Re: [pfSense Support] nat labelling bug?

2008-01-30 Thread Chris Buechler
Paul M wrote: I was created a nat rule's equivalent filter rule and got the error below. Is this a known bug? There were error(s) loading the rules: /tmp/rules.debug:149: rule label too long (max 63 chars)pfctl: Syntax error in config file: pf rules not loaded - The line in question reads

Re: [pfSense Support] Manually configure (force) link-speed/duplex?

2008-01-30 Thread Chris Buechler
Michael Richardson wrote: I’ve got a Realtek nic that is not playing nice with a cable-modem. The System Log shows the interface is going up and down a couple times per minute. I intend to replace the NIC (when I’m not 200 miles away), but for now I’d like to try and for the speed/duplex to

Re: [pfSense Support] Multiple servers behind NAT'd firewall

2008-02-07 Thread Chris Buechler
Trave Harmon wrote: I am having a problem: I have multiple virtual mail servers behind a pfsense firewall. Now on each server, I have multiple domains. Now sending to the domain from google or yahoo is perfect and out again is perfect but when I send a message from one virtual server to

Re: [pfSense Support] Spanning tree support

2008-02-07 Thread Chris Buechler
Chris Bagnall wrote: Greetings list, Does anyone know if pfSense includes support for failover between two LAN interfaces? For example, one can provide high availability using CARP to create a virtual router IP failing over between 2 pfSense boxes, but that's not going to solve the problem

Re: [pfSense Support] Strategy for Multiple-Subnet LAN on Single Port

2008-02-07 Thread Chris Buechler
I have a document that describes in detail the steps required to accomplish this, though not accessible right now. You're partially right, partially wrong. I'll put it online somewhere later. Bryan Derman wrote: After searching the archives, the forum and conferring with Mr. Google, I've

Re: [pfSense Support] Strategy for Multiple-Subnet LAN on Single Port

2008-02-07 Thread Chris Buechler
Bryan Derman wrote: Thanks, but VLANs are not an option due to other hardware/switch limitations. Having only a basic understanding of VLANs, I'm also not sure how that would apply (but would be happy to learn) since the underlying objective is to have pfSense support multiple LAN subnets

Re: [pfSense Support] enabling high performance tcp - freebsd

2008-02-13 Thread Chris Buechler
Paul M wrote: http://www.psc.edu/networking/projects/tcptune/#FreeBSD this has some recommendations for setting options in freebsd to improve network performance; I don't know whether it's current wisdom though. We do tweak some of that, but almost none of it is applicable to a firewall

Re: [pfSense Support] pfsense crashed out

2008-02-22 Thread Chris Buechler
Paul M wrote: Ngawang Sangye wrote: There were error(s) loading the rules: /tmp/rules.debug:191: rule label too long (max 63 chars) pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [191]: pass in quick on $wan proto { tcp udp } from any to { 192.168.2.58 }

Re: [pfSense Support] Does Captive Portal require Squid?

2008-02-22 Thread Chris Buechler
Radio Tech wrote: I just did a fresh install of 1.2-RC4 with the same results. I will try to find my disk of 1.2 RC3 and try that. Is there something I am possibly doing wrong. I can assure you that changing versions isn't going to fix it, there haven't been any CP issues in a long time.

Re: [pfSense Support] Does Captive Portal require Squid?

2008-02-22 Thread Chris Buechler
Radio Tech wrote: Hey Chris, Thanks for taking the time for this. When i say it doesn't work, i mean all internet traffic goes though without authorization. It skips the CP page. I was just trying to solve the problem. I tried it on a fresh install without blocking anything on the LAN rules.

Re: [pfSense Support] 1.2 full version

2008-02-23 Thread Chris Buechler
Scott Ullrich wrote: On 2/23/08, Odd Kåre Qvam Trøen [EMAIL PROTECTED] wrote: Hi list! Does anyone know if I can consider v1.2 as fully released now? Look here: http://snapshots.pfsense.org/FreeBSD6/RELENG_1_2/updates/ and

Re: [pfSense Support] upgrade woes ...

2008-02-26 Thread Chris Buechler
Jure Pečar wrote: Hello, I rushed to 1.2 as many others did I presume ;) Indeed, the one mirror out of 11 that I have checked stats on has seen 4,000 downloads in the first 24 hours. I'm running 1.0-RELEASE on my home fw (simple adsl and two subnets). And I am not able to upgrade it

Re: [pfSense Support] upgrade woes ...

2008-02-26 Thread Chris Buechler
Scott Ullrich wrote: On 2/27/08, Chris Buechler [EMAIL PROTECTED] wrote: [snip] 1. fetch the upgrade file fetch http://files.pfsense.org/mirror/updates/pfSense-Full-Update-1.2-RELEASE.tgz 2. Run the upgrade command /etc/rc.firmware pfSenseupgrade pfSense-Full-Update-1.2-RELEASE.tgz

Re: [pfSense Support] wrong email addresses on mail list page

2008-02-29 Thread Chris Buechler
Paul M wrote: http://www.pfsense.org/index.php?option=com_contenttask=viewid=66Itemid=71 the unsubscribe email address is incorrect in the href for support-unsubscribe, it's the same as the subscribe one! Fixed, thanks!

