Re: [pfSense Support] Outbound port forward

2011-09-06 Thread David Burgess
On Tue, Sep 6, 2011 at 1:08 PM, Arquivos wrote: > i need to forward all the requests going out by the port 53 (DNS) to a > single external DNS server, in dispite off the DNS configured in the > clients. Can someone help me in that? What you want is a NAT Port Forward entry on your LAN interface

[pfSense Support] dialup router

2011-08-19 Thread David Burgess
I'm trying to build a dialup router on an HP t5710. It has 512 MB of flash and a single serial port, which I intend to use for an external modem. I'm wondering if a generic install of 1.2.3 or 2.0 will fit on the 512 MB of flash, or can I do an embedded install and disable the console so that the s

Re: [pfSense Support] Happy Birthday Chris

2011-08-18 Thread David Burgess
Happy Birthday, eh. (Canadian) db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

Re: [pfSense Support] PPTP Broken in latest AMD 2.0 Snapshots

2011-08-17 Thread David Burgess
On Wed, Aug 17, 2011 at 1:49 PM, Chris Buechler wrote: > http://redmine.pfsense.org/issues/1107 > > Fixing that broke PPPoE entirely on AMD64, doubt if that gets fixed for 2.0. Can you please clarify? Are you saying that folks who use PPPoE on the WAN should not update to the newer 2.0 snaps unt

Re: [pfSense Support] ppp - 3G on 2.0 rc3

2011-07-30 Thread David Burgess
On Sat, Jul 30, 2011 at 4:28 PM, Nenhum_de_Nos wrote: > ps: how ofter do nanobsd images are updated ? there is just this from July > 4th and no more available. http://forum.pfsense.org/index.php/topic,38687.0.html db - To unsu

[pfSense Support] Re: unknown cause of limited throughput

2011-07-14 Thread David Burgess
On Tue, Jul 5, 2011 at 11:52 PM, David Burgess wrote: > I'll probably kick myself when I figure this one out And the answer is... traffic shaper. I'm so embarrassed. ::Off to kick self:: db - To unsubscribe, e-

Re: [pfSense Support] Re: unknown cause of limited throughput

2011-07-14 Thread David Burgess
On Thu, Jul 14, 2011 at 4:39 AM, Ermal Luçi wrote: > Try to tune these sysctl: > net.isr.numthreads: 1 > net.isr.bindthreads: 0 > net.isr.direct: 1 > net.isr.direct_force: 1 I tried those in System: Advanced: System Tunables. Throughput is still 17.4 Mbps between vlan240 and any other. Does pfs

Re: [pfSense Support] Re: unknown cause of limited throughput

2011-07-14 Thread David Burgess
On Thu, Jul 14, 2011 at 11:56 AM, Adam Thompson wrote: > Are you passing the VLAN tags all the way into the pfSense VM on a single > vNIC, or are you splitting the VLANs at the vSwitch level and passing them > into multiple vNICs on the pfSense VM? Adam, Thanks for the info. In fact, pfsense is

[pfSense Support] Re: unknown cause of limited throughput

2011-07-13 Thread David Burgess
2.0-RC3 (amd64) built on Tue Jul 12 21:23:55 EDT 2011 On Tue, Jul 5, 2011 at 11:52 PM, David Burgess wrote: > I hope that's not too confusing. To summarize, any two machines, real > or virtual, get iperf results near wire speed when on the same L2 > network. Any two machine

Re: [pfSense Support] Incorrect System Log Order/Logging Bug?

2011-07-08 Thread David Burgess
On Fri, Jul 8, 2011 at 11:06 AM, Dimitri Rodis wrote: > Can anyone else confirm what appears to be either a bug in the logging with > respect to the timestamps or a bug in the sorting of the log entries? (I > don’t know which) I've seen it here and I suspect the problem is with the timestamps,

Re: [pfSense Support] Reboot of running pfsense 2.0 configuration - interface mismatch question - config.xml overwritten and lost

2011-07-08 Thread David Burgess
On Fri, Jul 8, 2011 at 6:09 AM, Jostein Elvaker Haande wrote: > I have the same problem on one of my pfSense installations, with a > Realtek 8112 chipset (onboard NIC). The card refuses to come up on > every even numbered boot (which occurs quite often, seeing as it's > being run with 2.0RCx). Th

[pfSense Support] unknown cause of limited throughput

2011-07-05 Thread David Burgess
I'll probably kick myself when I figure this one out, but here's a riddle for you. pfsense is 2.0RC3. Atom D510 (2x1.6GHz, GBE) Clear DF bit: enabled Scrub: disabled I have a number of real and virtual hosts (single ESXi server with vlans) connected to pfsense through a Netgear gigabit switch usi

Re: [pfSense Support] Current Production Version

2011-06-18 Thread David Burgess
On Sat, Jun 18, 2011 at 7:22 PM, Volker Kuhlmann wrote: > Well, this is a little annoying. I have RC1 too, and I had checked only > about a week ago, and there is no newer than RC1 on the servers The images are labelled RC1, but if you install them they will show up in your dashboard and console

Re: [pfSense Support] Multible PPPoE on same NIC?

