Re: [pfSense Support] Pfsense 1.01 - Dell PowerEdge 860

2007-06-29 Thread Garith Dugmore
Hi, To give an update on this. I've successfully installed pfsense 1.2b1 with CARP on Dell PE860's. The trick was to setup the machines from scratch and not use an older config. These machines have been running wonderfully for the last few months now. Hope this helps someone, especially that

RE: [pfSense Support] Pfsense 1.01 - Dell PowerEdge 860

2007-06-29 Thread rrobertson
I'll second this. I tested last week on an 860 just prior to ordering two more. Everything came up nice and clean. While I can't speak to what it will do under load, it does at least install and not fall over on minimal traffic. - Ron. -Original Message- From: Garith Dugmore [mailto:[EMA

[pfSense Support] Thruput

2007-06-29 Thread Ronald L. Rosson Jr.
I have a pfsense box running 1-2-BETA-1 (built 5/26/2007 @ 16:27:46 EDT) with the following CPU/Memory combination (from dmesg): CPU: Intel(R) Pentium(R) 4 CPU 3.00GHz (3000.13-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0xf65 Stepping = 5 Features=0xbfebfbff,MCA,CMOV,PAT,PSE36,CLFLU

Re: [pfSense Support] sf(4) driver and CARP

2007-06-29 Thread Chris Daniel
Thanks for the reply, Scott. I'd love to go with Intel, but their prices for dual-port cards (around 150 USD) are a little too high for the moment. I was more wondering if CARP even does anything that a NIC might not support; I doubt it, but I don't know enough about it to say definitively. We'l

RE: [pfSense Support] Thruput

2007-06-29 Thread Pedro Paulo Oliveira Jr
Your throughput is very low. It seems the switch is the problem? Can you detail its brand. From: Ronald L. Rosson Jr. [mailto:[EMAIL PROTECTED] Sent: sexta-feira, 29 de junho de 2007 10:37 To: support@pfsense.com Subject: [pfSense Support] Thruput I have a pfsense box running 1-2-BE

Re: [pfSense Support] Best setup for a colocation

2007-06-29 Thread Chris Daniel
If you think you will ever need failover using CARP, 1:1 NAT with virtual IPs is the way to go. A filtering bridge is nice, and yes, a bit easier, but you can't implement failover with it under pfSense. Either way you go, it's essentially the same procedure with regard to maintaining firewall rul

Re: [pfSense Support] Best setup for a colocation

2007-06-29 Thread Gary Buckmaster
It should also be noted that CARP doesn't work with bridged interfaces, so if you want CARP (which for a data center environment, you probably do) you'll want to use the setup that Chris suggested. Chris Daniel wrote: If you think you will ever need failover using CARP, 1:1 NAT with virtual I

Re: [pfSense Support] Thruput

2007-06-29 Thread Ronald L. Rosson Jr.
The switch is a Linksys SFE2000. The before speeds are from this switch I have checked the interface statistics on both the firewall and the switch ports and they are showing no errors or collisions. -Ron On Aug 12, 2007, at 8:43 AM, Pedro Paulo Oliveira Jr wrote: Your throughput is very l

Re: [pfSense Support] Thruput

2007-06-29 Thread Chris Buechler
Ronald L. Rosson Jr. wrote: The backup thru-put when the devices where in the same VLAN were roughly 200/MB/min. With the current configuration the thru-put has dropped to 21MB/min. It sounds like you had a problem to begin with and just made it worse by adding latency (though very minimal).