Re: [pfSense Support] IPSEC tunnel brings down traffic from lan to wan

2008-03-01 Thread Chris Buechler
Matt Hohman wrote: Hey All got a weird one for you all, We have a pfsense box with 4 interfaces Lan 192.168.0.1 Wan Static Public IP Wan2 Static Public IP Different ISP than Wan DMZ Wan2 and DMZ are bridged. Wan handles all traffic form the lan. We have 3 remote pfsense boxes that use

Re: [pfSense Support] After upgrade (1.2RC3 -- 1.2) No IPsec connection any more

2008-03-01 Thread Chris Buechler
Tunge2 wrote: Hello, After upgrading to release 1.2 of PFsense we are not able to set up any IPsec connection anymore. No errors in the logs of Pfsense. But wenn i put the upgrade (PFsense 1.2 RC3) over the not working 1.2 version, it all works again.? So why doesn't the IPsec tunnels

Re: [pfSense Support] IPSEC tunnel up but no traffic being passed...

2008-03-01 Thread Chris Buechler
Tim Nelson wrote: Hello! I have an IPSEC tunnel configured between a mobile client running TheGreenBow and a fresh installation of pfSense 1.2-RELEASE. The tunnel comes up as expected yet I am unable to ping any devices on the remote subnet. There is not a firewall tab for rules on IPsec tunnels.

Re: [pfSense Support] Trouble installing on old Dell 6450

2008-03-06 Thread Chris Buechler
Sean Cavanaugh wrote: Has anyone else attempted to install pfsense on a Dell 6450? booting from the CD in normal mode it will freeze durring hardware lookup and booting with ACPI turned off it gets a kernel trap 12 error almost immediately. Google found a suggestion from someone to enable OS

Re: [pfSense Support] Message repeating in System Log, can't find the reason

2008-03-06 Thread Chris Buechler
RB wrote: I may be mistaken but I though pfSense only supported 1 DHCP connection on the WAN It was my understanding that only the interface designated 'WAN' could do PPPoE, but the others in a multi-WAN setup could do DHCP or static. That is correct. There are at least a couple people

Re: [pfSense Support] Message repeating in System Log, can't find the reason

2008-03-06 Thread Chris Buechler
Anil Garg wrote: Now that the broadband is very reliable, why would anyone use more than one WAN at home. What are the benefits you have seen or desired in multiple dhcp wan at home. Very reliable depends on your provider, your definition of reliable, and even more, your tolerance for

Re: [pfSense Support] Message repeating in System Log, can't find the reason

2008-03-06 Thread Chris Buechler
Bryan Derman wrote: I see how multiple WANs from different providers (assuming they use different link-level sources and/or technology) can provide backup for outgoing access, but I haven't figured out how this can help for incoming access to servers. I.E., let's say I have 2 WAN connections

Re: [pfSense Support] Message repeating in System Log, can't find the reason

2008-03-06 Thread Chris Buechler
Michael Richardson wrote: I'm hoping the log entries below will help because I'm not familiar with tcpdump yet (spoiled GUI user where packet-capturing is concerned). go to a command line (enable SSH if you haven't already or do it at the actual console), and run: tcpdump -i fxp0 -s

Re: [pfSense Support] Re: routing unreliable

2008-03-06 Thread Chris Buechler
Ngawang Sangye wrote: I would try that but if you have an upper limit set on all traffic - I assume that LAN to LAN will be limted to that speed (2 Mbit for us). Thats what I experience, and slower because of all the internet traffic competing to the point of unusable connections to local

Re: [pfSense Support] pfSense VPN X Nortel Contivity

2008-03-06 Thread Chris Buechler
Bill Marquette wrote: Not sure on hardware, but I wouldn't be the least bit surprised if boards as low powered as the new pcengines ALIX boards could do 14mbit encrypted (that's really not alot of traffic). I've heard from people who have tested ALIX hardware to max out at about 10 Mbps

Re: [pfSense Support] Trouble installing on old Dell 6450

2008-03-08 Thread Chris Buechler
Sean Cavanaugh wrote: I can install FreeBSD on it with zero issue. don't even have to disable ACPI. pfsense freezes right after it sees the raid array as a viable HDD. Interesting, not what I would have suspected. Can you try booting FreeSBIE 2.0.1 on that box?

