Re: [pfSense Support] pfSense on comtrend 536+ DSL router

2008-10-30 Thread Chris Buechler
On Thu, Oct 30, 2008 at 6:55 AM, Matias Surdi [EMAIL PROTECTED] wrote: Does anybody know if pfSense would work embedded on a comtrend ADSL2+ router? DSL routers aren't x86 platforms, so no. - To unsubscribe, e-mail: [EMAIL

Re: [pfSense Support] pfSense on alternate architectures?

2008-10-30 Thread Chris Buechler
On Thu, Oct 30, 2008 at 1:10 PM, Tim Nelson [EMAIL PROTECTED] wrote: It was my understanding that pfSense was largely x86 dependent with even x86_64 being unavailable for now. By the message included below by Ermal, does this mean that alternate architectures can run pfSense if compiled for

Re: [pfSense Support] IPSec VPN timeouts and anomalies

2008-10-30 Thread Chris Buechler
On Thu, Oct 30, 2008 at 7:09 PM, Erik Benton [EMAIL PROTECTED] wrote: We just installed pfsense across our network, both at our central site and at a couple of satellites. The satellites are on a Qwest DSL connection and our CO is on a T1 with another provider. We have successfully configured

Re: [pfSense Support] pppt with two wan

2008-11-01 Thread Chris Buechler
On Sat, Nov 1, 2008 at 3:11 PM, Mikel Jimenez [EMAIL PROTECTED] wrote: OKOK, thanks. And if I define PPTP in WAN and in OPT1 dhcp no problem? Correct. The problem is that in Pfsense 1.x you can only define one pptp wan? Correct.

Re: [pfSense Support] NAT on public ip's, I dont want that

2008-11-05 Thread Chris Buechler
On Wed, Nov 5, 2008 at 10:34 PM, Chris Flugstad [EMAIL PROTECTED] wrote: I have my LAN dhcp'ing public IP's that I have routed to the WAN IP which is another public ip. The problem is outside the router, all traffic from the LAN public IP's is seen as the IP from the WAN. I think its NAT'ing

Re: [pfSense Support] Rules, Schedules blocking websites

2008-11-06 Thread Chris Buechler
On Thu, Nov 6, 2008 at 4:36 AM, Michel Servaes [EMAIL PROTECTED] wrote: Hi, I was wondering if it would be possible to block websites from let's say 9am till 5pm... I can block ip-adresses that way, but I want it to block websites (since some sites use round-robins, blocking at IP level

Re: [pfSense Support] Multi Wan Load Balancing / Fail over weighted?

2008-11-08 Thread Chris Buechler
On Sat, Nov 8, 2008 at 7:56 AM, Chris Bagnall [EMAIL PROTECTED] wrote: That's really useful to know, thanks! Might be worth adding that to the wiki (if it's not already there) ? It's in the book, I was just feeling kind and gave it away. ;)

Re: [pfSense Support] vrrp.mcast.net?

2008-11-10 Thread Chris Buechler
On Mon, Nov 10, 2008 at 2:10 PM, JJB [EMAIL PROTECTED] wrote: This shows up in darkstat on our fw, as CARP. I haven't found any useful information on this host, does anyone have an idea? That's CARP. - To unsubscribe, e-mail:

Re: [pfSense Support] OpenVPN super-slow upload speeds

2008-11-10 Thread Chris Buechler
On Mon, Nov 10, 2008 at 7:32 PM, JJB [EMAIL PROTECTED] wrote: Is there any possibility that this is a Macintosh (Tiger) issue? Yes. Does a Windows or Linux client do the same? - To unsubscribe, e-mail: [EMAIL PROTECTED] For

Re: [pfSense Support] Multi Wan Load Balancing / Fail over weighted?

2008-11-10 Thread Chris Buechler
On Sat, Nov 8, 2008 at 9:27 PM, Tim Nelson [EMAIL PROTECTED] wrote: AHA! Mention of the book again... updates and details please. :-) It's coming along well, I'll have a better idea of timing in two weeks (taking some time off the day job) and will have an update on the blog then.

Re: [pfSense Support] pptp help!!

2008-11-11 Thread Chris Buechler
On Tue, Nov 11, 2008 at 1:22 PM, Mikel Jimenez [EMAIL PROTECTED] wrote: Hello In a Wan PPTP client connection what I have to put in local address BOX?? I don't know as I don't use PPTP WANs, and apparently no one that does is willing to answer since I believe this is the third time you've

Re: [pfSense Support] Syncing DHCP configs

2008-11-11 Thread Chris Buechler
On Tue, Nov 11, 2008 at 4:50 PM, Ian Levesque [EMAIL PROTECTED] wrote: Before I go through the process of trying to hack into the sync backend on pfsense, I just wanted to put this out there one last time... Anybody with inside info willing to shed some light on the future plans for this

Re: [pfSense Support] pptp help!!

