Re: [pfSense Support] openvpn: client side uses address pool ip rather than subnet ip

2011-01-20 Thread Scott Ullrich
On Thu, Jan 20, 2011 at 4:09 PM, mayak-cq wrote: > My Lord, > > You're a genius! > > Nuking the the interface declaration solves it!! > > Intermediate solution yes, but a solution nonetheless! Amen! Scott - To unsubscribe, e-ma

Re: [pfSense Support] Snapshot Build Logs

2010-12-15 Thread Scott Ullrich
On Wed, Dec 15, 2010 at 2:33 PM, Yehuda Katz wrote: > Is there a reason the i386 build log uses EST and the AMD64 log uses UTC? > - Yehuda Is there a reason? No. I just fixed it, however. In this day and age a lot of us have gotten used to GMT and didn't even think twice about it. Scott ---

Re: HA: Re: HA: Re: [pfSense Support] 2.0 - don't work Ipsec!

2010-12-15 Thread Scott Ullrich
On Wed, Dec 15, 2010 at 12:11 PM, Moshe Katz wrote: > And the other side of the > coin: http://bsd.slashdot.org/story/10/12/15/1524202/BSD-Coder-Denies-Adding-FBI-Backdoor > Moshe Here is more information on this situation. http://maycontaintracesofbolts.blogspot.com/2010/12/openbsd-ipsec-backdoo

Re: [pfSense Support] SSD partition alignment in 2.0

2010-08-16 Thread Scott Ullrich
On Mon, Aug 16, 2010 at 2:03 PM, Scott Ullrich wrote: > That is a good question.   The 2.0 installer uses pc-sysinstaller > which I am not entirely sure if it takes into account this or not. Sorry, I meant 2.1 here, not 2.0. > However I am looking at adding this utility to the pc-sys

Re: [pfSense Support] SSD partition alignment in 2.0

2010-08-16 Thread Scott Ullrich
On Sat, Aug 7, 2010 at 1:07 PM, David Burgess wrote: > Is the 2.0 installer aware of 4k sector discs, and does it align its > partitions accordingly? > > I realize better SSD controllers have minimized the effects of > partition boundary misalignment, but I still prefer to introduce as > little en

Re: [pfSense Support] no packages for 2.0

2010-04-19 Thread Scott Ullrich
On Mon, Apr 19, 2010 at 3:31 PM, David Burgess wrote: > On Mon, Apr 19, 2010 at 1:29 PM, Jim Pingle wrote: > > > It's probably looking for a package file that doesn't exist. Did this > > ever work before? > > It's the first time I've tried PFS on 64-bit. > > > I'm not sure if there are any 64-bi

Re: [pfSense Support] 1.2.3: dnsmasq and mac os x 10.6 snow leopard

2010-03-01 Thread Scott Ullrich
On Mon, Mar 1, 2010 at 2:38 AM, Aarno Aukia wrote: > Hello, > > I just found out my new mac os x 10.6 snow leopard machine seems to > have problems with DNS TTL 0, dnsmasqs default TTL for local entries > (http://www.mac-forums.com/forums/os-x-operating-system/164649-snow-leopard-keeps-dropping-dn

Re: [pfSense Support] 1.2 to 1.2.3 upgrade

2010-02-19 Thread Scott Ullrich
On Fri, Feb 19, 2010 at 10:01 AM, wrote: > Please call me 416 479 0606 > Pardon us but who is supposed to call you? Scott

Re: [pfSense Support] How to forward protocol 41

2010-02-11 Thread Scott Ullrich
On Thu, Feb 11, 2010 at 8:37 PM, Nathan Eisenberg wrote: > I'd argue that it is the role of the user to advocate for desired features, > regardless of what price was paid for the software.  The fact that IPv6 > support doesn't seem to be finished yet is an issue that gains significance > every

Re: [pfSense Support] OpenBGPd package on 1.2.3-release

2010-01-31 Thread Scott Ullrich
On Fri, Jan 29, 2010 at 11:03 AM, Aarno Aukia wrote: > Thanks for committing, Committed. Thanks for submitting. Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfse

Re: [pfSense Support] OpenBGPd package on 1.2.3-release

2010-01-28 Thread Scott Ullrich
On Thu, Jan 28, 2010 at 10:57 AM, Aarno Aukia wrote: > Hello, > > bgpd is started twice when booting on 1.2.3-release with the newest > package. I suspect once from /usr/local/pkg/openbgpd.inc and once from > /usr/local/etc/rc.d/bgpd.sh ? When commenting out the exec("bgpd") in > /usr/local/pkg/op

Re: [pfSense Support] 1:1 NAT - bind actual external IP to an optional interface?

2010-01-09 Thread Scott Ullrich
On Sat, Jan 9, 2010 at 5:39 PM, Chris Buechler wrote: > Yes but: > http://forum.pfsense.org/index.php/topic,21606.0.html That and the fact that our snapshot server is up and down (currently DOWN) due to bad hardware. It will be swapped out in the next coming days. Scott --

Re: [pfSense Support] which image?

