[pfSense Support] Multiple segments on an interface?

2006-02-13 Thread Derrick MacPherson
Can I have multiple segments on an interface? Meaning can I run 10.10.10.0/24 and 172.16.128.0/20 on the same interface? I assume I can but I don't see where on the web interface I can do so.. - To unsubscribe, e-mail: [EMAIL PRO

Re: [pfSense Support] View Full logs

2006-02-23 Thread Derrick MacPherson
not sure, but probably the quickest is to see if tcpdump is installed, i am at home so i don't have access to a box Chris wrote: I need to view logs of all communications both inbound and outbound. How can I do this from commandline SSH? --

[pfSense Support] version to run?

2006-03-01 Thread Derrick MacPherson
I am running the 1.0BETA downloaded off a ftp site a few weeks back, where can I find a newer version? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] version to run?

2006-03-01 Thread Derrick MacPherson
Sorry, I just found a snapshot dated 2-20-06. thanks. On Wed, 2006-03-01 at 17:15 -0800, Derrick MacPherson wrote: > I am running the 1.0BETA downloaded off a ftp site a few weeks back, > where can I find a newer v

[pfSense Support] passive ftp out of my DMZ is not working

2006-03-02 Thread Derrick MacPherson
I'm trying to set up the following: / <-> CARP WAN int (PFSENSE BOX)<-> LAN \<-> DMZ I want to have nat on the LAN, bi-nat on the DMZ, filtering incoming and outgoing traffic. I'm close, but I've had issues with trying to get this all working; I can't get outbound PASV ftp

Re: [pfSense Support] passive ftp out of my DMZ is not working

2006-03-02 Thread Derrick MacPherson
pshot. Please update. > > On 3/2/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > I'm trying to set up the following: > > > >/ <-> CARP > > WAN int (PFSENSE BOX)<-> LAN > >\<-> DMZ > > > > I w

Re: [pfSense Support] passive ftp out of my DMZ is not working

2006-03-02 Thread Derrick MacPherson
Hmm. I'm still having the passive FTP issue. It's quite possibly something in my rules, does anything look borked? On Thu, 2006-03-02 at 12:02 -0500, Scott Ullrich wrote: > Yep, thats it. > > On 3/2/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > Thanks Scot

Re: [pfSense Support] passive ftp out of my DMZ is not working

2006-03-02 Thread Derrick MacPherson
On Thu, 2006-03-02 at 12:12 -0500, Scott Ullrich wrote: > FTP is handled by rules behind the scene. The rules you are showing > us mean nothing to it. Sorry this might be a bit ugly sending everything, but here goes: scrub on xl0 all fragment reassemble anchor "ftpsesame/*" all anchor "firewall

Re: [pfSense Support] passive ftp out of my DMZ is not working

2006-03-02 Thread Derrick MacPherson
On Thu, 2006-03-02 at 14:02 -0500, Scott Ullrich wrote: > Looks fine to me. Not really sure what is going on as FTP works fine here. Like I said, works fine on the LAN interface, not the DMZ interface. Perhaps there's something else in the pfsense config i'm missing. do I have to set a 1:1 NAT f

Re: [pfSense Support] passive ftp out of my DMZ is not working

2006-03-02 Thread Derrick MacPherson
wrote: > Shouldnt need to do any of this, no. I'll try to make some time to > bring up a box and test this but my next 4 days are going to be tough > to find extra time. > > On 3/2/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > On Thu, 2006-03-02 at 14:02 -0500,

Re: [pfSense Support] passive ftp out of my DMZ is not working

2006-03-02 Thread Derrick MacPherson
The firmware autoupdate shows me running 1.0b2rc5 On Thu, 2006-03-02 at 14:24 -0500, Scott Ullrich wrote: > Sounds like the bug we fixed after beta1, honestly... > > On 3/2/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > currently: > > > > x.x.x.89 is the