2008-11-11 Thread Chris Buechler
On Tue, Nov 11, 2008 at 5:12 PM, Jostein Elvaker Haande [EMAIL PROTECTED] wrote: The good thing about PPTP is that basically any Windows installation snip He's talking (I believe) about a PPTP type Internet connection, not a PPTP server.

Re: [pfSense Support] Reflective routing ?

2008-11-11 Thread Chris Buechler
On Tue, Nov 11, 2008 at 7:48 PM, DLStrout [EMAIL PROTECTED] wrote: I've notice in recent releases that reflective routing is broken. Most notably all releases 1.2 STABLE. Fixed. http://cvstrac.pfsense.org/chngview?cn=26056

Re: [pfSense Support] second WAN on PPPOE

2008-11-12 Thread Chris Buechler
2008/11/12 Peter Todorov [EMAIL PROTECTED]: Hello list, I wonder is there a option to add second WAN (OPT) with PPPOE? pfsense 1.2. Not in 1.2, you have to do it on your modem for OPT WANs. In 2.0 that's an option. - To

Re: [pfSense Support] Intel x38ml board and nic

2008-11-14 Thread Chris Buechler
On Fri, Nov 14, 2008 at 2:42 PM, Max Cristin [EMAIL PROTECTED] wrote: I would like to use a pair of Intel x38ml server boards to build a pfSense appliance with carp fail over. The onboard nics use the Intel 82575EB chip. I will also need to add Intel PRO/1000 PT Dual wich uses a 82572GI chip. I

Re: [pfSense Support] pptp help!!

2008-11-17 Thread Chris Buechler
On Mon, Nov 17, 2008 at 3:08 PM, mikel [EMAIL PROTECTED] wrote: What does it mean that? http://doc.pfsense.org/index.php/Can_I_use_pfSense%27s_WAN_PPTP_feature_to_connect_to_a_remote_PPTP_VPN%3F I can´t act as a client in a PPTP conection to an ISP? No, that's exactly what the PPTP WAN type

Re: [pfSense Support] Bridge + Captive Portal

2008-11-18 Thread Chris Buechler
On Mon, Nov 17, 2008 at 11:15 PM, Olivier Nicole [EMAIL PROTECTED] wrote: Hi, Sorry to bug, but the question is of some importance to me as I have to select and implement a solution. Is pfSense can use bridge and captive portal at the same time? No, at least not that I'm aware of. It needs

Re: [pfSense Support] Bridge + Captive Portal

2008-11-19 Thread Chris Buechler
On Wed, Nov 19, 2008 at 1:58 AM, Olivier Nicole [EMAIL PROTECTED] wrote: Hi Dimitri, Thanks for the clues, i will look at what i can do with the switch. Is there a particular reason you are trying to do a captive portal using a bridge setup vs NAT? We have the right amount of public IP

Re: [pfSense Support] Bridge + Captive Portal

2008-11-19 Thread Chris Buechler
On Wed, Nov 19, 2008 at 8:22 PM, Olivier Nicole [EMAIL PROTECTED] wrote: I think (from what I tried/looked) that rdr to localhost is not compatible with bridging: bridge can only pass (or block) packets between the two interfaces that are bridged, it cannot redirect the packets to somewhere

Re: [pfSense Support] A couple of questions regarding version 2.0

2008-11-19 Thread Chris Buechler
On Wed, Nov 19, 2008 at 9:30 PM, Olivier Nicole [EMAIL PROTECTED] wrote: Hi, I am not sure if I am asking to the proepr list. 1) when version 2.0 will come to production? http://doc.pfsense.org/index.php/When_Will_A_Release_Occur 2) how to proceed to the updates in version 2? I installed

Re: [pfSense Support] Fragment reassembling corrupt?

2008-11-20 Thread Chris Buechler
On Wed, Nov 19, 2008 at 12:20 PM, Peter Allgeyer [EMAIL PROTECTED] wrote: snip All checksums differ with a value of 144 (0x80 hex). Is this behaviour known? No, unless it is the checksum offloading doing it, that would be normal. Looking at the ifconfig of the interface will tell you whether

[pfSense Support] pfSense 1.2.1-RC2 now available

2008-11-21 Thread Chris Buechler
More info: http://blog.pfsense.org/?p=284 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Commercial support available - https://portal.pfsense.org

Re: [pfSense Support] pptp help!!