2011-06-16 Thread David Burgess
On Thu, Jun 16, 2011 at 10:21 AM, Steven Sherwood wrote: > Hi there - I assume that you are using multiple modems?  Should be possible > to create VLANs and have multiple PPPoE sessions, one on each VLAN.  You will > need a VLAN capable switch upstream of you pfSense box for connecting the > mo

Re: [pfSense Support] need reboot after changing firewall rules?

2011-06-09 Thread David Burgess
On Thu, Jun 9, 2011 at 10:59 AM, Roberto Nunnari wrote: > Hi. > > I just discovered that modifications to the firewall rules will not be > active until the box is rebooted.. > > Is it a known bug or a misconfiguration on my side? Did you try this? http://doc.pfsense.org/index.php/Reset_States d

Re: [pfSense Support] Splitting a /24 into multiple subnets

2011-05-23 Thread David Burgess
On Mon, May 23, 2011 at 4:14 PM, Andreas Kaiser wrote: >> That allows you to do any routing you want between interfaces / WAN and >> gives you granular control of everything. > > *That* is exactly what I want ;-) Have you turned off automatic outbound NAT and disabled or deleted all the automat

Re: [pfSense Support] IPsec, Multi-WAN Session Setup Problems. (2.0 RC1)

2011-05-20 Thread David Burgess
On Fri, May 20, 2011 at 1:51 AM, A Mohan Rao wrote: > not able to do client side open vpn setup properly any body can help for > which open vpn client i have to download and install run properly i have to > do server side setup which is i have to attached video. > > > Awaiting for positive respons

Re: [pfSense Support] A REALLY Simple Question, Really

2011-04-29 Thread David Burgess
On Fri, Apr 29, 2011 at 3:05 PM, Yehuda Katz wrote: > On Fri, Apr 29, 2011 at 4:49 PM, Mehma Sarja wrote: >> >> Alix running pf 20 RC1 nano. Trying to change from default 192.168.1.x >> network to 192.168.100.x on the LAN interface - nothing fancy. >> >> WHAT I DID >> With DHCP enabled and servin

Re: [pfSense Support] pfSense to use more memory

2011-03-31 Thread David Burgess
On Thu, Mar 31, 2011 at 11:17 AM, Shibashish wrote: > My pfSense box says > > real memory  = 12884901888 (12288 MB) > avail memory = 2567946240 (2448 MB) > > How can i ask pfSense to use more memory? Use the 64-bit version. > I tried the 64-bit version > but it kept crashing, hence reverted back

Re: [pfSense Support] pfsense site down?

2011-03-26 Thread David Burgess
Was down briefly here, but up now.

Re: [pfSense Support] Upgrading options

2011-03-25 Thread David Burgess
On Fri, Mar 25, 2011 at 2:25 PM, - Dickie Bradford - wrote: > Is it possible to do backup on a 1.2.3 machine and reload it with a fresh2.0 > and reload the backup? Yes. The only issues I've seen come up in the forum are from users who have international characters in the config file. Delete those

Re: [pfSense Support] can't block https://facebook.com via firefox

2011-03-22 Thread David Burgess
On Tue, Mar 22, 2011 at 10:53 AM, Luke Jaeger wrote: > Hello, > > I have squid configured as transparent proxy on my network. The point of transparent proxy is that it doesn't require any system or browser proxy setting; it intercepts all http requests from the user on the active interfaces. I su

Re: [pfSense Support] Cisco AnyConnect

2011-03-21 Thread David Burgess
On Sun, Dec 5, 2010 at 12:10 AM, Chris Buechler wrote: > On Sun, Dec 5, 2010 at 2:02 AM, David Burgess wrote: >> >> But openconnect works, at least for me on Linux, and from what I >> gather it's available for FreeBSD too. What are the chances of >> installing ope

Re: [pfSense Support] Moving configs to different machines

2011-03-18 Thread David Burgess
On Fri, Mar 18, 2011 at 4:15 PM, Joseph L. Casale wrote: > I have to transfer a config from one server to another. Looking at the backup > I can replace the ifnames and correlate the vlans etc but I am wondering about > the nat/filter pair id's or any other caveats? I have moved a config back and

Re: [pfSense Support] RRD quits collecting

2011-03-09 Thread David Burgess
On Wed, Mar 9, 2011 at 3:49 PM, k_o_l wrote: > Since I installed 2.0-RC1 last Friday I’ve noticed RRD at least on two > different occasion stopped collecting data see attached. http://forum.pfsense.org/index.php/topic,33154.0.html db -

