Re: [pfSense Support] Hardware

I second that On 8/12/11 4:39 PM, Steven Sherwood wrote: Care to share with the list what hardware you have selected? :) - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h.

Re: [pfSense Support] hardware suggestions

On 8/3/11 1:29 AM, Nick Upson wrote: On 2 August 2011 17:09, Mehma Sarja <mailto:mehmasa...@gmail.com>> wrote: On 8/2/11 8:22 AM, Nick Upson wrote: ok, I'm close to giving up with installing pfsense 1.2.3 or 2.0rc3 onto the FX5624 harddrive, Do

Re: [pfSense Support] hardware suggestions

On 8/2/11 8:22 AM, Nick Upson wrote: ok, I'm close to giving up with installing pfsense 1.2.3 or 2.0rc3 onto the FX5624 harddrive, Does anyone have suggestions for similiar hardware (6 lan ports, preferably rack mount) that is available in the UK -- Nick Upson (01799 533252) We really need

Re: [pfSense Support] Re: unknown cause of limited throughput

On 7/14/11 12:46 PM, David Burgess wrote: On Thu, Jul 14, 2011 at 11:56 AM, Adam Thompson wrote: Are you passing the VLAN tags all the way into the pfSense VM on a single vNIC, or are you splitting the VLANs at the vSwitch level and passing them into multiple vNICs on the pfSense VM? Adam, Th

Re: [pfSense Support] Backing up config file

On 6/29/11 12:49 PM, Tim Nelson wrote: #!/bin/bash DATESTAMP=`date +%F-%k%M%S` wget -qO /istorage/infrastructure/prod_edgefw03/backup-$DATESTAMP.xml --post-data 'Submit=Download' --user=admin --password='secretpassword' --no-check-certificate"http://HOSTNAME/diag_backup.php"; Had to twiddle a

[pfSense Support] Backing up config file

Have not seen this discussed before that I recall... Is there a way to periodically export, automatically, the config file? Specifically, without mounting or rsync-ing. What I have in mind is an email notice to someone on the LAN. So, I can can periodically back it up. Mehma -

Re: [pfSense Support] Strange TCP connection behavior 2.0 RC2 (+3)

On 6/28/11 3:34 AM, Eugen Leitl wrote: - Forwarded message from Jérôme Nicolle - This is a well known issues called "Long Fat Pipe Network". I'd be talking to switch makers like Juniper - they might have aggregators-to-make-fatter-pipe technology. Although your case is the opposite.

Re: [pfSense Support] Remote Admin of pfSense via ssh

On 5/19/11 4:06 AM, Per von Zweigbergk wrote: On 2011-05-19 12:41, Mehma Sarja wrote: Never had the need nor opportunity to admin a box remotely - so this question may be as trivial as ssh in and maintain pf.conf and config.xml. Any experiences? Trying to maintain config.xml over SSH is not

[pfSense Support] Remote Admin of pfSense via ssh

Never had the need nor opportunity to admin a box remotely - so this question may be as trivial as ssh in and maintain pf.conf and config.xml. Any experiences? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For addition

Re: [pfSense Support] Blocking Windows Machines

On 5/5/11 9:11 AM, Yehuda Katz wrote: On Thu, May 5, 2011 at 11:56 AM, Karl Fife > wrote: To prevent 'automatic' configuration of routers, pfSense DHCP can be configured trivially to only issue DHCP leases to known hosts (based on mac address), but naturall

[pfSense Support] Blocking Windows Machines

Is there a simple way to block access to a windows machine? I'm setting up a network in a remote, far away location and will have little physical control. I want to control/stop people from sticking a wifi router and connecting windows machines to the network. Mehma --

Re: [pfSense Support] A REALLY Simple Question, Really

then the developers have made a great mistake in coding as console is the last thing you want to do (since cable and serial port is not always readily available) Regards, On Fri, Apr 29, 2011 at 8:15 PM, Mehma Sarja <mailto:mehmasa...@gmail.com>> wrote: On 4/29/11 2:05 PM, Y

Re: [pfSense Support] A REALLY Simple Question, Really

On 4/29/11 2:05 PM, Yehuda Katz wrote: On Fri, Apr 29, 2011 at 4:49 PM, Mehma Sarja <mailto:mehmasa...@gmail.com>> wrote: Alix running pf 20 RC1 nano. Trying to change from default 192.168.1.x network to 192.168.100.x on the LAN interface - nothing fancy. WHAT I DID

[pfSense Support] A REALLY Simple Question, Really

Alix running pf 20 RC1 nano. Trying to change from default 192.168.1.x network to 192.168.100.x on the LAN interface - nothing fancy. WHAT I DID With DHCP enabled and serving on 192.168.1.x, tried to change LAN ip using the web GUI. I can guess why it does not work - DHCP is trying to serve on

[pfSense Support] Firewall service as a business?