Re: [pfSense Support] Thruput

2007-06-29 Thread Ronald L. Rosson Jr.
On Jun 29, 2007, at 10:40 AM, Chris Buechler wrote: Ronald L. Rosson Jr. wrote: The backup thru-put when the devices where in the same VLAN were roughly 200/MB/min. With the current configuration the thru-put has dropped to 21MB/min. It sounds like you had a problem to begin with and just

Re: [pfSense Support] Thruput

2007-06-29 Thread RB
On 6/29/07, Chris Buechler <[EMAIL PROTECTED]> wrote: It sounds like you had a problem to begin with and just made it worse by adding latency (though very minimal). Your original "200 MB/min" is only 25 Mbps when on the same VLAN, which is pathetic. Regardless of higher-level bottlenecks, the c

Re: [pfSense Support] Thruput

2007-06-29 Thread Chris Buechler
RB wrote: I, on the other hand, am still interested in how things work without the pfSense box in-between. I'm more interested in how a good network performance measurement looks. Backup software performance is extremely complex, there are numerous potential bottlenecks. Processor, RAM, dis

Re: [pfSense Support] Thruput

2007-06-29 Thread Ronald L. Rosson Jr.
On Jun 29, 2007, at 11:54 AM, Chris Buechler wrote: Now there could be an actual performance problem, but the speed of backup software is useless in determining whether that's the case. Like I suggested, try iperf or netperf between VLAN's and see what you get. If you're only getting like

Re: [pfSense Support] Thruput

2007-06-29 Thread Ronald L. Rosson Jr.
On Jun 29, 2007, at 12:26 PM, Ronald L. Rosson Jr. wrote: On Jun 29, 2007, at 11:54 AM, Chris Buechler wrote: Now there could be an actual performance problem, but the speed of backup software is useless in determining whether that's the case. Like I suggested, try iperf or netperf betwee

Re: [pfSense Support] Thruput

2007-06-29 Thread Ronald L. Rosson Jr.
On Jun 29, 2007, at 11:54 AM, Chris Buechler wrote: Now there could be an actual performance problem, but the speed of backup software is useless in determining whether that's the case. Like I suggested, try iperf or netperf between VLAN's and see what you get. If you're only getting like

Re: [pfSense Support] sf(4) driver and CARP

2007-06-29 Thread Bill Marquette
multicast - I've seen bad drivers out there in the past (usually it's a few lines of code missing somewhere in the driver). Honestly, you'd be more likely to have issues with ALTQ than with CARP, but it's certainly possible. Good luck. --Bill On 6/29/07, Chris Daniel <[EMAIL PROTECTED]> wrote:

Re: [pfSense Support] Thruput

2007-06-29 Thread Ronald L. Rosson Jr.
On Jun 29, 2007, at 1:14 PM, Ronald L. Rosson Jr. wrote: On Jun 29, 2007, at 11:54 AM, Chris Buechler wrote: Now there could be an actual performance problem, but the speed of backup software is useless in determining whether that's the case. Like I suggested, try iperf or netperf between

Re: [pfSense Support] sf(4) driver and CARP

2007-06-29 Thread Chris Daniel
I do remember seeing something in FreeBSD release notes about ALTQ support being added to sf. Thanks, Bill and Scott. I'm confident it will turn out fine. Bill Marquette wrote: > multicast - I've seen bad drivers out there in the past (usually it's > a few lines of code missing somewhere in the

Re: [pfSense Support] 1.2 on soekris net4801

2007-06-29 Thread Kendrick Vargas
Chris Buechler wrote: Kendrick Vargas wrote: I would really appreciate that. But before i go asking for anything... let me get a snapshot of 1.2b1 on that box and make sure it all works before I move on. It might also be nice to have the wanpipe drivers available as an installable package in the

[pfSense Support] WLAN (Atheros) MAC ACLs

2007-06-29 Thread David Strout
Everyone, I have just installed a Netgear WAG311 in one of the test servers and all is working GREAT!!! I just have one question ... is there any plan to add a MAC filtering feature so that there is an added layer when running a WiFi NIC, or is this the 802.1X option? I know that 802.1X (NAC) is

Re: [pfSense Support] pfSense Firewall Logs: no ports listed !?

