Re: [pfSense-discussion] pfsense on a flash drive

2011-05-12 Thread Scott Ullrich
On Thu, May 12, 2011 at 8:38 PM, Muhammad Panji wrote: > Dear All, > Anyone has experience installing and using pfsens from a flash drive / thumb > drive? how is the performance comparing to using hard drive? Thank you > regards, For the most part there is no difference in performance. The fire

Re: [pfSense-discussion] And so it ends...

2011-02-03 Thread Scott Ullrich
On Thu, Feb 3, 2011 at 9:54 AM, Eugen Leitl wrote: > > I have a hunch IPv6 deployment will pick up considerably > 1-2 years from now. > > - Forwarded message from Scott Howard - > > From: Scott Howard > Date: Thu, 3 Feb 2011 06:35:57 -0800 > To: na...@nanog.org > Subject: And so it ends.

Re: [pfSense-discussion] PfSense localization

2011-01-04 Thread Scott Ullrich
On Tue, Jan 4, 2011 at 10:40 AM, wrote: > > Thank you. > It's good to know that. > But is there is some prognosis on the 2.0 release date? Yep, when it's done. Scott - To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com

Re: [pfSense-discussion] PfSense localization

2011-01-04 Thread Scott Ullrich
On Tue, Jan 4, 2011 at 5:07 AM, William David Armstrong wrote: > > I can help for  translate  in Brazilian Portuguese http://pootle.pfsense.org.br:8080/docs/resources.html Scott - To unsubscribe, e-mail: discussion-unsubscr...@

Re: [pfSense-discussion] Re: ARIN space not accepted

2010-12-04 Thread Scott Ullrich
On Sat, Dec 4, 2010 at 7:26 AM, Eugen Leitl wrote: > - Forwarded message from Leo Bicknell - > > From: Leo Bicknell > Date: Fri, 3 Dec 2010 14:24:16 -0800 > To: na...@nanog.org > Subject: Re: ARIN space not accepted > Organization: United Federation of Planets > > In a message written on

Re: [pfSense-discussion] Re: Low end, cool CPE.

2010-11-12 Thread Scott Ullrich
On Fri, Nov 12, 2010 at 5:51 PM, Nathan Eisenberg wrote: [snip] > But still - no IPv6 support (though a 3rd-party patch is now available to > beat it in, it's not up to par yet, and it's not in 'stable').  :( The work Seth is doing will be in 2.1 sometime next year. He has made a lot of progres

Re: [pfSense-discussion] pfSense router/firewall in a Vmware ESXi guest for other guests

2010-10-02 Thread Scott Ullrich
On Sat, Oct 2, 2010 at 2:27 PM, Adam Thompson wrote: > It works, but performance is, in my experience, poor.  Don't use trunking > (802.3ad / LACP) and VLANs together, or inter-vlan routing slows down > drastically.  This appears to be a VMWare problem, not a pfSense problem. > I recommend creatin

Re: [pfSense-discussion] pfSense 2.0 will do FreeBSD 8.1?

2010-07-28 Thread Scott Ullrich
On Wed, Jul 28, 2010 at 10:11 AM, Eugen Leitl wrote: > Thanks. > > Is boot from zfs root an install option? > No, the installer does not have ZFS support and we will not see ZFS support into 2.1 at the earliest when work on the new installer picks up steam. Scott

Re: [pfSense-discussion] pfSense 2.0 will do FreeBSD 8.1?

2010-07-28 Thread Scott Ullrich
On Wednesday, July 28, 2010, Eugen Leitl wrote: > > http://www.freebsd.org/releases/8.1R/announce.html is out. Will > pfSense 2.0 get this? We already have FreeBSD 8.1 on 2.0 snapshots. Scott - To unsubscribe, e-mail: discussio

Re: [pfSense-discussion] port to freescale 8349e

2010-06-18 Thread Scott Ullrich
On Fri, Jun 18, 2010 at 12:42 PM, Zied Fakhfakh wrote: > On 06/07/2010 05:07 PM, Zied Fakhfakh wrote: > >> Hi, >> >> I'm planning to port/build pfsense on freescale 8349e powerpc based >> system. >> http://www.freescale.com/webapp/sps/site/prod_summary.jsp?code=MPC8349E >> It holds the e300 power

Re: [pfSense-discussion] port to freescale 8349e

2010-06-07 Thread Scott Ullrich
On Mon, Jun 7, 2010 at 5:50 PM, Scott Ullrich wrote: > freebsd on that ship is already ported, any "good luck" ? or "forget it" :) >> >> Oops, pressed send too soon. I am unsure of this boards FreeBSD status but to get to the 300+ hour mark that assumes that

Re: [pfSense-discussion] port to freescale 8349e

2010-06-07 Thread Scott Ullrich
On Mon, Jun 7, 2010 at 12:07 PM, Zied Fakhfakh wrote: > Hi, > > I'm planning to port/build pfsense on freescale 8349e powerpc based system. > http://www.freescale.com/webapp/sps/site/prod_summary.jsp?code=MPC8349E > It holds the e300 powerPC processor. > > Nice board am I getting into a very lar

Re: [pfSense-discussion] any chances to see pfsense on GuruPlug Plus?

