Re: [pfSense Support] Too Many CARP VIP cause auto failover?

2008-10-07 Thread Chris Buechler
On Tue, Oct 7, 2008 at 9:24 AM, Tonix (Antonio Nati) <[EMAIL PROTECTED]> wrote: > General question to developers: > > which are usually problems which make PF sense failover to anoter unit? The most common cause of failing over when it shouldn't is switches that hose or block multicast. > Can an

Re: [pfSense Support] Very urgent - DHCP server failure

2008-10-07 Thread Gary Buckmaster
That's a pretty helpful log message. Looks like you declared a failover peer incorrectly. Please review your configuration with that in mind. Matias Surdi wrote: Hi, I'm using pfSense 1.2 , and suddenly DHCP seems to have stopped working. On the system log, i see the following: Oct 7 22:2

[pfSense Support] Very urgent - DHCP server failure

2008-10-07 Thread Matias Surdi
Hi, I'm using pfSense 1.2 , and suddenly DHCP seems to have stopped working. On the system log, i see the following: Oct 7 22:23:34 dhcpd: Internet Systems Consortium DHCP Server V3.0.5 Oct 7 22:23:34 dhcpd: Copyright 2004-2006 Internet Systems Consortium. Oct 7 22:23:34 dhcpd: All rights r

Re: [pfSense Support] snort and ntop

2008-10-07 Thread Glenn Kelley
ok Strange - Mine shows snort (running) but not ntop ... go figure :-) glenn On Oct 7, 2008, at 7:16 AM, Sean Cavanaugh wrote: 1.2 or 1.2.1 full install both run snort and/or ntop. embedded image does not support packages. Also if the package is marked as broken, then it will not be list

Re: [pfSense Support] Too Many CARP VIP cause auto failover?

2008-10-07 Thread frankie wong
Sure i am very careful on the VHID. It had causeme a lot of trouble because of the duplicated VHID Also i had a weird experience on the CARP name. I have a lot carp name which will be duplicate when there are more than 56 CARP VIP. Let 's say carp56 192.168.10.56 carp0 192.168.10.57 carp58 192.1

Re: [pfSense Support] Too Many CARP VIP cause auto failover?

2008-10-07 Thread Tonix (Antonio Nati)
General question to developers: which are usually problems which make PF sense failover to anoter unit? Can an intense CRC problem cause a failover, or only a link down state can make this happen? Tonino frankie wong ha scritto: Dear all, I have found pfsense a very nice opensource firewall

Re: [pfSense Support] Too Many CARP VIP cause auto failover?

2008-10-07 Thread Paul Mansfield
frankie wong wrote: > Thanks Paul > Yes i do have a dedicated sync interface > Both of the WAN and LAN interface are connected to a cisco 3750 switch > I also have the port-mirroring on the WAN link for my IDS > I may check out the speed/duplex config on the switch to see > > we don't have as m

Re: [pfSense Support] Too Many CARP VIP cause auto failover?

2008-10-07 Thread frankie wong
Thanks Paul Yes i do have a dedicated sync interface Both of the WAN and LAN interface are connected to a cisco 3750 switch I also have the port-mirroring on the WAN link for my IDS I may check out the speed/duplex config on the switch to see Frankie On Tue, Oct 7, 2008 at 8:37 PM, Paul Mansfie

Re: [pfSense Support] Too Many CARP VIP cause auto failover?

2008-10-07 Thread Paul Mansfield
do you have a dedicated sync interface? what kind of switch are you connected into - I've seen problems a bit like this when the pfsense NICs were set to auto speed/duplex but the ISP has them fixed - To unsubscribe, e-mail: [E

[pfSense Support] Too Many CARP VIP cause auto failover?

2008-10-07 Thread frankie wong
Dear all, I have found pfsense a very nice opensource firewall since half-an-year ago. After intensive digging at google and testing, i had decided to migrate the firewall to pfsense. And it always looks good, failover are always smooth and without service interruption. However problem arise sinc

RE: [pfSense Support] snort and ntop

2008-10-07 Thread Sean Cavanaugh
1.2 or 1.2.1 full install both run snort and/or ntop. embedded image does not support packages. Also if the package is marked as broken, then it will not be listed in the package list as available for install ( I believe snort was still marked as broken, havent checked in a while) From: [EMAIL P

Re: [pfSense Support] Can't connect to subaru.com on port 80

2008-10-07 Thread Jure Pečar
Coming late into this thread, I think I can add some salt to it :) I have the exact same problem to one of the sites, one I actually worked for two years ago, so I know about the setup there. At home I have pppoe to ISP and pfsense 1.2.1, problematic site has (probalby still) pfsense 0.9.6 and