Re: [pfSense Support] Enable filtering bridge ?

2006-03-15 Thread Rainer Duffner
Chris Buechler wrote: Rainer Duffner wrote: Scott Ullrich wrote: Same as m0n0wall. Enabled filtering on bridges. The old version didn't need this switch - what is switched off (or on) by it? Can I still do NAT for other optional interfaces when I enable it? How it should work is

[pfSense Support] embedded image fstab error during build

2006-03-15 Thread Tim Chapins
I'm getting error below when building embedded...image builds and boots but to amnesiac mode because it can't find config.xml or mount Any ideas? === acpi_video (clean) Cloning /usr/local/pfsense-fs to /usr/local/pfsense-clone Deleting files listed in

[pfSense Support] /current in cvsup_current

2006-03-15 Thread Rajkumar S
Hi, While trying to build from cvs checkout of pfSense, I came across these lines in cvsup_current script. But the /current directory seems missing (or is it that I am missing some thing?). cp /current/src/sys/geom/label/g_label_ufs.c /usr/src/sys/geom/label/g_label_ufs.c # Complicate

Re: [pfSense Support] /current in cvsup_current

2006-03-15 Thread Scott Ullrich
mkdir /current cvsup current-supfile should get that fixed. On 3/15/06, Rajkumar S [EMAIL PROTECTED] wrote: Hi, While trying to build from cvs checkout of pfSense, I came across these lines in cvsup_current script. But the /current directory seems missing (or is it that I am missing

[pfSense Support] Naming Aliases?

2006-03-15 Thread Rainer Duffner
Has anybody come up with a clever alias-naming-scheme? I feel I need to come up with some sort of policy before things get totally out-of control here ;-) I'd like to use something like: Aliases: hostInt|ExtCustomerShortnameHostnamespec Hostnamespec: [VPS]Hostname port:

Re: [pfSense Support] 3054 MP+ Atheros miniPCI card not detected by Embedded-1.0BETA1 and BETA2

2006-03-15 Thread Matthew Fremont
Turns out the company I ordered the 3054MP+ Aries 2 cards was shipped the 3054MP+ cards by their vendor instead of the Aries 2 cards. The Aries 2 is an Atheros card, but the card I received is a PRISM GT card. Love the fact Senao has two products with very similar names but totally different

RE: [pfSense Support] embedded image fstab error during build

2006-03-15 Thread alan walters
Generally a bad CF card From: Tim Chapins [mailto:[EMAIL PROTECTED] Sent: 15 March 2006 13:38 To: support@pfsense.com Subject: [pfSense Support] embedded image fstab error during build I'm getting error below when building embedded...image builds and boots but to

Re: [pfSense Support] embedded image fstab error during build

2006-03-15 Thread Tim Chapins
Thanks Alan..but the fstab error is on my build machine with hard disk And config.xml error is on wrap board with cf card The two are related and I think if I solve fstab issue on build machine it will correct config.xml issue on wrap On 3/15/06, alan walters [EMAIL PROTECTED] wrote:

[pfSense Support] ftp helper

2006-03-15 Thread Paul W
in the whypfsensesucks page I've read this: FTP on multi-wans do not work w/ the FTP helper. does that mean I cannot configure incoming ftp connections? or does it mean I can only configure incoming ftp with one WAN interface? Thanks Paul.

Re: [pfSense Support] ftp helper

2006-03-15 Thread Scott Ullrich
It means FTP is limited to the primary wan connection. Userland daemons in FreeBSD are not multi-wan capable. We achieve multi-wan status by using route-to and reply-to features of PF which basically forces us to not have multi-wan support on the ftp helper which is userland driven. On

Re: [pfSense Support] ftp helper

2006-03-15 Thread Paul W
so maybe I've got my wires crossed (I hope) is the ftp helper a daemon? I already have an FTP server, and I want dnat WAN(n) - ftp server so: inet--wan1--ftp server ftp server --wan1--inet or inet--wan2--ftp server ftp server--wan2--inet Thanks for your help BTW :) Paul. Scott Ullrich

Re: [pfSense Support] ftp helper

2006-03-15 Thread Scott Ullrich
Yes, the FTP helper is a daemon and therefore is only capable of doing the primary WAN. On 3/15/06, Paul W [EMAIL PROTECTED] wrote: so maybe I've got my wires crossed (I hope) is the ftp helper a daemon? I already have an FTP server, and I want dnat WAN(n) - ftp server so: inet--wan1--ftp

[pfSense Support] How to setup this static NAT in my DMZ

2006-03-15 Thread Derrick MacPherson
i'm replacing our pix with a couple pfsense boxes, and we have some internal LAN ip's that are statically mapped to the dmz, e.g. - our DMZ mail server routes mail to a DMZ address that's mapped to an internal address I'm not sure how to set this up with pfsense, I figure in PF it would be done

[pfSense Support] Dynamic DNS Client setup for DUAL WAN

2006-03-15 Thread Craig Roy
Hi All, I have now managed to get working DUAL WAN (partially), so far its not a fail over Link. I am having an issue with no DNS to resolve names when WAN goes down. Will allowing full inbound NAT to the opt interface allow the use of my ISP’s DNS pool? OR Do I have to setup Dynamic DNS

Re: [pfSense Support] Address selection for CARP

2006-03-15 Thread Bill Marquette
On 3/15/06, Peter Curran [EMAIL PROTECTED] wrote: I have been asked to setup a couple of pfsense boxes as a high-availability pair, using CARP. One problem is that only 5 public IP addresses are available for the site and 4 are needed to access servers on the DMZ. Do all four need high

[pfSense Support] whats the difference between the Proxy arp and other VIP's?

2006-03-15 Thread Simon O'Sullivan
And in what cases should each of these virtual IPs be used? I have been mucking around with a multi wan subnets setup it seems to be quite a common thread on the mailing list. If I could get some definitive answers I would be happy to write a small howto Thanks very much, Simon.

Re: [pfSense Support] Address selection for CARP

2006-03-15 Thread Peter Curran
Thanks for the advise. On Thursday 16 March 2006 02:53, Bill Marquette wrote: On 3/15/06, Peter Curran [EMAIL PROTECTED] wrote: I have been asked to setup a couple of pfsense boxes as a high-availability pair, using CARP. One problem is that only 5 public IP addresses are available for the