Does anyone offer pfsense firewall as a service? If so, what are the charges and details? I am thinking for a 5 person Law office or 7 person doctor's office. Mehma - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For

Re: [pfSense Support] 2.0 Web UI Unresponsive

Jim, I did not want to post on the lists but do you have blocks enabled on private networks and bogon networks? Mehma - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfs

Re: [pfSense Support] FreeBSD Lost Track of Drive During Upgrade [WAS: Re: pfSense Support] Re: List Posting Etiquette [WAS: Re: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout]

On 3/10/11 1:07 PM, Chris Buechler wrote: On Thursday, March 10, 2011, Mehma Sarja wrote: On 3/10/11 11:33 AM, Chris Buechler wrote: Based on your screenshot, that has no relevance. The screenshot shows you're booting from CD, likely a USB CD drive, which is slow initializing and you ne

Re: [pfSense Support] FreeBSD Lost Track of Drive During Upgrade [WAS: Re: pfSense Support] Re: List Posting Etiquette [WAS: Re: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout]

On 3/10/11 11:33 AM, Chris Buechler wrote: Based on your screenshot, that has no relevance. The screenshot shows you're booting from CD, likely a USB CD drive, which is slow initializing and you need to pick the "boot from USB" option at the first boot menu. To be clear: When I boot off a live pf

Re: AW: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

On 3/5/11 1:02 AM, Ermal Luçi wrote: On Sat, Mar 5, 2011 at 4:44 AM, Kevin Tollison wrote: Very similar setup here D510 4GB RAM using amd64 version. This box gave trouble first. The HDD was a standard 160GB 3.5" SATA. I have since installed a 40GB Intel SSD The other is a D525 2GB RAM and a

Re: [pfSense Support] Network usage monitoring

On 3/7/11 3:34 AM, Shali K.R. wrote: Dear all, i need to monitor live bandwidth usage by the lan clients what packages need to be installed??? rate - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional comm

Re: AW: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

On 3/4/11 7:09 PM, Kevin Tollison wrote: 2 B5 was good until a month or so ago. Are you using any vlans? I am beginning to think it may be in vlans. Don't use vlans. I tried upgrading with and without my packages (snort, country block, DNS blacklist, rate and notes) - same effect. I thought

Re: AW: [pfSense Support] Re: Intel Gigabit - em0: Watchdog Timeout

On 3/4/11 2:34 PM, Kevin Tollison wrote: Is anyone experiencing traffic to stop passing when these errors happen. My boxes are Supermicro with Intel gig NICs. They randomly start and stop passing traffic. Console is still functional when it happens. Yep - when trying to move to RC1. I'm on a su

[pfSense Support] Country Block and Snort Work on 2.0?

Anyone have BOTH these working on a 2.0 system? Mehma - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

[pfSense Support] Must Have Snort Categories?

WAN This is on a home network. On WAN interface, I want to share what categories I am blocking in hopes of someone pointing out an obvious, glaring omission and in hopes of others sharing their 'tweaks.' There is no real logic to these selections except they sound nice to block on the WAN inte

Re: [pfSense Support] Problems with Country Block 0.2.0

On 2/14/11 10:27 AM, Carlos Vicente wrote: [snip] I removed the package, reinstalled it, boot the box, etc. but the problem mantains. Carlos, I posted my adventures with Country block a few days ago. Encountered the same problem as you, although I am not on 2.0. Here is what solved my prob

Re: [pfSense Support] Country Block WORKING!

Just want to share a small success - in case your Countryblock install stops working. Please try the following procedure. a. delete the package b. delete /tmp/pkg_mgr_Country Block.log file c. reinstall the package and follow the country-selection-and-enable-the-block process Mehma

[pfSense Support] Country Block Not Working on pf 123 NOW CALLED Country Block Not Installing on pf 123

I did not think of checking for the service. And now I cannot get it to install. Users please beware of this - do not reinstall the package. Mehma - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional command

Re: [pfSense Support] Country Block Not Working on pf 123

On 1/30/11 6:41 AM, rachidy osman wrote: I am suspecting javascript or your browser security settings to not sending the control commands correctly...try different other browsers and ensure javascript and activex are enabled on them As I reinstalled the package I now see that it never shows

