[pfSense Support] /boot/loader.conf vs /system_advanced_sysctl.php in 2.0

2010-08-12 Thread David Burgess
In 1.2.3 I had very good results adding the following lines to /boot/loader.conf while using the squid package in transparent mode: hint.apic.0.disabled=1 kern.ipc.nmbclusters=32768 kern.maxfiles=65536 kern.maxfilesperproc=32768 net.inet.ip.portrange.last=65535 So far in 2.0 I have not seen

Re: [pfSense Support] /boot/loader.conf vs /system_advanced_sysctl.php in 2.0

2010-08-12 Thread David Burgess
On Thu, Aug 12, 2010 at 12:43 PM, Jim Pingle li...@pingle.org wrote: Are you using squid? Usually the nmbclusters only helped in that case. As for the others, it's hard to say. You should try them individually and see which one actually makes the difference. Yeah, I'm running squid in

Re: [pfSense Support] freeswitch help

2010-08-12 Thread David Burgess
On Thu, Aug 12, 2010 at 3:35 PM, Ryan L. Rodrigue radiote...@aaremail.com wrote: 1.  Broadvox is set to go out of a certain ISP that we have on interface opt1.  I don't see anywhere in the setting to specify this. Create a pass rule on the internal interface, selecting OPT1 as the gateway.

Re: [pfSense Support] freeswitch help

2010-08-12 Thread David Burgess
On Thu, Aug 12, 2010 at 4:22 PM, Ryan radiote...@aaremail.com wrote: So The freswitch binds to the lan interface by default? Oh, right. Sorry. I forgot one of the reasons I moved my freeswitch install from pfsense to a LAN host is because one of the limitations in 1.2.3 was not being able to

Re: [pfSense Support] question on blocks SSH connections

2010-08-12 Thread David Burgess
On Thu, Aug 12, 2010 at 4:29 PM, Cinaed Simson cinaed.sim...@gmail.com wrote: Hi - suppose the office LAN has one open outbound port - say IMAP on port 143. I go home and configure my Linux desktop to run a SSH server on port 143. Now I return to the office and attempt to connect to my

Re: [pfSense Support] question on blocks SSH connections

2010-08-12 Thread David Burgess
On Thu, Aug 12, 2010 at 4:44 PM, Tim Dickson tdick...@aubergeresorts.com wrote: Then only allow to the SSH servers you know/want?  You can go either way... block all and allow only certain IPs Or allow all, and block certain IPs A whitelist will work if he knows the IPs that he wants to

Re: [pfSense Support] asterisk behind pfsense+remote sip clients

2010-08-11 Thread David Burgess
On Wed, Aug 11, 2010 at 1:53 PM, Victor Pasten vpas...@connected.cl wrote: Hi Guys, recently I've installed a asterisk server (in my lan, behind pfsense 1.2.3-release), everything it's ok, except for some remote sip extentions (polycom device, and x-lite softphone) that periodically are

Re: [pfSense Support] Ampro ReadyBoard fails to boot

2010-08-08 Thread David Burgess
On Sun, Aug 8, 2010 at 8:35 AM, Lyle Giese l...@lcrcomputer.net wrote: F6 PXE boot: F1 (spinner starts and immediately locks) Have you played with the HDD settings in the BIOS? Sometimes changing from CHS mode to LBA will do the trick. db

[pfSense Support] SSD partition alignment in 2.0

2010-08-07 Thread David Burgess
Is the 2.0 installer aware of 4k sector discs, and does it align its partitions accordingly? I realize better SSD controllers have minimized the effects of partition boundary misalignment, but I still prefer to introduce as little entropy as possible. Call me teutonic. db

Re: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread David Burgess
Paul, I understand your post up to this point: if the switch's port are set so that connected devices can't cause them to flip from untagged to tagged mode (in cisco speak from access to trunk - switchport nonegotiate I'm looking at the help file for my switch, and thinking this section is

Re: [pfSense Support] PFSENSE 2.0

2010-08-05 Thread David Burgess
On Thu, Aug 5, 2010 at 9:09 AM, Johan Hendriks j.hendr...@schavemaker.com wrote: does freeBSD support trim with SSDs? as of Freebsd 8.1 it is. read the following: http://www.freebsd.org/releases/8.1R/relnotes-detailed.html#DISKS Very interesting. I see this in the latest build log for 2.0:

Re: [pfSense Support] multi-wan, multi-lan security

2010-08-05 Thread David Burgess
On Thu, Aug 5, 2010 at 9:20 PM, Chris Buechler cbuech...@gmail.com wrote: it's a simple fat finger to drop that traffic into your LAN. That's poetry. db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional

Re: [pfSense Support] USB/SATA HDD - Force Delay?