2010-01-05 Thread Scott Ullrich
On Tue, Jan 5, 2010 at 11:02 AM, David Newman wrote: > Greetings. I'd welcome recommendations for which pfSense image to > install on this system, which currently runs OpenBSD: > > Nexcom 1563 > VIA 667-MHz CPU > 512 Mbytes RAM > 512-Mbyte disk-on-chip (not CF) storage > 3 x 100Base-T Ethernet > >

Re: [pfSense Support] Virtual IP ProxyARP vs. CARP

2009-12-16 Thread Scott Ullrich
On Wed, Dec 16, 2009 at 7:14 PM, Trevor Benson wrote: > I noticed that when creating a CARP virtual that it requires it to be > attached to an interface with the same network.  However when creating a > proxy arp, it does not have this requirement.  Wouldn't it be logical to > allow them to hav

[pfSense Support] Watch Chris and myself on FLOSS Weekly Live at 4:30 PM EDT

2009-12-16 Thread Scott Ullrich
http://live.twit.tv Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

Re: [pfSense Support] Disable plugin via ssh

2009-12-14 Thread Scott Ullrich
On Mon, Dec 14, 2009 at 4:07 PM, Glenn Kelley wrote: > We have a plugin that is acting up quite a bit suddenly (snort) > on reboot the system works for a few minutes - but then nothing > > We cannot gain access to the web interface @ all. > > Does anyone know how to disable a plugin via ssh ? > >

Re: [pfSense Support] NanoBSD on WRAP

2009-12-14 Thread Scott Ullrich
On Sun, Dec 13, 2009 at 7:49 PM, Ugo Bellavance wrote: > Hi, > > http://doc.pfsense.org/index.php/NanoBSD_on_WRAP > > Has someone done the first step what would be kind enough to put the > resulting image available for download?  I worked a few hours on this before > discovering that article, and

Re: [pfSense Support] OpenBGPD status page

2009-12-12 Thread Scott Ullrich
On Fri, Dec 11, 2009 at 7:26 PM, Evgeny Yurchenko wrote: > I know it is cosmetic but it is easy to fix, please do it. > > 1) Status has two "OpenBGPD Routing" sections, one of them should be renamed > to "Forwarding" as it shows fib not rib. > 2) "OpenBGPD IP" section returns error > > missing arg

Re: [pfSense Support] pfSense 1.2.3 release now available!

2009-12-11 Thread Scott Ullrich
On Fri, Dec 11, 2009 at 1:22 PM, Oliver Hansen wrote: > Sorry if I'm missing it somewhere but is there a changelog between 1.2.3-RC3 > and 1.2.3-RELEASE? The notes in the blog post seem to reference anything > that changed since 1.2.2. Complete list of changes is here: https://rcs.pfsense.org/pro

Re: [pfSense Support] Issue upgrading from 1.2.3-RC3 to RELEASE

2009-12-10 Thread Scott Ullrich
On Thu, Dec 10, 2009 at 7:12 PM, Chris Buechler wrote: > I don't believe there were any changes between RC3 and release though? >  It's been a while since the image size changed. Yes, there where a couple NanoBSD fixes. One in particular was on Thu Sep 10 18:50:55 2009 -0400 Scott

Re: [pfSense Support] Issue upgrading from 1.2.3-RC3 to RELEASE

2009-12-10 Thread Scott Ullrich
On Thu, Dec 10, 2009 at 7:04 PM, mitch wrote: > Same error I'm afraid, status at top says something went wrong updating the > fstab entry, > > Log still reports same error message. Please see my response here: http://forum.pfsense.org/index.php/topic,20347.msg108712.html#msg108712 In a nutshell,

Re: [pfSense Support] 1.2.3-RC3 PPPoE

2009-12-10 Thread Scott Ullrich
On Thu, Dec 10, 2009 at 6:54 PM, RB wrote: > Well, for posterity's sake then: if you have trouble in > pfSense/FreeBSD with traffic not passing through an Intel 10/100 NIC > (fxp), particularly when return/inbound packets aren't showing up in > mpd or another user-level program, turn off TCP Offlo

Re: [pfSense Support] 1.2.3-RC3 PPPoE

2009-12-10 Thread Scott Ullrich
On Thu, Dec 10, 2009 at 1:21 PM, RB wrote: > On Thu, Dec 10, 2009 at 10:29, Tim Dressel wrote: >> For me the issue was exactly like you are describing. Can connect and >> everything appears OK, but just zero traffic flow. Nothing useful in logs. >> Then all of a sudden it would start passing traf

Re: [pfSense Support] Re: PFsense + Load Balance + Squid

2009-12-04 Thread Scott Ullrich
On Fri, Dec 4, 2009 at 3:58 PM, Rafael Cristian wrote: > Thank you. > But is version 2.0 now is available Yes, but it is alpha-alpha (soon to be alpha): http://snapshots.pfsense.org/ Scott - To unsubscribe, e-mail: support

Re: [pfSense Support] PFSense advocacy

2009-12-02 Thread Scott Ullrich
On Wed, Dec 2, 2009 at 4:26 PM, Ron García-Vidal wrote: > I realize this is a support forum, so if there is a better place to post > this, I will take it there. > > So, I'm trying to get a pfsense box in the shop because I've enjoyed working > with it on my own setup.  The boss is fairly open-mind