Re: [pfSense Support] List Posting Etiquette [WAS: Re: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout]

2011-03-08 Thread David Burgess
On Tue, Mar 8, 2011 at 8:02 AM, Yehuda Katz wrote: > Does anyone else see why this is annoying? I lost all understanding of this thread many posts back. db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For addition

Re: AW: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 8:22 PM, Kevin Tollison wrote: > That kills my theories. Must still be driver or kernel. Wonder if one of the > panic fixes caused the issue I am seeing. Ermal did some voodoo that I > didn't understand today. Worked better, but not completely fixed. Glad to > see we have at

Re: AW: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread David Burgess
Client. Sent from my phone. On 2011 3 4 20:14, "Kevin Tollison" wrote: > What about openVPN? > -- > Kevin Tollison > > Sent from my Blackberry > > -Original Message- > From: David Burgess > Date: Fri, 4 Mar 2011 20:12:21 > To: > Reply-To: supp

Re: AW: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread David Burgess
On 2011 3 4 20:09, "Kevin Tollison" wrote: > > 2 B5 was good until a month or so ago. Are you using any vlans? I am beginning to think it may be in vlans. Yes. One of my onboards has 8 vlans and the other 5.

Re: AW: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 3:34 PM, Kevin Tollison wrote: > Sorry for the top post. (BlackBerry) > > I worked with Scott and Ermal a while today on an em issue. Ermal was able to > improve the situation some, but it is still not resolved. I had to bail on > him. > > Is anyone experiencing traffic to

Re: [pfSense Support] Thoughts on hardware for a possible pfSense installation for firewalling 5000+ workstations on a 30-40Mbps Internet uplink

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 10:12 AM, David Burgess wrote: > If > you want to spend a little more for that 'instant' feel, I can tell > you that a Core i3 550 on the same connection feels pretty much > instant To clarify, I was referring to navigating the UI. All of the ha

Re: [pfSense Support] Thoughts on hardware for a possible pfSense installation for firewalling 5000+ workstations on a 30-40Mbps Internet uplink

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 10:03 AM, Eric Feldhusen wrote: > As part of a regional education service agency to multiple K-12 school > districts, we're talking about using pfSense for our nat/firewalling for > approximately 5000+ workstations on a 30-40 Mbps internet uplink.   Any one > on the list hav

Re: [pfSense Support] Intel Gigabit - em0: Watchdog Timeout

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 8:22 AM, Jim Pingle wrote: > Since the switch to the Yandex Intel drivers a couple days ago my VMs > all constantly print watchdog timeouts on the console... It seems to > operate OK, but it makes the console useless. I, for one, welcome our new console-crapping overlords

Re: [pfSense Support] Re: throughput tuning in 2.0

2011-03-04 Thread David Burgess
On Fri, Mar 4, 2011 at 1:24 AM, Seth Mos wrote: > The current 2.0 snapshots have a different driver for the Intel gigabit > cards. We switched to the Yandex drivers to debug driver issues with the > Intel supplied ones. I wondered. The difference on this system is positive and obvious. > This h

[pfSense Support] Re: throughput tuning in 2.0

2011-03-03 Thread David Burgess
On Wed, Mar 2, 2011 at 11:21 PM, David Burgess wrote: > On Wed, Mar 2, 2011 at 2:44 AM, David Burgess wrote: > >> the NIC is sending and receiving a total of about 530 >> mbit x2 during the test. > > This gets worse I'm afraid. Well, some good news. I have reinsta

[pfSense Support] Re: throughput tuning in 2.0

2011-03-02 Thread David Burgess
On Wed, Mar 2, 2011 at 2:44 AM, David Burgess wrote: > the NIC is sending and receiving a total of about 530 > mbit x2 during the test. This gets worse I'm afraid. I recreated my setup, substituting a GS724T switch in for the GS108E, hoping the switch might be the bottleneck. Aga

Re: [pfSense Support] throughput tuning in 2.0

2011-03-01 Thread David Burgess
On Wed, Mar 2, 2011 at 12:38 AM, Seth Mos wrote: > I'm routing it from one interface to another although it's destination is > also a VLAN on that other interface. Maybe that's where the issue lies. It would be unfortunate if vlan-vlan traffic on a given interface has its maximum throughput redu

[pfSense Support] throughput tuning in 2.0

2011-03-01 Thread David Burgess
2.0-RC1 (amd64) built on Tue Mar 1 15:52:28 EST 2011 Core i3 550 3.2 GHz 4GB RAM Intel GBE I've just set this system up doing some crude throughput testing with iperf. The most I can push through this box from LAN to WAN is a steady 503-520 mbps, using the default mtu (higher mtu values produce n

