RE: [pfSense Support] PFSense + Poweredge

2006-06-29 Thread Scott Williamson
Well long story short, we had to use the firewalls, we have 2 working in
failover, to secure internal Corporate data to meet Fed Requirements.
We had looked at purchasing additional Sonicwalls for this task.  We
have 2 sonicwall 5060's that are our corporate firewalls. (purchased
before my time).  I convince the higher ups to give pfsense a chance.
We are a Dell shop using 2850's and 6850's exclusively to a tune of
about 120 servers.  We decided to order 2 dual core AMD whiteboxes for
the firewalls and because of our implantation we needed 6 nics per.
Well the person that did the ordering did not realize that the
whiteboxes did not have the pci ports required for the Intel 4 port nic,
so we just happened to have 8 2850's setting on 2 pallets in their
boxes... so I grabbed 2 of those.  Overkill Yes, but they work, and as
long as I do not SSH into them the CPU sets around 2% utilization.
Seems when I start SSH'ing though I drop to about 50% and system becomes
unresponsive and requires a reboot to clear up.  

Regards 

There are 10 types of people in this world, those who can read binary,
and those who cannot.
-Original Message-
From: Jeroen [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 28, 2006 6:33 PM
To: support@pfsense.com
Subject: Re: [pfSense Support] PFSense + Poweredge

On 6/28/06, Scott Williamson [EMAIL PROTECTED] wrote:

 Just to add to this, I just installed PFSense on 2 PE 2850's each with
6
 10/100/1000 Interfaces 2GB RAM and 2X250GB Sata Harddrives using
Dell's
 Hardware raid.  Using RC1 all is well.

Just curious,  what are you empowering with this kind of hardware? And
why use 250GB,
on a firewall?

-- 
Jeroen

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


DISCLAIMER:

This e-mail is only intended for the person(s) to whom it is addressed and may 
contain confidential information. If you have received this e-mail in error, 
please notify us immediately by reply e-mail and then delete this message from 
your system. Please do not copy it or use it for any purposes, or disclose its 
contents to any other person without the consent of the sender. Unless 
expressly stated herein to the contrary, only agreements in writing, signed by 
an authorized officer of the Company, may be enforced against it.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] PFSense + Poweredge

2006-06-29 Thread Craig FALCONER
Damn strange - I can ssh into a P166 running pfSense and it still works full
speed.



-Original Message-
From: Scott Williamson [mailto:[EMAIL PROTECTED] 
Sent: Friday, 30 June 2006 12:27 a.m.
To: support@pfsense.com
Subject: RE: [pfSense Support] PFSense + Poweredge


...Overkill Yes, but they work, and as long as I do not SSH into them the
CPU sets around 2% utilization. Seems when I start SSH'ing though I drop to
about 50% and system becomes unresponsive and requires a reboot to clear up.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] PFSense + Poweredge

2006-06-29 Thread Scott Ullrich

On 6/29/06, Craig FALCONER [EMAIL PROTECTED] wrote:

Damn strange - I can ssh into a P166 running pfSense and it still works full
speed.


Run this from a shell:

cvs_sync.sh releng_1  shutdown -r now

I need to keep track of how many times I have had to say this over
this week.  It has to be close to one hundred times.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] PFSense + Poweredge

2006-06-28 Thread Jeroen

On 6/28/06, Scott Williamson [EMAIL PROTECTED] wrote:


Just to add to this, I just installed PFSense on 2 PE 2850's each with 6
10/100/1000 Interfaces 2GB RAM and 2X250GB Sata Harddrives using Dell's
Hardware raid.  Using RC1 all is well.


Just curious,  what are you empowering with this kind of hardware? And
why use 250GB,
on a firewall?

--
Jeroen

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] PFSense + Poweredge

2006-06-27 Thread Lee Hetherington

Hi Guys,

Im having issues with my current PFSense box in that everytime the power 
is lost (Our Colo provider had a poweroutage last week) PFSense needs to 
be re-installed to work. The latest one meant I had to drive 200 miles 
in order to fix it.


Is there anything I can do to stop this happening other than putting a 
UPS onto the machine (Its a Poweredge 1850, 2.8Ghz Xeon, 1Gb Ram, Single 
72Gb SCSI Disk).  This time the machine booted, but I couldnt ping 
anything from it nor ping the machine (It did hang for a while bringing 
up CARP interfaces).


Im tempted to buy 2x Poweredge 850's with SATA, are their any known 
issues installing onto this, im not sure if SATA on these is supported 
under FreeBSD...