Re: [pfSense Support] Migrate from Embedded

2009-11-24 Thread Scott Ullrich
On Tue, Nov 24, 2009 at 6:59 PM, Joseph L. Casale wrote: > I have a machine that was setup as embedded but now we need packages > functional so I need to migrate it to install based. Given it's the very > same server, can I simply restore the xml config from the embedded install > w/o issue? Extr

Re: [pfSense Support] throughput, haproxy

2009-11-21 Thread Scott Ullrich
On Sat, Nov 21, 2009 at 6:12 AM, Lenny wrote: > Scott, > > Does it have to be 1.2.3? Because I have 1.2.2 installed right now. > Should I upgrade before that? yes, we are moving on to 1.2.3 shortly and 1.2.2 is fading into the sunset. Scott --

Re: [pfSense Support] throughput, haproxy

2009-11-19 Thread Scott Ullrich
On Thu, Nov 19, 2009 at 12:35 PM, Scott Ullrich wrote: > OK, give me a bit to get it ready.   Should be back to you in a couple hours. Lenny, First of all make sure you backup your configuration and have installation media handy (just in case). Run this from a shell (option 8): fetch -o /b

Re: [pfSense Support] throughput, haproxy

2009-11-19 Thread Scott Ullrich
On Thu, Nov 19, 2009 at 12:07 PM, Lenny wrote: > I sure would. > Thanks. OK, give me a bit to get it ready. Should be back to you in a couple hours. Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For addition

Re: [pfSense Support] throughput, haproxy

2009-11-19 Thread Scott Ullrich
On Thu, Nov 19, 2009 at 2:27 AM, Lenny wrote: > > # iperf -c 2.2.2.11 -t 1200 -i 10 -w 75000 > > > > Client connecting to 2.2.2.11, TCP port 5001 > TCP window size: 73.5 KByte (WARNING: requested 73.2 KByte) > ---

Re: [pfSense Support] PFI w/ floppy

2009-11-12 Thread Scott Ullrich
On Thu, Nov 12, 2009 at 7:34 PM, Joseph L. Casale wrote: > Does the PFI work with a floppy? I tried it, but saw  a read error for the > floppy but I am sure there is nothing wrong with the floppy, is it just not > supported? It should work if it is formatted as MS-DOS. Or at least it did previou

Re: [pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread Scott Ullrich
On Thu, Nov 12, 2009 at 6:08 PM, luismi wrote: > As far as I see right now in the web: live support is offline Looks online here: https://portal.pfsense.org/ Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For a

Re: [pfSense Support] varnish proxy in pfsense?

2009-11-11 Thread Scott Ullrich
On Wed, Nov 11, 2009 at 10:21 AM, Rainer Duffner wrote: > varnish also works in 32bit FreeBSD. > At least for test-purposes, it did for me. > You have to limit the amount of RAM it grabs, though, or it will crash > immediately. Even with enough memory it can cause a deadlock on FreeBSD... been th

Re: [pfSense Support] varnish proxy in pfsense?

2009-11-11 Thread Scott Ullrich
On Wed, Nov 11, 2009 at 9:57 AM, Paul Mansfield wrote: > I'd be very interested if there was a project to add varnish reverse proxy > to pfsense. It claims to be both linux and freebsd compatible. > > http://varnish.projects.linpro.no/ > > One could of course hack it in manually but having it as e

Re: [pfSense Support] throughput, haproxy

2009-11-10 Thread Scott Ullrich
On Tue, Nov 10, 2009 at 1:50 AM, Lenny wrote: > Lenny wrote: > > Scott Ullrich wrote: > > On Mon, Nov 9, 2009 at 3:45 PM, Scott Ullrich wrote: > > > Contact me off list.  I have a kernel I need you to test. > > > In the meantime, please try increasing these sy

Re: [pfSense Support] throughput, haproxy

2009-11-10 Thread Scott Ullrich
On Tue, Nov 10, 2009 at 1:50 AM, Lenny wrote: > At second thought, to get rid of the errors I told you about, I did 2 > things: > added this to /boot/loader.conf: > hw.em.rxd="4096" > hw.em.txd="4096" > > and added to /etc/sysctl.conf: > dev.em.0.rx_processing_limit=1000 > dev.em.1.rx_processing_l

Re: [pfSense Support] throughput, haproxy

2009-11-09 Thread Scott Ullrich
On Mon, Nov 9, 2009 at 3:45 PM, Scott Ullrich wrote: > Contact me off list.  I have a kernel I need you to test. In the meantime, please try increasing these sysctl's: pfSense:~# sysctl -a | grep rx_processing_limit dev.em.0.rx_processing_limit: 100 dev.em.1.rx_processing_limit: 100

Re: [pfSense Support] throughput, haproxy

2009-11-09 Thread Scott Ullrich
On Mon, Nov 9, 2009 at 12:41 AM, Lenny wrote: > Now I'm totally lost:( > > I had this long thread this year on this issue here and eventually the only > thing the guys could advise me is to buy a newer server. I did.  And while I > do see an improvement in performance (it's about twice it was befo