2010-02-25 Thread Scott Ullrich
On Thu, Feb 25, 2010 at 1:27 PM, Mark Crane wrote: > Look at the specs. ALIX could really use an updated CPU like the Intel atom > or a VIA CPU. > > GuruPlug : > Power consumption 5watts of power. > CPU is over 1.2ghz > 512mb o16bit DDR2 800MHz > esata support > 2x Gb Ethernet > 2x USB 2.0 > 1x M

Re: [pfSense-discussion] any chances to see pfsense on GuruPlug Plus?

2010-02-25 Thread Scott Ullrich
On Thu, Feb 25, 2010 at 1:05 PM, Paul Mansfield wrote: > I asked them if there was a UK distributor, and they responded promptly > with > http://www.newit.co.uk/shop/products.php?cat=11 > > dual ethernet for less than £100 (US$150) seems quite a good deal. > For about the same price why not purch

[pfSense-discussion] Watch Chris and myself on FLOSS Weekly Live at 4:30 PM EDT

2009-12-16 Thread Scott Ullrich
http://live.twit.tv Scott - To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com For additional commands, e-mail: discussion-h...@pfsense.com Commercial support available - https://portal.pfsense.org

Re: [pfSense-discussion] pfSense book now available for purchase

2009-11-04 Thread Scott Ullrich
On Wed, Nov 4, 2009 at 12:13 PM, cl...@pfsense wrote: > Can't wait for the electronic version  :-) I believe only commercial support customers will have access to the electronic version. And folks, please respect the authors and do not pirate it. kthanks Scott

Re: [pfSense-discussion] IPsec and OPT

2009-11-03 Thread Scott Ullrich
On Tue, Nov 3, 2009 at 7:45 AM, Eugen Leitl wrote: > > Anyone has a working IPsec config with a virtual OPT device (VIP or similar) > you could share? > > I've made a tunnel (one end is transparent bridge, terminated on > WAN), but can't route between networks. I'll move on to OpenVPN > (UDP port

Re: [pfSense-discussion] BGP to get Internet

2009-10-29 Thread Scott Ullrich
On Thu, Oct 29, 2009 at 9:32 PM, Evgeny Yurchenko wrote: > I thought you corrected .php to exclude Gateway input field. So I just > modify config.xml and never go to gui to modify WAN interface, right? Yep, that boxes WAN IP never changes. Scott -

Re: [pfSense-discussion] BGP to get Internet

2009-10-29 Thread Scott Ullrich
On Thu, Oct 29, 2009 at 12:08 PM, Evgeny Yurchenko wrote: > Thank you. Do you have xml for 1.2.3-RC3 so I could try it? > Evgeny. em1 100

Re: [pfSense-discussion] BGP to get Internet

2009-10-29 Thread Scott Ullrich
On Thu, Oct 29, 2009 at 12:01 PM, Evgeny Yurchenko wrote: > Hello! > > sorry if this topic was brought up before but... > I am running several pfSense-BGP installations but they are all for > redundancy purposes over several links. > > Does anybody run pfSense with BGP and two Internet providers?

Re: [pfSense-discussion] Is there a 1.2.2 change log?

2009-10-16 Thread Scott Ullrich
On Fri, Oct 16, 2009 at 4:38 PM, Marty Nelson wrote: > Hey everyone.  I’m running 1.2.1 and was wondering if there was a change log > available?  I poked around the pfSense site as well as the forums and I > either blindly missed it, or it’s not obvious.  J Please see http://blog.pfsense.org/?p=4

Re: [pfSense-discussion] openvpn 2.1 rc20 out now

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 5:31 AM, Paul Mansfield wrote: > http://www.openvpn.net/index.php/open-source/downloads.html > > just thought people might want to upgrade, the RCs have been good for me, > especially for vista users where you don't have to do the external "route" > stuff. > > perhaps openvp

Re: [pfSense-discussion] fully redundant dual-WAN setup

2009-08-11 Thread Scott Ullrich
On Tue, Aug 11, 2009 at 5:03 AM, Veiko Kukk wrote: > I have tried dual wan and dual machine setup with no success. Dual wan > pfsense only works with single machine. carp also works, but both carp > *and* dual wan together does not work! > And seems there are very few who care about pfsense failove

Re: [pfSense-discussion] Tool to monitor pfSense

2009-04-08 Thread Scott Ullrich
On Wed, Apr 8, 2009 at 3:03 PM, Augusto Ferronato wrote: > Using Nagios :) heheheh!!! Bixdata and http://mon.itor.us are small pieces to my monitoring puzzles. Scott - To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com

Re: [pfSense-discussion] captive portal doesnt work on 2.0 Alpha version

2009-03-30 Thread Scott Ullrich
We do not handle 2.0 issues here, this is for our stable releases. Please visit the testing area on the forum for 2.0. Scott On Mon, Mar 30, 2009 at 11:48 AM, Nelson Murilo wrote: > > Hi Guys, > > I checked that subject in list before, but I don't found nada. > > So, I'm testing pfsense mainly

Re: [pfSense-discussion] More DNS servers please

2009-03-16 Thread Scott Ullrich
On Mon, Mar 16, 2009 at 4:23 PM, Joe Lagreca wrote: > Would it be possible to add more entries for DNS servers in the > General Setup section?  3-4 would be great.  I know its possible to > edit the config file to add more, I just think it would be usefull to > have it in the GUI as well.  Thanks.

