Re: [pfSense Support] haproxy

2010-08-05 Thread Chris Buechler
On Wed, Aug 4, 2010 at 7:39 AM, Hiren Joshi wrote: > Hi, > > I'm running a master/slave setup of 1.2.3 and about to install haproxy, > I have 2 options under packages: > BETA-0.29 > and > BETA-0.30 > > My question, why is the newer one marked as "stable"? > As we were doing some work on the packa

Re: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread David Burgess
On Thu, Aug 5, 2010 at 9:20 PM, Chris Buechler wrote: > it's a simple fat finger to drop that traffic into your LAN. That's poetry. db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail:

Re: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread Chris Buechler
On Thu, Aug 5, 2010 at 1:25 PM, Bao Ha wrote: > > Perhaps, Cisco is expecting a firewalled network to use managed > switches. Is it best practice? Why is there a resistance to VLAN in > the pfSense community? > I don't think anyone in this thread is expressing resistance to VLANs in general, not

Re: [pfSense Support] iPad ssl vpn client

2010-08-05 Thread Chris Weakland
If you jailbreak your ipad there is a openvpn client. On Thu, Aug 5, 2010 at 11:13 AM, Vick Khera wrote: > On Thu, Aug 5, 2010 at 4:28 AM, Seth Mos wrote: >> Viscosity on the Mac works great, but that doesn't apply to iOS. >> > > We just punt and use the PPTP client built-in to iOS.  It is not >

Re: [pfSense Support] USB Keyboard - Boot Hangs

2010-08-05 Thread Tim Nelson
- "Tim Nelson" wrote: > - "Paul Mansfield" wrote: > > On 04/08/10 18:31, Tim Nelson wrote: > > > There is no option for legacy mode in the BIOS. :-( > > > > presumably there's no PS2 keyboard port? > > > > or if there is, your keyboard isn't the type which can turn into a > > ps2 > > ke

Re: [pfSense Support] new problem for me

2010-08-05 Thread Chris Buechler
On Thu, Aug 5, 2010 at 7:35 AM, Tiago wrote: > > > Hello guys > > I use pfsense 1.2.3 and everything is ok... > > But there is a user in my network that use a msn messenger on the browser... > > I tried to stop this using DNS Forwarder but the site changes every > day...The website is > > X10.ilov

RE: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread Adam Thompson
> The low-end Cisco ASA 5505 requires VLAN configuration since it is > just a switch. > The Cisco ASA 5510 has four Ethernet ports. If you need more, just > use VLAN. > Perhaps, Cisco is expecting a firewalled network to use managed > switches. Is it best practice? Why is there a resistance to VLAN

Re: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread Bao Ha
Just want to throw another data point into this confusing discussion. The low-end Cisco ASA 5505 requires VLAN configuration since it is just a switch. The Cisco ASA 5510 has four Ethernet ports. If you need more, just use VLAN. Perhaps, Cisco is expecting a firewalled network to use managed swi

Re: [pfSense Support] PFSENSE 2.0

2010-08-05 Thread Remko Lodder
On Aug 5, 2010, at 5:20 PM, David Burgess wrote: > On Thu, Aug 5, 2010 at 9:09 AM, Johan Hendriks > wrote: > >>> does freeBSD support trim with SSDs? > >> as of Freebsd 8.1 it is. >> >> read the following: >> http://www.freebsd.org/releases/8.1R/relnotes-detailed.html#DISKS > > Very interest

RE: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread Adam Thompson
Comments from another perspective on the must/should question: Best practice says to physically segregate networks by trust level and by impact of error or breach. Somewhat self-evidently, this is to mitigate the impact of a) errors, and b) security breaches. Of the two, errors (i.e. human err

Re: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread David Newman
On 8/5/10 8:13 AM, David Burgess wrote: > Paul, > > I understand your post up to this point: > >> if the switch's port are set so that connected devices can't cause them >> to flip from untagged to tagged mode (in cisco speak from access to >> trunk - "switchport nonegotiate" > > I'm looking at

Re: [pfSense Support] PFSENSE 2.0

2010-08-05 Thread David Burgess
On Thu, Aug 5, 2010 at 9:09 AM, Johan Hendriks wrote: >> does freeBSD support trim with SSDs? > as of Freebsd 8.1 it is. > > read the following: > http://www.freebsd.org/releases/8.1R/relnotes-detailed.html#DISKS Very interesting. I see this in the latest build log for 2.0: Thu Aug 5 03:00:22

Re: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread David Burgess
Paul, I understand your post up to this point: > if the switch's port are set so that connected devices can't cause them > to flip from untagged to tagged mode (in cisco speak from access to > trunk - "switchport nonegotiate" I'm looking at the help file for my switch, and thinking this section

Re: [pfSense Support] iPad ssl vpn client

2010-08-05 Thread Vick Khera
On Thu, Aug 5, 2010 at 4:28 AM, Seth Mos wrote: > Viscosity on the Mac works great, but that doesn't apply to iOS. > We just punt and use the PPTP client built-in to iOS. It is not really as secure as we'd like but we normally only run ssh or an https connection over it so that part is double se

Re: [pfSense Support] PFSENSE 2.0

2010-08-05 Thread Johan Hendriks
Op 5-8-2010 16:44, Paul Mansfield schreef: On 05/08/10 07:53, Seth Mos wrote: Do note, that if you ever write the device from start to end that this negates the wear levelling. It then only has the spare cells on the drive or card to remap blocks (~7%).

Re: [pfSense Support] PFSENSE 2.0

2010-08-05 Thread Paul Mansfield
On 05/08/10 07:53, Seth Mos wrote: > Do note, that if you ever write the device from start to end that this > negates the wear levelling. It then only has the spare cells on the > drive or card to remap blocks (~7%). does freeBSD support trim with SSDs? -

Re: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread Paul Mansfield
On 05/08/10 06:51, David Burgess wrote: > my DSL and LAN ports will be on the same switch, different vlans. This ... > what are my risks? I know it has been said on this list that WAN and if you can clearly label the switch so that you yourself "cannot" make a mistake when connecting cables if yo

[pfSense Support] new problem for me

2010-08-05 Thread Tiago
Hello guys I use pfsense 1.2.3 and everything is ok... But there is a user in my network that use a msn messenger on the browser... I tried to stop this using DNS Forwarder but the site changes every day...The website is X10.iloveim.com X11.iloveim.com X30.iloveim.com Etc... The number aft

[pfSense Support] iPad ssl vpn client

2010-08-05 Thread Seth Mos
Hello, Just inquiring here, does anybody already know of a SSL vpn client that works on the Apple iPad devices? Viscosity on the Mac works great, but that doesn't apply to iOS. I see mentions of a Cisco and Juniper client, but no idea if these can be made to work with pfSense. Regards, Se

Re: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread Chris Buechler
On Thu, Aug 5, 2010 at 2:08 AM, Tortise wrote: > - Original Message - From: "Chris Buechler" > To: > Sent: Thursday, August 05, 2010 6:01 PM > Subject: Re: [pfSense Support] multi-wan, multi-lan security > > >> Doing VLANs properly all on one switch is probably pretty safe if done >> rig