[pfSense Support] vlans and traffic shaping 0.94.10

2005-11-23 Thread alan walters
Either your LAN or WAN interface doesn't support ALTQ. The wizard cannot continue. Using sis Ethernet cards and vlans on all interfaces. I had thought that the code was committed to allow vlans with altq. Look forward to hearing wheather this patch should be in pfsense at the moment or

[pfSense Support] Embedded bootup

2005-11-23 Thread Adam Armstrong
Hi, I have a Lex box (the CV860A), but I can't get it to boot any version of pfSense. I'm trying to use the embedded image, but every one I've tried over the past few weeks has hung at right after 'Loading /boot/defaults/loader.conf'. The little spinning line spins a few times and then just

Re: [pfSense Support] Question about NAT

2005-11-23 Thread Rainer Duffner
Rainer Duffner wrote: Scott Ullrich wrote: Yeah, I would give that a shot. OK, I disabled the DNS-checks in sshd_config and I can now login and paste you the rules.debug: # cat rules.debug |egrep -v ^$ # System Aliases lan = { ste0 } wan = { ste3 } pptp = { ng1 ng2 ng3 ng4 ng5

[pfSense Support] restarting httpd

2005-11-23 Thread alan walters
How can the httpd be restarted from the command line. I attempted to run the php script from the command line but it failed looking for credentials.

RE: [pfSense Support] restarting httpd

2005-11-23 Thread Espen Johansen
Do a ps auxww |grep http and you will se full command line for whatever process (change or remove the grep if you are looking for something else) you are looking to kill /restart (unless you already killed it that is) /usr/local/sbin/mini_httpd -c **.php|**.cgi -u root -maxproc 16 -i

Re: [pfSense Support] vlans and traffic shaping 0.94.10

2005-11-23 Thread Dan Swartzendruber
At 04:24 AM 11/23/2005, you wrote: Either your LAN or WAN interface doesn't support ALTQ. The wizard cannot continue. Using sis Ethernet cards and vlans on all interfaces. I had thought that the code was committed to allow vlans with altq. Look forward to hearing wheather this patch should be

RE: [pfSense Support] Have resize instructions changed?

2005-11-23 Thread John Cianfarani
I was trying with 94.10 John -Original Message- From: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 23, 2005 2:09 AM To: support@pfsense.com Subject: Re: [pfSense Support] Have resize instructions changed? Could be. Please try our latest round of images. On

Re: [pfSense Support] vlans and traffic shaping 0.94.10

2005-11-23 Thread Bill Marquette
Is this error at the beginning of the wizard, or the end? If the end, it's a known bug that I haven't had time to dig into (and from other reports, it's purely cosmetic - although you may need to resave the normal filter policy and apply to force the shaper rules to load)). --Bill On 11/23/05,

Re: [pfSense Support] Embedded bootup

2005-11-23 Thread Bill Marquette
The embedded image uses a serial console. I know nothing about the Lex, but if you are using VGA with it, then this is as far as you'll see it boot - try hooking up a serial cable. --Bill On 11/23/05, Adam Armstrong [EMAIL PROTECTED] wrote: Hi, I have a Lex box (the CV860A), but I can't get

Re: [pfSense Support] restarting httpd

2005-11-23 Thread Bill Marquette
Create a developer tag inside the system tag and you'll have a developer menu (and anything else we use that tag for ;-P) which has a restart http option. Of course, this requires that the http daemon is running :) Otherwise, Espen already answered regarding the command that runs (beware of

RE: [pfSense Support] vlans and traffic shaping 0.94.10

2005-11-23 Thread alan walters
Interesting I think you are using fxp eth cards??? Is that right. Mine are sis cards. That seems to be our only difference. I am testing on wrap platform have tried on four different test boxes with four different images. Using the latest images with fresh installs now and still the

[pfSense Support] varying problems w/ 0.94.[4,8,10]

2005-11-23 Thread David Strout
Everyone, Been kinda laxed on the reporting issues to the list lately, so here goes Had a VERY sucessful run w/ 0.90 0.90a - config backup snapped right in from prior ver. 0.8x. - great ease w/ new ISO installs (no installer issues). Had relatively good luck w/ 0.94 ISO - config