2010-08-04 Thread David Burgess
On Wed, Aug 4, 2010 at 12:24 PM, Tim Nelson tnel...@rockbochs.com wrote: Yes, I'm testing with the latest 2.0 BETA3. The latest is BETA4. db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands,

[pfSense Support] multi-wan, multi-lan security

2010-08-04 Thread David Burgess
I've been running the 2.0 betas for a few months and I'm quite happy with it. Some network and hardware upgrades present me with a few questions, and maybe I'm overthinking it, but I thought I would ask the opinion of the wise ones. I'm running mlppp and it works beautifully. For the last 2-3

Re: [pfSense Support] PFSENSE 2.0

2010-07-29 Thread David Burgess
On Thu, Jul 29, 2010 at 11:29 PM, Bart Grefte b...@ravenslair.nl wrote: Its very hard to find serial cable these days in comparison to DVI or VGA cables Do you have access to a couple Cisco DB-9/RJ-45 console cables (the nice baby-blue ones)? By clipping the RJ-45 end of one of these, then

Re: [pfSense Support] RE: Heli new intall

2010-07-22 Thread David Burgess
On Thu, Jul 22, 2010 at 4:22 PM, Ujjval Karihaloo ujj...@simplesignal.com wrote: There a zcat dd command to install on linux In the wiki Was your target device also your Linux boot device? Or was it another, such as a spare hard drive or compact flash card? db

Re: [pfSense Support] RE: Heli new intall

2010-07-22 Thread David Burgess
On Thu, Jul 22, 2010 at 4:24 PM, Ujjval Karihaloo ujj...@simplesignal.com wrote: No linux commands are working like ls, etc...only pwd cd pfctl -d to shut it down is also not working... I am at the console now to chk this bad boy out pfsense is designed to be operated from the web UI. Try

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-19 Thread David Burgess
On Mon, Jul 19, 2010 at 12:34 AM, Seth Mos seth@dds.nl wrote: There might have been a math bug that meant you went 1 period forward instead of backwards. Except the monthly graph shows a gap from the previous week when looking at the current month. Screenshot in the forum:

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-18 Thread David Burgess
On Wed, Jul 14, 2010 at 1:06 AM, David Burgess apt@gmail.com wrote: July 23: Same thing, package will neither function nor delete. I see this at the bottom of the page when trying to remove the package, even after doing a /etc/rc.conf_mount_rw on the command line: I just updated

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-14 Thread David Burgess
On Tue, Jul 13, 2010 at 4:24 PM, Jim Pingle li...@pingle.org wrote: Updated again, but I didn't bump the version this time. Try it in about 5 minutes. Hm. I tried the reinstall button but now the package is in limbo. pfsense thinks it's installed, but there's no longer a menu for it.

Re: [pfSense Support] FTP Server or samba server for PFSense

2010-07-14 Thread David Burgess
On Tue, Jul 13, 2010 at 6:06 PM, Laurentiu STEFAN laurentiu.ste...@gmail.com wrote: I want to install the PF Sense and I want to use the rest of the HDD space for a FTP server or a SAMBA server. I think the closest you're going to come to this is through virtual machines, and obviously you

Re: [pfSense Support] Minimal configuration for pfSense.

2010-07-14 Thread David Burgess
On Wed, Jul 14, 2010 at 1:17 PM, Laurentiu STEFAN laurentiu.ste...@gmail.com wrote: It's OKa to use an IBM Pentium MMX 200MHZ, 64MB Ram, 3GB SCSI, 3X LAN for pfSense (Mask, firewall load balancing whith 10 PC behind)? That CPU should be good for ~15mbps throughput if you're not loading it with

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-13 Thread David Burgess
On Tue, Jul 13, 2010 at 4:06 PM, Jim Pingle li...@pingle.org wrote: I committed a fix and updated the package. It should be up shortly. Parse error: syntax error, unexpected '(' in /usr/local/www/status_rrd_summary.php on line 38 That's version 1.1 db

[pfSense Support] Potential DNS rebind attack detected

2010-07-06 Thread David Burgess
Since updating to the July 4 snapshot (and July 5 snapshot) yesterday, when I try to access my pfsense web UI via its DynDNS name I just get a message Potential DNS rebind attack detected, see http://en.wikipedia.org/wiki/DNS_rebinding; and the page title shows as 501. This happens in Chrome and

[pfSense Support] Re: Potential DNS rebind attack detected

2010-07-06 Thread David Burgess
On Tue, Jul 6, 2010 at 8:50 AM, David Burgess apt@gmail.com wrote: Any idea what's going on here? I see a thread is already active in the forum. I'll recall this post in favour of that thread. http://forum.pfsense.org/index.php/topic,26434.msg137878.html#new db

Re: [pfSense Support] Bandwdith usage since start of month?