Re: [pfSense Support] Dumb VPN question

2008-03-13 Thread Chris Buechler
Angelo Turetta wrote: But by now, only ipfilter can take advantage of this nonstandard extension when doing NAT (don't know about Linux's iptables). It does exist, but apparently doesn't work in ipfilter. Manuel tried it for inclusion in m0n0wall and said it didn't work, and if anybody

Re: [pfSense Support] Multiple VPN compatible with Micro$oft

2008-03-17 Thread Chris Buechler
Radio Tech wrote: Hello all. I am looking for some information. I need to implement a wireless connection using VPN access. I am kinda green on VPN and really dont know the way to go. The kicker is, it need to be able to support up to 300 user and have the ability to intergrate with

Re: [pfSense Support] Multiple VPN compatible with Micro$oft

2008-03-18 Thread Chris Buechler
Ryan Rodrigue wrote: Chris, Thanks for the reply. Will PPTP work with MS Active Directory? I was kinda thinking it would using radius. Yes, with IAS. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands,

Re: [pfSense Support] Any chance of pfsense being a port?

2008-03-19 Thread Chris Buechler
Scott Ullrich wrote: None of us have the time and or patience to maintain a freebsd port. Since we replace the /etc/rc system with PHP that would hardly be a good idea. Plus a few kernel patches, a custom kernel config, and it would have to install numerous other ports. It would be a huge

Re: [pfSense Support] DHCP Server Issues

2008-03-19 Thread Chris Buechler
Dimitri Rodis wrote: Two things I’ve noticed in pfSense 1.2 release: 1. The subnet mask in the scope settings for DHCP keeps reverting back to “32”. At one point, the DHCP server would not start until I went through all of my DHCP scopes (3 interfaces) and reset the subnet masks

Re: [pfSense Support] Server NAT

2008-03-21 Thread Chris Buechler
Anil Garg wrote: I am reading the m0n0wall documentation (its so well written - kudos to the author) What, you specifically buttering me up to get a response? ;) There is a pointer that for many public addresses to be mapped to servers inside, m0nowall specifies that Server NAT should

Re: [pfSense Support] Trouble installing on old Dell 6450

2008-03-21 Thread Chris Buechler
Sean Cavanaugh wrote: ** http://www.freedom-to-tinker.com/?p=1155 Date: Wed, 19 Mar 2008 16:35:11 -0400 From: [EMAIL PROTECTED] To: support@pfsense.com Subject: Re: [pfSense Support] Trouble installing on old Dell 6450 On 3/19/08, Sean Cavanaugh [EMAIL PROTECTED] wrote: I just find it

Re: [pfSense Support] unexpected network throughput

2008-03-22 Thread Chris Buechler
Eric Baenen wrote: As I said before - all is working fine - except: when doing rsync's over ssh/scp from the lab machines to the services core, I'm seeing a maximum sustained throughput of around 60Mbps. With gigabit end to end - even with the AES encryption overhead of the OpenVPN

Re: [pfSense Support] Captive Portal

2008-03-22 Thread Chris Buechler
Dimitri Rodis wrote: If I wanted to display a user’s IP address AND MAC address on the captive portal page, does anyone have a code snippet that would do that on the pfSense captive portal page? Is this possible? I suggest opening a feature request ticket on cvstrac.pfsense.org, and/or

Re: [pfSense Support] Single Captive Portal Login Triggers Dual Accounting Sessions

2008-03-22 Thread Chris Buechler
Kelvin Chiang wrote: Hi, I am seeing a phenomenon, that a single captive portal login triggered 2 accounting sessions, did anyone see this before? Not that I've heard of. If it's something you can consistently replicate, please open a ticket at cvstrac.pfsense.org.

[pfSense Support] Registration open for pfSense training at BSDCan!

2008-03-22 Thread Chris Buechler
Please see the following post for more information. http://blog.pfsense.org/?p=182 Hope to see you there! Chris - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Constant reboots in 1.2-RC4

2008-03-23 Thread Chris Buechler
Andy Dills wrote: On Sun, 23 Mar 2008, Scott Ullrich wrote: On 3/23/08, Andy Dills [EMAIL PROTECTED] wrote: rl2: discard oversize frame (ether type 0 flags 3 len 29807 max 1514) That is a rather large packet?Jumbo frames? Nope, that's what has me confused. This is

Re: [pfSense Support] Watchdog timeouts on 1.2-RELEASE full installation but not on 1.2-RELEASE embedded?!?

2008-03-25 Thread Chris Buechler
Tim Nelson wrote: I have not tried the full install without ACPI yet. However, I did use the Uniprocessor kernel when I tried a full install previously. You might want to try the SMP kernel if disabling ACPI doesn't work, though IIRC the embedded kernel is uniprocessor so I somewhat doubt

Re: [pfSense Support] WRAP Bandwidth

2008-03-27 Thread Chris Buechler
Ask Bjørn Hansen wrote: On Mar 26, 2008, at 16:54, Dimitri Rodis wrote: Would a WRAP board be capable of NATting and Shaping a 10 megabit symmetric connection without choking? As Adam said - it should. It depends on the specifics of your traffic though. We had an installation that was