Re: [pfSense Support] Country Block Not Working on pf 123

On 1/30/11 6:41 AM, rachidy osman wrote: I am suspecting javascript or your browser security settings to not sending the control commands correctly...try different other browsers and ensure javascript and activex are enabled on them I'm on a Mac - so no Activex, java script is selected in Op

[pfSense Support] Country Block Not Working on pf 123

It does not start. Tried reinstalling the package with the same results. Anybody else has same problem? Mehma - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

We were talking about that - however, I have only fiddled around with a test system. I'll muster up the courage to do that on the now operational firewall D510 Supermicro one of these days. Mehma === On Fri, Dec 17, 2010 at 11:19 AM, Eugen Leitl wrote: > > I thought we were talking about the Sup

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

Kuhlmann wrote: > On Wed 17 Nov 2010 22:53:11 NZDT +1300, mehma sarja wrote: > > > Disable the fan? How? I'm just curious. > > You use a screwdriver to take the case lid off, and if the fan doesn't > have a 2- or 3-pin plug to pull off you use a pair of sidecutters to > d

[pfSense Support] dmesg of Supermicro Atom D510 with SSD drive

Copyright (c) 1992-2009 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 7.2-RELEASE-p5 #0: Sun Dec 6 23:20:31 ES

Re: [pfSense Support] LCD driver for TEAK 3035S

Ffhfgfvx Fghfufgjcjgdgvdgytyttybfhfggfhgfuchfuhy On Nov 22, 2010, at 2:46 PM, Gavin Spurgeon wrote: Try to find out what sort of emulation the screen uses, most likely it will use one of the existing drivers for output. I have found on the back of the LCDs PCB 'SC2002D rev1' so

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

On Wed, Nov 17, 2010 at 1:23 AM, Eugen Leitl wrote: [snip] > The only fan there is in the power supply. You can probably operate it > open, and disable the fan so the power supply will cool by convection > with no ill effects. > Disable the fan? How? I'm just curious. Mehma

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

To share my experience with the list... I decided to go with the super micro bare bones system with the ipmi MB - Atom 510. It is maxed with 4 GB memory and a 32 GB Patriot Torqx TR8 SSD. It's been a few days now - running pf 2.0. I'll take it live and then report my experiences. So far, this box

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

FYI People, So, the long decision road came to it's end. Thanks to the group who spent many a message with me. Ordered SYS-5015A-PHF from newegg last night. It is an opened box and the price was reasonable(243 delivered). I wanted the PHF one cuz the MB has IPMI on it. I'll report back to the

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

On 10/17/10 2:40 AM, Seth Mos wrote: [snip] http://www.lannerinc.com/Embedded_Systems/FW-7535 [snip] QUOTE FW-7535B - Intel Pineview-D 510 1.6GHz CPU + ICH8-M, 6 GbE ports ,1 x Mini PCI Expansion Slot (thru USB interface), with fan, With 1 pair bypass, $416 CONTACT Yasmeen Tan, Lanner Ele

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

On 10/17/10 2:40 AM, Seth Mos wrote: Op 16-10-2010 19:38, Glenn Kelley schreef: does anyone now a US based vendor for these items? their website lists a US phone number, perhaps that is a good starting point? http://www.lannerinc.com/Embedded_Systems/FW-7535 I have a message in to them and

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

On 10/16/10 12:54 PM, Jeppe Øland wrote: On Sat, Oct 16, 2010 at 11:19 AM, Mehma Sarja wrote. [snip] * mother board - Supermicro MBD-X7SPA-HF-O, You probably only want the X7SPA-H since you won't need the Matrox GFX Ok, so a savings of 44 on the mb There are lots and lot

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

US Vendors for fanless/ssd: $208 mb + $79 case + $90 ssd intel 40 GB + $83 4 GB mem = $460 * mother board - Supermicro MBD-X7SPA-HF-O, http://www.newegg.com/Product/Product.aspx?Item=N82E16813182234 * case - M350 SILVER Enclosure, WITH PICOPSU-80 and 60W ADAPTER KIT, http://www.mini-box.com/M

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

On 10/15/10 2:27 PM, Jeppe Øland wrote: [snip] HDDs work in the fanless cases as well ... you just have to make sure the case is not covered and in a reasonably well ventilated area. This is getting interesting, someone on the list mentions that 2.5" drives are not reliable for 24x7x365 sit