Re: [pfSense Support] Microsoft updates through pfSense

2011-02-17 Thread David Burgess
On Thu, Feb 17, 2011 at 8:52 PM, Shali K.R. wrote: > Dear db, > > i have tried this, but it showing a high bandwidth usage, is this a proper > way?? I uninstalled the squid package about three months ago, unable to get it to function properly. I will try it again when pfsense 2.0 is stable, and p

Re: [pfSense Support] Microsoft updates through pfSense

2011-02-17 Thread David Burgess
On Thu, Feb 17, 2011 at 8:42 PM, Shali K.R. wrote: > Dear all, > > I am having 500 windows client machines connected through pfSense and squid, > please suggest me a suitable method for handling updates. You'll find the appropriate info here: http://doc.pfsense.org/index.php/Squid_Package_Tuning

Re: [pfSense Support] install pfsense from usb stick

2011-02-12 Thread David Burgess
The 2.0 snapshots include a usb image. Installing 1.2.3 from usb will be a bit of a trick, as you have learned. db

[pfSense Support] Re: pfsense and DDOS

2011-02-01 Thread David Burgess
On Tue, Feb 1, 2011 at 12:25 PM, David Burgess wrote: > I recently read a page in the pfsense docs (can't find it in the wiki or > FAQ now), which I believe quoted the pfsense book (don't have it), > where cmb states that pfsense is the best open source firewall, and > one

[pfSense Support] pfsense and DDOS

2011-02-01 Thread David Burgess
An article popped up on /. today, and although it's a poorly written article, some of the ensuing discussion did provoke some thought. http://it.slashdot.org/story/11/02/01/181200/Firewalls-Make-DDoS-Attacks-Worse I think the article is mostly just scare marketing, but it raises the question of h

Re: [pfSense Support] pfSense 2.0, upgrade to this morning's snap problem

2011-01-24 Thread David Burgess
On Mon, Jan 24, 2011 at 11:42 AM, Dimitri Rodis wrote: > After an upgrade to this morning’s snap, I received the following after the > upgrade/reboot (it’s what’s on my PuTTY atm): This looks a lot like what's being discussed here, although I don't see the em driver implicated in your output: ht

Re: [pfSense Support] Traffic Graph accurate--but not the host list

2011-01-24 Thread David Burgess
On Mon, Jan 24, 2011 at 11:38 AM, Dimitri Rodis wrote: > pfSense 2.0, most recent builds > > > > When I go to status/traffic graph, the graph is correct but the list of > hosts is not. I don’t know if there’s something I’m not doing, but here’s > what I did to test it: > > Put a windows machine (m

Re: [pfSense Support] Re: Network Traffic difference

2011-01-19 Thread David Burgess
On Wed, Jan 19, 2011 at 9:44 PM, Shali K.R. wrote: > > sir .. > In my pfsense traffic graphic shows WAN in 4 Mbps LAN out 1Mbps   Why this > differenceanything wrong with mypfsense? http://forum.pfsense.org/index.php/topic,31855.0.html For pcap use tcpdump on the pfsense console. bd --

[pfSense Support] MHz myth?

2011-01-17 Thread David Burgess
I'm familiar with the hardware sizing guide, and I've done a few benchmarks myself, but I'm wondering if a MHz is a MHz when it comes to pf performance, or do things like IPC and cache sizes matter? What about RAM frequencies and latency? Putting encryption and the various pfsense packages aside,

Re: [pfSense Support] Is it possible to Port Forward same PORT to TWO servers? pfsense + TWO Asterisk servers and NAT

2011-01-14 Thread David Burgess
On Fri, Jan 14, 2011 at 11:55 AM, Bruce B wrote: > Hi Everyone, > I am facing a dilemma here. If I port forward 1-2 to my first > Asterisk server which sets behind pfSense v1.2.3 then I have two way audio. > If I remove it I don't have any audio but call establishes. > Now, I have a second

Re: [pfSense Support] Multi WAN

2011-01-13 Thread David Burgess
On Thu, Jan 13, 2011 at 11:30 PM, Shali K.R. wrote: > Dear sir, > > How can i create rule for out going? i already created all allow rule for > OPT1 in firewal-> Rules When you create a firewall rule on an interface, that rule will govern only packets arriving on that interface, not leaving it. S

Re: [pfSense Support] Multi WAN

2011-01-13 Thread David Burgess
On Thu, Jan 13, 2011 at 10:29 PM, Shali K.R. wrote: > Dear all, > > I have 2 WAN ( Static and another PPPOE )connections and a LAN connection > > > i added PPPOE as WAN and static as OPT1 two connections are active and i > added a firewall rule for OPT1 allow all to all  then i check the > connect

Re: [pfSense Support] autorollback?