Re: [pfSense Support] passive ftp out of my DMZ is not working

2006-03-02 Thread Derrick MacPherson
status page. > > On 3/2/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > The firmware autoupdate shows me running > > 1.0b2rc5 > > > > On Thu, 2006-03-02 at 14:24 -0500, Scott Ullrich wrote: > > > Sounds like the bug we fixed after beta1, hones

Re: [pfSense Support] passive ftp out of my DMZ is not working

2006-03-02 Thread Derrick MacPherson
, as well as your work on this project. It has saved me from having to use a PIX or some other commercial product I don't like. FreeBSD and PF are awesome. On Thu, 2006-03-02 at 11:32 -0800, Derrick MacPherson wrote: > ya I knew that, sorry I wasn't sure where else that was listed, I keep

[pfSense Support] problem with fresh install and the package manager

2006-03-07 Thread Derrick MacPherson
I have a machine that I'm building as a redundant firewall, the primary box was origionally set up using beta1, and upgraded to beta2, and the new one is just being built with beta2. When I go to package manager, I get: Fatal error: Call to a member function on a non-object in /etc/inc/pfsense-uti

Re: [pfSense Support] Keeping full installations sync'd with our development progress

2006-03-12 Thread Derrick MacPherson
Scott Ullrich wrote: If you have BETA2, then this is for you... I keep failing to post instructions on how full installation users can keep up to date with pfSense changes. This *DOES NOT* update FreeBSD but updates all pfSense base components such as the webConfigurator, etc. Can the OS be

[pfSense Support] load_filter error

2006-03-14 Thread Derrick MacPherson
RELENG_1_SNAPSHOT_03-12-2006 I have 2 boxes that are synced, and I am getting an error that the macro dmz is not defined - the section of rules.debug is: # Load balancing anchor - slbd updates rdr-anchor "slb" rdr on $lan proto tcp from any to any port 21 -> 127.0.0.1 port 8021 rdr on $dmz proto

Re: [pfSense Support] load_filter error

2006-03-14 Thread Derrick MacPherson
terface name instead of the > interfaces description. Try running cvs_sync.sh releng_1 and get on > the absolute latest and greatest version if you are on the full > installation platform. > > > On 3/14/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > RELENG

Re: [pfSense Support] load_filter error

2006-03-14 Thread Derrick MacPherson
Working now, kicked it over again. On Tue, 2006-03-14 at 16:15 -0800, Derrick MacPherson wrote: > That seems to have solved it on my primary, but my failover is still > getting that error. Any other info needed? > > On Tue, 2006-03-14 at 17:53 -0500, Scott Ullrich wrote: > > Th

[pfSense Support] How to setup this static NAT in my DMZ

2006-03-15 Thread Derrick MacPherson
i'm replacing our pix with a couple pfsense boxes, and we have some internal LAN ip's that are statically mapped to the dmz, e.g. - our DMZ mail server routes mail to a DMZ address that's mapped to an internal address I'm not sure how to set this up with pfsense, I figure in PF it would be done wi

RE: [pfSense Support] How to setup this static NAT in my DMZ

2006-03-16 Thread Derrick MacPherson
On Thu, 2006-03-16 at 12:49 +, Robert Mortimer wrote: > You can port forward back through a NAT setup > > http://faq.pfsense.org/index.php?action=artikel&cat=10&id=53&artlang=en > > > You can 1:1 map DMZ machine addresses to virtual addresses on the WAN > > (see same area of the control pa

[pfSense Support] squid?

2006-03-23 Thread Derrick MacPherson
Where can I find out about the squid devel, whats functional and whats not etc? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

[pfSense Support] Squid problem:

2006-03-24 Thread Derrick MacPherson
ACL name 'for_inetusers' not defined! FATAL: Bungled squid.conf line 61: http_access allow pf_networks for_inetusers within_timeframe Squid Cache (Version 2.5.STABLE12): Terminated abnormally. relevant line: http_access allow pf_networks for_inetusers within_timeframe

[pfSense Support] CARP issue. arp_rtrequest: bad gateway x.x.x.x (!AF_LINK)

