Re: [pfSense] Virtual IP's and outbound NAT

On Mon, Apr 15, 2013 at 1:30 AM, Marc R. Meshurle Jr. wrote: > > I did nothing but set security in my vSwitch to promiscuous. That was set > prior to this post. > That's only relevant if you're using CARP VIPs. If you're not, don't do that. ___ List mai

Re: [pfSense] Prevailing wisdom on Hyperthreading?

Hello, as I recently had great issues with HyperThreading I can tell you the results of my investigations: At least up to Micro Architecture "Nehalem" it should be considered to deactivate HyperThreading, if you do not have a Operating Systems which directly and officially supports it. Hearsay ha

[pfSense] 2.0.3 release now available

Info on the blog. http://blog.pfsense.org/?p=694 ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] CARP / VIP Failover Queries (NAT sessions and no preempt?)

On Sat, Apr 13, 2013 at 3:58 PM, James Bensley wrote: > If I am connect to a LAN host from outside using SSH for example, and > I pull out the master, my SSH sessions stops working. Do the boxes not > sync NAT tables and states etc? I loose any active TCP connections. > I had this problem until

Re: [pfSense] CARP / VIP Failover Queries (NAT sessions and no preempt?)

On Mon, Apr 15, 2013 at 7:23 AM, Vick Khera wrote: > > On Sat, Apr 13, 2013 at 3:58 PM, James Bensley wrote: >> >> If I am connect to a LAN host from outside using SSH for example, and >> I pull out the master, my SSH sessions stops working. Do the boxes not >> sync NAT tables and states etc? I l

[pfSense] Packet filter maximum pps throughput

Hi, I have pfsense 2.0.2 installed on a Supermicro server (8*Gbit ethernet + Intel Xeon E5645 + 16GB ram). I wanted to test the maximum throughput (in packets per second) of the firewall. There's a packet generator tool (Mausezahn) and I can send udp packets with 600k pps to one of the firewa

Re: [pfSense] CARP / VIP Failover Queries (NAT sessions and no preempt?)

Thanks for the info guys! I have enabled state syncing with direct peer IP. Although my tests aren' proving successful so far. I have another problem now though, should the two lists of sync nodes be exactly the same on both firewalls? Master: pfSync nodes: 0dea55f3 16f7d536 1f484e48 81d9b18a 84

Re: [pfSense] CARP / VIP Failover Queries (NAT sessions and no preempt?)

On 15 April 2013 15:29, James Bensley wrote: > Although my tests > aren' proving successful so far. I meant to say; I am pulling a file via SCP from a host in the LAN to a host on the WAN. If I disable CARP on the master to force a fail over to the backup, there is a pause, and then pings to that

Re: [pfSense] Packet filter maximum pps throughput

One question to be asked is what kind (brand) of network cards are in use and how well are they supported under BSD? -Nate -Original Message- From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On Behalf Of Csiszár Tamás Sent: Monday, April 15, 2013 9:25 AM To:

[pfSense] pptp problem

Hi, I have a pfSense 2.0.3 which running pptp server on it. Part of the pptp clients are lan-to-lan connections, others are simply clients. These clients need to reach the remote lans but it is not working. I'm tried everything to trace the problem but no success. Witch tcpdump I see that the i

[pfSense] NTOP MySQL Export?

Hi all Is it possible to export NTOP to export to a MySQL DB for historical reporting? ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] Packet filter maximum pps throughput

The network cards are "Intel 82576 Dual-Port Gigabit" and as I saw on the compatibility list, it is fully supported by Freebsd's igb driver. One question to be asked is what kind (brand) of network cards are in use and how well are they supported under BSD? -Nate -Original Message- F