2011-01-13 Thread David Burgess
On Thu, Jan 13, 2011 at 2:00 PM, Charles N Wyble wrote: > Phase one applies the configuration. > > Phase two rolls it back if you don't confirm it. So if you did something > that blocked you out of the device for example, it would auto roll back. Ubiquiti's AirOS 5 has a "change" button which up

Re: [pfSense Support] Testing 2.0 - What is the upgrade and downgrade process for Daily snapshots?

2011-01-12 Thread David Burgess
On Wed, Jan 12, 2011 at 1:46 PM, Bruce B wrote: > So, if I am on: > 1 pfsense > and do an upgrade, does the upgrade apply to "1 pfsense" or "2 pfsense" ? If you booted from 1 then upgraded, it will overwrite the 2 slice. > Also, rather using the Console Cable each time, can I change settings > s

Re: [pfSense Support] Testing 2.0 - What is the upgrade and downgrade process for Daily snapshots?

2011-01-12 Thread David Burgess
On Wed, Jan 12, 2011 at 1:37 PM, Dimitri Rodis wrote: > if that > doesn’t work, you can use the gui to boot off of the old slice. Very nice > and easy. Or if it /really/ doesn't work you can use the initial boot menu to choose the other slice at boot time. You will see something like this: 1 pfs

[pfSense Support] Re: squid continues downloading but LAN client stalls

2011-01-07 Thread David Burgess
On Fri, Jan 7, 2011 at 10:58 AM, David Burgess wrote: > I am trying to download a large iso from microsoft.com. At some point > (different every time), the download stalls on the client. Sorry, forgot to mention what I'm using. 2.0-BETA5 (amd64) built on Tue Jan 4 02:47:18 EST

Re: [pfSense Support] Advice?

2011-01-04 Thread David Burgess
On Tue, Jan 4, 2011 at 8:25 AM, Nicolas Roussi wrote: > Would this setup be sufficient? Depends on the bandwidth limits you will put on your clients. I have 2.0 with squid running on an Atom D510 with 4GB RAM and a 40/4 mbps mlppp connection and it has no trouble. This is servicing 6 clients wit

Re: [pfSense Support] hardware to run pfsense with multiple ethernet ports

2011-01-04 Thread David Burgess
On Mon, Jan 3, 2011 at 10:47 PM, Chris Buechler wrote: > The cheapest new hardware option I'm aware of that can do 6 or more > NICs is a Soekris 5501 with a dual or quad port card, for 6-8 ports. > About $375-400. That's the only very low power option I'm aware of, > should draw under 10 wt. I

[pfSense Support] FAQ item request: Do I need to know how to use a shell to use PFSense?

2010-12-20 Thread David Burgess
I'm annoyed by the recurrence of posts like this: http://www.dslreports.com/forum/r25224935- I see the Linux myth is debunked in the FAQ, but is there something substantial that I can link to that states or demonstrates that pfsense is adequately administered from the UI for most non-dev users?

Re: [pfSense Support] pfSense and adsl

2010-12-17 Thread David Burgess
On Fri, Dec 17, 2010 at 3:29 PM, Evgeny Yurchenko wrote: > I understand double-nat thing and can certainly configure that, > but the simpler the better, I'd prefer to have public IP (range) on pfSense > box. Best case scenario you get a public IP on pfsense, but worst case you can turn off NAT i

Re: [pfSense Support] pfSense and adsl

2010-12-17 Thread David Burgess
On Fri, Dec 17, 2010 at 12:39 PM, Evgeny Yurchenko wrote: > Or if you can answer more generally what is genereal pfSense set up if you > get DSL line from ISP? I'm not familiar with that Netgear or PPPoA. My DSL uses PPPoE, and I have two options for handling that login: 1. modem in bridge mod

Re: [pfSense Support] custom files in /var/etc/ gone after reboot

2010-12-15 Thread David Burgess
On Wed, Dec 15, 2010 at 11:14 AM, Scott Benson wrote: > [r...@host]/conf(17): mkdir blah > mkdir: blah: Read-only file system > [1.2.3-RELEASE] > [r...@host]/conf(18): /etc/rc.conf_mount_rw db - To unsubscribe, e-mail: suppor

[pfSense Support] Re: OT: coexisting with cisco

2010-12-09 Thread David Burgess
On Wed, Dec 8, 2010 at 1:38 PM, David Burgess wrote: > Can somebody please tell me the cisco equivalent of a firewall rule > that will keep state? After some closer inspection I don`t think there is a Cisco firewall on site at all, just a router and layer 3 switching. I talked to the Cisco

[pfSense Support] 2.0 book?