2010-07-05 Thread David Burgess
On Thu, Jun 24, 2010 at 2:12 PM, Jim Pingle li...@pingle.org wrote: Give it a try and see if it's still accurate. Some observations: 1. Using the June 23 nanobsd snapshot, RRD Summary reported ~330GB of traffic from June 1 to June 30. On July 3 it reported over 700GB of traffic from the 1st.

Re: [pfSense Support] bridge as a LAN interface : traffic blocked between interfaces

2010-07-05 Thread David Burgess
On Mon, Jul 5, 2010 at 9:57 AM, Guillaume Lederrey guillaume.leder...@gmail.com wrote: I have a minor problem with my new installation of pfSense 2 : Please check your setup against the instructions here: http://forum.pfsense.org/index.php/topic,20917.0.html Obviously you will have to adjust

Re: [pfSense Support] upgrade failure from Beta2 to Beta3

2010-06-30 Thread David Burgess
On Wed, Jun 30, 2010 at 12:58 PM, Lyle Giese l...@lcrcomputer.net wrote: But why would I look in the upgrade directory on the download site when I had downloaded the nanobsd version from the nanobsd directory?  There are no upgrade images in the nanobsd directory, you have to go into the

Re: [pfSense Support] Bandwdith usage since start of month?

2010-06-18 Thread David Burgess
On Fri, Jun 18, 2010 at 10:20 AM, Nenhum_de_Nos math...@eternamente.info wrote: vnstat does that. but not for past time (before it is installed). Anybody know if vnstat is compact flash friendly? I'm using the nanobsd image since burning out one CF already, and this vnstat sounds handy. db

Re: [pfSense Support] root not found on cold boot 2.0

2010-06-10 Thread David Burgess
On Thu, Jun 10, 2010 at 1:21 AM, Seth Mos seth@dds.nl wrote: Intruiging, I have a Soekris net5501 from one of the first series. It always fails to cold boot when it's been off for an hour or so. All the LEDs on the front of the Soekris stay lit. Then I pull the plug and reinsert after 10

Re: [pfSense Support] Creating a PPTP connection through PUTTY

2010-06-09 Thread David Burgess
On Wed, Jun 9, 2010 at 6:23 PM, Chris Buechler cbuech...@gmail.com wrote: Putty strictly does SSH and telnet, you can't do PPTP using it. You can do SSH port forwards if you just need to access specific port(s) reachable from the firewall. You could perhaps tunnel a PPTP connection through

[pfSense Support] root not found on cold boot 2.0

2010-06-09 Thread David Burgess
I'm running the 2.0 nanobsd image. This release is coming together nicely. One problem I've had with multiple builds from May as well as June 4 is that on a cold boot pfsense fails to find the root partition. I've never had the same problem on a reboot, even on a firmware update, I think. On a

Re: [pfSense Support] Is it possible?

2010-06-08 Thread David Burgess
On Tue, Jun 8, 2010 at 10:33 AM, Tiago tpi...@scenario.ind.br wrote: How can I block some sites through the IP address? For instance: I need to block www.hotmail.com  only for IP 172.16.0.54 Any site can be blocked by IP address in the firewall. For example, create a block rule on LAN with

Re: [pfSense Support] 2.0 beta2 on Soekris net4801

2010-06-07 Thread David Burgess
On Mon, Jun 7, 2010 at 2:57 PM, Lyle Giese l...@lcrcomputer.net wrote: I tried to enable the ssh server.  I can find sshd running with ps, but don't seem to find it with netstat and can not connect to it. I am not that familar with the FreeBSD command line to help more, but can anyone point

Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-03 Thread David Burgess
On Thu, Jun 3, 2010 at 10:18 PM, justino garcia jgarciaitl...@gmail.com wrote: How does one go by blocking facebook twitter and youtube also how does one autoblock malicous sites opendns is one way. - To unsubscribe, e-mail:

Re: [pfSense Support] pfSense 1.2.3 / squid performance issue.