RE: [pfSense Support] restarting httpd

2005-11-23 Thread alan walters
I tried that command but it gives some missig tihing I will have to have another look at it -Original Message- From: Bill Marquette [mailto:[EMAIL PROTECTED] Sent: 23 November 2005 15:37 To: support@pfsense.com Subject: Re: [pfSense Support] restarting httpd Create a developer tag

RE: [pfSense Support] vlans and traffic shaping 0.94.10

2005-11-23 Thread alan walters
Cool maybe. It is at the end -Original Message- From: Bill Marquette [mailto:[EMAIL PROTECTED] Sent: 23 November 2005 15:31 To: support@pfsense.com Subject: Re: [pfSense Support] vlans and traffic shaping 0.94.10 Is this error at the beginning of the wizard, or the end? If the end,

RE: [pfSense Support] Question about NAT

2005-11-23 Thread Gary Buckmaster
Rainer, Are you allowing DNS traffic outbound on the NIC facing your DNS servers? -Original Message- From: Rainer Duffner [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 22, 2005 2:26 PM To: support@pfsense.com Subject: Re: [pfSense Support] Question about NAT Scott Ullrich wrote:

Re: [pfSense Support] Have resize instructions changed?

2005-11-23 Thread Scott Ullrich
On 11/23/05, John Cianfarani [EMAIL PROTECTED] wrote: I was trying with 94.10 They have changed a little bit. We now use a uzipped /usr mount. I'll see about getting this updated soon. - To unsubscribe, e-mail: [EMAIL

Re: [pfSense Support] Embedded bootup

2005-11-23 Thread Bao C. Ha
Thanks for the note! I will rebuild new images this weekend, if I am still in town. :-(( Bao On Wed, November 23, 2005 10:23 am, Scott Ullrich wrote: On 11/23/05, Bao C. Ha [EMAIL PROTECTED] wrote: Are you trying to boot from a compact flash or a hard disk? I have some old compact flash

RE: [pfSense Support] Have resize instructions changed?

2005-11-23 Thread John Cianfarani
Is it possible to just make a few empty images (128,256,512 etc) and then just have us mount and copy the partition information inside it? Not sure if that would make it any easier. John -Original Message- From: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 23, 2005

[pfSense Support] Dynamic DNS ON BOTH ENDPOINTS

2005-11-23 Thread info
I've posted this messege in the forum but I not received any responses for 2 days. I want to setup an always up IPSEC tunnel between two PFSENSE gateways that have dynamic IP addresses (cable modem and dsl modem). I know that this can be easily done on IPCOP, however, PFSENSE seems to be light

[pfSense Support] Traffic Shaper Presets

2005-11-23 Thread Kevin Wolf
Just a few comments... first off, the rules for Shareaza and Gnutella seem to be identical, so you might choose to either remove Shareaza, or rename it to Gnutella 2- and have it shape TCP as well as UDP packets on 6346 since G2 uses both protocols, instead of only TCP (which would be

Re: [pfSense Support] Dynamic DNS ON BOTH ENDPOINTS

2005-11-23 Thread Dan Swartzendruber
At 02:10 PM 11/23/2005, you wrote: I've posted this messege in the forum but I not received any responses for 2 days. I want to setup an always up IPSEC tunnel between two PFSENSE gateways that have dynamic IP addresses (cable modem and dsl modem). I know that this can be easily done on

RE: [pfSense Support] Dynamic DNS ON BOTH ENDPOINTS

2005-11-23 Thread Dan Swartzendruber
At 02:34 PM 11/23/2005, you wrote: I'm not 100% sure Scott will probably need to jump in here to confirm. In my tests even though you can put a dynamic-dns name in the field for remote gateway it doesn't actually seem to do a lookup on it. If it did it probably would work fine. This is

RE: [pfSense Support] Dynamic DNS ON BOTH ENDPOINTS

2005-11-23 Thread Angelo Turetta
I'm not 100% sure Scott will probably need to jump in here to confirm. In my tests even though you can put a dynamic-dns name in the field for remote gateway it doesn't actually seem to do a lookup on it. If it did it probably would work fine. This is probably not an incredibly difficult