2006-03-24 Thread Derrick MacPherson
I'm seeing this in the system log: Mar 24 17:02:26 kernel: arp_rtrequest: bad gateway x.x.x.x (!AF_LINK) Mar 24 17:02:27 kernel: arp_rtrequest: bad gateway y.y.y.y (!AF_LINK) The status CARP looks fine, though these messages seem new, is anyone aware of what would cause these? -

Re: [pfSense Support] CARP issue. arp_rtrequest: bad gateway x.x.x.x (!AF_LINK)

2006-03-24 Thread Derrick MacPherson
Sorry Scott I should've looked., thnx. On Fri, 2006-03-24 at 20:49 -0500, Scott Ullrich wrote: > FAQ. This is normal and does not hurt anything. > > On 3/24/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > I'm seeing this in the system log: > > >

[pfSense Support] Passive FTP out of the DMZ

2006-03-25 Thread Derrick MacPherson
I don't have outbound passive FTP working for machines in the DMZ, what the heck am I missing? I see the default block rule is blocking it, what am I missing? heres from the status log: DMZ 10.1.1.150:61272X.X.X.X:50105 TCP -

Re: [pfSense Support] Passive FTP out of the DMZ

2006-03-25 Thread Derrick MacPherson
his will help? > > http://faq.pfsense.com/index.php?action=artikel&cat=10&id=103&artlang=en&highlight=ftp > > > On 3/25/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > I don't have outbound passive FTP working for machines in the DMZ, what >

Re: [pfSense Support] Passive FTP out of the DMZ

2006-03-25 Thread Derrick MacPherson
On Sat, 2006-03-25 at 15:53 -0500, Scott Ullrich wrote: > I fixed some FTP helper issues on inbound from WAN->LAN[DMZ], etc. > Try cvs_sync.sh releng_1 and see if it helps. Otherwise after bootup > you have to run /etc/rc.filter_configure a second time for it to > install the helpe

[pfSense Support] Some feature requests

2006-03-27 Thread Derrick MacPherson
I'd like to request a few things that would have been nice as I was putting in pfsense here at work. On the System Logs, Firewall page, could the clear logs button be put at the top, and could the log option for the default block rule be put there as well? Can the Traffic graph be made so that it

Re: [pfSense Support] Some feature requests

2006-03-27 Thread Derrick MacPherson
On Mon, 2006-03-27 at 13:40 -0500, Scott Ullrich wrote: > On 3/27/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > I'd like to request a few things that would have been nice as I was > > putting in pfsense here at work. > > > > > > On the Syst

Re: [pfSense Support] Passive FTP out of the DMZ

2006-03-27 Thread Derrick MacPherson
6 at 13:44 -0500, Scott Ullrich wrote: > If you are running on a full install, please issue: > > cvs_sync.sh releng_1 && /etc/rc.filter_configure > > And see if the problem is fixed. > > Thanks! > > > > On 3/25/06, Scott Ullrich <[EMAIL PROTECT

Re: [pfSense Support] Passive FTP out of the DMZ

2006-03-27 Thread Derrick MacPherson
Sorry I guess I misread it, it all looks good now. On Mon, 2006-03-27 at 17:01 -0500, Scott Ullrich wrote: > The pass rule for 8021 is further up. Why is this not correct? > > On 3/27/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > It's still not comin

Re: [pfSense Support] Passive FTP out of the DMZ

2006-03-27 Thread Derrick MacPherson
On Mon, 2006-03-27 at 17:39 -0500, Scott Ullrich wrote: > It may look okay, but does it work? :) appears to be, it was only effecting my outbound passive ftp from the dmz, not to big of concern at the moment... I'll check more later. thanks -

[pfSense Support] Can I add applications?

2006-03-27 Thread Derrick MacPherson
Can I install from source my own applications (mainly thinking of Squid, the package seems to core) to a pfsense box, and not cause any problems with pfsense's operation? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional

Re: [pfSense Support] Can I add applications?