2010-05-22 Thread David Burgess
On Fri, May 21, 2010 at 10:04 PM, Chris Buechler cbuech...@gmail.com wrote: http://doc.pfsense.org/index.php/Squid_Package_Tuning Also http://forum.pfsense.org/index.php/topic,7186.msg59302.html#msg59302 db - To

[pfSense Support] 2.0 traffic shaper reference

2010-05-06 Thread David Burgess
Is there a tutorial on the traffic shaper in 2.0? I read the related FAQ or wiki page (now I forget which), I ran the wizard and found the results not only confusing, but inconsistent with my responses, and I have scoured the forums. I don't understand why there is a floating interface, which is

Re: [pfSense Support] Reboot request

2010-04-30 Thread David Burgess
On Fri, Apr 30, 2010 at 9:45 AM, Gary Buckmaster g...@s4f.com wrote: When you have a moment, would you power cycle the 1u device in our rack labeled tyr.fp.s4f.com?  Thank you. I feel like an idiot, but I'm standing here looking at our rack, and for the life of me can't see a label that even

Re: [pfSense Support] Firewall not blocking ip after adding it to rules

2010-04-27 Thread David Burgess
Are you using squid as transparent? If so you have to override the GUI anti-lockout rule. Be sure to make alternate arrangements to get into the GUI, or you'll lock yourself out. db On 4/27/10, Chris Flugstad ch...@cascadelink.com wrote: I block an ip in the fw rules on lan and wan, and then

[pfSense Support] no packages for 2.0

2010-04-19 Thread David Burgess
The Available Packages page for 2.0 beta x86_64 full snapshot from Friday shows no packages, with the warning Unable to communicate with www.pfsense.com. Please verify DNS and interface configuration, and that pfSense has functional Internet connectivity. My DNS works. I don't see anything related

Re: [pfSense Support] no packages for 2.0

2010-04-19 Thread David Burgess
On Mon, Apr 19, 2010 at 1:29 PM, Jim Pingle li...@pingle.org wrote: It's probably looking for a package file that doesn't exist. Did this ever work before? It's the first time I've tried PFS on 64-bit. I'm not sure if there are any 64-bit packages setup in the repo yet. That's possible, and

Re: [pfSense Support] pfSense 2.0 / Motorola SB6120 / Comcast = No DHCP ?

2010-04-17 Thread David Burgess
Did you power-cycle the modem? db On 4/17/10, Jeppe Øland jol...@gmail.com wrote: Hi there, Hopefully somebody can help me with how to diagnose this problem. I recently switched to Comcast, and I have been running great with them for a few weeks. They supplied me with a Ubee cablemodem,

Re: [pfSense Support] Is this doable?

2010-04-12 Thread David Burgess
On Mon, Apr 12, 2010 at 3:35 AM, Chris Buechler cbuech...@gmail.com wrote: Yes, that will work fine. It looks like you'll probably want to trunk different VLANs to each one, but that should be doable with any managed switch. You could also do this with a single pfsense box If you can move a

Re: [pfSense Support] WAN Interface Errors - Bad Checksum

2010-03-24 Thread David Burgess
On Mon, Mar 22, 2010 at 7:15 PM, Jason Stuart jason.stu...@cornell.edu wrote: I am running pfsense 1.2.3 as a full install on a Dell 1U server.  I am having some issues with interface errors on the WAN input.  I have reviewed the switch logs that the interface is connected to and have not seen

Re: [pfSense Support] OT: VLAN

2010-03-12 Thread David Burgess
On Fri, Mar 12, 2010 at 9:13 AM, Michel Servaes mic...@mcmc.be wrote: Guys, What would I need to transport WAN LAN over one network cable ? I was thinking about setting up two VLAN's (but since my cablemodem isn't VLAN aware, I guess this setup isn't the right way to go ?) Basically, I

[pfSense Support] root partition trouble (2.0)

2010-03-08 Thread David Burgess
I decided to update from 1.2.3 to 2.0 Beta 1. Instead of updating in place, I took advantage of the opportunity to update to a newer hard drive at the same time, leaving my 1.2.3 install intact. This is for a net5501, so I put the new hdd in another machine and booted from the PFS live CD and

Re: [pfSense Support] Slow TCP connection

2010-03-02 Thread David Burgess
On Tue, Mar 2, 2010 at 8:54 AM, Hiren Joshi j...@moonfruit.com wrote: I'm using the packet capture bit in pfsense. Is there a way of doing this via the shell (I'm new to BSD, more of a Linux person) and leaving it running (filtered by hostname) for a few hours/days? This way I can dump it all

Re: [pfSense Support] Slow TCP connection

2010-03-02 Thread David Burgess
On Tue, Mar 2, 2010 at 10:45 AM, Hiren Joshi j...@moonfruit.com wrote: On second thoughts, I'll take that back. It looks like the front end is matching all hosts with that IP, now I'm stumped... I don't understand. You have several remote hosts with the same IP address and same host name? db

Re: [pfSense Support] client requirement and a Q

2010-02-25 Thread David Burgess
On Thu, Feb 25, 2010 at 8:46 AM, Brent Clark brentgclarkl...@gmail.com wrote: Is that the same as from (Under Network Address Translation (NAT) ): http://www.pfsense.org/index.php?option=com_contenttask=viewid=40Itemid=43 1:1 NAT for individual IPs or entire subnets. Effectively similar, but

Re: [pfSense Support] Status of MLPPP in 2.0

2010-02-24 Thread David Burgess
On Wed, Feb 24, 2010 at 7:21 PM, Chris Bagnall li...@minotaur.cc wrote: Has there been any progress since then, and are there any plans to make this an official feature in 2.0? Is anyone interested in adding full support (i.e. GUI integration), and if so, what sort of bounty would it take?