Re: [pfSense Support] WRAP Bandwidth

2008-03-27 Thread Chris Buechler
Eugen Leitl wrote: On Thu, Mar 27, 2008 at 12:21:13PM -0400, Chris Buechler wrote: The pfSense box (1.0-RC3 still) in front of the colo servers that host the project's websites is a WRAP. It pushes around 2-8 Mb at around 10-25% utilization, we can push it up over 20 Mbps outbound

Re: [pfSense Support] Seagate Microdrive 8GB

2008-03-27 Thread Chris Buechler
Michel Servaes wrote: pfSense won't start... BSD itself starts just fine, but a little later on it asks for the boot device... BIOS senses the drive correctly, the BSD menu comes up, and then a little bit of text passes by (I am a n00b at BSD things), and further on asks me to supply boot

Re: [pfSense Support] PPP with Verizon USB Card

2008-03-28 Thread Chris Buechler
RB wrote: If you check the CVS timeline, you'll notice Scott has been quietly adding PPP support with direct references to using cellular links. I added it actually. But it's far from being finished. I'm guessing it won't be available as a supported option for 1.2, but it just might be

Re: [pfSense Support] problem report with default routes

2008-04-01 Thread Chris Buechler
Randy Schultz wrote: Ah. Now I remember why I used the LAN i'face instead of the WAN i'face - because the WAN is DHCP only whereas with the LAN I can set the static address. You can configure a static IP on the WAN. In fact you have to configure the IP on the WAN in this case, because that's

Re: [pfSense Support] deleting ssh keys

2008-04-05 Thread Chris Buechler
Randy Schultz wrote: Oi lads and lasses, Does anybody know what is the preferred method to delete SSH keys? I have checked to make sure hosts cannot gain access via SSH, then added keys for a coupla hosts, clicked save, checked(yup, they can now access), removed the keys via the webUI, but

Re: [pfSense Support] Wanted: Tips for a VLAN capable switch (for home use)

2008-04-05 Thread Chris Buechler
Rainer Duffner wrote: Hi, can anybody recommend a switch (8 port or so) that is VLAN capable (and the VLANs actually work with pfSense)? Any switch that supports VLANs with 802.1q trunking (when properly configured) will work with pfSense. I've used multiple Cisco, HP, Netgear, 3Com and

Re: [pfSense Support] ipsec tunnel between two lans with the same ip address space

2008-04-07 Thread Chris Buechler
lartc wrote: hi all, i have inherited two sites that need to be connected with an ipsec tunnel -- issue is that each lan on each side of the tunnel is identical rfc1918 address space (172.16.16.0/16). is there a way to overcome this with nat There will be in 1.3, but isn't now. Still I

Re: [pfSense Support] Constant reboots in 1.2-RC4

2008-04-09 Thread Chris Buechler
Andy Dills wrote: Good news, it appears my assumption was correct. There exists a flaw in the realtek chipset (as quoted earlier in the thread), and it appears that a patch to the driver has been created: http://www.nabble.com/RELENG_7-panic-td16285669.html that is good news. Do you know

Re: [pfSense Support] Multimple WAN ftp server thing.

2008-04-11 Thread Chris Buechler
David Cavanaugh wrote: Thanks so far for all the info. But using WebDAV (port 80) instead of FTP would circumvent this limitation, correct? Correct. Using any file transfer mechanism other than the NAT-b0rk FTP will work around this, including SCP, WebDAV (though that makes me cringe a

Re: [pfSense Support] blocking to destination ports

2008-04-11 Thread Chris Buechler
Ermal Luçi wrote: What's wrong with only in rules?! You can do the same blocking as you would do with out and just save your computer from blocking the packet after traversing the whole machine! The interface it's blocked on is relatively irrelevant. You can do anything with only in

Re: [pfSense Support] DROP database

2008-04-14 Thread Chris Buechler
On Mon, Apr 14, 2008 at 2:46 AM, Eugen Leitl [EMAIL PROTECTED] wrote: On Sun, Apr 13, 2008 at 06:29:23PM -0400, Scott Ullrich wrote: Not currently. This is a feature in HEAD that will be back-ported at some point. 1.3 has an alias import feature where you can paste a C/R separated

Re: [pfSense Support] DROP database

2008-04-14 Thread Chris Buechler
On Mon, Apr 14, 2008 at 10:27 AM, Vivek Khera [EMAIL PROTECTED] wrote: I know I've piped up many times regarding embedded upgrades... You've had worse luck than anybody on this topic. :) I've been using the FreeNAS software (also in embedded version), which is also derived from

Re: [pfSense Support] PPPoE gets disconnected on WAN port

2008-04-16 Thread Chris Buechler
On Wed, Apr 16, 2008 at 9:46 AM, Olivier Mueller [EMAIL PROTECTED] wrote: Hello... Since the situation has not improved, I'm re-posting this :-( If you have any idea what I could/should try, it would be very nice... At the moment I have about 3-4 disconnects per day, and according to the

Re: [pfSense Support] ipsec saying: racoon: INFO: unsupported PF_KEY message REGISTER