2006-03-27 Thread Derrick MacPherson
rtikel&cat=7&id=102&artlang=en&highlight=compile> There is a squid package for pfSense is thats what you want. Also its possible to package add ports but this is also not supported! On 3/27/06, *Derrick MacPherson * <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote:

Re: [pfSense Support] active ftp connections fail after upgrading from Beta to Beta2

2006-03-27 Thread Derrick MacPherson
maybe try: cvs_sync.sh releng_1 && /etc/rc.filter_configure worked for me. Adrian Chitoni wrote: Yesterday I upgraded our firewall from Beta to Beta2. I backed up the config file, did a fresh install with the live cd iso image from the pfsense website and restored the configuration. So far

Re: [pfSense Support] Can I add applications?

2006-03-28 Thread Derrick MacPherson
hp?topic=908.0 > > On 3/28/06, Derrick MacPherson <[EMAIL PROTECTED]> > wrote: > > I had the Squid package installed and working with beta1, > but since then > > it only will core dump on startup. > > &g

[pfSense Support] Squid Logs - Working?

2006-03-29 Thread Derrick MacPherson
are the squid logs supposed to be working in the GUI at this point? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

[pfSense Support] PPTP setup question

2006-03-29 Thread Derrick MacPherson
Do I need to create a virtual IP for the PPTP server in pfsense, or does it do that for me? I assume I do, but can't test it till I get into work tomorrow. thanks. p.s. - what do people think of some sort of repository of config examples? Not sure how it could be done, but it would be nice to

Re: [pfSense Support] opt interface issue

2006-04-04 Thread Derrick MacPherson
cvs_sync.sh releng1 does the same thing? On Tue, 2006-04-04 at 10:51 -0400, Scott Ullrich wrote: > If you are using the Traffic Shaper then you need to upgrade to a > testing snapshot. > > http://www.pfsense.com/~sullrich/RELENG_1_SNAPSHOT_04-03-2006/ > > > On 4/4/06, dny <[EMAIL PROTECTED]> w

Re: [pfSense Support] opt interface issue

2006-04-04 Thread Derrick MacPherson
Ya ok, makes sense... Thanks On Tue, 2006-04-04 at 13:44 -0400, Scott Ullrich wrote: > Yep, but you don't get FreeBSD updates. > > On 4/4/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > cvs_sync.sh releng1 does the same thing? > > > > > > On T

Re: [pfSense Support] opt interface issue

2006-04-04 Thread Derrick MacPherson
Is the only way to upgrade it using the web interface and uploading it? Can I ftp it onto the box and upgrade it that way? On Tue, 2006-04-04 at 11:07 -0700, Derrick MacPherson wrote: > Ya ok, makes sense... Thanks > > On Tue, 2006-04-04 at 13:44 -0400, Scott Ullrich wrote: > &g

[pfSense Support] boot problems after update

2006-04-04 Thread Derrick MacPherson
# /etc/rc.firmware pfSenseupgrade /tmp/pfSense-Full-Update- RELENG_1_SNAPSHOT_04-03-2006.tgz tar: Error opening archive: Failed to open '-C': No such file or directory Shutdown NOW! shutdown: [pid 12380] The system does now not see the hdd, I'll grab the iso and try a fresh install, but now that

Re: [pfSense Support] boot problems after update

2006-04-04 Thread Derrick MacPherson
Can I do this, move the slave to a CARP master? On Tue, 2006-04-04 at 11:37 -0700, Derrick MacPherson wrote: > # /etc/rc.firmware pfSenseupgrade /tmp/pfSense-Full-Update- > RELENG_1_SNAPSHOT_04-03-2006.tgz > tar: Error opening archive: Failed to open '-C': No such file or >

[pfSense Support] boot problem after upgrade, more info:

2006-04-05 Thread Derrick MacPherson
System stops at Trying to mount root from UFS:/dev/ad4s1a Any recommended recovery methods for this? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] boot problem after upgrade, more info:

2006-04-05 Thread Derrick MacPherson
ll. > > On 4/5/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > System stops at > > Trying to mount root from UFS:/dev/ad4s1a > > > > Any recommended recovery methods for this? > > > > > > ---

[pfSense Support] boot problems after upgrade, part 2.