[pfSense Support] mlppp

2010-02-23 Thread David Burgess
I have a single ADSL connection that is mlppp capable. I'm running pfsense 1.2.3-Release on a net5501+Intel Pro/1000 GT (4 * 10/100 + 1 * 100/1000). I would like to eventually add more ADSL connections for loadbalancing, which is simple enough to set up when using NAT. However, I would like to

[pfSense Support] OT: physical interface v vlan

2010-02-15 Thread David Burgess
I would like to know if somebody can tell me an advantange, other than raw throughput, of a router with multiple interfaces when compared with a router using few physical interfaces but vlans in their place. I cannot come up with one. db

[pfSense Support] multiple pppoe interfaces?

2010-02-15 Thread David Burgess
I'm considering a setup with multiwan where more than one WAN connection would require pppoe. This does not appear to be possible in 1.2.3, as my OPT interfaces only give static and dhcp options. Am I doing something wrong? Is this something that will be supported in the future? Or am I laughably

Re: [pfSense Support] OT: physical interface v vlan

2010-02-15 Thread David Burgess
On Mon, Feb 15, 2010 at 10:42 PM, Chris Buechler cbuech...@gmail.com wrote: This depends on how much you trust your switches, and more so, how much you trust your admins. It's usually easier to inadvertently configure something on the wrong VLAN than it is to plug something into the wrong

Re: [pfSense Support] 32-bit counter limitation

2010-02-12 Thread David Burgess
On Fri, Feb 12, 2010 at 12:45 AM, Seth Mos seth@xs4all.nl wrote: Do the RRD graphs not provide you with this information? Silly me. It's all right there. Thanks. db - To unsubscribe, e-mail:

[pfSense Support] 32-bit counter limitation

2010-02-11 Thread David Burgess
What would it take to get counters on the interface page to not roll over at 4GB? Is that something that will just happen when PFS moves to a 64-bit platform? If so, is that a change that will happen with 2.0? What is the best solution in the interim? I'm looking at the darkstat package and

[pfSense Support] can't reach modem on opt interface

2010-02-10 Thread David Burgess
Greetings, I have an ADSL modem that is not currently in use, but will be soon. When said modem is connected directly by cable to pfsense's WAN, and the appropriate address/netmask assigned statically to the WAN (192.168.1.0/24), I can reach the modem's web interface at its assigned address

Re: [pfSense Support] can't reach modem on opt interface

2010-02-10 Thread David Burgess
On Wed, Feb 10, 2010 at 1:26 AM, Chris Buechler cbuech...@gmail.com wrote: You probably don't have a gateway configured on the OPT interface, so it's being treated as a LAN/internal interface, and the traffic isn't being NATed. If the modem is on the same subnet as the interface I don't

Re: [pfSense Support] can't reach modem on opt interface

2010-02-10 Thread David Burgess
On Wed, Feb 10, 2010 at 2:01 AM, Chris Buechler cbuech...@gmail.com wrote: On Wed, Feb 10, 2010 at 3:55 AM, David Burgess apt@gmail.com wrote: On Wed, Feb 10, 2010 at 1:26 AM, Chris Buechler cbuech...@gmail.com wrote: The modem doesn't know how to get to your LAN subnet so you need to NAT

Re: [pfSense Support] Windows Deployment Services - DHCP options 60/66/67

2009-12-19 Thread David Burgess
On Sat, Dec 19, 2009 at 4:52 AM, Michel Servaes mic...@mcmc.be wrote: Might it be, that these options should be possible to add to pfSense. I can add options 66 67 (boot-server boot-filename)... but option 60 would be the name which should be set to (PXEClient) I guess that would be the

Re: [pfSense Support] ALIX 'idle' CPU utilization

2009-12-17 Thread David Burgess
On Thu, Dec 17, 2009 at 11:22 AM, Keenan Tims kt...@gotroot.ca wrote: I have an ALIX 2d3 running a full install of 1.2.3-RC2 on some industrial CF. When it's passing very little traffic (~150pps, ~600kbps) I'm seeing an average of about 15% CPU usage. That doesn't look out of line to me. I

[pfSense Support] hybrid storage?