Re: [pfSense Support] Dynamic DNS ON BOTH ENDPOINTS

2005-11-23 Thread Scott Ullrich
Here's how it works. When the ip changes dhclient kicks off a script which then reconfigures the tunnel. This should work now. On 11/23/05, Angelo Turetta [EMAIL PROTECTED] wrote: I'm not 100% sure Scott will probably need to jump in here to confirm. In my tests even though you can put a

RE: [pfSense Support] restarting httpd

2005-11-23 Thread alan walters
This is what happens when I try to restart httpd with the below command /usr/local/sbin/mini_httpd: No match. **.cgi: No match. I used this command since I am using https /usr/local/sbin/mini_httpd -S -E /var/etc/cert/pem -c **.php|**.cgi -u root -maxproc 16 -i

Re: [pfSense Support] Dynamic DNS ON BOTH ENDPOINTS

2005-11-23 Thread Angelo Turetta
On 11/23/05, Angelo Turetta [EMAIL PROTECTED] wrote: This is probably not an incredibly difficult thing to fix. If I understand correctly, IPSEC tunnels can only be specified by mean of their actual endpoints inside the SPD tables. Angelo. Here's how it works. When the ip changes

Re: [pfSense Support] restarting httpd

2005-11-23 Thread Scott Ullrich
Try /usr/local/sbin/mini_httpd -S -E /var/etc/cert/pem -c **.php|**.cgi -u root -maxproc 16 -i /var/run/mini_httpd.pid Notice the |, thats a pipe in shell-land. On 11/23/05, alan walters [EMAIL PROTECTED] wrote: This is what happens when I try to restart httpd with the below command

Re: [pfSense Support] Dynamic DNS ON BOTH ENDPOINTS

2005-11-23 Thread Scott Ullrich
Both machines need to be pfSense for this to work. On 11/23/05, Angelo Turetta [EMAIL PROTECTED] wrote: On 11/23/05, Angelo Turetta [EMAIL PROTECTED] wrote: This is probably not an incredibly difficult thing to fix. If I understand correctly, IPSEC tunnels can only be specified by mean

RE: [pfSense Support] restarting httpd

2005-11-23 Thread alan walters
Very confused by this. Tried that one as well and I just get the mini_httpd useage. The mini_httpd daemon is now not running but the pid exists If I run with no I get the results mentioned below. I wonder just restart but there is an issue with the restart on the via board I am using. It does

RE: [pfSense Support] vlans and traffic shaping 0.94.10

2005-11-23 Thread alan walters
Great I ll try the next release -Original Message- From: Bill Marquette [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 23, 2005 9:42 PM To: support@pfsense.com Subject: Re: [pfSense Support] vlans and traffic shaping 0.94.10 ok, should be fixed now, if what I just fixed was the

RE: [pfSense Support] Traffic Shaper Presets

2005-11-23 Thread Nelson Papel
As a note/addition, does WinMX even exist anymore? That preset could be removed. Nelson Papel -Original Message- From: Kevin Wolf [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 23, 2005 14:22 To: support@pfsense.com Subject: [pfSense Support] Traffic Shaper Presets Just a few

Re: [pfSense Support] Traffic Shaper Presets

2005-11-23 Thread Bill Marquette
This would be your lucky day ;) On 11/23/05, Kevin Wolf [EMAIL PROTECTED] wrote: Just a few comments... first off, the rules for Shareaza and Gnutella seem to be identical, so you might choose to either remove Shareaza, or rename it to Gnutella 2- and have it shape TCP as well as UDP packets

Re: [pfSense Support] Dynamic DNS ON BOTH ENDPOINTS

2005-11-23 Thread Chris Buechler
Angelo Turetta wrote: Yes, fine. And who's gonna tell your tunnel partner your address has changed and their SPD must be changed? Do you have a protocol for doing that in a standard way? What if you have a Cisco router on the other side? it will be the same regardless of what you have on

Re: [pfSense Support] Dynamic DNS ON BOTH ENDPOINTS

2005-11-23 Thread Scott Ullrich
I will add a feature for it to automatically talk to the 2nd firewall and for it to tell the 2nd to reload its ipsec configuration. This will solve all these problems. Only stipulation is that both endpoints will need to be pfSense, but thats not really something I'm concerned with as you