Re: [pfSense Support] snort issue w/ memory

2009-11-08 Thread Scott Ullrich
On Sun, Nov 8, 2009 at 5:39 PM, Glenn Kelley wrote: > Any clue how to remove an ip that is blocked w/o having the gui ? > We uninstalled but still have some IP's blocked - > Reinstalled - same thing Try /usr/local/sbin/expiretable -v -t 1 virusprot Scott

Re: [pfSense Support] snort issue w/ memory

2009-11-08 Thread Scott Ullrich
On Sat, Nov 7, 2009 at 9:53 PM, Glenn Kelley wrote: > No such luck > > Scott - if it helps - you guys had us (via paid support) upgrade to the rc > version due to BGP implementation BTW: did the error message change after reinstalling the package with my changes? Scott -

Re: [pfSense Support] snort issue w/ memory

2009-11-08 Thread Scott Ullrich
On Sat, Nov 7, 2009 at 9:53 PM, Glenn Kelley wrote: > No such luck > > Scott - if it helps - you guys had us (via paid support) upgrade to the rc > version due to BGP implementation Thanks, I will forward this to the snort maintainer. Maybe he can help. Scott --

Re: [pfSense Support] snort issue w/ memory

2009-11-07 Thread Scott Ullrich
On Fri, Nov 6, 2009 at 10:57 PM, Glenn Kelley wrote: > Grace and Peace Friends: > In Snort we are seeing the following: > Fatal error: Allowed memory size of 33554432 bytes exhausted (tried to > allocate 74957108 bytes) in /usr/local/pkg/snort.inc on line 1488 > When we attempt to see if there are

Re: [pfSense Support] why delete captive portal accts on expiry?

2009-10-09 Thread Scott Ullrich
On Fri, Oct 9, 2009 at 1:23 PM, Pete Boyd wrote: > Why are captive portal accounts automatically deleted when they expire? > > To my mind, it would be more useful if they were left in place, but expired, > so that to re-enable them for the admin person was an easy task of just > choosing a new exp

Re: [pfSense Support] Strange DNS problem

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 9:00 PM, Philippe LeCavalier wrote: > Hi Everyone, > > As of late, pfsense somehow maps dns entries intended for remote hosts to > my local samba server. When I try to SSH to a clients network I'm logged > into my office file server. I'm not sure what else to write here so

Re: [pfSense Support] Block rule creates syntax error

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 6:58 PM, Joseph L. Casale wrote: > I all of a sudden am getting syntax errors in the logs which I don't recall > seeing before with respect to a few generic block rules I have on an opt > interface. > > Action: Reject > Interface: OPT2 > Protocol: Any > Source: Any > Destina

Re: [pfSense Support] CARP switchover to backup because of high traffic

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 12:51 PM, Evgeny Yurchenko wrote: > Yes, sorry. It was about 100Mb/s During heavy load what does this sysctl show? sysctl net.inet.ip.intr_queue_drops Scott - To unsubscribe, e-mail: support-unsubscr...@

Re: [pfSense Support] CARP switchover to backup because of high traffic

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 11:42 AM, Evgeny Yurchenko wrote: > Thanks I will. 20 Mbit/s is nothing though... I agree but you failed to mention how much traffic you are pushing. Scott - To unsubscribe, e-mail: support-unsubscr...@pf

Re: [pfSense Support] CARP switchover to backup because of high traffic

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 11:24 AM, Evgeny Yurchenko wrote: > Yesterday it happened twice on one of my production firewalls. CPU load was > less than 10%. Did not pay attention at the moment but accoring to RRD > number of states was not unusual - 4-5k. I reproduced it in my lab - only > test connect

Re: [pfSense Support] Re: Static routes

2009-10-08 Thread Scott Ullrich
On Thu, Oct 8, 2009 at 11:13 AM, Aarno Aukia wrote: > Replying to myself, sorry. > > On Thu, Oct 8, 2009 at 16:21, Aarno Aukia wrote: >> I would propose to compare the "old" {$g['vardb_path']}/routes.db to >> the current set of configured static routes and "route delete" the >> superfluous routes

Re: [pfSense Support] pfSense and SpamD

2009-10-06 Thread Scott Ullrich
On Tue, Oct 6, 2009 at 1:32 PM, Fabian Abplanalp wrote: > Is this in any way changeable? If it's a configfile or so... Unfortunately it is not. I will look into what is required to change once I catch up on a few other outstanding projects. Scott --

Re: [pfSense Support] Problem with apinger

2009-10-06 Thread Scott Ullrich
On Tue, Oct 6, 2009 at 9:41 AM, Matthias Niggemeier wrote: > Any news on this topic? It takes 2-12 hours for my load balancer pools to go > offline; > unfortunately I cannot go back to 1.2.2 since some VoIP connections do not > work with > 1.2.2. > Is there a URL that can be geted regularly to res

