried browsing the 
internet. Again any suggestions would be appreciated.

Btw, this is the card I'm using. It is an Atheros chipset. EDIMAX EW-7325IG PCI Wireless LAN Card - Retail 


Jonathan


Scott Ullrich wrote: 
On 6/24/06, Jonathan Woodard <[EMAIL PROTECTED]> wrote: 

Well, I am able to get an IP with the desktop now so I would assume that 
fixed it. I would still like to know what was happening but if no one 
knows I'll be happy it works for now. :-) 

thanks for the quick help Scott. 



Let's just say there where some pretty obvious bugs with non ath cards. 

Scott 

- 
To unsubscribe, e-mail: [EMAIL PROTECTED] 
For additional commands, e-mail: [EMAIL PROTECTED] 



Virus checked by G DATA AntiVirusKit


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Wireless problems...update

2006-06-24 Thread Jonathan Woodard
I'm sorry to keep bringing this up but maybe this will help someone out 
later. Again, the AP interface was originally bridged to the LAN 
interface. I did this because I wanted my server 2k3 box to be the only 
dhcp server on the network. But, for testing, I took down the bridge and 
let pfsense do the dhcp for the AP. This made a very significant 
difference in the time it took for the desktop to get an IP aside from 
the fact that it got an IP at all. Traffic didn't start flowing however 
until I rebooted pfsense. Currently I have internet and can still get to 
other machines on the network however not with their dns name. I would 
be happy with this except it worked the other way at one point and I'd 
like it that way again. I notice that browsing the net is much smoother 
now that the interface is unbridged. Probably I'm missing something but 
I just wondered if it was a bug somewhere that during bridging traffic 
isn't getting routed/passed right. Upon Scott's advice I did a cvs_sync 
this morning so I assume I'm running the very latest build. As always I 
would appreciate very much your suggestions and comments. Thank you


Jonathan

Jonathan Woodard wrote:
I also have a router that is on my workbench that is acting as a 
wireless client and it is also giving the same problems. I live in the 
middle of 3 acres in a very small town so I know there is no other 
AP's in distance. There is really nothing else here that causes a 
problem. When I turn my old netgear "b" AP on everything works great 
with it. The AP card might very well be crappy but it would surpsrise 
me since it's worked like a champ until now. Thank you for your 
suggestions however. :-) Any other advice I would welcome.


Jonathan

Holger Bauer wrote:
Sounds like noise to me. Check out your neighbourhood for interfering 
channels (you can do so for example by scanning with 
http://netstumbler.com/ for other accesspoint). Also other devices 
can interfere with wireless that won't be listed with netstumbler 
(like for example wireless home video transmitters; Check your 
environment for devices that might cause noise). Also maybe the 
wireless card of the client that is having issues is just crappy as 
another one works.


Holger
-Original Message-
From: Jonathan Woodard [mailto:[EMAIL PROTECTED]
Sent: Sunday, June 25, 2006 1:30 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] Wireless problems...spoke too soon


Well, apparantly that didn't fix it completely. I can no longer get 
an IP from the wireless. Again, the AP connects fine but dhcp will 
not give me an IP. I tried with my laptop and it didn't work then i 
moved it closer and it gave me an address so I'm assuming is a range 
issue. However everything suggests that the range is very good to 
excellent. I walked farther away with my laptop and got an IP but the 
connections timed out several times when I tried browsing the 
internet. Again any suggestions would be appreciated.


Btw, this is the card I'm using. It is an Atheros chipset. EDIMAX 
EW-7325IG PCI Wireless LAN Card - Retail

Jonathan


Scott Ullrich wrote: On 6/24/06, Jonathan Woodard 
<[EMAIL PROTECTED]> wrote:
Well, I am able to get an IP with the desktop now so I would assume 
that fixed it. I would still like to know what was happening but if 
no one knows I'll be happy it works for now. :-)

thanks for the quick help Scott.