2009-12-11 Thread David Burgess
I've been happily using 1.2.3-RC1 for many months now on a Soekris net5501 and a 100GB 2.5 SATA drive. I like the idea of an embedded system on a CF card, but that's not possible or advisable for me as I'm running the squid and freeswitch packages. I was wondering however, if it would be

Re: [pfSense Support] hybrid storage?

2009-12-11 Thread David Burgess
On Fri, Dec 11, 2009 at 9:13 AM, Jim Pingle li...@pingle.org wrote: (cold-reset resiliency, The moment you have a drive mounted rw, you lose this. :-) Well you lose it on the rw partitions, but if the core system is mounted to RAM from a read-only filesystem, then at least the core system has

Re: [pfSense Support] hybrid storage?

2009-12-11 Thread David Burgess
On Fri, Dec 11, 2009 at 9:20 AM, Manny A. Wise mannyw...@gmail.com wrote: My needs were exactly like yoursFreeSwitch and Squid... I am pretty good with hardware, but terrible with software... :( My software background is a lot more linux than BSD, but a person can learn ;) Some cursory

Re: [pfSense Support] hybrid storage?

2009-12-11 Thread David Burgess
On Fri, Dec 11, 2009 at 10:30 AM, Jim Pingle li...@pingle.org wrote: On 12/11/2009 12:22 PM, Paul Mansfield wrote: can you do overlay file systems on freeBSD, so that the base OS and config is read-only and you overlay a read-write file system at a very late stage in booting IF that overlay is

Re: [pfSense Support] Squid Cache management does'nt save config

2009-12-11 Thread David Burgess
On Fri, Dec 11, 2009 at 3:52 PM, Nathaniel Simch de Morais nathanielmor...@gmail.com wrote: Well, i can make any changes in squid, but in the tab Cache management just don't save. I put all info about cache i want and when i click save the screen returns to default. Does anyone seen this? I

Re: [pfSense Support] PFSense advocacy

2009-12-02 Thread David Burgess
On Wed, Dec 2, 2009 at 2:26 PM, Ron García-Vidal r...@millburncorp.com wrote: Since I've never worked extensively with Cisco, can someone give me a few salient points to throw at him. I already used the cost argument, he wants more. The support for PFSense is top notch. Between the mailing

Re: [pfSense Support] Wake On LAN

2009-12-01 Thread David Burgess
On Tue, Dec 1, 2009 at 9:05 AM, Pete Boyd petes-li...@thegoldenear.org wrote: What does it have to do with the operating system? if the computer is powered off then the operating system doesn't come into play. Are you confusing this with wake from standby? No, your computer will not wake from

Re: [pfSense Support] Wake On LAN

2009-12-01 Thread David Burgess
On Tue, Dec 1, 2009 at 9:27 AM, Pete Boyd petes-li...@thegoldenear.org wrote: If this is so, is it the default in Windows XP Pro? because all workstations we have that have a WOL setting in the BIOS, successfully do WOL, without us changing anything in Windows from a fresh install. I believe

Re: [pfSense Support] Weird msg in pfsense logs

2009-11-30 Thread David Burgess
On Mon, Nov 30, 2009 at 8:25 AM, Gabriel - IP Guys gabr...@impactteachers.com wrote: Pfsense is the only setup that has complained about this setup, and if it drops packets because of it, I’ve got a real problem, and I’ll have to go back to a previous working setup without pfsense. I did

Re: [pfSense Support] Split DNS Setup

2009-11-27 Thread David Burgess
On Fri, Nov 27, 2009 at 9:11 AM, Ron Lemon r...@maplewood.com wrote: Sounds good to me. Where do I find the host file? /etc/hosts

Re: [pfSense Support] WAN + OpenVPN - Failover

2009-11-25 Thread David Burgess
On Wed, Nov 25, 2009 at 2:01 PM, Dominic vamp...@vortex.co.za wrote: However my query is, is there any way I could automate this failover? ie: automate the routing changes or similar? My goal is to automate the failover as transparently as possible. I think this document applies equally to

Re: [pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread David Burgess
I support you. Stick to your guns, no matter what! db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

[pfSense Support] svg errors in chrom(ium) browser?

2009-10-18 Thread David Burgess
I'm using the chromium browser on Ubuntu and when I try to view PFSense's traffic graphs I don't see the graph, just a box with the following error: This page contains the following errors: error on line 2 at column 1: Document is empty Below is a rendering of the page up to the first error.