2008-11-21 Thread Chris Buechler
On Thu, Nov 20, 2008 at 7:09 AM, Mikel Jimenez [EMAIL PROTECTED] wrote: This is my problem!!! http://osdir.com/ml/security.firewalls.pfsense.user/2006-08/msg00046.html This patch is ok? That was before 1.0 was released even, that's quite a bit different from 1.2. You should be able to

Re: [pfSense Support] pfSense 1.2.1-RC2 now available

2008-11-21 Thread Chris Buechler
On Fri, Nov 21, 2008 at 11:55 AM, Ian Levesque [EMAIL PROTECTED] wrote: Upgrade from -RC1 went smoothly here. Running CARP on two routers, upgraded primary then secondary router. No problems to report. That's what we like to hear. :) Oh, there was one change I neglected to mention in that

Re: [pfSense Support] pptp help!!

2008-11-25 Thread Chris Buechler
On Tue, Nov 25, 2008 at 4:50 AM, Mikel Jimenez [EMAIL PROTECTED] wrote: ?? There is no plan to resolve this issue? dhcp-pptp? I don't think any of us understand what your issue is, nor how to resolve it. You're the first person out of countless thousands in over 4 years who has a connection

Re: [pfSense Support] problem installing full version on alix board w/ 5gb microdrive

2008-11-26 Thread Chris Buechler
On Wed, Nov 26, 2008 at 3:54 PM, Bill Marquette [EMAIL PROTECTED] wrote: Interesting, the disk isn't even showing up in dmesg. Indeed, odd, never seen that on an ALIX with a Microdrive. There have been problems reported with 4 GB drives on ALIX hardware related to a BIOS issue, but in those

Re: [pfSense Support] Reflective routing broken in newest 1.2.1-RC2 SNAP

2008-11-27 Thread Chris Buechler
On Thu, Nov 27, 2008 at 10:55 AM, DLStrout [EMAIL PROTECTED] wrote: I just updated our 1.2.1-RC2 to the newest SNAP: 1.2.1-RC2 built on Thu Nov 27 13:35:44 EST 2008 I had been having issues w/ reflective routing in past 1.2.1 SNAPs but it got resolved back a couple weeks ago with a new

Re: [pfSense Support] vlan editing status information

2008-11-28 Thread Chris Buechler
On Fri, Nov 28, 2008 at 6:59 AM, Paul Mansfield [EMAIL PROTECTED] wrote: in 1.2-release, if I change the tag on a vlan interface, (e.g. https://firewall.example.com/interfaces_vlan.php), it does warn me that the firewall might need rebooting. it's definitely the case that the firewall needs

Re: [pfSense Support] Revoke certificate from Pfsense

2008-11-28 Thread Chris Buechler
On Thu, Nov 27, 2008 at 11:51 PM, Sebastien Rivard [EMAIL PROTECTED] wrote: Thank you Chris very mutch but can you give me the step by step for newbe for: 1- already installed with old script and 2- for new install :) You should be able to find your answer googling for easyrsa. Instructions

Re: [pfSense Support] vlan editing status information

2008-11-28 Thread Chris Buechler
On Fri, Nov 28, 2008 at 1:07 PM, Paul Mansfield [EMAIL PROTECTED] wrote: Not sure what you mean by this, just adding the VLAN ID to the status page? yes please! Opened a feature request for this one. - To unsubscribe,

Re: [pfSense Support] Monitor IP address

2008-12-01 Thread Chris Buechler
On Mon, Dec 1, 2008 at 3:41 PM, Mike Lever [EMAIL PROTECTED] wrote: I have 5 WAN ports. The load balancer will constantly ping WAN1, WAN2,WAN3, WAN4 WAN5 simultaneously. Depending on which has the quickest response and is not currently transmitting packets, it will utilise. What Bill said is

Re: [pfSense Support] Sizing for Throughput up to 6Gbit/s

2008-12-05 Thread Chris Buechler
On Fri, Dec 5, 2008 at 8:52 AM, Tim Korves [EMAIL PROTECTED] wrote: Hi all, we're searching for a reliable hardware basis to use as a pfSense firewall with a maximum concurrent throughput of 6 Gigabits / second. We were thinking of something like this hardware configuration: - 2x Intel Xeon

Re: [pfSense Support] Sizing for Throughput up to 6Gbit/s

2008-12-05 Thread Chris Buechler
On Fri, Dec 5, 2008 at 11:59 AM, Curtis Maurand [EMAIL PROTECTED] wrote: the last time I checked out the guts of a Cisco PIX, I found that it was nothing more than commodity PC hardware with an Intel processor. And you aren't going to see a PIX pushing remotely close to 1Mpps.