Re: [pfSense-discussion] xen aware pfsense.

2009-01-27 Thread Scott Ullrich
On Tue, Jan 27, 2009 at 10:15 PM, pfsense sense wrote: > i'm not suggesting pfsense be run inside a VM, i am suggesting pfsense > provide VM functionality > i'm fully aware the VM's shortcomings, i manage a 14TB ESX cluster > let me say that again... > > i am suggesting pfsense provide VM func

Re: [pfSense-discussion] PPTP user passwords unencrypted in config file?

2009-01-22 Thread Scott Ullrich
On Thu, Jan 22, 2009 at 3:23 PM, jason whitt wrote: > i was going through my config file the other day and noticed that when using > pptp against local users the users passwords are stored in clear text in the > config file. > Is it possible to encrypt them? Not currently. See the list history

Re: [pfSense-discussion] pfSense as VDSL Router

2008-11-03 Thread Scott Ullrich
On Mon, Nov 3, 2008 at 11:41 AM, Eugen Leitl <[EMAIL PROTECTED]> wrote: > > FYI: http://www.heise.de/netze/pfSense-als-VDSL-Router--/artikel/116739 > > > (Notice that IP-TV needs IGMP support which is apparently not > in pfSense kernel? Here's a thread, which says the problem > is an IGMP proxy h

Re: [pfSense-discussion] We have received your email and someone will be responding shortly.

2008-09-11 Thread Scott Ullrich
On Thu, Sep 11, 2008 at 8:31 AM, Tommy Skoglund <[EMAIL PROTECTED]> wrote: > Could some admin/postmaster please disable the email address so the > spamming wil stop? > Yes, sorry about that. Scott

Re: [pfSense-discussion] We have received your email and someone will be responding shortly.

2008-09-11 Thread Scott Ullrich
[EMAIL PROTECTED] removed from mailing list discussion@pfsense.com Sorry about the noise folks! Scott On Thu, Sep 11, 2008 at 11:07 AM, <[EMAIL PROTECTED]> wrote: > We have received your email and someone will be responding shortly. > >Please do not respond to this email -- it is automatical

Re: [pfSense-discussion] We have received your email and someone will be responding shortly.

2008-09-11 Thread Scott Ullrich
[EMAIL PROTECTED] removed from mailing list discussion@pfsense.com Sorry about the noise folks! Scott On Thu, Sep 11, 2008 at 10:45 AM, <[EMAIL PROTECTED]> wrote: > We have received your email and someone will be responding shortly. > >Please do not respond to this email -- it is automatica

Re: [pfSense-discussion] DNS resolver test

2008-07-22 Thread Scott Ullrich
On Tue, Jul 22, 2008 at 2:32 PM, Eugen Leitl <[EMAIL PROTECTED]> wrote: > > http://www.provos.org/index.php?/pages/dnstest.html > > DNS Resolver Test > > For secure name resolution, it is important that your DNS resolver uses > random source ports. The box below will tell you if there is something

[pfSense-discussion] 1.3-ALPHA-ALPHA testing snapshots now available!

2008-07-06 Thread Scott Ullrich
1.3-ALPHA-ALPHA testing snapshots are now available. Please see http://blog.pfsense.org/?p=208 for more information. Scott

[pfSense-discussion] 1.2.1-BETA snapshots now available!

2008-07-06 Thread Scott Ullrich
Please see http://blog.pfsense.org/?p=207 for more information. Thanks!

Re: [pfSense-discussion] Used ALIX or Soekris?

2008-06-27 Thread Scott Ullrich
On Fri, Jun 27, 2008 at 3:37 PM, Andrew Burnette <[EMAIL PROTECTED]> wrote: > I had similar thoughts a while back. doesn't always work out the way you > think. (e.g. toyota prius, while a politically and technologically needed > car, actually saves no energy over it's lifespan due to the enormous a

Re: [pfSense-discussion] clog size

2008-04-14 Thread Scott Ullrich
On 4/14/08, Paul M <[EMAIL PROTECTED]> wrote: > if clog is turned off, does it then use "tail -N" and look at a normal > log file instead of using clog to view? Yes, it omits the clog binary completely. Scott

Re: [pfSense-discussion] clog size

2008-04-14 Thread Scott Ullrich
On 4/14/08, Scott Ullrich <[EMAIL PROTECTED]> wrote: > I have commited some code to help with this: > > http://cvs.pfsense.org/cgi-bin/cvsweb.cgi/pfSense/usr/local/www/guiconfig.inc?rev=1.90.2.50;content-type=text%2Fx-cvsweb-markup Woops, wrong URL: http://cvs.pfsense.org/cgi