2008-04-16 Thread Chris Buechler
On Wed, Apr 16, 2008 at 4:41 PM, Fabio C Flores [EMAIL PROTECTED] wrote: I havent got all settings for the other end (3rd party). Is there any specific option I should look at? Not really, you need to get all the configuration details from the other end, and make sure they aren't using any

Re: [pfSense Support] triple wan to triple lan

2008-04-17 Thread Chris Buechler
On Thu, Apr 17, 2008 at 2:03 AM, Anders Dahl [EMAIL PROTECTED] wrote: I have one machine and 3 xdsl-connections. I want each of them being a gateway for it's own LAN. Shouldn't that be possible!? Sure. I have succesfully created multiple WANs with one LAN, and thougt that it would be just

Re: [pfSense Support] 3-way CARP

2008-04-17 Thread Chris Buechler
On Thu, Apr 17, 2008 at 7:46 PM, Dimitri Rodis [EMAIL PROTECTED] wrote: Is it possible to have a 3-way CARP setup? I can't seem to find mention of anyone having one up and running, so I just thought I would check to see if there was any reason it wouldn't work… Yeah, you can. The only catch

Re: [pfSense Support] 3-way CARP

2008-04-17 Thread Chris Buechler
On Thu, Apr 17, 2008 at 8:24 PM, Dimitri Rodis [EMAIL PROTECTED] wrote: So really the peer IP option is there for folks who don't have a dedicated interface, so that the pfsync traffic doesn't flood the network, is that right? No, it's more for networks with switches that don't play nicely

Re: [pfSense Support] 3-way CARP

2008-04-17 Thread Chris Buechler
On Thu, Apr 17, 2008 at 8:50 PM, Dimitri Rodis [EMAIL PROTECTED] wrote: One last thing: Is there currently any way to *not* assign an IP directly to the WAN interface in a CARP config? No, not at this time. Since the IPs assigned directly to the WAN can't be used in a failover

Re: [pfSense Support] Support NAT Tranversal with IPSec VPN

2008-04-20 Thread Chris Buechler
On Fri, Apr 18, 2008 at 2:36 PM, Sebastián Veloso Varas [EMAIL PROTECTED] wrote: I would like to know if some of you has had good experiences trying to realize tunnels VPN IPSEC doing NAT-T (Transversal), since I was reading the characteristics that the firewall supports and says that it

Re: [pfSense Support] Multiple SSID on single physical wireless interface

2008-04-20 Thread Chris Buechler
On Sun, Apr 20, 2008 at 10:04 PM, David C P Gray [EMAIL PROTECTED] wrote: Hi All, Apologies if this capability already exists and I have just missed it... Are there any plans to implement virtual wireless interfaces in pfSense, thus allowing one to define multiple wireless networks that

Re: [pfSense Support] CP Issue

2008-04-23 Thread Chris Buechler
On Wed, Apr 23, 2008 at 8:24 PM, Tim Dickson [EMAIL PROTECTED] wrote: Finally deploying captive portal at one of our new sites. But am coming across a redirect issue I'm hoping you can shed some light on. BACKGROUND: I have 3 Wans setup - WAN, DSL, DSL2 I have 3 Lans setup - LAN, GUEST,

Re: [pfSense Support] triple wan to triple lan

2008-04-26 Thread Chris Buechler
On Fri, Apr 25, 2008 at 6:41 AM, Anders Dahl [EMAIL PROTECTED] wrote: Hi Chris or anyone who will help me... I have followed the instructions and have partly succeded. This is my setup: fxp1 = Lan (this is used for management only) fxp0 holds the following: vlan0 = Lan_1 vlan1 =

Re: [pfSense Support] CP Issue

2008-04-27 Thread Chris Buechler
On Sun, Apr 27, 2008 at 5:45 PM, RB [EMAIL PROTECTED] wrote: On Sun, Apr 27, 2008 at 2:47 PM, Scott Ullrich [EMAIL PROTECTED] wrote: [snip] Squid is not compatible with CP. This would have been helpful if you told this up front :) That's odd, I've been running it in transparent mode

Re: [pfSense Support] CP Issue

2008-04-27 Thread Chris Buechler
On Sun, Apr 27, 2008 at 5:57 PM, RB [EMAIL PROTECTED] wrote: I think it does work, there might be some caveats though. Does it cause the portal to be bypassed? I've never tried it myself. Nope - typical behavior. Clients DHCP, hit the captive portal on the CARP primary, and are

Re: [pfSense Support] CP Issue

2008-04-28 Thread Chris Buechler
On Mon, Apr 28, 2008 at 12:48 PM, Tim Dickson [EMAIL PROTECTED] wrote: I did state Squid was in there ;) ... I have squid setup with defaults (non transparent) on LAN ONLY I have lightsquid installed for reporting So, anything else to try? I'm willing to help the cause if you have any

Re: [pfSense Support] Anyone get Wii working with pfSense?