2010-12-09 Thread David Burgess
Is there any public plan for a 2.0 book? I sure would like to pick one up. db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - htt

[pfSense Support] OT: coexisting with cisco

2010-12-08 Thread David Burgess
Can somebody please tell me the cisco equivalent of a firewall rule that will keep state? I have hosts (Windows and pfSense) on opposite sides of a cisco firewall and router which I don't control. When I try to reach pfSense from Windows, tcpdump shows that pfSense is receiving the packet and respo

Re: [pfSense Support] RDD failed in BETA

2010-12-08 Thread David Burgess
On Wed, Dec 8, 2010 at 9:33 AM, k_o_l wrote: > “There has been an error creating the graphs, please check > your system logs” > > I would like to keep my RRD data is there a work around? This has been discussed in the forum, and IIRC, the only solution that was offered was to delete the graphing

Re: [pfSense Support] Cisco AnyConnect

2010-12-04 Thread David Burgess
On Sun, Dec 5, 2010 at 12:00 AM, Chris Buechler wrote: > On Sun, Dec 5, 2010 at 1:21 AM, David Burgess wrote: >> Is there a way to connect pfsense with an Anyconnect server? > > No, that's Cisco proprietary. But openconnect works, at least for me on Linux, and from what I g

[pfSense Support] Cisco AnyConnect

2010-12-04 Thread David Burgess
Is there a way to connect pfsense with an Anyconnect server? Google isn't turning up much for me. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial supp

Re: [pfSense Support] RFC1918 on WAN

2010-12-04 Thread David Burgess
On Sat, Dec 4, 2010 at 2:35 PM, Evgeny Yurchenko wrote: > I would suggest to tcpdump. This way you for sure will know where these > packets are coming from. Thanks for the hint. tcpdump confirms that these are coming from pppoe0, so I'll be talking to my ISP. db --

[pfSense Support] RFC1918 on WAN

2010-12-04 Thread David Burgess
My WAN is mlppp with a static public IP address. pfSense is 2.0 beta4. Out of curiosity I disabled the check box on the WAN config page to block private networks. I then created an alias for RFC1918 and loopback addresses and manually created a logging reject rule at the top of the WAN rules for t

[pfSense Support] (non)local address resolution

2010-11-29 Thread David Burgess
pfsense is setup like this: pfsense--WAN (public IP x) --OPT1 (public IP y/30) Connected to OPT1 is client's cisco firewall which is NATing for a 172.21.50/23 subnet. Their dhcp is handing out pfsense's OPT1 address as DNS server, and pfsense is running DNS forwarder. This works well,

Re: [pfSense Support] ath0: ath_rx_proc: no mbuf!

2010-11-28 Thread David Burgess
On Sun, Nov 28, 2010 at 3:07 PM, Cyril Jaquier wrote: > I searched the pfsense forum and found someone with > a similar issue. ermal suggested to disable the shaper on the wireless > interface. This seems to fix the problem for me. > > Is this a known bug? Any better workaround than disabling the

Re: [pfSense Support] how to manage 2 subnets for LAN ?

2010-11-19 Thread David Burgess
On 2010-11-19 9:56 AM, "Richard Amerman" wrote: > I do this all the time and using a separate nic is simpler and easier to > manage than an alias. Unless I am missing something, a vlan for this case is > overkill. I discussed this with the m0n0wall list back in '07 where cmb and others essentiall

Re: [pfSense Support] how to manage 2 subnets for LAN ?

2010-11-18 Thread David Burgess
On Thu, Nov 18, 2010 at 3:51 PM, fi...@7technw.com wrote: > Another easy solution is to just add another nic. Not an option in this case. The OP described a wireless network where the client subnet and management subnet exist on the same physical network. You can't change that in this case, so yo

Re: [pfSense Support] how to manage 2 subnets for LAN ?

2010-11-18 Thread David Burgess
On Thu, Nov 18, 2010 at 3:11 PM, Adam Thompson wrote: > I think the OP was referring to running two subnets concurrently on the > same wire, something I often have to do for various reasons, sometimes to > solve co-existence issues while renumbering a network.  I have no idea how > to accomplish t

Re: [pfSense Support] how to manage 2 subnets for LAN ?

2010-11-18 Thread David Burgess
On Thu, Nov 18, 2010 at 12:39 PM, Fred Boiteux wrote: > The different LAN subnets' trafic aren't VLAN tagged, and all traffic > comes from one Ethernet port (from the nearest antenna), so I don't > understand how VLAN could be used there ? Most carrier-grade radios support tagging packets from t

Re: [pfSense Support] PfSense web not connect

2010-11-14 Thread David Burgess
On Sun, Nov 14, 2010 at 11:02 PM, Яков Тенилин wrote: > get this message:An HTTP_REFERER was detected > other than what is defined in System -> Advanced. $_SERVER['HTTP_REFERER'] . > .You can disable this check if needed in System -> Advanced -> Admin. > In administrative settings, this feature of