2006-04-05 Thread Derrick MacPherson
So I downloaded the latest version, boot the CD, and when I go to install to the hdd, it doesn't see it. Nothings changed on the system in regards to hardware, the BIOS sees the drive (SATA), so I'm wondering what might have changed on the OS side to cause this? -

Re: [pfSense Support] boot problems after upgrade, part 2.

2006-04-05 Thread Derrick MacPherson
as is freebsd6 boot cd.. Any advice? On Wed, 2006-04-05 at 14:42 -0400, Scott Ullrich wrote: > Nothing has changed. > > On 4/5/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > So I downloaded the latest version, boot the CD, and when I go to > > install to th

Re: [pfSense Support] boot problems after upgrade, part 2.

2006-04-05 Thread Derrick MacPherson
ght that it should have been > pretty much in sync with RELENG_6 > > On 4/5/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > The BIOS sees the drive properly and the system can boot enough to start > > decompressing the kernel; the system that works sees this: >

Re: [pfSense Support] boot problems after upgrade, part 2.

2006-04-06 Thread Derrick MacPherson
So for now should I install the older 1.0beta1 that I have that works, and cvs_sync.sh to current? On Thu, 2006-04-06 at 11:17 -0400, Scott Ullrich wrote: > Good to know. I'll update the files and we'll push forward on _1. > > Thanks! > > On 4/6/06, Pedro Paulo de Magalhaes Oliveira Junior > <[

Re: [pfSense Support] boot problems after upgrade, part 2.

2006-04-06 Thread Derrick MacPherson
/etc/current-supfile ? cat /etc/current-supfile *default host=cvs.pfsense.com *default base=/root/pfSense *default release=cvs *default delete use-rel-suffix pfSenseHEAD *default compress Is that correct? Sorry but I just cvsup'd this box from 1.0beta, (I had to copy the /usr/local/sbin/cvs_sync

[pfSense Support] Errors in latest configs:

2006-04-06 Thread Derrick MacPherson
I'm not able to see my secondary interfaces (opt1 and opt2) on the web interface, I can see them under the assign, but if I try to go to the page for the specific device I get: Interfaces: Optional () Optional has been disabled because there is no OPT interface. It looks like these are the erro

Re: [pfSense Support] error on parse config.xml on 060408 snapshot

2006-04-10 Thread Derrick MacPherson
Can I/we just have a /etc/current-supfile with: *default host=cvs.pfsense.com *default base=/root/pfSense *default release=cvs *default delete use-rel-suffix RELENG_1 *default compress On Mon, 2006-04-10 at 14:30 -0400, Scott Ullrich wrote: > Please explain how you upgraded from a snapshot? > >

[pfSense Support] Floppy format?

2006-04-24 Thread Derrick MacPherson
What format is the floppy with the config on it supposed to be? PS - If this in the faq, the mysql server for it is down at the moment.. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECT

[pfSense Support] NAT 1:1 and routing issue

2006-04-27 Thread Derrick MacPherson
I've got a box in the DMZ as a test, it works fine, when I move my ftp server into the DMZ, the firewall is not letting traffic back to the ftp server it seems. What info can I send to debug this? - To unsubscribe, e-mail: [EMA

Re: [pfSense Support] NAT 1:1 and routing issue

2006-04-27 Thread Derrick MacPherson
BETA4 built on Mon Apr 17 22:46:52 UTC 2006 On Thu, 2006-04-27 at 16:30 -0400, Scott Ullrich wrote: > What version? > > On 4/27/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > I've got a box in the DMZ as a test, it works fine, when I move my ftp > > serv

Re: [pfSense Support] NAT 1:1 and routing issue

2006-04-27 Thread Derrick MacPherson
it's not just FTP traffic, it's all traffic On Thu, 2006-04-27 at 16:37 -0400, Scott Ullrich wrote: > Check the system logs. I am pretty sure that all FTP bugs have been squashed. > > On 4/27/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > BETA4 > >