Re: [pfSense Support] VLAN Capable switch

2009-10-04 Thread David Burgess
On Sun, Oct 4, 2009 at 6:15 PM, Anil Garg garg_art2...@yahoo.com wrote: I have a pfsense with two 10/100 PCI cards (acting as LAN WAN router). I have a 4 port (quad) 10/100 PCI (ZNYX ZX374) card. If I were to add this card into the box and then add those ports and bridge them with each other

Re: [pfSense Support] VLAN Capable switch

2009-10-04 Thread David Burgess
On Sun, Oct 4, 2009 at 9:24 PM, Anil Garg garg_art2...@yahoo.com wrote: David I am not very technical. My server room is far away from my internet connection at my home. So there is only one cable going from the internet to server room.  I am still reading about VLAN so that I understand its

Re: [pfSense Support] squid clobbering performance

2009-10-01 Thread David Burgess
On Thu, Oct 1, 2009 at 7:57 AM, Jim Pingle li...@pingle.org wrote: mayak chunder-qwern wrote: hi all, any reason (or what can i look at) to see why squid transparent proxying is heavily slowing web access ... (w/out proxy, dell.fr takes 3-5 secs, with proxy, dell.fr takes 20+ or more) My

Re: [pfSense Support] How to backup pfSense complete?

2009-09-09 Thread David Burgess
On Wed, Sep 9, 2009 at 2:22 PM, Dominik Schipsdomi...@s235.de wrote: Hello, I'd like to ask how to backup pfSense the correct way? There is a backup package you can install that allows you to back up directories that you specify. db

Re: [pfSense Support] Load Balancer Interfaces

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 7:42 AM, Jesse Vollmar vollm...@gmail.com wrote: It seems like this is related to that OPT interface not having the gateway specified on it. That interface is however working and sending traffic out to my ISP's gateway. At the risk of looking like the N00b that I am,

Re: [pfSense Support] Load Balancer Interfaces

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 8:57 AM, Jesse Vollmar vollm...@gmail.com wrote: The route for that OPT1 interface is showing up it is em2. $ netstat -nr Routing tables Internet: DestinationGatewayFlagsRefs Use Netif Expire default67.38.60.77UGS

Re: [pfSense Support] GBE toe

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 9:12 AM, Nathan Eisenberg nat...@atlasnetworks.uswrote: FWIW - I have not been able to get these to work in PFSense -at all-. http://www.newegg.com/Product/Product.aspx?Item=N82E16833106019 http://www.newegg.com/Product/Product.aspx?Item=N82E16833106018

Re: [pfSense Support] Load Balancer Interfaces

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 9:24 AM, Jesse Vollmar vollm...@gmail.com wrote: On Wed, Aug 26, 2009 at 11:19 AM, David Burgessapt@gmail.com wrote: I have entered the ISP's gateway (They actually have two due to us using multiple subnets) and when I do, pfsense can only ping that address.

Re: [pfSense Support] 1.2.3-RC1-embedded dhcp relay windows XP broadcast flag

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 9:28 AM, Chris Kleeschulte chris.kleeschu...@it.libertydistribution.com wrote: I also know that Microsoft claims this is a problem in Vista, but all my hosts are XP and the flag seems to be set there too. I believe xp SP3 did this. For sure it created vista-like

Re: [pfSense Support] GBE toe

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 12:27 PM, Nathan Eisenberg nat...@atlasnetworks.uswrote: Looks like it was 1.2.1 when I tried: http://www.mail-archive.com/support@pfsense.com/msg15181.html I think the newer intel chipsets are supported in FBSD 7.x, or PFS 1.2.3. Don't anybody run buy one on my

Re: [pfSense Support] 1.2.3-RC1 Web gui logout

2009-08-12 Thread David Burgess
On Wed, Aug 12, 2009 at 11:00 AM, Joseph L. Casalejcas...@activenetwerx.com wrote: Argh, that means I have to close my browser:) I always have so much open like Nagios etc in other tabs... You could use a different browser for pfsense. It's an inconvenience, but probably more convenient than

Re: [pfSense Support] Re: 1.2.3-RC1 Web gui logout

2009-08-12 Thread David Burgess
On Wed, Aug 12, 2009 at 11:10 AM, Joseph L. Casalejcas...@activenetwerx.com wrote: Can ff be setup to do this? In Windows FF3.5 ToolsClear Recent HistoryDetailsActive Logins I believe that should do it. db - To unsubscribe,

Re: [pfSense Support] port 25

2009-08-11 Thread David Burgess
On Tue, Aug 11, 2009 at 1:19 AM, Kevin Kimanikevinkim...@gmail.com wrote: Hi, Am experiencing trouble with my Pfsense firewall by it not being able to relay mail to the internal mail server. One person can be able to send mail outside the organization but receiving mail is still an issue.