Re: [pfSense-discussion] clog size

2008-04-14 Thread Scott Ullrich
On 4/14/08, Paul M <[EMAIL PROTECTED]> wrote: > RB wrote: > > I've had a request to increase logging duration on systems that have > > no access to an external syslog server, so am making the necessary > > changes to maintain much larger ring-log files. Incredibly larger - > > > what we've done

Re: [pfSense-discussion] miniupnpd No buffer space available

2008-03-28 Thread Scott Ullrich
On 3/28/08, Dennis Karlssson <[EMAIL PROTECTED]> wrote: > Hi Scott > > I use both CP and FW schedules. I have a feeling that you are just working around the problem and not solving it. >From a shell do this: sysctl net.inet.ip.fw.dyn_buckets How many buckets are defined by default? 256? Take

Re: [pfSense-discussion] miniupnpd No buffer space available

2008-03-28 Thread Scott Ullrich
On 3/28/08, Dennis Karlssson <[EMAIL PROTECTED]> wrote: > Hi Bill > > Deactivating and activating the Traffic Shaper did the job. I am not quite understanding this. Are you using captive portal? Or schedule firewall rules? Mar 27 23:22:49 kernel: ipfw: install_state: Too many dynamic rules

Re: [pfSense-discussion] Traffic shaper bug ?

2008-03-22 Thread Scott Ullrich
On 3/22/08, RB <[EMAIL PROTECTED]> wrote: > For that matter, is any non-dev actually _running_ 1.3? For quite > some time, short of building the whole system myself, performing an > update to a fresh test system just results in complete b0rkage > (libraries missing & whatnot), same as HEAD has

Re: [pfSense-discussion] BUG? Access to bandwidhtd without password

2008-03-18 Thread Scott Ullrich
On 3/18/08, Cristiano Deana <[EMAIL PROTECTED]> wrote: > Hi, > > pfsense 1.2, I installed hte package of bandwitdhd. If I access to > https://my.pfsense/bandwithd/ there is no request for password > Do you thing is it right? That is correct. Firewall off the port to only trusted hosts. Scott

[pfSense-discussion] Mirror finder

2008-03-13 Thread Scott Ullrich
Thanks everyone (20+) of you for notifying us of the mirror problems. It is now resolved. Scott

Re: [pfSense-discussion] freebsd 6.2 ports archive

2008-03-13 Thread Scott Ullrich
On 3/13/08, Paul M <[EMAIL PROTECTED]> wrote: > Hi, > I was looking for the syslog-ng package to install on my pfsense boxes, > and discovered that the main freebsd site no longer has the ports for > that release - only 6.3. > > I found the ftp.de.freebsd.org site still had it, so I did an evil

Re: [pfSense-discussion] Simple patch for Dynamic DNS.

2008-02-13 Thread Scott Ullrich
On 2/13/08, Ben Timby <[EMAIL PROTECTED]> wrote: > Scott, sorry to bug you, but I wondered if you ever had a chance to > check out this patch and what the outcome was? It looks like this has been committed. At last the patches here are showing as already applied. Can you verify this? Scott

Re: [pfSense-discussion] 1.2RC5 or release

2008-02-11 Thread Scott Ullrich
On Feb 11, 2008 1:13 PM, Ronald L. Rosson Jr. <[EMAIL PROTECTED]> wrote: > On doing an update from RC4 - RC5 with Dashboard installed I can no > longer get dashboard back. Even tried uninstalling dashboard (Yes, I > know it says it can not be uninstalled) to no avail. Other than that > and the bug

Re: [pfSense-discussion] 1.2RC5 or release

2008-02-11 Thread Scott Ullrich
On Feb 11, 2008 9:15 AM, Chris Buechler <[EMAIL PROTECTED]> wrote: > We'll probably skip RC5 as an official release even though the snapshots > are labeled as such right now. Yeah. no plans to release 1.2-RC5 except in its current snapshot form. I changed the version so we can identify new issues

Re: [pfSense-discussion] bogons update issue

2008-02-10 Thread Scott Ullrich
On 2/10/08, Jan Hoevers <[EMAIL PROTECTED]> wrote: > I've tested this now on a fresh install, and you're right, it will work > on existing installs. > The missing od issue is of course still there, but unlike I wrote in my > original mail, it does not cause the script to abort. > > Thanks for fixin

Re: [pfSense-discussion] bogons update issue

2008-02-03 Thread Scott Ullrich
On 2/3/08, Jan Hoevers <[EMAIL PROTECTED]> wrote: > I'm running the embedded version of pfSense on a Soekris 4801. > Today (3 Feb 2008) I upgraded to 1.2-RC4 and it caught my eye that the > bogons file (/etc/bogons) dated back to October 2007. > > I consider bogons filtering important, so I decided

Re: [pfSense-discussion] lagg + carp: carp not sending multicast via lagg interface