Re: [pfSense Support] NAT 1:1 and routing issue

2006-04-27 Thread Derrick MacPherson
it looks to be related to binat. On Thu, 2006-04-27 at 13:39 -0700, Derrick MacPherson wrote: > it's not just FTP traffic, it's all traffic > > On Thu, 2006-04-27 at 16:37 -0400, Scott Ullrich wrote: > > Check the system logs. I am pretty sure that all FTP bug

Re: [pfSense Support] NAT 1:1 and routing issue

2006-04-27 Thread Derrick MacPherson
hanged binat since before beta 1. Are you seeing any blockage? > > On 4/27/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > it looks to be related to binat. > > > > On Thu, 2006-04-27 at 13:39 -0700, Derrick MacPherson wrote: > > > it's not just FTP

Re: [pfSense Support] NAT 1:1 and routing issue

2006-04-27 Thread Derrick MacPherson
No blocking in the logs, it almost seems like the traffics being dropped? I've got DHCP turned on, and this ftp server was not using DHCP, I've since turned it on, and set a static mapping, like I've done with my other boxes that are working On Thu, 2006-04-27 at 13:54 -0700, Der

Re: [pfSense Support] NAT 1:1 and routing issue

2006-04-27 Thread Derrick MacPherson
ya this is weird. It works to my 2 test machines, but not my ftp server. I've checked routing on the boxes, and it looks the same. Any suggestions? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [E

Re: [pfSense Support] NAT 1:1 and routing issue

2006-04-27 Thread Derrick MacPherson
Well it seems to be just for this one IP. that's what I find really odd On Thu, 2006-04-27 at 17:09 -0400, Scott Ullrich wrote: > Not really, that is strange. > > Scott > > > On 4/27/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > ya this is weird. It w

RE: [pfSense Support] NAT 1:1 and routing issue

2006-04-27 Thread Derrick MacPherson
ts worth. > > - Jason > > -Original Message- > From: Derrick MacPherson [mailto:[EMAIL PROTECTED] > Sent: Thursday, April 27, 2006 4:33 PM > To: support@pfsense.com > Subject: Re: [pfSense Support] NAT 1:1 and routing issue > > Well it seems to be just for this one IP. t

RE: [pfSense Support] NAT 1:1 and routing issue

2006-04-28 Thread Derrick MacPherson
e ftp server to our outgoing smtp server, which is in the WAN switch, but i can't get any data to come back through the firewall into the ftp server. I added logging to some of the outgoing rules, and I see the traffic succesfuly being passed.. Any ideas? On Thu, 2006-04-27 at 16:08 -0700, Derr

RE: [pfSense Support] NAT 1:1 and routing issue

2006-04-28 Thread Derrick MacPherson
and what is even more screwed... If I give the ftp server it's DNS directed IP, (209.17.131.72) it won't work, but if I user an unused IP in our WAN network, it works. That must be a smoking gun of something... On Fri, 2006-04-28 at 08:02 -0700, Derrick MacPherson wrote: > Now that

RE: [pfSense Support] NAT 1:1 and routing issue

2006-04-28 Thread Derrick MacPherson
I think this must be with the switch on the ISP side, and am folowing it up with them On Fri, 2006-04-28 at 08:08 -0700, Derrick MacPherson wrote: > and what is even more screwed... > > If I give the ftp server it's DNS directed IP, (209.17.131.72) it won't > work, but if

RE: [pfSense Support] NAT 1:1 and routing issue (SOLVED)

2006-04-28 Thread Derrick MacPherson
Got ISP to clear their ARP cache. All good. What a pain in the rear On Fri, 2006-04-28 at 09:14 -0700, Derrick MacPherson wrote: > I think this must be with the switch on the ISP side, and am folowing it > up with them > > On Fri, 2006-04-28 at 08:08 -0700, Derrick MacPherson wrote:

Re: [pfSense Support] NAT 1:1 and routing issue (SOLVED)

2006-04-28 Thread Derrick MacPherson
I can't even see their gear, it's locked up or i would've just pulled the power on it, I had to call the ISP.. but it looks like it due to the TTL On Fri, 2006-04-28 at 15:24 -0400, Scott Ullrich wrote: > On 4/28/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > &

[pfSense Support] Passive FTP question

2006-04-29 Thread Derrick MacPherson
Do I need a permit on the WAN interface for passive ports? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Passive FTP question

2006-04-29 Thread Derrick MacPherson
Scott Ullrich wrote: On 4/29/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: Do I need a permit on the WAN interface for passive ports? No, the FTP helper automatically installs rules. OK thats what I thought.. I'm seeing this being blocked: WAN x.x.x.x:52336 10.0

Re: [pfSense Support] Passive FTP question

2006-04-29 Thread Derrick MacPherson
Scott Ullrich wrote: On 4/29/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: Scott Ullrich wrote: > On 4/29/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: >> Do I need a permit on the WAN interface for passive ports? > > No, the FTP helper automatically insta

Re: [pfSense Support] Passive FTP question

2006-04-29 Thread Derrick MacPherson
should the ftp helper be handling this block? DMZ 10.0.0.10:20x.x.x.x:55628 TCP - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Passive FTP question

2006-04-29 Thread Derrick MacPherson
ok i've now spun myself to a point of being confused.. can i get a brief discussion of what i need to get ftp working; what changes to the lan and dmz do i need to make? i've ben playing with this too much that i've lost where i'm going with this ---

Re: [pfSense Support] Passive FTP question

2006-04-29 Thread Derrick MacPherson
I just got back home and was taking a quick look at things before bed, and for some reason I'm getting an error loading the rule set exactly -f /tmp/rules.debug /tmp/rules.debug:95: macro 'opt1' not defined /tmp/rules.debug:95: syntax error /tmp/rules.debug:96: macro 'opt1' not defined /tmp/rul

Re: [pfSense Support] Passive FTP question

2006-04-30 Thread Derrick MacPherson
I just got back home and was taking a quick look at things before bed, and for some reason I'm getting an error loading the rule set exactly -f /tmp/rules.debug /tmp/rules.debug:95: macro 'opt1' not defined /tmp/rules.debug:95: syntax error /tmp/rules.debug:96: macro 'opt1' not defined /tmp/rul

Re: [pfSense Support] Passive FTP question

2006-04-30 Thread Derrick MacPherson
I reverted to a ruleset from yesterday; whatever is causing the issue i'm having is really odd. i've taken my failover box and am going to rebuild from scratch On Sun, 30 Apr 2006, Scott Ullrich wrote: cvs_synch.sh again and see if they go away. On 4/30/06, Derrick MacPhers

Re: [pfSense Support] Passive FTP question

2006-04-30 Thread Derrick MacPherson
ocked: WAN 208.181.60.36:61044 10.0.0.10:59825 TCP with passive off: OPT110.0.0.10:20208.181.60.36:50383 TCP Now is there something I've missed, or should this be handled by the ftp helper? On Sun, 30 Apr 2006, Derrick MacPherson wrote: I reverted to a ru

Re: [pfSense Support] Passive FTP question

2006-05-01 Thread Derrick MacPherson
4:58 -0700, Derrick MacPherson wrote: > Hmm. reaset rules set to default > > Added on WAN: > > rules to https to Outlook Web Access (OWA) box > rules for access to Nortel VPN device in the DMZ. > rule to route traffic from mail relay host in dmz to internal > rulle t

[pfSense Support] basic Q

2006-05-02 Thread Derrick MacPherson
why are proxy arps used and not aliases on the interfaces? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

[pfSense Support] system firewall logs

2006-05-02 Thread Derrick MacPherson
How can I find how pass rules are being written the log, yet there's none turned on? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] system firewall logs

2006-05-02 Thread Derrick MacPherson
there isn't one... set loginterface fxp0 set loginterface bge0 set loginterface em0 set loginterface em1 block in log proto tcp from to any port 22 label "sshlockout" On Tue, 2006-05-02 at 18:39 -0400, Scott Ullrich wrote: > On 5/2/06, Derrick MacPherson <[EMAIL PROTE

