Re: [pfSense Support] Traffic shaper issues

2009-02-19 Thread Abdulrehman
I am experiencing the same issue at my side...i have 3mbit symmetric and i had set UP/Down to 200kbit...in the start every thing was stopped...i used tcpdump on my LAN side but my Pfsense was not listening to anything...then a reboot fixed it but the problem mentioned by -Jeppe- remains same...i

[pfSense Support] pfsync vs contrackd

2009-02-19 Thread Mikel Jimenez
Hello Is pfsync better than contrackd? In what aspects? -- Mikel Jimenez Fernandez Irontec, Internet y Sistemas sobre GNU/LinuX - http://www.irontec.com +34 94.404.81.82 - To unsubscribe, e-mail:

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Bill Marquette
Go troll elsewhere. On Thu, Feb 19, 2009 at 5:51 AM, Mikel Jimenez mi...@irontec.com wrote: Hello Is pfsync better than contrackd? Who cares, pfsense runs on FreeBSD where there be demons, not penguins. In what aspects? It runs on *BSD, not linux, so yes, infinitely better. --Bill

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Mikel Jimenez
More tecnically reason? Referring to states, tracking, tcp/udp... Bill Marquette wrote: Go troll elsewhere. On Thu, Feb 19, 2009 at 5:51 AM, Mikel Jimenez mi...@irontec.com wrote: Hello Is pfsync better than contrackd? Who cares, pfsense runs on FreeBSD where there be demons, not

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Chris Buechler
On Thu, Feb 19, 2009 at 9:44 AM, Mikel Jimenez mi...@irontec.com wrote: More tecnically reason? Referring to states, tracking, tcp/udp... There's a reason you aren't getting the responses you want on the OpenBSD list where you asked the exact same question and here. For one, you're not likely

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread RB
On Thu, Feb 19, 2009 at 09:06, Chris Buechler c...@pfsense.org wrote: For one, you're not likely to find any Linux users here, at least not any that are intimately familiar with Linux firewalls. Preferring to hand-roll my own rule sets and knowing the iptables packet stack nearly by heart, I'd

[pfSense Support] pfSense state question

2009-02-19 Thread apiase...@midatlanticbb.com
icmp 192.168.10.255:54864 - 192.168.10.11 0:0 icmp 192.168.10.11:54864 - 192.168.10.255 0:0 icmp 192.168.10.255:60489 - 192.168.10.11 0:0 icmp 192.168.10.11:60489

[pfSense Support] Bridging interfaces in pfSense embedded

2009-02-19 Thread Larry Sampas
Has anyone bridged interfaces in embedded pfSense? I was wondering if support for bridging is compiled in the kernel. I am running an Alix 2d3 board, and I can't run snort locally. Being too cheap and lazy to purchase or build a tap, I'd like to bridge the external interface to the unused

Re: [pfSense Support] pfSense state question

2009-02-19 Thread RB
On Thu, Feb 19, 2009 at 09:30, apiase...@midatlanticbb.com apiase...@midatlanticbb.com wrote: icmp 192.168.10.255:54864 - 192.168.10.11 0:0 icmp 192.168.10.11:54864 - 192.168.10.255 0:0 icmp 192.168.10.255:60489 - 192.168.10.11 0:0 icmp 192.168.10.11:60489 - 192.168.10.255 0:0 snip I've

Re: [pfSense Support] Bridging interfaces in pfSense embedded

2009-02-19 Thread Chris Buechler
On Thu, Feb 19, 2009 at 12:45 PM, Larry Sampas la...@larrysampas.com wrote: Has anyone bridged interfaces in embedded pfSense? I was wondering if support for bridging is compiled in the kernel. Yes. I am running an Alix 2d3 board, and I can't run snort locally. Being too cheap and lazy to

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Paul Mansfield
agree, this is not a linux mailing list. however, linux users might find the following script useful: http://www.zaurus.org.uk/download/scripts/nf_conntrack it gives you a useful overview of the (nat) states. I wrote it when I couldn't find anything similar and was trying to work out how a

[pfSense Support] Simple question...Setting LANS Default GW

2009-02-19 Thread Marty Nelson
I know, I know stupid question. Is the default gateway the WAN address? If not, where is it located? Thanks, -M

Re: [pfSense Support] Simple question...Setting LANS Default GW

2009-02-19 Thread Gary Buckmaster
Marty Nelson wrote: I know, I know stupid question. Is the default gateway the WAN address? If not, where is it located? Thanks, -M The default gateway is the default route for traffic on that network segment to reach all remote network segments not otherwise specified in

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread mikel
I ask this question, because I am favour ogf *BSD, and one friend discuss me that what pfsync+carp does, is possible with contrackd. I have read that contrackd only syncs tcp states, and is a user space daemon, not kernel level. My question is, it can do all that pfsync? If yo dont

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Scott Ullrich
On Thu, Feb 19, 2009 at 1:26 PM, mikel mi...@irontec.com wrote: I ask this question, because I am favour ogf *BSD, and one friend discuss me that what pfsync+carp does, is possible with contrackd. I have read that contrackd only syncs tcp states, and is a user space daemon, not kernel level.

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Bill Marquette
On Thu, Feb 19, 2009 at 12:26 PM, mikel mi...@irontec.com wrote: I ask this question, because I am favour ogf *BSD, and one friend discuss me that what pfsync+carp does, is possible with contrackd. I have read that contrackd only syncs tcp states, and is a user space daemon, not kernel

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread mikel
Yeah!! This is a very good reason!! I think that contrackd doenst does this On Thu, 19 Feb 2009 13:13:00 -0600, Bill Marquette bill.marque...@gmail.com wrote: On Thu, Feb 19, 2009 at 12:26 PM, mikel mi...@irontec.com wrote: I ask this question, because I am favour ogf *BSD,

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread RB
Slicing and dicing to get context: On Thu, Feb 19, 2009 at 12:26, mikel mi...@irontec.com wrote: I think that contrackd doenst does this On Thu, 19 Feb 2009 13:13:00 -0600, Bill Marquette bill.marque...@gmail.com wrote: All 255 protocols. If it's in state, it's sync'd. At the expense of

RE: [pfSense Support] Simple question...Setting LANS Default GW

2009-02-19 Thread Marty Nelson
Chris, yes that helped out tremendously and made sense to me all at the same time! I added static routes for all of the subnets that the router does not sit on, with their gateways being their router interface. Thanks again so much for your help. -Marty From: Curtis LaMasters

Re: [pfSense Support] Traffic shaper issues

2009-02-19 Thread Jeppe Øland
Are you saying that once you rebooted, the shaper worked as expected with the 200 kbit limit? Regards, -Jeppe On Thu, Feb 19, 2009 at 1:29 AM, Abdulrehman arvagabo...@gmail.com wrote: I am experiencing the same issue at my side...i have 3mbit symmetric and i had set UP/Down to 200kbit...in the

[pfSense Support] APCUPSD with PFSense?

2009-02-19 Thread Christopher Myers
Hey everyone! I was curious if anyone had successfully gotten APCUPSD up and running on a PFSense box? I'm running 1.2.3 (and it's awesome by the way :) ) The reason I want to go with APCUPSD and not the NUT package is because my UPS is also powering a couple of other devices and I have

[pfSense Support] Packets get lost inside router

2009-02-19 Thread Veiko Kukk
Hi, I have dual router configuration, 1 lan, 3 wan, 2 isp-s. port 25 is forwarded to email server in lan network. Default route is wan1. When i try to telnet from lan to wan2 port 25, i get no connection, but i can ping wan2 from lan. Telnet to wan1 and wan2 from outside works perfectly.