Re: [pfSense Support] Anything like fail2ban for PFSense?

2009-08-02 Thread Chris Buechler
On Mon, Jul 20, 2009 at 7:48 PM, Nathan Eisenberg wrote: > Some of my pfsense boxes get a lot of SSH bruteforces; is there a package > like fail2ban out there which could automatically blacklist IPs after x bad > logins? > Mark Crane added a DenyHosts package recently that does just this. ---

Re: [pfSense Support] Re: Can't get more than 15kpps.

2009-08-02 Thread Lenny
On Sun, Aug 2, 2009 at 12:21 PM, Tim Dressel wrote: > Install on both sides, not on pfsense. > > i.e. install on a machine on the WAN side, and on the LAN site. Or if > you are testing between LAN and an OPT interface, put a machine on > both subnets and test that way. > > iPerf on pfsense will n

Re: [pfSense Support] Re: Can't get more than 15kpps.

2009-08-02 Thread Tim Dressel
Install on both sides, not on pfsense. i.e. install on a machine on the WAN side, and on the LAN site. Or if you are testing between LAN and an OPT interface, put a machine on both subnets and test that way. iPerf on pfsense will not give you a throughput of the firewall (at least nothing that me

Re: [pfSense Support] Re: Can't get more than 15kpps.

2009-08-02 Thread Lenny
On Sat, Aug 1, 2009 at 2:15 AM, David Rees wrote: > > Most of the time, the real issue is that scp has to encrypt the data > on one end and decrypt it on the other - that takes a lot of CPU power > that could otherwise be used for tossing packets around. > > -Dave > >