Re: [pfSense Support] Pfsense 1.2.3 alix 2d13 IDE disk installation problem

2009-10-05 Thread Scott Ullrich
On Mon, Oct 5, 2009 at 11:19 AM, ozan ucar wrote: > to abandon. > > Install pfsense embedded image on 4 GB CF disk, how to i resize image. > I search script for 4 GB resize image , can you send me CF disk resize ( 4 > GB ) script ? http://snapshots.pfsense.org/FreeBSD_RELENG_7_2/pfSense_RELENG_1_

Re: [pfSense Support] pfSense and SpamD

2009-10-05 Thread Scott Ullrich
On Mon, Oct 5, 2009 at 7:16 AM, Fabian Abplanalp wrote: > Hi > > I'm trying to setup pfSense with SpamD (Greylisting and tarpit). In the > first setup with the "real" Mailserver behind the NAT it works perfectly, > but if I setup the forwarding to a server with a "public" IP no mails are > forward

Re: [pfSense Support] One check-box is missing in Rules-Edit-Advanced of 1.2.3-RC3 snapshot

2009-09-30 Thread Scott Ullrich
On Wed, Sep 30, 2009 at 5:27 PM, Evgeny Yurchenko wrote: > Well, I am sorry for confusion... but could you please confirm that this is > from 2.0 filter.inc, starting at line 1961: >                       if ($type == "pass") { >                               if (isset($rule['allowopts'])) >      

Re: [pfSense Support] One check-box is missing in Rules-Edit-Advanced of 1.2.3-RC3 snapshot

2009-09-30 Thread Scott Ullrich
On Wed, Sep 30, 2009 at 5:21 PM, Evgeny Yurchenko wrote: > May I send you screenshot? It will not do any good. I just downloaded 1.2.2 from: ftp://reflection.ncsa.uiuc.edu/pub/pfSense/updates/pfSense-Full-Update-1.2.2.tgz [su:~/Desktop/pfSense-Full-Update-1.2.2] sullrich% cd usr/local/www/ [su

Re: [pfSense Support] 1.2.3-RC2 IPSec SPD is not updated if you disable IPSec tunnel

2009-09-25 Thread Scott Ullrich
On Fri, Sep 25, 2009 at 10:39 AM, Evgeny Yurchenko wrote: > Hi all! > > probably it is fixed in the latest snapshots but in 1.2.3-RC2 built on Mon > Aug 31 06:09:28 UTC 2009 it is a problem. > If you disable IPSec tunnel SPD entries for this tunnel are not removed. > I was struck by this problem b

Re: [pfSense Support] Quad NIC's?

2009-09-22 Thread Scott Ullrich
On Tue, Sep 22, 2009 at 8:26 PM, Luke Jaeger wrote: > Hello, > > Are there any known issues with quad NIC cards on a pfSense box? > > I'm looking at a Proliant DL360 G3 with an Intel Pro 1000 GT Quad Port > adapter > > http://www.intel.com/products/server/adapters/pro1000gt-quadport/pro1000gt-quad

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Scott Ullrich
On Tue, Sep 22, 2009 at 12:46 PM, Evgeny Yurchenko wrote: > Then sorry Scott, I do not understand your statement: "Traffic on the > firewall itself prefers the system routing table.  Clients behind the > firewall will prefer the IPSEC tunnel." > In my case traffic initiated on the firewall itself

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Scott Ullrich
On Tue, Sep 22, 2009 at 12:39 PM, Evgeny Yurchenko wrote: > So, it is impossible to use IPSec with PPPoE on WAN? > Eugene That would be news to me. It should work fine. Scott - To unsubscribe, e-mail: support-unsubscr...@pfse

Re: [pfSense Support] interesting traffic is not encapsulated

2009-09-22 Thread Scott Ullrich
On Tue, Sep 22, 2009 at 12:32 PM, Evgeny Yurchenko wrote: > I know it looks stupid, but... > 1.2.3-RC1 > LAN=10.29.1.19/24 > WAN(PPPoE)=x.x.x.106 > > remote LAN=10.29.11.1/24 > remote WAN=x.x.x.225 > Tunnel is up. > > When I do from pfSense itself ping -S 10.29.1.19 10.29.11.1 everything goes > we

Re: [pfSense Support] Is pfsense.org down?

2009-09-19 Thread Scott Ullrich
On Sat, Sep 19, 2009 at 2:58 PM, Jostein Elvaker Haande wrote: > http://downforeveryoneorjustme.com/pfsense.org Sorry folks. Our datacenter had a power blip and our UPS battery has died. One of our switches did not reset correctly after the blip. We have moved one of our firewalls and all the

Re: [pfSense Support] Crazy Session State requirement

2009-09-18 Thread Scott Ullrich
On Fri, Sep 18, 2009 at 1:26 PM, Ermal Luçi wrote: > Activate sticky option on 1.2.3-RC* installations. http://snapshots.pfsense.org has the RC3 file. Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For addition

Re: SV: [pfSense Support] Running out of memory

2009-09-16 Thread Scott Ullrich
On Wed, Sep 16, 2009 at 11:42 AM, Oliver Hansen wrote: > > > a_subscribti...@fiberby.dk wrote: >> >> That immediately reduced the memory use from 50% -22% >> But as you state, it doesn't solve the underlying problem. Thanks, I just committed a change to prevent this from being a problem. Scott