[pfSense Support] Problems continue

2006-05-04 Thread Derrick MacPherson
I've been having several ongoing problems; passive FTP into the DMZ, logging of pass packets yet I have no logging turned on, and the latest is routing from my internal SMTP server to the external SMTP server. The latest just stopped working for about an hour yesterday, the mail server when ran

Re: [pfSense Support] Problems continue

2006-05-05 Thread Derrick MacPherson
running m0n0wall now with no issues. Not sure why I had issues with pfsense, maybe when it matures some more I can look at it again On Thu, 2006-05-04 at 06:27 -0700, Derrick MacPherson wrote: > I've been having several ongoing problems; passive FTP into the DMZ, > logging of pass pa

Re: [pfSense Support] Problems continue

2006-05-05 Thread Derrick MacPherson
Ya I know, its weird. On Fri, 2006-05-05 at 17:14 +0100, Guilherme Oliveira wrote: > Don't know what is going on but I have the "same" network as you (lan > & dmz) with ftp's, ssh's, smtp, voip, ... in dmz running without > problems. > > On 5/5/06,

Re: [pfSense Support] Problems continue

2006-05-05 Thread Derrick MacPherson
> This is a known problem. Scott and I are working on it with the > ftpsesame developer. Ah, see that's news to me. thanks. now why is that the first time this has been brought up as a posibility? > I realize its tempting to say "well this works for > m0n0wall, so it should work for pfSense",

Re: [pfSense Support] Problems continue

2006-05-05 Thread Derrick MacPherson
On Fri, 2006-05-05 at 14:55 -0500, Gary Buckmaster wrote: > Because we've been working on the problem on IRC since the problem was > first noticed. A lot of little problems (and some big ones) are solved > before they ever make the list. In fact, we had been working on the > problem for quite

Re: [pfSense Support] Problems continue

2006-05-05 Thread Derrick MacPherson
On Fri, 2006-05-05 at 15:52 -0400, Scott Ullrich wrote: > Because these conversations have been taken place on the IRC and it's > Derby Week in my city. I don't work 24*7 you know. You would if you really cared about me Scott. ;) I REALLY appreciate the effort that goes into this, I too underst

Re: [pfSense Support] Problems continue

2006-05-05 Thread Derrick MacPherson
On Fri, 2006-05-05 at 16:10 -0400, Scott Ullrich wrote: > On 5/5/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > You would if you really cared about me Scott. ;) > > What? Thats complete and utter insanity. I am not your babysitter. Sorry, sarcasm and other sentim

Re: [pfSense Support] Problems continue

2006-05-05 Thread Derrick MacPherson
rich wrote: > On 5/5/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > You would if you really cared about me Scott. ;) > > What? Thats complete and utter insanity. I am not your babysitter. > > -

[pfSense Support] ftpsesame problem?

2006-05-09 Thread Derrick MacPherson
IS there any news on the ftpsesame problem that was discussed last week? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] ftpsesame problem?

2006-05-09 Thread Derrick MacPherson
Thanks Scott... Is there anything that I can do to help? On Tue, 2006-05-09 at 11:48 -0400, Scott Ullrich wrote: > On 5/9/06, Derrick MacPherson <[EMAIL PROTECTED]> wrote: > > IS there any news on the ftpsesame problem that was discussed las

[pfSense Support] soekris, console settings.

2006-05-11 Thread Derrick MacPherson
I have a 4801 with laptop hard drive, and when i'm plugged into the console I see the soekris screens, but as soon as it's start to boot off the hdd, it turns to muck.. Is there a specific setting I've missed or not set that will enable me to admin this via the console? -- I put on my robe and

Re: [pfSense Support] soekris, console settings.

2006-05-11 Thread Derrick MacPherson
ya sorry, got it.. it switches to 9600 8n1. On Thu, 2006-05-11 at 17:49 -0700, Derrick MacPherson wrote: > I have a 4801 with laptop hard drive, and when i'm plugged into the > console I see the soekris screens, but as soon as it's start to boot off > the hdd, it turns t