2008-01-23 Thread Scott Ullrich
On 1/23/08, Fabio C Flores <[EMAIL PROTECTED]> wrote: > And how can I find out if 1.2-RC4 uses that freebsd fix? http://pfsense.com/cgi-bin/cvsweb.cgi/tools/patches/RELENG_6_2/if_lagg.diff ... Is what we use. Feel free to send a new patch if it does not include the needed bits. Scott

Re: [pfSense-discussion] (DUP!) duplicated packets when pinging internal server

2008-01-22 Thread Scott Ullrich
I bet it is being caused by your usage of LAGG. Unfortunately you are on your own on this one as LAGG is not supported as of yet. On Jan 22, 2008 2:03 PM, Fabio C Flores <[EMAIL PROTECTED]> wrote: > # ping 10.0.2.10 > PING 10.0.2.10 (10.0.2.10): 56 data bytes > 64 bytes from 10.0.2.10: icmp_seq=0

[pfSense-discussion] #pfSensechat has been opened

2008-01-10 Thread Scott Ullrich
All, We have opened a new FreeNode pfSense chat room that is meant for off topic discussions for like minded people (pfSensers). Please join us and chat with like minded folks! #pfSenseCHAT on FreeNode. Scott

Re: [pfSense-discussion] Looking for a push in the right direction for VoIP/Cisco 7971 phones

2008-01-02 Thread Scott Ullrich
On 1/2/08, patrickm <[EMAIL PROTECTED]> wrote: > Hi all, > > I'm in charge of replacing our Cisco PIX firewall with one that will allow > us to use VPN, and a bunch of my other sysadmin friends have suggested > using pfsense. Everything was super easy to set up initially, and now I > want to get o

Re: [pfSense-discussion] Dynamic remote endpoints (IPsec)

2008-01-02 Thread Scott Ullrich
On Jan 2, 2008 6:10 PM, Dennis Karlsson <[EMAIL PROTECTED]> wrote: > Hi > > In the current beta of m0n0wall they've included the possibility to use > a host name as destination gateway address. Will this be included in the > 1.2 release? No. 1.2 is frozen. It is already in RELENG_1 and HEAD so s

Re: [pfSense-discussion] Support NTLM

2007-12-05 Thread Scott Ullrich
On 12/5/07, Jose Augusto <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hello, > I need help. > I have a firewall running on Linux, and the most faster possible the change > the firewall for PFSense, but, in pfsense is possible authentication on NTML > (Active Di

Re: [pfSense-discussion] Simple patch for Dynamic DNS.

2007-12-05 Thread Scott Ullrich
On 12/5/07, Ben Timby <[EMAIL PROTECTED]> wrote: > I have attached two patches. > > dyndns-HEAD.patch > dyndns-RELENG_1.patch > > both patch two files: > > usr/local/www/services_dyndns.php > etc/inc/services.inc Thanks! I will check into these this evening. Scott

Re: [pfSense-discussion] Simple patch for Dynamic DNS.

2007-12-01 Thread Scott Ullrich
On 11/27/07, Ben Timby <[EMAIL PROTECTED]> wrote: > I set up the Dynamic DNS feature today, however, I needed to be able > to specify my DNS server address. > > The attached patch adds a field to the services_dyndns.php form. > This field if provided will be written to the nscommands file (in > ser

Re: [pfSense-discussion] multiwan ftp proxy

2007-11-19 Thread Scott Ullrich
On Nov 19, 2007 1:50 PM, Bill Marquette <[EMAIL PROTECTED]> wrote: > Assuming I ftp at home (don't recall the last time I intentionally did > that!) then ftp works just fine via the primary wan as Chris mentions. > I think I did have to create a rule for traffic destined to 127.0.0.1 > to use the

Re: [pfSense-discussion] multiwan ftp proxy

2007-11-14 Thread Scott Ullrich
On Nov 14, 2007 5:46 PM, D.Pageau <[EMAIL PROTECTED]> wrote: > What is the current status on multi-wan ftp proxying ? > > I have dig around on pfsense FAQ, forum, blog, wiki, ticket (btw, is it > too many source of information ?) > > Some info (outdated ?) on FAQ (or is it blog or forum or wiki or

Re: [pfSense-discussion] php: : Not installing nat reflection rules for a port range > 500 (1.2-RC2)

2007-11-09 Thread Scott Ullrich
You most likely have a port range defined. Scott On Nov 9, 2007 2:26 AM, Tortise <[EMAIL PROTECTED]> wrote: > Hi Team > > I added a rule for MS TS access to 3389, I get logged "php: : Not installing > nat reflection rules for a port range > 500" and the connection does not > seem to be created.