2007-06-29 Thread Scott Ullrich
On 6/25/07, David Strout <[EMAIL PROTECTED]> wrote: Morning everyone, Just wanted to give an update I did an upgrade on an older 1.2-BETA-1-TESTING-SNAPSHOT-05-??-2007 (I think it was around 5-10,11 time frame) and the logging seems to work with this. I have found in testing that anything

AW: [pfSense Support] WLAN (Atheros) MAC ACLs

2007-06-29 Thread Fuchs, Martin
Hi ! ATM it's not supported by the wlan daemon in conjunction with specific drivers such as thiis ones used for your card... I'm usind the same and tried to write some patch but it's out of function :-( So use the captiveportal function to get nearly the same functionality... -Ursprüngliche N

Re: [pfSense Support] pfSense Firewall Logs: no ports listed !?

2007-06-29 Thread David Strout
Yup, I have tested this on both a Soekris 4801 and a server install ... the below findings are what I observed on both platforms. -- David L. Strout Engineering Systems Plus, LLC - Original Message - Subject: Re: [pfSense Support] pfSense Firewall Logs: no ports listed !? From: [EMAIL PRO

Re: AW: [pfSense Support] WLAN (Atheros) MAC ACLs

2007-06-29 Thread David Strout
Thanks I just found the forum thread on this ... this works for all intents and purposes the same way as MAC ACLs would on your run of the mill Linksys/Netgear. Thanks!! -- David L. Strout Engineering Systems Plus, LLC - Original Message - Subject: AW: [pfSense Support] WLAN (Atheros) MA

[pfSense Support] recompiling kernel...

2007-06-29 Thread Kendrick Vargas
Hi, I've got an issue where I need to recompile the pfSense FreeBSD kernel to enable a piece of hardware I have. I'm trying to enable the wanpipe drivers from Sangoma and they seem to have to recompile the kernel with a patch to enable their devices. I did this in a Developer vmware image and

Re: [pfSense Support] 1.2 on soekris net4801

2007-06-29 Thread Chris Buechler
On Fri, 2007-06-29 at 14:47 -0400, Kendrick Vargas wrote: > > Well, I got everything compiled. Seems the problem I was having was that > the wanpipe, despite compiling up modules for the drivers, has to modify > the kernel to create certain symbols that the modules depend on. I > have a Devel

Re: [pfSense Support] 1.2 on soekris net4801

2007-06-29 Thread Scott Ullrich
On 6/29/07, Chris Buechler <[EMAIL PROTECTED]> wrote: On Fri, 2007-06-29 at 14:47 -0400, Kendrick Vargas wrote: > > Well, I got everything compiled. Seems the problem I was having was that > the wanpipe, despite compiling up modules for the drivers, has to modify > the kernel to create certain

Re: [pfSense Support] Thruput

2007-06-29 Thread Chris Buechler
On Fri, 2007-06-29 at 12:40 -0500, Ronald L. Rosson Jr. wrote: > > Just recalled something while reading thru iperf's (http:// > dast.nlanr.net/Projects/Iperf/) web page, and that is I forgot to > mention that this system (pfsense) has traffic shaping enabled. > > Not sure if that is being tri

Re: [pfSense Support] recompiling kernel...

2007-06-29 Thread Chris Buechler
On Fri, 2007-06-29 at 22:32 -0400, Kendrick Vargas wrote: > Hi, > > I've got an issue where I need to recompile the pfSense FreeBSD kernel > to enable a piece of hardware I have. I'm trying to enable the wanpipe > drivers from Sangoma and they seem to have to recompile the kernel with > a patch

Re: [pfSense Support] pfSense Firewall Logs: no ports listed !?

2007-06-29 Thread Scott Ullrich
On 6/29/07, David Strout <[EMAIL PROTECTED]> wrote: Yup, I have tested this on both a Soekris 4801 and a server install ... the below findings are what I observed on both platforms. Problem is now solved in recent snapshots. Scott --