[pfSense Support] no job control

2009-08-05 Thread David Burgess
http://www.mail-archive.com/support@pfsense.com/msg05025.html After about 4 months on pfsense I'm now seeing this message in the console, Warning: no access to tty (Inappropriate ioctl for device). Thus no job control in this shell. The above-linked thread is over three years old now, do we have

Re: [pfSense Support] no job control

2009-08-05 Thread David Burgess
On Wed, Aug 5, 2009 at 6:10 AM, Jim Pingleli...@pingle.org wrote: IIRC it was due to something trying to mute the video console while it is really using serial. It is fixed (mostly?) on the 1.2.3-RC2 nanobsd snapshots, and doesn't seem to happen on 2.0 either. I'm using 1.2.3-RC1 on a

Re: [pfSense Support] no job control

2009-08-05 Thread David Burgess
On Wed, Aug 5, 2009 at 9:11 AM, Jim Pingleli...@pingle.org wrote: You should probably be running one of the more recent nanobsd snapshots anyhow, they can use all the testing they can get. :-) I didn't look at those because I'm running the FreeSwitch package. The blog post

Re: [pfSense Support] Help with Siproxd

2009-08-03 Thread David Burgess
On Mon, Aug 3, 2009 at 9:55 PM, Jeremy Bennettjbenn...@obtusion.com wrote: When I install siproxd, everything looks good, however when I go to my services page and press the play/start button, PFsense reports that siproxd has been started, but when the page refreshes, the status still shows

Re: [pfSense Support] Re: Can't get more than 15kpps.

2009-07-29 Thread David Burgess
On Wed, Jul 29, 2009 at 10:22 AM, Lennyfive2one.le...@gmail.com wrote: Oh yeah, sorry, forgot to mention. The NIC is the same one: Dual Intel PCI-X. Have you ruled out your switches as bottleneck? db - To unsubscribe,

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread David Burgess
On Wed, Jul 29, 2009 at 11:25 AM, Curtis LaMasterscurtislamast...@gmail.com wrote: Thanks Scott. I know what top posting is...I just don't know why you think I did.  I hit reply, type my message and go forth.  Didn't think it needed to be any harder than that. It can be a lot harder than that.

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread David Burgess
Yes. On Wed, Jul 29, 2009 at 11:38 AM, Curtis LaMasterscurtislamast...@gmail.com wrote: This is top posting apparently. Curtis LaMasters http://www.curtis-lamasters.com http://www.builtnetworks.com On Wed, Jul 29, 2009 at 12:34 PM, iggd...@gmail.com wrote: On Wed, Jul 29, 2009 at 1:33

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread David Burgess
On Wed, Jul 29, 2009 at 11:38 AM, Curtis LaMasterscurtislamast...@gmail.com wrote: And this is bottom posting.  Correct? Well, I don't think it's top-posting or bottom-posting if you delete all prior content. - To unsubscribe,

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread David Burgess
The current is an example of top-posting, in response to your top-post. I don't think you've bottom-posted in this thread yet. db On Wed, Jul 29, 2009 at 11:41 AM, Curtis LaMasterscurtislamast...@gmail.com wrote: To which one? Curtis LaMasters http://www.curtis-lamasters.com

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread David Burgess
On Wed, Jul 29, 2009 at 11:42 AM, Curtis LaMasterscurtislamast...@gmail.com wrote: How about now? Bottom posting? Bingo. Ha ha. Now Scott's saying no and I'm saying yes. In my view, you bottom-posted, although you could refine it further by trimming the quoted text to which you're replying.

Re: [pfSense Support] Anything like fail2ban for PFSense?

2009-07-21 Thread David Burgess
On Tue, Jul 21, 2009 at 10:42 AM, Nathan Eisenberg nat...@atlasnetworks.uswrote: Hello Paul, I've considered that, but in this instance, it's not an option. I agree that limiting exposure is a good first step, but I think brute force protection regardless of source address could be a

Re: [pfSense Support] Multiple WAN Interface and Specific Traffic to Each Interface

2009-07-17 Thread David Burgess
On Fri, Jul 17, 2009 at 1:31 PM, Ron Lemon r...@maplewood.com wrote: I have a pfSense box with a WAN link that goes to the internet. This is where all the web surfing and e-mail comes and goes from. I have a second WAN link (OPT1) that goes to a pubic semi-private network and I need to

Re: [pfSense Support] Web Interface Pages - Save Button

2009-07-15 Thread David Burgess
On Wed, Jul 15, 2009 at 10:10 PM, Chris Buechler c...@pfsense.org wrote: On Wed, Jul 15, 2009 at 11:25 PM, Tim Nelsontnel...@fudnet.net wrote: Chris Buechler wrote: On Wed, Jul 15, 2009 at 11:15 PM, Tim Nelsontnel...@fudnet.net wrote: Hello fellow pfSensers! I've been quietly annoyed

<    1   2   3   >