Re: [pfSense-discussion] Captive portal could not deterimine clients MAC address

2007-09-05 Thread Scott Ullrich
On 9/5/07, Nick Buraglio <[EMAIL PROTECTED]> wrote: > What wireless AP are you using? > > nb I answered him here: http://forum.pfsense.org/index.php/topic,5999.msg35459.html#msg35459 Tunge2, please stop cross posting between the forum and the mailing list. Scott

Re: [pfSense-discussion] Firmware

2007-08-25 Thread Scott Ullrich
No. Nothing will change from this perspective. Please visit our blog where we describe how this wilkl help the project. Scott On 8/25/07, Mike <[EMAIL PROTECTED]> wrote: > With the recent move to paid support for pfsense and monowall, will this > signify the end of the firmware upgrades, packa

Re: [pfSense-discussion] 1.2-RC2 released

2007-08-21 Thread Scott Ullrich
On mar, 21 aoû 2007 17:48:24 +0200, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Just one question, from a pfsense newbie > > where i can download 1.2RC2 update ? > > Best regards http://www.pfsense.com/mirror.php?section=updates/pfSense-Full-And-Embedded-Update-1.2-RC2.tgz Scott

Re: [pfSense-discussion] atmel avr port of pfsense?

2007-07-31 Thread Scott Ullrich
On 7/31/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Most of the steps should be the same for NetBSD as they are for FreeBSD since > they share a lot of commonalities. Not quite. You will find a lot of items that rely on netgraph such as PPTP, PPPoE, etc. Scott

Re: [pfSense-discussion] atmel avr port of pfsense?

2007-07-31 Thread Scott Ullrich
On 7/31/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: [snip] > This looks like a job for NetBSD! Good luck porting pfSense to Net! :) Scott

Re: [pfSense-discussion] Package installation / removal problem ?

2007-07-17 Thread Scott Ullrich
Dashboard is still very much a work in progress and has a few issues. Scott On 7/17/07, Daniele Guazzoni <[EMAIL PROTECTED]> wrote: Small correction: only dashboard stalls Daniele Guazzoni wrote: > I'm running 1.2-BETA-2-TESTING-SNAPSHOT-07-05-2007 and it stalls on > adding and removing packa

Re: [pfSense-discussion] Load balancer pool edit page: changes to pool list

2007-07-03 Thread Scott Ullrich
On 7/3/07, Chris Daniel <[EMAIL PROTECTED]> wrote: I use the "load balancer pool edit" page quite a lot, adding and removing servers from my active pool. It gets kind of old typing the IPs when re-adding servers, and I understand it needs a little refinement anyway, so I propose some changes (wh

Re: [pfSense-discussion] Sun Fire X2100 M2 questions

2007-06-21 Thread Scott Ullrich
On 6/21/07, Bill Marquette <[EMAIL PROTECTED]> wrote: On 6/20/07, Eugen Leitl <[EMAIL PROTECTED]> wrote: > nfe won't be there in 1.3, correct? I can survive with > just two interfaces (WAN and LAN) for a while, but I do need > at least DMZ rather soon. When they say I should stay > away from http

Re: [pfSense-discussion] Problems mit DynDNS Update

2007-06-20 Thread Scott Ullrich
Try a recent snapshot. On 6/20/07, Fabian Steiner <[EMAIL PROTECTED]> wrote: Hello! We are using PfSense 1.2_BETA and are experiencing some serious problems concerning DynDNS updates. Sometimes they are performed (obviously without adding additional options, e.g. wildcard=ON) and sometimes they

Re: [pfSense-discussion] RAID

2007-06-15 Thread Scott Ullrich
On 6/15/07, Eugen Leitl <[EMAIL PROTECTED]> wrote: There's no SATA soft-RAID support planned in the pfsense install, right? RAID 1 is supported if two disks are present.

Re: [pfSense-discussion] openbsd 10gb stuff

2007-06-04 Thread Scott Ullrich
In the meantime if you have a chance do a netio or netperf test on 1.0.1 and then compare to a recent snapshot. I would be interested in hearing performance improvements on modern hardware as we have mainly tested 266mhz devices over the weekend. Scott On 6/4/07, Greg Hennessy <[EMAIL PROTECT

Re: [pfSense-discussion] openbsd 10gb stuff

2007-06-04 Thread Scott Ullrich
One of the 10% patches have already been ported and in our tree. We are seeing up to a 33% improvement in performance on some machines such as Soekris 266. Stay tuned, Chris plans on blogging about the improvements soon. Scott On 6/4/07, Jure Pečar <[EMAIL PROTECTED]> wrote: Just saw this

Re: [pfSense-discussion] MiniUPnPd security risks

2007-04-25 Thread Scott Ullrich
On 4/25/07, DarkFoon <[EMAIL PROTECTED]> wrote: I'm considering installing the UPnP daemon on some home/home office boxes, and I'm curious what the security issues are. From my own (simple) analysis, the worst that could happen is a malicious application could ask for many, many (almost all?) o

Re: [pfSense-discussion] Patch submittal deadline?

2007-04-22 Thread Scott Ullrich
RELENG_1 and -HEAD would be fine. We are past RELENG_1_2 deadline. Scott On 4/22/07, Kyle Mott <[EMAIL PROTECTED]> wrote: Do you care if the diff's/patches are from a February 1.0.1 snapshot, or would you prefer it from a 1.2-BETA snapshot? -Kyle Scott Ullrich wrote: > On

Re: [pfSense-discussion] Patch submittal deadline?