Re: [pfSense Support] New to pfSense, need some advice

2010-11-07 Thread David Burgess
On Sun, Nov 7, 2010 at 10:43 PM, Neonicacid wrote: > David, > > I don't have a single switch big enough to support all of the devices that I > currently have on the network. The routers help with that by providing extra > ports to connect devices with. So the simplest way to accomplish this is to

Re: [pfSense Support] New to pfSense, need some advice

2010-11-07 Thread David Burgess
On Sun, Nov 7, 2010 at 10:19 PM, Neonicacid wrote: > My main issue with how it is set up right now is that File and Printer > Sharing does not jump across the subnets, so none of the computers can > communicate. > > Does anyone have any advice or solutions for this problem? > If you want all you

Re: [pfSense Support] carp with bridge

2010-10-28 Thread David Burgess
On Thu, Oct 28, 2010 at 11:35 AM, Gerald Waugh wrote: > We use bridging as the pfsense machine firewalls servers with public IP > addresses. Clues on how to accomplish with routing appreciated. You have a public subnet from your ISP, 1.1.1.0/24, for example. You get a static IP from your ISP th

Re: Re: [pfSense Support] networked file systems

2010-10-27 Thread David Burgess
On Wed, Oct 27, 2010 at 5:59 PM, Adam Thompson wrote: > If you want to take advantage of Linux' TRIM support, you should be > using NFS.  TRIM support (AFAIK) requires underlying knowledge of the > filesystem or at least the block allocation... iSCSI hides all of those > details, as it merely exp

Re: [pfSense Support] networked file systems

2010-10-27 Thread David Burgess
On Wed, Oct 27, 2010 at 4:00 PM, Nathan Eisenberg wrote: > iSCSI is relatively excellent - and as a block device, has great performance. >  I've had less than pleasing results with AOE in several different use-cases. > > If you want to share the cache across multiple firewalls, NFS is your only

[pfSense Support] networked file systems

2010-10-27 Thread David Burgess
After some contemplation I think I would like to run squid on my pfsense box, but mount the squid cache directory (/var/squid) on an external host. After some research, I believe the following options would provide the best performance with the least overhead, in descending order: 1. AoE http://

Re: [pfSense Support] LAGG Question

2010-10-26 Thread David Burgess
On Tue, Oct 26, 2010 at 9:09 AM, James Bensley wrote: >can the pfSense box handle incoming balancing this > way as well as out going? Incoming load balancing in pfsense is different from outgoing load balancing. It allows you to have more than one server on your internal networks responding to i

Re: [pfSense Support] LAGG Question

2010-10-25 Thread David Burgess
On Mon, Oct 25, 2010 at 9:33 AM, James Bensley wrote: > Thanks guys for your responses, I will look into MLPPP but in the mean > time, with regards to load balancing; Again, how does this work in > pfSense? For 1.2: http://doc.pfsense.org/index.php/MultiWanVersion1.2 For 2.0: http://forum.pfsen

Re: [pfSense Support] LAGG Question

2010-10-25 Thread David Burgess
On Mon, Oct 25, 2010 at 6:53 AM, James Bensley wrote: > Hello Everybody :) > > I would like to use the LAGG to bond multiple ADSL lines for a faster, > more reliable internet access (using LACP). LAGG acts by bonding multiple interfaces at layer 2. You're trying to bond a pair of interfaces at la

Re: [pfSense Support] Cannot achieve 100 mbps Full Duplex (C2D, Intel NICs)

2010-10-21 Thread David Burgess
On Thu, Oct 21, 2010 at 12:06 PM, Christian Borchert wrote: > I have tried this network card in another machine (HP Core 2 Quad) and it > works perfectly under the same test conditions. I have limited experience with Dell servers, but I have found some of their newer laptops (Vostro and Latitude

[pfSense Support] archives incomplete?

2010-10-19 Thread David Burgess
Why is it that when I browse the list archives for this month (gmane and marc), I only see 2 threads? Specifically I'm looking for a link to the ongoing discussion started by Luke Jaeger on script-heavy sites, and I don't see it there. Likewise, when I search the archive for his name I get no hits.

Re: [pfSense Support] 2.0-BETA4 - Admin logout link?

2010-10-09 Thread David Burgess
On Sat, Oct 9, 2010 at 9:53 PM, Yehuda Katz wrote: > I just installed 2.0-BETA4, logged in as admin, and created a new user. > I have not been able to find a logout link so I can try using that user. > Is it there and I just don't see it or is it really not there? > - Yehuda Under the first menu

Re: [pfSense Support] Siproxd

2010-10-06 Thread David Burgess
On Wed, Oct 6, 2010 at 4:46 AM, belkhiria aymen wrote: > Hi, > I need to configure siproxd as Sip proxy for external users. I don't think siproxd is designed for this, nor is it necessary. db - To unsubscribe, e-mail: support-u

Re: [pfSense Support] How do I break down a /22 into smaller subnets to use behind(LAN) side of my pfsense box