Cheers for the heads up

Lee


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [pfSense Support] PFSense + Poweredge

2006-06-27 Thread Holger Bauer
What's the exact error when the machine doesn't come up again after failure? I 
usually just power down my testmachines by unplugging the psu just to see how 
it will survive such a condition and I never had such a breakdown yet. You 
mention CARP? So there is a second machine? Or are you only using the CARP as 
VIP for the one machine? In case you have a CARP-cluster and sync over the 
config.xml make sure you don't have build a syncing loop. This way the 
config.xml is moved from master to backup to master to backup... and it's most 
likely that you hit a write cycle of the config.xml then when the poweroutage 
appears. This will end up in a broken config file.

Holger

 -Original Message-
 From: Lee Hetherington [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, June 27, 2006 11:22 AM
 To: support@pfsense.com
 Subject: [pfSense Support] PFSense + Poweredge
 
 
 Hi Guys,
 
 Im having issues with my current PFSense box in that 
 everytime the power 
 is lost (Our Colo provider had a poweroutage last week) 
 PFSense needs to 
 be re-installed to work. The latest one meant I had to drive 
 200 miles 
 in order to fix it.
 
 Is there anything I can do to stop this happening other than 
 putting a 
 UPS onto the machine (Its a Poweredge 1850, 2.8Ghz Xeon, 1Gb 
 Ram, Single 
 72Gb SCSI Disk).  This time the machine booted, but I couldnt ping 
 anything from it nor ping the machine (It did hang for a 
 while bringing 
 up CARP interfaces).
 
 Im tempted to buy 2x Poweredge 850's with SATA, are their any known 
 issues installing onto this, im not sure if SATA on these is 
 supported 
 under FreeBSD...
 
 Cheers for the heads up
 
 Lee
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 


Virus checked by G DATA AntiVirusKit


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] PFSense + Poweredge

2006-06-27 Thread Imre Ispánovits
On Tue, 27 Jun 2006 10:22:00 +0100
Lee Hetherington [EMAIL PROTECTED] wrote:

 Hi Guys,
 
 Im having issues with my current PFSense box in that everytime the power 
 is lost (Our Colo provider had a poweroutage last week) PFSense needs to 
 be re-installed to work. The latest one meant I had to drive 200 miles 
 in order to fix it.
 
 Is there anything I can do to stop this happening other than putting a 
 UPS onto the machine (Its a Poweredge 1850, 2.8Ghz Xeon, 1Gb Ram, Single 
 72Gb SCSI Disk).  This time the machine booted, but I couldnt ping 
 anything from it nor ping the machine (It did hang for a while bringing 
 up CARP interfaces).
 
 Im tempted to buy 2x Poweredge 850's with SATA, are their any known 
 issues installing onto this, im not sure if SATA on these is supported 
 under FreeBSD...
 
 Cheers for the heads up
 
 Lee
 
I would use an IDE-CF adapter and the embedded version on the CF card.

Regards
Imre


signature.asc
Description: PGP signature


Re: [pfSense Support] PFSense + Poweredge

2006-06-27 Thread Anders D. Hansen

On Jun 27, 2006, at 11:22 , Lee Hetherington wrote:

Im having issues with my current PFSense box in that everytime the  
power is lost (Our Colo provider had a poweroutage last week)  
PFSense needs to be re-installed to work. The latest one meant I  
had to drive 200 miles in order to fix it.


	I have a poweredge 1850 running pfsense 1.0b4 which a month ago  
survived a power loss. The server is using the internal scsi  
controller with the RAID reiser card option. (PERC 4e/Si)


Im tempted to buy 2x Poweredge 850's with SATA, are their any known  
issues installing onto this, im not sure if SATA on these is  
supported under FreeBSD...


	The 850 works pretty well with FreeBSD though I'm not sure about the  
SATA controller. Found this:
	http://lists.freebsd.org/pipermail/freebsd-bugs/2006-January/ 
016615.html


	You can alway install a cheap promise TX2200 og TX2300 controller  
after delivery...


Cheers for the heads up


Good luck

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] PFSense + Poweredge

2006-06-27 Thread Lee Hetherington

Holger Bauer wrote:

What's the exact error when the machine doesn't come up again after failure? I 
usually just power down my testmachines by unplugging the psu just to see how 
it will survive such a condition and I never had such a breakdown yet. You 
mention CARP? So there is a second machine? Or are you only using the CARP as 
VIP for the one machine? In case you have a CARP-cluster and sync over the 
config.xml make sure you don't have build a syncing loop. This way the 
config.xml is moved from master to backup to master to backup... and it's most 
likely that you hit a write cycle of the config.xml then when the poweroutage 
appears. This will end up in a broken config file.