2007-04-15 Thread Scott Ullrich
On 4/15/07, Kyle Mott <[EMAIL PROTECTED]> wrote: Is there a deadline for submitting a patch to be included in the base release? I'm still working on my EtherChannel port, but I've still got a few things to work out. Will I still be able to get it in to the next release (I assume 1.2), and/or 1.0.

Re: [pfSense-discussion] 16 instance of Snort running ???

2007-04-10 Thread Scott Ullrich
On 4/10/07, Daniele Guazzoni <[EMAIL PROTECTED]> wrote: I upgraded to 1.0.1-SNAPSHOT-03-27-2007, running with the snort package installed. Before the upgrade everything was ok, now I have 16 instances of snort running and crashing regularly. Known problem ? Yes. Uninstall and reinstall the

Re: [pfSense-discussion] routing everything though an IPsec tunnel

2007-03-30 Thread Scott Ullrich
On 3/30/07, Eugen Leitl <[EMAIL PROTECTED]> wrote: What I really like about pfsense/m0n0 is that it allows you to build IPsec tunnels between firewalls. This is rather important, because I happen to live in a country where ISPs are required to spy on their customers by law (storing all connectio

Re: [pfSense-discussion] Box hangs because of PHP ?

2007-03-22 Thread Scott Ullrich
"snort blocked" the PHP process is getting all CPU. Memory and disk are ok, swap is not used. There s something with the snort package which is not ok. Daniele Scott Ullrich wrote: > No, this is not a known problem. You might try upgrading to the > recent snapshot: > htt

Re: [pfSense-discussion] Box hangs because of PHP ?

2007-03-22 Thread Scott Ullrich
Technically now that the images are 128 megabytes its possible. We just never spent the time to make it work correctly. On 3/22/07, Eugen Leitl <[EMAIL PROTECTED]> wrote: On Thu, Mar 22, 2007 at 12:20:12PM -0400, Scott Ullrich wrote: > >Is there a way to upgrade 1.0.1 embed

Re: [pfSense-discussion] Box hangs because of PHP ?

2007-03-22 Thread Scott Ullrich
On 3/22/07, Eugen Leitl <[EMAIL PROTECTED]> wrote: On Thu, Mar 22, 2007 at 11:56:04AM -0400, Scott Ullrich wrote: > No, this is not a known problem. You might try upgrading to the > recent snapshot: > http://snapshots.pfsense.com/FreeBSD6/RELENG_1/updates/ Is there a way t

Re: [pfSense-discussion] Box hangs because of PHP ?

2007-03-22 Thread Scott Ullrich
No, this is not a known problem. You might try upgrading to the recent snapshot: http://snapshots.pfsense.com/FreeBSD6/RELENG_1/updates/ Scott On 3/22/07, Daniele Guazzoni <[EMAIL PROTECTED]> wrote: Fellows I have pfSense 1.0.1 installed on a VIA mini-ITX which regularly hangs. The behaviou

Re: [pfSense-discussion] Cisco EtherChannel support in pfSense?

2007-03-11 Thread Scott Ullrich
On 3/11/07, Kyle Mott <[EMAIL PROTECTED]> wrote: I'm having a hard time deciding whether or not to use a package or just modify the base system and provide diff's. Where should I send what I've got thus far so I can get some opinions on what I should do (package vs base)? This feels more like a

Re: [pfSense-discussion] PPPoE server mods

2007-02-28 Thread Scott Ullrich
On 2/28/07, Paul <[EMAIL PROTECTED]> wrote: Hi, I "hacked" a quick mod for mpd/pppoe server to allow me to use pfsense as an access concentrator for dial-up users (via ethernet). Pfsense was perfectly capable of allowing access via pppoe / radius but was missing a way for the radius server to c

Re: [pfSense-discussion] freebsd ports vs pfsense ports

2007-02-28 Thread Scott Ullrich
On 2/28/07, Paul <[EMAIL PROTECTED]> wrote: Working on mpd, I saw that there's a pfSense ports directory in /home/pfsense/tools I need to port some custom packages to pfSense, so how do I tell the build scripts to use my own port instead of the freebsd ones, or shall I just copy them to /usr/por

Re: [pfSense-discussion] Developer bootstrap errors

2007-02-28 Thread Scott Ullrich
On 2/28/07, Paul <[EMAIL PROTECTED]> wrote: Bill Marquette wrote: > Comment out the call to update_cvs_depot? Or update that routine to > better handle a development model that has no CVS access? Modifying the function to handle SKIP_CHECKOUT (which is documented in in the wiki) is trivial, as i

Re: [pfSense-discussion] DST patch

2007-02-23 Thread Scott Ullrich
Sorry but we do not give out firm dates. When it is done is the answer. Either way folks can upgrade to the latest version which features FreeBSD 6.2 from http://snapshots.pfsense.com/FreeBSD6/RELENG_1/updates/ so its a moot point. Scott On 2/23/07, Dmitry Sorokin <[EMAIL PROTECTED]> wrote:

Re: [pfSense-discussion] Getting development environment set

2007-02-19 Thread Scott Ullrich
It is up and running just fine?! Scott On 2/19/07, Simon Cornelius P. Umacob <[EMAIL PROTECTED]> wrote: Everything was fine a few hours ago. cvs.pfsense.com seems to be offline now. :) Florent Parent wrote: > > Hi, > > My goal is to create a development environment in VMware. I want to do

Re: [pfSense-discussion] m0n0wall to PFSense

2007-02-15 Thread Scott Ullrich
On 2/15/07, Salcido, Cesar <[EMAIL PROTECTED]> wrote: If I were to install PFSense on my Nokia P020 "m0n0wall currently installed" could I use my existing config.xml with PFSense? Please see http://faq.pfsense.com/index.php?action=artikel&cat=4&id=89&artlang=en&highlight=m0n0wall%20config

Re: [pfSense-discussion] Searched Google but nada

2007-02-14 Thread Scott Ullrich
On 2/14/07, Chris Godwin <[EMAIL PROTECTED]> wrote: I'm getting a sync error. Both boxes are running 1.0.1 on a hacomm i386 box. I have added additional code to the XMLRPC sync area to hopefully tell us what is going on. Upgrade to a new snapshot an hour from now (around 9pm EST). http://sna

Re: [pfSense-discussion] weighted / failover routing

2007-02-03 Thread Scott Ullrich
On 2/3/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: [snip - html stuff snipped] Guys, been using pfsense for a while now, and love it. previously I used lots of openvpn - but with using pfsense and WRAP boxes, and CARP failover - I've moved to IPsec for a few reasons: - openvpn under pfse

Re: [pfSense-discussion] about manage a lot of pfsense in one console interface

2007-01-18 Thread Scott Ullrich
On 1/18/07, Cristian Mata <[EMAIL PROTECTED]> wrote: Thks Scoot, wich is the name of the rules file? Because en my freebsd y have pf.conf but in pfsense... the rules are in the xml file? Thanks in advance. Look at /tmp/rules.debug Scott

Re: [pfSense-discussion] about manage a lot of pfsense in one console interface

2007-01-18 Thread Scott Ullrich
No, this unfortunately will not work like this is outlined PF and IPF are a little too different. But you can use one of our anchors in the rules file to insert and remove rules from cron easier than IPF. On 1/18/07, Sjaak Nabuurs <[EMAIL PROTECTED]> wrote: Cristian Maybe this is a sugestion

Re: [pfSense-discussion] Source based redirection

2007-01-16 Thread Scott Ullrich
Nobody is working on it to my knowledge. Scott On 1/16/07, Adam Van Ornum <[EMAIL PROTECTED]> wrote: Is anyone working on source based redirection? I checked in the forums and one guy had been working on it supposedly but apparently he disappeared. Its a feature I need and I might try doing

Re: [pfSense-discussion] VideoConference problems

2007-01-08 Thread Scott Ullrich
No, you do not want source port, you want destination port. On 1/8/07, Carlos Julio Sánchez [ACC-SIS] <[EMAIL PROTECTED]> wrote: Hi, i send the screen shots with the port 1720 of netmeeting -Original Message- From: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Monday, January 08

Re: [pfSense-discussion] VideoConference problems

2007-01-08 Thread Scott Ullrich
You need to define the port in question as well. Scott On 1/8/07, Carlos Julio Sánchez [ACC-SIS] <[EMAIL PROTECTED]> wrote: Here I send the screenshots, please inform me if I have configured anything wrong Thansks! -Original Message- From: Scott Ullrich [mailto:[EMAIL PRO

Re: [pfSense-discussion] VideoConference problems

2007-01-08 Thread Scott Ullrich
but my netmeeting machine behind Pfsense don't have video and sound yet. I was reading the forum but said the same below -Original Message- From: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Monday, January 08, 2007 12:19 PM To: discussion@pfsense.com Subject: Re: [pfSense

Re: [pfSense-discussion] VideoConference problems

2007-01-08 Thread Scott Ullrich
Same situation that VOIP folks run into. Create an advanced outbound NAT rule for this particular port, move it to the top and be sure to enable the static pot option for the rule in question. Also search the forum for static port, it's discussed about once a week at least. Scott On 1/8/07, C

Re: [pfSense-discussion] Memory issue

2006-12-28 Thread Scott Ullrich
FreeBSD will buffer as much ram as you give it IIRC. What you really should monitor is top from a shell if you are this worried. I would not be worried at all until memory is in the 90+. Scott On 12/28/06, Jack Mayhew <[EMAIL PROTECTED]> wrote: I'm seeing the same thing (ver 1.0.1 - though

Re: [pfSense-discussion] Known PFsense Limits?

2006-12-15 Thread Scott Ullrich
On 12/15/06, Odette <[EMAIL PROTECTED]> wrote: FYI, I've successfully substituted Linux-iptables with PFsense on Soekris net4801 using 5 eth ports and everything have been running fine for more than 30 days. About the rule translation nightmare: aliases and rules optimization permitted me to con

  1   2   3   4   5   >