2010-10-04 Thread David Burgess
On Mon, Oct 4, 2010 at 5:19 PM, Chris Flugstad wrote: > -how to i break up the large block into smaller blocks Like this? http://www.vlsm-calc.net/ db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional c

Re: [pfSense Support] BLOCK IP or ALIAS firewall rule not blocking traffic

2010-09-22 Thread David Burgess
On Wed, Sep 22, 2010 at 5:30 PM, Chris Flugstad wrote: > I did what i needed to do for the time being though. much appreciated. And that, ladies and gentlemen, is what we call poaching the solution ;) If this list ran on a points system I would get a flogging now. db -

Re: [pfSense Support] BLOCK IP or ALIAS firewall rule not blocking traffic

2010-09-22 Thread David Burgess
On Wed, Sep 22, 2010 at 5:14 PM, Chris Flugstad wrote: > wan  rules >           proto         source               port          dest >           port       gw > block   *          216.127.61.72       *                 * >        *            * > > lan rules > block   *                 *          

Re: [pfSense Support] Allow Traffic Between Interfaces

2010-09-18 Thread David Burgess
On Sat, Sep 18, 2010 at 10:11 PM, Ron Lemon wrote: > Hi David, > > I have switched the rules but I am still unable to ping 10.0.1.100 from any > machine in 10.0.0.0 / 24 Just to be sure, I have attached (I hope it makes it through) a screenshot of the rule you should have on your LAN interface.

Re: [pfSense Support] Allow Traffic Between Interfaces

2010-09-18 Thread David Burgess
On Sat, Sep 18, 2010 at 8:54 PM, Ron Lemon wrote: > Action:  Pass > Interface:  LAN > Protocol:  any (I assume this also include ICMP???) > Source:  Single Host (10.0.1.100) > Destination:  Network (10.0.0.0 / 24) > Gateway:  default > > To me this means that 10.0.1.100 can talk to any machine in

Re: [pfSense Support] Allow Traffic Between Interfaces

2010-09-18 Thread David Burgess
On Sat, Sep 18, 2010 at 9:59 AM, Ron Lemon wrote: > On LAN interface I created PASS on LAN for ANY protocol from 10.0.1.100 / 32 >  (Single Host) on any port to network 10.0.0.0 / 24 > > On LAN interface I created PASS on LAN for ANY protocol from 10.0.1.101 / 32 >  (Single Host) on any port to n

Re: [pfSense Support] Write 512MB image onto 4GB CF-card ?

2010-09-17 Thread David Burgess
On Fri, Sep 17, 2010 at 2:45 AM, Michel Servaes wrote: > Thanks for the explaining - don't know if this dane-elec has > wear-levelling though (I'd suspect they would mention this, if it was) My understanding with SSDs (no idea if CFs are the same way) is that wear-levelling works with available

[pfSense Support] Broadcom opens Linux wireless drivers

2010-09-09 Thread David Burgess
So will this benefit the FreeBSD crowd any time soon? http://www.osnews.com/story/23786/BREAKING_BROADCOM_OPEN_SOURCES_WIRELESS_DRIVERS db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail

Re: [pfSense Support] power-out and Alix-boards

2010-09-09 Thread David Burgess
On Thu, Sep 9, 2010 at 3:12 PM, Bob Gustafson wrote: > I don't know the significance of 'embedded' in the context of CF cards. Sorry, I meant to say I was paraphrasing Beat, not Bob. The pfsense embedded version, which is recommended for CF installs, mounts the filesystem read-only, and remounts

Re: [pfSense Support] power-out and Alix-boards

2010-09-09 Thread David Burgess
On Thu, Sep 9, 2010 at 2:26 PM, Michel Servaes wrote: > I am a bit worried about the fact that the CF card should be set read-only. If I may paraphrase Bob, I thought he was meaning that "because/if you are using the embedded version, the problem you describe must be due to some other contributi

Re: [pfSense Support] PFsense 2.0 roadmap

2010-09-08 Thread David Burgess
On Wed, Sep 8, 2010 at 11:42 AM, Tonix (Antonio Nati) wrote: >  Thanks... I see no dates at all. > > About 2.0, I see no documentation around. Is there a list where to ask for > 2.0 features explained? Generally speaking, the forum is where most discussion around 2.0 happens, from what I have se

Re: [pfSense Support] Over 2GB File can not copy LAN to WAN Pfsense

2010-09-07 Thread David Burgess
On Tue, Sep 7, 2010 at 10:34 AM, Bradley D. Thornton wrote: > I thought there was about a 2GByte file size limit on Ext2 File systems too. Not according to wikipedia, however "There are also many userspace programs that can't handle files larger than 2 GB." http://en.wikipedia.org/wiki/Ext2#Fil

  1   2   3   >