2008-04-28 Thread Chris Buechler
On Mon, Apr 28, 2008 at 9:16 PM, Tom [EMAIL PROTECTED] wrote: I can connect to Worldwide and Regional events with Mario Kart, but I can't connect to Friends. Nintendo says they are different types of connections so connecting to Worldwide and Regional events doesn't necessarily mean

Re: [pfSense Support] CP Issue

2008-04-29 Thread Chris Buechler
On Tue, Apr 29, 2008 at 7:04 PM, Tim Dickson [EMAIL PROTECTED] wrote: Well I don't have squid running on the interface in question. Squid is running on LAN and I want CP on LAN2.. does that make a difference? No, Squid really isn't relevant here, it's the route-to rules and their interaction

Re: [pfSense Support] PPPoE gets disconnected on WAN port

2008-04-29 Thread Chris Buechler
On Tue, Apr 29, 2008 at 8:44 AM, Olivier Mueller [EMAIL PROTECTED] wrote: Short update about my issues: Thanks for your feedback (and also to David). I couldn't try the commands yet because the device was remote and people were working, but I will keep them around in case the problems are

Re: [pfSense Support] Failover problem

2008-04-29 Thread Chris Buechler
On Wed, Apr 30, 2008 at 1:30 AM, Martin Kruse Jensen [EMAIL PROTECTED] wrote: I created Ticket #1706 regarding the load-balancing issue. Does anyone have an estimate of how long time before bugs are fixed? Could I do a workarround meanwhile? Not sure on a work around, but no bugs will get

Re: [pfSense Support] RRD graphs keep going NaN

2008-04-30 Thread Chris Buechler
On Wed, Apr 30, 2008 at 9:40 PM, Jeppe Øland [EMAIL PROTECTED] wrote: I'm not pretty much convinced that the RRD graphs going all NAN is coused by more than one instance of updaterrd.sh running at the same time. You're not convinced? Or was that a typo? Now the big question is how more

Re: [pfSense Support] RRD graphs keep going NaN

2008-05-02 Thread Chris Buechler
On Wed, Apr 30, 2008 at 10:42 PM, Jeppe Øland [EMAIL PROTECTED] wrote: You're not convinced? Or was that a typo? Typo. I'm convinced. Last time it happened, I had just moved the pfSense box from one location to another (did a shutdown and turned it on in the new location) ... the day

Re: [pfSense Support] 1.2 package add-on missing

2008-05-05 Thread Chris Buechler
Paul Peziol wrote: I think I just found the problem. Version 1.2- Release but under Platform it says CD-ROM. I guess I assumed I installed it to the HD and didnt pay attention to it. Is there a way to move it to the hd without running the cd again and resetting up the config. or can I just do

Re: [pfSense Support] ping_hosts.sh in infinite loop

2008-05-06 Thread Chris Buechler
David Rees wrote: On Tue, May 6, 2008 at 6:12 AM, [EMAIL PROTECTED] wrote: Was it just me, or did [EMAIL PROTECTED]'s reply look empty? It was. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands,

Re: [pfSense Support] ping_hosts.sh in infinite loop

2008-05-06 Thread Chris Buechler
David Rees wrote: On Tue, May 6, 2008 at 9:27 AM, Chris Buechler [EMAIL PROTECTED] wrote: David Rees wrote: Was it just me, or did [EMAIL PROTECTED]'s reply look empty? It was. Thought so. ;-) Anyone have any ideas on the ping_hosts.sh getting stuck and apparently

Re: [pfSense Support] ping_hosts.sh in infinite loop

2008-05-06 Thread Chris Buechler
On Tue, May 6, 2008 at 5:30 PM, David Rees [EMAIL PROTECTED] wrote: OK, attached is a patch to /etc/config.inc that makes sure that the config.xml and config.cache is updated atomically. The patch adds a function function write_safe_file with 3 arguments: $file, $content, $force_binary.

Re: [pfSense Support] boot usb wothout bios support

2008-05-06 Thread Chris Buechler
On Tue, May 6, 2008 at 9:26 PM, Tortise [EMAIL PROTECTED] wrote: It seems to me that a floppy could boot, load a USB driver and hand over to the USB device on these old machines? Any reason not? (Floppy disk required!) I was thinking of that - I seem to recall some kind of boot loader that

Re: [pfSense Support] boot usb wothout bios support

2008-05-06 Thread Chris Buechler
On Tue, May 6, 2008 at 10:35 PM, Tortise [EMAIL PROTECTED] wrote: The older FreeBSD installations had a floppy boot disc, whether this could be adapted I have wondered? Not in this fashion, no. - To unsubscribe, e-mail:

Re: [pfSense Support] Unable to install pfSense 1.2 LiveCD

2008-05-07 Thread Chris Buechler
Atkins, Dwane P wrote: I am attempting to install pfSense on a Dell PowerEdge RS200 server. This has a 64 bit ES4500 2.2 Ghz Processor with 1 GB memory and 80 gig SATA hard drive. The install goes so far and then I start getting ad4: and acd0 errors (errors that occur on ad4 seem to

Re: [pfSense Support] Unable to install pfSense 1.2 LiveCD

2008-05-07 Thread Chris Buechler
to reboot into safemode where we saw an issue with IRQ 6 which is the embedded SATA IRQ. However, it did allow to start the install process of pfSense. I will try this tomorrow. Thank you for all your help. Dwane -Original Message- From: Chris Buechler [mailto:[EMAIL PROTECTED] Sent

Re: [pfSense Support] Re: brilliant advice from a security audit...