Holger

Hi Holger,

I used to have two machines doing this, but its now not configured to 
sync to the 2nd machine.  Basically the first time it all happened it 
was giving errors where it couldnt find a file (Wasnt the config tho), 
not sure now of the exact error. But this time, it booted as normal. 
Everything seemed fine, I just couldnt ping nor could I ping it. 
Although now you mention the sync thing, that could have been it :(


Just was very strange, as before I had 2 boxes, and the 2nd just died on 
a reboot. Now im using this 1850 as primary, id definitly like to get a 
backup of some description running...  I lost a couple of customers this 
weekend after the Redbus Power failure in London :(


Cheers,

Lee


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] PFSense + Poweredge

2006-06-27 Thread Lee Hetherington

Anders D. Hansen wrote:

On Jun 27, 2006, at 11:22 , Lee Hetherington wrote:

Im having issues with my current PFSense box in that everytime the 
power is lost (Our Colo provider had a poweroutage last week) PFSense 
needs to be re-installed to work. The latest one meant I had to drive 
200 miles in order to fix it.


I have a poweredge 1850 running pfsense 1.0b4 which a month ago 
survived a power loss. The server is using the internal scsi 
controller with the RAID reiser card option. (PERC 4e/Si)


Im tempted to buy 2x Poweredge 850's with SATA, are their any known 
issues installing onto this, im not sure if SATA on these is 
supported under FreeBSD...


The 850 works pretty well with FreeBSD though I'm not sure about 
the SATA controller. Found this:
http://lists.freebsd.org/pipermail/freebsd-bugs/2006-January/016615.html 



You can alway install a cheap promise TX2200 og TX2300 controller 
after delivery...


Cheers for the heads up


Good luck 
Thanks Anders. My current 1850 has a single disk, as I had always 
planned to use CARP to sync to another box, but it doesnt really warrant 
buying a 2nd 1850 todo this. I may look at a SCSI 850 as the 2nd box.


Cheers,

Lee


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] PFSense + Poweredge

2006-06-27 Thread Vivek Khera


On Jun 27, 2006, at 5:22 AM, Lee Hetherington wrote:

Im tempted to buy 2x Poweredge 850's with SATA, are their any known  
issues installing onto this, im not sure if SATA on these is  
supported under FreeBSD...


so driving 200 miles is cheaper for you than buying a $150 UPS?!?!?   
man, you must be underpaid.


anyhow, to answer your question, I run Pfsense on a PE SC 400 with a  
Dell SATA RAID card (which is basically adaptec) with no problems.


I've never had problems with FreeBSD not recognizing devices on a  
Dell box. You should be safe.  I know for sure FreeBSD 6.1 recognizes  
the SATA RAID on a PE800.

smime.p7s
Description: S/MIME cryptographic signature


RE: [pfSense Support] PFSense + Poweredge

2006-06-27 Thread Scott Williamson

Just to add to this, I just installed PFSense on 2 PE 2850's each with 6
10/100/1000 Interfaces 2GB RAM and 2X250GB Sata Harddrives using Dell's
Hardware raid.  Using RC1 all is well.

Regards,
Scott

There are 10 types of people in this world, those who can read binary,
and those who cannot.
-Original Message-
From: Vivek Khera [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, June 27, 2006 9:12 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] PFSense + Poweredge


On Jun 27, 2006, at 5:22 AM, Lee Hetherington wrote:

 Im tempted to buy 2x Poweredge 850's with SATA, are their any known  
 issues installing onto this, im not sure if SATA on these is  
 supported under FreeBSD...

so driving 200 miles is cheaper for you than buying a $150 UPS?!?!?   
man, you must be underpaid.

anyhow, to answer your question, I run Pfsense on a PE SC 400 with a  
Dell SATA RAID card (which is basically adaptec) with no problems.

I've never had problems with FreeBSD not recognizing devices on a  
Dell box. You should be safe.  I know for sure FreeBSD 6.1 recognizes  
the SATA RAID on a PE800.

DISCLAIMER:

This e-mail is only intended for the person(s) to whom it is addressed and may 
contain confidential information. If you have received this e-mail in error, 
please notify us immediately by reply e-mail and then delete this message from 
your system. Please do not copy it or use it for any purposes, or disclose its 
contents to any other person without the consent of the sender. Unless 
expressly stated herein to the contrary, only agreements in writing, signed by 
an authorized officer of the Company, may be enforced against it.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]