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

On 10/14/10 2:57 PM, Eugen Leitl wrote: On Thu, Oct 14, 2010 at 02:41:10PM -0700, Mehma Sarja wrote: So the current comparison is between a fanless enclosure and a supermicro atom server. Let's leave off the drive and memory for now. You will need some minimal air flow, especial

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

On 10/14/10 1:38 PM, RB wrote: On Thu, Oct 14, 2010 at 12:22, Mehma Sarja wrote: [snip] I researched an earlier post of "SUPERMICRO MBD-X7SPE-H-O Mini ITX Intel [snip] I'm a big fan of the Jetway barebones cases, [snip] The Atom Jetway, 512M of memory, a SATA/CF adapter an

Re: [pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

So the current comparison is between a fanless enclosure and a supermicro atom server. Let's leave off the drive and memory for now. I'll probably spring for a SSD as suggested. Do I need 4 GB memory or 2... I don't know as yet. * A minibox.com fanless enclosure with external 80 watt ps runs

[pfSense Support] Enclosure recommendations for a Mini ITX Motherboard

I've been following the hardware threads comparing embedded versus more horsepower systems and came to the conclusion that I'd stick with my embedded Alix board because it is stable and low-power. Recently, however, I am seeing botnet attempts, reported via OpenDNS, against my home network. So,

[pfSense Support] Large Files ftp package?

Recently, I've had to experience the slight nuisance of sending many files to someone over the tubes. Yes, I resorted to email - which bounced and then had to split the transfer into three emails. Everytime this happens, I want to find a more elegant solution. Does pfsense have a package which

Re: [pfSense Support] PFsense 2.0 roadmap

On 9/8/10 10:42 AM, Tonix (Antonio Nati) wrote: Thanks... I see no dates at all. | When stable version is planned to be released? Tonino [snip snip] The release will happen when it's ready, but hopefully that translates to sometime later this year. Jim This "when is 2.0 being released

[pfSense Support] Does 123 Show Internal LAN Traffic Speeds?

While cloning a laptop to a samba file server across my internal LAN, The Traffic Graph on the LAN interface shows no activity. I have a simple home setup with one WAN and one LAN interface. Am I thinking about this the wrong way? Mehma

Re: [pfSense Support] How to apply rule on pfsense 1.2.3 to block pornography sites

Either DNS blacklist package or via opendns.com account. Mehma --- On May 23, 2010, at 5:08 PM, Joseph Rotan wrote: Hi, I'm setting up a firewall for a high school but the school management requested that students should not able to access pornography sites, currently i have enabled

Re: [pfSense Support] embedded devices

Thanks for the links Chris, I have realized my desire to use some heavy packages will not be satiated by an embedded system. Mehma === On Mon, Feb 15, 2010 at 11:02 PM, Chris Buechler wrote: > On Tue, Feb 16, 2010 at 1:28 AM, mehma sarja wrote: > >> I bought an Alix board (500 Mhz

Re: [pfSense Support] embedded devices

> > I bought an Alix board (500 Mhz, 256 MB RAM and 2 ethernet ports) a couple > of years ago from netgate.com and am happily running 1.2.3 on it. I paid > about two and a quarter and am wondering two things: > a. Are there faster embedded flash systems out there? b. Are there less expensive sour

Re: [pfSense Support] Bottleneck for some reason?

Does the default 1 states under system|advanced limit speed at some point? Mehma === On Fri, Feb 5, 2010 at 1:30 AM, Tortise wrote: > - Original Message - From: "Robert Mortimer" < > rmorti...@bluechiptechnology.co.uk> > To: > Sent: Friday, February 05, 2010 10:20 PM > > Subject: R

Re: [pfSense Support] how does one test for stability?

will get some info - not all. Mehma === On Mon, Feb 1, 2010 at 2:08 PM, Vick Khera wrote: > On Mon, Feb 1, 2010 at 4:50 PM, mehma sarja wrote: > > It would be neat to have a cron job reporting certain parameters > conveying > > how a pfsense is running. I use to work at a com

Re: [pfSense Support] blocking bradcast

You seem to be asking how to stop the generation of the packet? Mehma === On Tue, Feb 2, 2010 at 6:41 AM, Zhu Sha Zang wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I'm receiving a lot of this typo of messages in my wan: > > 1. 692357 rule 39/0(match): block in on re0: 0.0.0.0.68 >

Re: [pfSense Support] how does one test for stability?

It would be neat to have a cron job reporting certain parameters conveying how a pfsense is running. I use to work at a company managing a hundred and a quarter FreeBSD appliances and we had a custom Control Center webpage where we could track all machines easily. As I recall, this is what it had:

Re: [pfSense Support] how does one test for stability?