Let's just say there where some pretty obvious bugs with non ath cards.
Scott
- 
To unsubscribe, e-mail: [EMAIL PROTECTED] For 
additional commands, e-mail: [EMAIL PROTECTED]


Virus checked by G DATA AntiVirusKit


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Wireless problems...HELP PLEASE

2006-06-28 Thread Jonathan Woodard
I could still use some help with this. I have half of my network 
segregated off because of this and I really need them to all be on the 
same subnet. I know that there are no AP's in the area. And as I 
mentioned below the sluggish performance goes away when I unbridge the 
interface. LOL, however this defeats the purpose of what I'm trying to 
do. Thank you again for any help.


Jonathan

Jonathan Woodard wrote:
I'm sorry to keep bringing this up but maybe this will help someone 
out later. Again, the AP interface was originally bridged to the LAN 
interface. I did this because I wanted my server 2k3 box to be the 
only dhcp server on the network. But, for testing, I took down the 
bridge and let pfsense do the dhcp for the AP. This made a very 
significant difference in the time it took for the desktop to get an 
IP aside from the fact that it got an IP at all. Traffic didn't start 
flowing however until I rebooted pfsense. Currently I have internet 
and can still get to other machines on the network however not with 
their dns name. I would be happy with this except it worked the other 
way at one point and I'd like it that way again. I notice that 
browsing the net is much smoother now that the interface is unbridged. 
Probably I'm missing something but I just wondered if it was a bug 
somewhere that during bridging traffic isn't getting routed/passed 
right. Upon Scott's advice I did a cvs_sync this morning so I assume 
I'm running the very latest build. As always I would appreciate very 
much your suggestions and comments. Thank you


Jonathan

Jonathan Woodard wrote:
I also have a router that is on my workbench that is acting as a 
wireless client and it is also giving the same problems. I live in 
the middle of 3 acres in a very small town so I know there is no 
other AP's in distance. There is really nothing else here that causes 
a problem. When I turn my old netgear "b" AP on everything works 
great with it. The AP card might very well be crappy but it would 
surpsrise me since it's worked like a champ until now. Thank you for 
your suggestions however. :-) Any other advice I would welcome.


Jonathan

Holger Bauer wrote:
Sounds like noise to me. Check out your neighbourhood for 
interfering channels (you can do so for example by scanning with 
http://netstumbler.com/ for other accesspoint). Also other devices 
can interfere with wireless that won't be listed with netstumbler 
(like for example wireless home video transmitters; Check your 
environment for devices that might cause noise). Also maybe the 
wireless card of the client that is having issues is just crappy as 
another one works.


Holger
-Original Message-
From: Jonathan Woodard [mailto:[EMAIL PROTECTED]
Sent: Sunday, June 25, 2006 1:30 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] Wireless problems...spoke too soon


Well, apparantly that didn't fix it completely. I can no longer get 
an IP from the wireless. Again, the AP connects fine but dhcp will 
not give me an IP. I tried with my laptop and it didn't work then i 
moved it closer and it gave me an address so I'm assuming is a range 
issue. However everything suggests that the range is very good to 
excellent. I walked farther away with my laptop and got an IP but 
the connections timed out several times when I tried browsing the 
internet. Again any suggestions would be appreciated.


Btw, this is the card I'm using. It is an Atheros chipset. EDIMAX 
EW-7325IG PCI Wireless LAN Card - Retail

Jonathan


Scott Ullrich wrote: On 6/24/06, Jonathan Woodard 
<[EMAIL PROTECTED]> wrote:
Well, I am able to get an IP with the desktop now so I would assume 
that fixed it. I would still like to know what was happening but if 
no one knows I'll be happy it works for now. :-)

thanks for the quick help Scott.

Let's just say there where some pretty obvious bugs with non ath cards.
Scott
- 
To unsubscribe, e-mail: [EMAIL PROTECTED] For 
additional commands, e-mail: [EMAIL PROTECTED]


Virus checked by G DATA AntiVirusKit


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Wireless problems...HELP PLEASE

2006-06-28 Thread Jonathan Woodard
Thank you for the suggestion. However, the AP is a Atheros wireless card 
installed in pfsense as an AP. As an update, I have wiped the router 
since it appears that my log files were corrupted somehow. I'll be 
trying it again on a fresh install and maybe that will help. Any other 
suggestions are most welcome.