Re: [pfSense Support] Problems with installation Developers-2.0

2009-09-02 Thread Scott Ullrich
On Wed, Sep 2, 2009 at 4:38 PM, Evgeny Yurchenko wrote: > Trying to install from pfSense-Developers-2.0-ALPHA-ALPHA-20090901-1924.iso > on HP DL380 G4. MD5 is correct. Tried to burn another CD. Tried to install > it in VMWare - result is the same. > I see lots of errors like: > ... > /usr/sbin/clog

Re: [pfSense Support] Help with physdiskwrite

2009-09-02 Thread Scott Ullrich
On Wed, Sep 2, 2009 at 2:46 PM, Victor Padro wrote: > Hello everyone! > > I wonder if someone could send me the physdiskwrite EXE, because I > can't access to the m0n0.ch website, I don't know if it's down or what > is wrong with it, and I am in the middle of a embeded Pfsense install > here!  ;) >

Re: [pfSense Support] IGMPproxy and Router Alert option

2009-09-01 Thread Scott Ullrich
On Tue, Sep 1, 2009 at 12:13 PM, Evgeny Yurchenko wrote: > If I were to work on it should I install > http://snapshots.pfsense.org/FreeBSD_RELENG_7_2/pfSense_HEAD/livecd_installer/pfSense-Developers-2.0-ALPHA-ALPHA-20090831-1029.iso.gz > ? As I understand changes would be done in pfSense, pfSense p

Re: [pfSense Support] IGMPproxy and Router Alert option

2009-09-01 Thread Scott Ullrich
On Tue, Sep 1, 2009 at 1:05 AM, Evgeny Yurchenko wrote: > This is again about igmpproxy. > As I mentioned earlier to be RFC compliant (RFC 2236 IGMP V2 and 3376 IGMP > V3) we must send IGMP packets with Router Alert in IP header (RFC 2113). > It is very easy to code but a problem with pf arises. To

Re: [pfSense Support] Ticket #1931: NAT reflection bug

2009-08-27 Thread Scott Ullrich
On Thu, Aug 27, 2009 at 2:15 PM, David Rees wrote: > I've recently run into the issue described on ticket #1931 and on the > forum thread below: > > http://cvstrac.pfsense.org/tktview?tn=1931 > http://forum.pfsense.org/index.php/topic,16314.0.html > > Even though we only have about 200 port forward

Re: [pfSense Support] Load Balancing on vlans

2009-08-27 Thread Scott Ullrich
On Thu, Aug 27, 2009 at 11:05 AM, Jesse Vollmar wrote: > I tried again this morning to change the allow rule on a vlan > interface to send traffic out on a gateway other than "default" and > after about five minutes of working like it should, all traffic > stopped. Hosts on that vlan could no longe

Re: [pfSense Support] Routing Between VLANs

2009-08-26 Thread Scott Ullrich
On Wed, Aug 26, 2009 at 9:29 PM, Jesse Vollmar wrote: > Okay I deleted that vlan and now there is a system error and the web gui > doesn't work. I'm on my phone now (no internet from pfsense). The error is > "xml error: opt cannot occur more than once". I opened a shell and then > opened config

Re: [pfSense Support] 1.2.3-RC1-embedded dhcp relay windows XP broadcast flag

2009-08-26 Thread Scott Ullrich
On Wed, Aug 26, 2009 at 11:28 AM, Chris Kleeschulte wrote: > I can dhcp relay all my hosts except for Windows-based hosts. > I narrowed the problem down to the Windows machine setting the broadcast > flag on the dhcp initial request. > I also know that Microsoft claims this is a problem in Vista, b

Re: [pfSense Support] IGMP packet out of WAN

2009-08-23 Thread Scott Ullrich
On Sun, Aug 23, 2009 at 9:23 PM, Evgeny Yurchenko wrote: > Gentlemen, > Please take a look at http://forum.pfsense.org/index.php/topic,16943.15.html > last post from the6thday. > It seems after reinstalling igmpproxy package he still has old version > (which does not have this commit > https://rcs.

Re: [pfSense Support] tcsh problem

2009-08-22 Thread Scott Ullrich
On Sat, Aug 22, 2009 at 3:02 PM, Zhu Sha Zang wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi there, what this problem? > > Enter an option: 8 > > tcsh: Cannot open /etc/termcap. > tcsh: using dumb terminal settings. > # > > I don't change nothing, and this message appear in my two

Re: [pfSense Support] IGMP packet out of WAN

2009-08-21 Thread Scott Ullrich
On Fri, Aug 21, 2009 at 3:41 AM, Ermal Luçi wrote: > Send a merge request to mainline. If you do not succeed i will merge > it manually. Item has been merged. Thanks! Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.