2008-05-07 Thread Chris Buechler
On Wed, May 7, 2008 at 7:49 PM, Ugo Bellavance [EMAIL PROTECTED] wrote: Ease of setup is usually the reason. The main reason of the warning is that it is possible to use PPTP with no or very weak encryption. Sure, the issue isn't the output itself, it's the suggestion you run PPTP over

Re: [pfSense Support] PPTP problem

2008-05-08 Thread Chris Buechler
On Thu, May 8, 2008 at 6:45 PM, Jeremy Bennett [EMAIL PROTECTED] wrote: Thank you for the help. I've considered this, but once I've established a VPN connection, shouldn't that put me on the LAN where the NAT firewall rules on the WAN don't apply? Yes, it does. Only PPTP rules apply to PPTP

Re: [pfSense Support] panic on install of stable pfsense on latests Dell PE 1950 server

2008-05-08 Thread Chris Buechler
On Thu, May 8, 2008 at 12:26 PM, Christopher Iarocci [EMAIL PROTECTED] wrote: I'll trade you that machine for one that works. ;-) Seriously though, disable the ACPI in the bios. There was just a thread on a similar problem yesterday. See here:

Re: [pfSense Support] nat on command line

2008-05-08 Thread Chris Buechler
On Fri, May 9, 2008 at 12:44 AM, Diego A. Gomez [EMAIL PROTECTED] wrote: How I can to write a nat rule in command line? you don't. you can manually edit config.xml, add the rule, remove the config.cache and reload the filter rules but that's not suggested since you could blow up your config.

Re: [pfSense Support] nat on command line

2008-05-08 Thread Chris Buechler
On Fri, May 9, 2008 at 12:56 AM, Diego A. Gomez [EMAIL PROTECTED] wrote: I need to write a nat rule for tun0 (VPN) interfase Can I do it through config.xml? I don't believe that's possible without at least some minor code changes. 1.3 will allow NAT on OpenVPN interfaces but that's not

Re: [pfSense Support] bsdperimeter.com down -- what is the state of commercial support for pfSense?

2008-05-09 Thread Chris Buechler
On Fri, May 9, 2008 at 5:32 AM, Timo Schoeler [EMAIL PROTECTED] wrote: Hi there, I'm about to sell a bunch of pfSense-based Firewalls to a customer (who wants to run a nice loadbalanced setup). What about commercial support? bsdperimeter.com is down, as it seems to me... Thanks for the

Re: [pfSense Support] panic on install of stable pfsense on latests Dell PE 1950 server

2008-05-09 Thread Chris Buechler
On Fri, May 9, 2008 at 11:18 AM, Harrie Bonenkamp (Colson) [EMAIL PROTECTED] wrote: Which livecd should I download from development (pfsense1.2 –freebsd6.3) http://cvs.pfsense.org/~sullrich/testing_images/6/FreeBSD_RELENG_6_3/pfSense_RELENG_1_2/ pfSense.iso.gz

Re: [pfSense Support] setting time

2008-05-10 Thread Chris Buechler
On Sat, May 10, 2008 at 11:16 AM, Dean Larson [EMAIL PROTECTED] wrote: i have a cron job of 15 * * * * /usr/sbin/ntpdate -u -s tick.usno.navy.mil i did the command you said ntpdate pool.ntp.org. and yes it sets the time, but it doesn't stay. for long. computer kept near perfect time

Re: [pfSense Support] setting time

2008-05-10 Thread Chris Buechler
On Sun, May 11, 2008 at 12:19 AM, Dean Larson [EMAIL PROTECTED] wrote: i did ysctl -w kern.timecounter.hardware=i8254 and after 33 minutes i was off .04 seconds. better than 250 seconds.:) Good to know! Thanks for reporting back.