How many walls do you have? Mehma === On Mon, Feb 1, 2010 at 2:13 AM, Michel Servaes wrote: > > > > Web surfing happens on port 80 and tcp only. There should be no udp port > 80 > > traffic going out. I think I read it in the pfsense book which just came > > out. > > > > > > Didn't read it yet

Re: [pfSense Support] how does one test for stability?

Michel, Web surfing happens on port 80 and tcp only. There should be no udp port 80 traffic going out. I think I read it in the pfsense book which just came out. I am suspecting type of traffic also. Tried controlling per IP states to 20, 30 , 50 and it seems that is not the solution. I am floore

[pfSense Support] how does one test for stability?

I suspect my Alix embedded appliance (500 MHz 586 class with 256 MB RAM) is getting maxed out via either heat or traffic. a. Don't have any "active" packages installed - just "Backup" b. Have 11 entries in DNS Forwarder for my internal network c. Doing OpenDNS d. Have a VPN defined although I h

Re: [pfSense Support] Upgrade from 1.2.3 to 2.0

And tell us how the upgrade went. Mehma === On Thu, Jan 28, 2010 at 7:31 AM, Juergen Adolph wrote: > Hi, > > for the time I use pfsense 1.2.3 on a alix with a 4GB CF card. > Now, I will upgarde to 2.0 Beta. which file is the right: > pfSense-2.0-BETA1-2g or pfSense-Full-Update-2.0-BETA1? > > th

[pfSense Support] Packet Capture and Package Rate Discrepancy

Just installed package "rate" and I am seeing a DHCP LAN IP that "rate" shows but packet capture does not. It pops up once every 5 minutes for a couple of seconds and disappears. I have not assigned it and I don't know what could be using that IP. Mehma

Re: [pfSense Support] How to read rrd quality graphs

Daniel, That does help - thanks. The ms/% thing threw me on the Y axis. I'll look into what a 1 or 2 second latency means. Mehma === On Wed, Jan 6, 2010 at 2:20 PM, Daniel Lloyd wrote: > > > On Tue, Jan 5, 2010 at 9:49 PM, mehma sarja wrote: > >> PROBLEM >> On

[pfSense Support] How to read rrd quality graphs

PROBLEM On most evenings around 9 pm, I get service dropouts and accompanying packet loss. I literally see chopping in traffic graphs. Some nights, we just give up and go to bed. Tonight it is fine. It is probably Verizon's DSL card getting too much use. However, this highlights my inability to fu

[pfSense Support] What I can do with my appliance

I have an Alix appliance with 256 MB memory. Added an 8 GB cf card and upgraded the firmware. I just wanted to take stock of how far I have come with this little power sipper and pfSense in a short few days since the book came out. I have: a. setup DNS forwarding and my LAN machines are now happy

Re: [pfSense Support] Is your embedded pfsense stable?

64GB SSD is under a hundred bucks now and it seems a fanless REGULAR system (Atom 323) is do-able which should make for an awesome pfsense application. Any Atom smashers out there? Mehma ===

Re: [pfSense Support] Is your embedded pfsense stable?

This begs the question what can snort be run on? As I experienced, the pig fended off 2 intrusions - something in the porn arena - during the first few hours. That's pretty useful.

[pfSense Support] Is your embedded pfsense stable?

*1.2.3-RC3, nanobsd on a Netgate Alix board with 256 MB RAM and a 8GB CF card. The firmware and all have been updated. Have been playing around with this box as a firewall for the last couple of weeks. Then I did the unthinkable and ventured out of my comfort shell. Installed DNS Blacklist, Snort

Re: [pfSense Support] Booting from CF, full install

ana giaourti > > > > > On Wed, Nov 18, 2009 at 4:31 AM, wrote: > >> >> >> >> >> *Fra:* mehma sarja [mailto:mehmasa...@gmail.com] >> *Sendt:* 18. november 2009 07:36 >> *Til:* support@pfsense.com >> *Emne:* Re: [pfSense Suppor

[pfSense Support] Can anyone compare pfsense to zeroshell?

I am trying to decide between the two.

Re: [pfSense Support] Booting from CF, full install

Anders, Hold off on that drive, please try to upgrade the firmware first. I seem to recall getting that same error. Something in my old age has forced me to start reading the documentation and my Alix board had .99 and not .99 firmware version. I tried forcing a new version of s/w on cf card and