Re: [pfSense Support] XMLRPC debugging

2009-08-21 Thread Scott Ullrich
On Fri, Aug 21, 2009 at 3:45 PM, Ian Levesque wrote: > php: /xmlrpc.php: Disallowing CARP sync loop. > You have a CARP sync loop. You do not want to do that. Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For a

Re: [pfSense Support] Triple CARP setup

2009-08-18 Thread Scott Ullrich
On Tue, Aug 18, 2009 at 10:28 AM, Veiko Kukk wrote: > How should I configure pfsync if I want to use three machines? > > ## > Synchronize to IP > Enter the IP address of the firewall you are synchronizing with. > ## > > Should I list there all IP-s I want to sync to? Separated by commas or No. Pu

Re: [pfSense Support] OpenBGPD package: excessive } if if neighbor does not belong to a group

2009-08-16 Thread Scott Ullrich
On Sun, Aug 16, 2009 at 1:18 AM, Evgeny Yurchenko wrote: > Again me -((( > found one more bug in OpenBGPD. When you add/modify neighbor which does not > belong to any group you get excessive } in bgpd.conf after neighbor{} block. > > # diff -rub openbgpd.inc.20090816.bak openbgpd.inc > --- openbgpd

Re: [pfSense Support] OpenBGPD package: impossible to edit group in use but it can easily be deleted

2009-08-16 Thread Scott Ullrich
On Sat, Aug 15, 2009 at 7:32 PM, Evgeny Yurchenko wrote: > 1) When a BGP group is in use it is impossible to modify group's parameters. > Click 'Save' gives you "Sorry this group is in use... and can not be > deleted" > Probably it is intended behavior but then we have to change the error > message

Re: [pfSense Support] Small remarks about OpenBGPD packaget

2009-08-15 Thread Scott Ullrich
On Sat, Aug 15, 2009 at 11:15 AM, Evgeny Yurchenko wrote: > I do not know why but your commit put my piece of code in slightly wrong > place (1 line higher than needed). > Please correct this. Thanks. [snip] Fixed, thanks! - To

Re: [pfSense Support] 1.2.3-RC1 Web gui logout

2009-08-12 Thread Scott Ullrich
On Wed, Aug 12, 2009 at 1:10 PM, David Burgess wrote: > You could use a different browser for pfsense. It's an inconvenience, > but probably more convenient than closing all your tabs. Install the "Web Developer Toolbar" for firefox and then select Miscellaneous -> Clear Private Data -> HTTP Authe

Re: [pfSense Support] IGMP packet out of WAN

2009-08-12 Thread Scott Ullrich
On Wed, Aug 12, 2009 at 10:57 AM, Scott Ullrich wrote: > On Tue, Aug 11, 2009 at 8:02 PM, Evgeny Yurchenko wrote: >> >> cd /usr/ports/devel/git && make install >> >> -- Ends with >> ===>  Configuring for git-1.6.4 >> ===>  Building for git-1.6

Re: [pfSense Support] IGMP packet out of WAN

2009-08-12 Thread Scott Ullrich
On Tue, Aug 11, 2009 at 8:02 PM, Evgeny Yurchenko wrote: > > cd /usr/ports/devel/git && make install > > -- Ends with > ===> Configuring for git-1.6.4 > ===> Building for git-1.6.4 > GIT_VERSION = 1.6.4 > * new build flags or prefix > ... many compilations here ... > http-push.c:14:19: er

Re: [pfSense Support] IGMP packet out of WAN

2009-08-11 Thread Scott Ullrich
On Tue, Aug 11, 2009 at 8:16 AM, Evgeny Yurchenko wrote: > All my production boxes are 1.2-release so FreeBSD 6.2. But I am planning to > move to the latest 1.2.3 and I will do it as soon as I find out why my HPs > hung during high load with 1.2.3-RC1. > To answer your question - I'd like to make i

Re: [pfSense Support] Kernelbug on Triple Core Processor

2009-08-08 Thread Scott Ullrich
On Sat, Aug 8, 2009 at 2:56 PM, Walter Kugler wrote: > Hello! > > > About myself: > I have no great knowledge about FreeBSD. I use mostly the WebGUI of pfSense, > but i have some years experience on Debian GNU/Linux, including building a > custom kernel. > > My Problem: > I have bought a new machin

Re: [pfSense Support] Small remarks about OpenBGPD packaget

2009-08-06 Thread Scott Ullrich
On Thu, Aug 6, 2009 at 10:48 AM, Evgeny Yurchenko wrote: > I'll ask very trivial question but please bear with me as I am new here. > What does 'commited this' mean? Does it mean that it is in > http://snapshots.pfsense.org/FreeBSD_RELENG_7_2/pfSense_RELENG_1_2/livecd_installer/pfSense-1.2.3-200908

Re: [pfSense Support] Small remarks about OpenBGPD packaget

2009-08-05 Thread Scott Ullrich
On Wed, Aug 5, 2009 at 12:35 AM, Evgeny Yurchenko wrote: > Hi! > 1) I find it a little bit inconvenient that you can not add a neighbor > when you do not have any group configured. Suppose I want to add just > two neighbors without messing with groups set up. > This small thing solves it: > # diff

Re: [pfSense Support] Problem with apinger

2009-08-04 Thread Scott Ullrich
On Tue, Aug 4, 2009 at 10:56 AM, Matthias Niggemeier wrote: > Von: Matthias Niggemeier [mailto:m...@thias.de] > Gesendet: Dienstag, 4. August 2009 08:47 > An: support@pfsense.com > Betreff: [pfSense Support] Problem with apinger > >> Hi there, >>since the upgrade to 1.2.3-RC2 (July 23) parts of my