Jonathan

Ryan L. Rodrigue wrote:

This is just one goofy man's opinion, but couldn't you connect your access point 
to a switch on your network instead of to your router.  I realise this is not the 
most ideal meathod, but it is an alternative that should allow you to desegregate 
your network.  Or maybe I am wrong and someone will tell me that.  At the very 
least maybe an intelligent person may step in and give you the answer you are 
looking for.  > Ryan

  "A Penny Saved is a Penny Taxed"

-Original Message-
From: Jonathan Woodard [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 28, 2006 1:32 PM
To: support@pfsense.com
Subject: Re: [pfSense Support] Wireless problems...HELP PLEASE


I could still use some help with this. I have half of my network 
segregated off because of this and I really need them to all be on the 
same subnet. I know that there are no AP's in the area. And as I 
mentioned below the sluggish performance goes away when I unbridge the 
interface. LOL, however this defeats the purpose of what I'm trying to 
do. Thank you again for any help.


Jonathan

Jonathan Woodard wrote:
  
I'm sorry to keep bringing this up but maybe this will help someone 
out later. Again, the AP interface was originally bridged to the LAN 
interface. I did this because I wanted my server 2k3 box to be the 
only dhcp server on the network. But, for testing, I took down the 
bridge and let pfsense do the dhcp for the AP. This made a very 
significant difference in the time it took for the desktop to get an 
IP aside from the fact that it got an IP at all. Traffic didn't start 
flowing however until I rebooted pfsense. Currently I have internet 
and can still get to other machines on the network however not with 
their dns name. I would be happy with this except it worked the other 
way at one point and I'd like it that way again. I notice that 
browsing the net is much smoother now that the interface is unbridged. 
Probably I'm missing something but I just wondered if it was a bug 
somewhere that during bridging traffic isn't getting routed/passed 
right. Upon Scott's advice I did a cvs_sync this morning so I assume 
I'm running the very latest build. As always I would appreciate very 
much your suggestions and comments. Thank you


Jonathan

Jonathan Woodard wrote:

I also have a router that is on my workbench that is acting as a 
wireless client and it is also giving the same problems. I live in 
the middle of 3 acres in a very small town so I know there is no 
other AP's in distance. There is really nothing else here that causes 
a problem. When I turn my old netgear "b" AP on everything works 
great with it. The AP card might very well be crappy but it would 
surpsrise me since it's worked like a champ until now. Thank you for 
your suggestions however. :-) Any other advice I would welcome.


Jonathan

Holger Bauer wrote:
  
Sounds like noise to me. Check out your neighbourhood for 
interfering channels (you can do so for example by scanning with 
http://netstumbler.com/ for other accesspoint). Also other devices 
can interfere with wireless that won't be listed with netstumbler 
(like for example wireless home video transmitters; Check your 
environment for devices that might cause noise). Also maybe the 
wireless card of the client that is having issues is just crappy as 
another one works.


Holger
-Original Message-
From: Jonathan Woodard [mailto:[EMAIL PROTECTED]
Sent: Sunday, June 25, 2006 1:30 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] Wireless problems...spoke too soon


Well, apparantly that didn't fix it completely. I can no longer get 
an IP from the wireless. Again, the AP connects fine but dhcp will 
not give me an IP. I tried with my laptop and it didn't work then i 
moved it closer and it gave me an address so I'm assuming is a range 
issue. However everything suggests that the range is very good to 
excellent. I walked farther away with my laptop and got an IP but 
the connections timed out several times when I tried browsing the 
internet. Again any suggestions would be appreciated.


Btw, this is the card I'm using. It is an Atheros chipset. EDIMAX 
EW-7325IG PCI Wireless LAN Card - Retail

Jonathan


Scott Ullrich wrote: On 6/24/06, Jonathan Woodard 
<[EMAIL PROTECTED]> wrote:
Well, I am able to get an IP with the desktop now so I would assume 
that fixed it. I would still like to know what was happening but if 
no one knows I'll be happy it wo