Re: [pfSense Support] multiple WAN load-balancing (aggregating/combining the speed)

2008-05-11 Thread Chris Buechler
2008/5/11 Michael Smirnov [EMAIL PROTECTED]: Hello! First of all, does pfSense support - pptp vpn interfaces as WAN Yes - more than one(I need 8) pptp vpn interface as WAN No. Is there a workaround to connect all 8 pptp connections from pfSense simultaneously? Not a good one. 8

Re: [pfSense Support] Re: Out of Office AutoReply: [pfSense Support] pfSense6 Dev

2008-05-12 Thread Chris Buechler
RB wrote: 1. If you MUST send an autoresponse, make sure you only send it if it is DIRECTLY to you. 2. NEVER attach one of the stupid prove you are a human milters to it. 3. Exchange just doesn't cut it. Top-posting, autoresponders, dim-witted filtering, HTML email... 4. And the [EMAIL

Re: [pfSense Support] RE: Atheros 5212 throwing tons of errors

2008-05-12 Thread Chris Buechler
On Mon, May 12, 2008 at 7:56 PM, tester [EMAIL PROTECTED] wrote: Hello, there is a special build of pfSense 1.2 based on FreeBSD 6.3 instead of 6.2. A user in the forum said that he experiences much less problem with wireless. Yeah try this:

Re: [pfSense Support] ipsec woes

2008-05-13 Thread Chris Buechler
On Tue, May 13, 2008 at 6:47 AM, Jure Pečar [EMAIL PROTECTED] wrote: I solved office1 to office2 with openvpn, now I want to figure out the problem between office1 and servers. I monitored the ipsec logs on both pfsenses at the time when ssh session freezes and nothing shows up in the

Re: [pfSense Support] Intel Pro 1000 VT

2008-05-13 Thread Chris Buechler
Only have time for a very quick reply, try: http://cvs.pfsense.org/~sullrich/testing_images/6/FreeBSD_RELENG_6_3/pfSense_RELENG_1_2/ On Tue, May 13, 2008 at 1:01 PM, Adam Costello [EMAIL PROTECTED] wrote: Hi, I've got a Dell R300 with a Intel Pro 1000VT Quad Gigabit NIC. I've got the

Re: [pfSense Support] Intel Pro 1000 VT

2008-05-14 Thread Chris Buechler
On Wed, May 14, 2008 at 5:34 AM, Adam Costello [EMAIL PROTECTED] wrote: There's good news and bad news. Good news: That install fixed the issue with the Intel Pro 1000VT and when I stick the cable link status says UP Bad News: The onboard Broadcom NetXtreme Dual Gigabit NIC is not working.

Re: [pfSense Support] Virtualizing pfSense

2008-05-15 Thread Chris Buechler
On Thu, May 15, 2008 at 3:07 PM, Rainer Duffner [EMAIL PROTECTED] wrote: Am 15.05.2008 um 20:55 schrieb Sean Cavanaugh: for the record, VMWare tools is included in the ports collection open-vm-tools from ports is the way to go. I have packages built for pfSense, just need to put together

Re: [pfSense Support] Why DHCP and portal logs are limited to 65535 octets?

2008-05-16 Thread Chris Buechler
On Fri, May 16, 2008 at 3:44 AM, [EMAIL PROTECTED] wrote: Hello, in /var/log/ the DHCP and portal auth logs are limited to 65535 octets. So I can't read lot connections! Is it possible to bypass the limitation (without syslog server) ? That's the first I've heard of this. Can you be

Re: [pfSense Support] RE: Atheros 5212 throwing tons of errors

2008-05-16 Thread Chris Buechler
On Wed, May 14, 2008 at 10:47 AM, Wade Blackwell [EMAIL PROTECTED] wrote: Chris, I noticed there were two images in this directory. Besides one being a day newer than the other what is the difference and should I pick one over the other? Thanks. not sure, Scott would know. It's probably

Re: [pfSense Support] Why DHCP and portal logs are limited to 65535 octets?

2008-05-16 Thread Chris Buechler
On Fri, May 16, 2008 at 4:04 AM, [EMAIL PROTECTED] wrote: As I have many connections, I can only see the last DHCP leases of the day. But I must be able to visualize the connections up to 1 year. Oh, you're talking about the log rotation. That wasn't evident to me from your first message.

Re: [pfSense Support] atheros / ath driver

2008-05-17 Thread Chris Buechler
On Sat, May 17, 2008 at 6:06 PM, Beat Siegenthaler [EMAIL PROTECTED] wrote: Is there the possibility to get a embedded version of FreeBSD_RELENG_6_3/pfSense_RELENG_1_2/ ? http://cvs.pfsense.org/~sullrich/testing_images/6/FreeBSD_RELENG_6_3/pfSense_RELENG_1_2/

Re: [pfSense Support] PPPoE gets disconnected on WAN port

2008-05-17 Thread Chris Buechler
On Thu, May 15, 2008 at 4:32 AM, Olivier Mueller [EMAIL PROTECTED] wrote: It worked about 5 days without problems, then it started again: Try what I suggested previously: --- Open up /etc/inc/interfaces.inc in Diagnostics - Edit, and go down to under: set bundle disable multilink

Re: [pfSense Support] Update firmware and backup RRD graph data

2008-05-18 Thread Chris Buechler
On Sun, May 18, 2008 at 2:12 PM, tester [EMAIL PROTECTED] wrote: Hello, Tomorrow I'm going to update an embedded box from 1.2rc4 to the final 1.2. How can I backup RRD graph data? I don't want to lost statistics about traffic (sent/received data) exchanged in these months and so on. Is

<    1   2   3   4   5   6   7   8   9   10   >