Re: [pfSense Support] BGP status

2009-07-30 Thread Scott Ullrich
On Thu, Jul 30, 2009 at 2:19 PM, Chris Flugstad wrote: > Any word on BGP status.  or a simple alternative, until pfsense has BGP > function? BGP has existed in system -> packages for 2+ years. Scott - To unsubscribe, e-mail: sup

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-30 Thread Scott Ullrich
On Thu, Jul 30, 2009 at 8:21 AM, Eugen Leitl wrote: > On Thu, Jul 30, 2009 at 02:08:38PM +0300, Veiko Kukk wrote: >> This is a good example, why bottom-posting sucks... > > God gracious help us. What's wrong with interleaved > posting? > >> Why do i need to scroll past all previous teks i read just

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
On Wed, Jul 29, 2009 at 1:54 PM, Curtis LaMasters wrote: > I actually find that to be annoying to read.  However, in the spirit > of good internetship, I'll oblige. Sorry any problems I may have > caused. Let me know if I did that correctly. That looks correct. Unfortunately this is the way mail

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
On Wed, Jul 29, 2009 at 1:45 PM, Curtis LaMasters wrote: > Gotta tell you guys...this is out right frustrating.  Is it the fact > that I'm using Gmail or that by definition, threading in email is > broken by design.  I would have imagined that the Spamassassin mailing > list would have eaten all Gm

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
On Wed, Jul 29, 2009 at 1:42 PM, Curtis LaMasters wrote: > On Wed, Jul 29, 2009 at 12:41 PM, David Burgess wrote: >> On Wed, Jul 29, 2009 at 11:38 AM, Curtis >> LaMasters wrote: >>> And this is bottom posting.  Correct? >> >> Well, I don't think it's top-posting or bottom-posting if you delete >> a

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
On Wed, Jul 29, 2009 at 1:31 PM, wrote: > Unfortunately Gmail top posts by default.  So expecting bottom posting to be > and to remain the default behavior may be an exercise in futility.  proper > ettiquite or not, some people just bang off replies and figure everything is > a-ok.  This being a r

Re: [pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
On Wed, Jul 29, 2009 at 1:25 PM, Curtis LaMasters wrote: > Thanks Scott. I know what top posting is...I just don't know why you > think I did.  I hit reply, type my message and go forth.  Didn't think > it needed to be any harder than that. I did not think anything -- This is my 1st message to thi

[pfSense Support] A note about top vs bottom posting -- please read and make sure you bottom post on our lists. Thank you.

2009-07-29 Thread Scott Ullrich
http://www.caliburn.nl/topposting.html http://idallen.com/topposting.html Thank you Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support av

Re: [pfSense Support] IGMP packet out of WAN

2009-07-25 Thread Scott Ullrich
On Sun, Jul 26, 2009 at 12:42 AM, Evgeny Yurchenko wrote: > Can somebody please say whether pfSense's kernel was compiled with MROUTING > option or not? [pfsense-org:tools/builder_scripts/conf] sullrich% pwd /Users/sullrich/pfSense_GIT/tools/builder_scripts/conf [pfsense-org:tools/builder_scripts

Re: [pfSense Support] OT: web based performance testing

2009-07-25 Thread Scott Ullrich
On Sat, Jul 25, 2009 at 4:31 PM, Chris Buechler wrote: > Saw that, doesn't have latency or loss though. That's the piece that's > missing from all the options I've seen. Maybe this will fit the bill. Kinda expensive. http://www.ookla.com/linequality.php Scott --

Re: [pfSense Support] OT: web based performance testing

2009-07-25 Thread Scott Ullrich
On Sat, Jul 25, 2009 at 4:26 PM, Chris Buechler wrote: > Looking for something, preferably open source but commercial is an > option, sort of like a host your own private speed test site. The idea > is when someone connects in via VPN they can easily hit a URL on a > server across the VPN and click

Re: [pfSense Support] Patch: Realtek 8102EL support for Dell Mini 10v (1010)

2009-07-24 Thread Scott Ullrich
On Fri, Jul 24, 2009 at 2:37 PM, Ingmar Hupp wrote: > pfSense 1.2.3-RC1. FreeBSD RELENG_7_2 doesn't have support for this as far > as I can tell (but FreeBSD HEAD [8.0] does as I've just noticed). Thanks, I have committed this and snapshots should start building them soon. Scott

Re: [pfSense Support] Patch: Realtek 8102EL support for Dell Mini 10v (1010)

2009-07-24 Thread Scott Ullrich
On Fri, Jul 24, 2009 at 1:39 PM, Ingmar Hupp wrote: > Hi, > > seems Dell is using a previously unknown revision of that chip in their Mini > 10v (1010) netbooks, so here's a patch to add support for that revision. > This probably should also/instead go to FreeBSD kernel. I've built a pfSense > iso

  1   2   3   4   5   6   7   8   9   10   >