Re: [pfSense Support] regulary checks of config.xml through md5

2008-12-05 Thread Chris Buechler
On Fri, Dec 5, 2008 at 3:35 PM, Scott Ullrich [EMAIL PROTECTED] wrote: On Fri, Dec 5, 2008 at 3:10 PM, [EMAIL PROTECTED] wrote: Hi, as i am investigating monitoring solutions at the moment i came up with an idea, somebody has already implemented: what about regulary getting the config.xml

Re: [pfSense Support] regulary checks of config.xml through md5

2008-12-05 Thread Chris Buechler
On Fri, Dec 5, 2008 at 11:31 PM, Bill Marquette [EMAIL PROTECTED] wrote: I'm guessing it wouldn't take much to have write_config() dump a message to our standard event logger, which I believe makes use of syslog. I might poke at that in the next few days now that I think of it (2.0 only

Re: [pfSense Support] Captive portal locking up?

2008-12-08 Thread Chris Buechler
On Tue, Dec 2, 2008 at 3:27 PM, Atkins, Dwane P [EMAIL PROTECTED] wrote: We are currently using 1.2 RC1 on a Dell Power Edge R200 and 1.2 Release on a Dell Power Edge 860. In the last couple of weeks, the devices has stopped working for those who are NOT already connected. If you are

Re: [pfSense Support] DNS Forwarder/Authoritative DNS Server

2008-12-08 Thread Chris Buechler
On Tue, Dec 2, 2008 at 12:36 PM, Dimitri Rodis [EMAIL PROTECTED] wrote: Is there a way that I can specify multiple DNS servers for a particular domain suffix? You should be able to, IMO. No, feature request opened (patches welcome). http://cvstrac.pfsense.org/tktview?tn=1849

Re: [pfSense Support] Dell Hardware Monitoring - pfSense 1.2 Final

2008-12-09 Thread Chris Buechler
On Tue, Dec 9, 2008 at 1:55 PM, Curtis LaMasters [EMAIL PROTECTED] wrote: I have a flashing amber light on one of my Dell 1750 firewalls (they are failover so I'm not terribly worried). What would be the best way to go about monitoring these devices? How do I figure out what is currently

Re: [pfSense Support] OpenVPN Site-To-Site with routing

2008-12-10 Thread Chris Buechler
On Wed, Dec 10, 2008 at 4:07 PM, Luiz Vaz [EMAIL PROTECTED] wrote: Hi all, after reading some info here and there, I finally put my VPN up and running. Some sites are using IPSEC, and others with big latency are using OpenVPN. So I wrote a wiki about it (OpenVPN part). I hope

Re: [pfSense Support] Re: OpenVPN Site-To-Site with routing

2008-12-10 Thread Chris Buechler
On Wed, Dec 10, 2008 at 4:11 PM, Luiz Vaz [EMAIL PROTECTED] wrote: Hi again, can anyone say how can I place images on Wiki? Or the way is only external images... External images is the only way. If you want to email me a zip or tgz I can upload to one of our servers.

Re: [pfSense Support] OpenVPN Site-To-Site with routing

2008-12-12 Thread Chris Buechler
On Fri, Dec 12, 2008 at 6:34 AM, Luiz Vaz vaz.l...@gmail.com wrote: Ok, now it´s in the right place: http://doc.pfsense.org/index.php/OpenVPNSiteToSite Thanks! - To unsubscribe, e-mail: support-unsubscr...@pfsense.com

Re: [pfSense Support] OpenVPN Site-To-Site with routing

2008-12-12 Thread Chris Buechler
On Fri, Dec 12, 2008 at 7:03 AM, petes-li...@thegoldenear.org wrote: It's great that you wrote this tutorial. From an initial scan it looks like it'll fix the issues I'm having, that I couldn't get an answer on this list to on 26/11/8. I've only skimmed it but already I see your guide says

Re: [pfSense Support] Traceroute to pfSense box with multiple WAN IPs

2008-12-13 Thread Chris Buechler
On Sat, Dec 13, 2008 at 8:56 PM, Jeppe Øland jol...@gmail.com wrote: Hi all, I recently configured my pfSense (1.2-RELEASE on WRAP) with multiple WAN IP addresses. I have a /29 network on the WAN. (First address is the modem, 2nd is pfSense WAN, then 4 other addresses I can use). The 4

Re: [pfSense Support] FreeBSD SA-08:11 and pfSense

2008-12-17 Thread Chris Buechler
On Wed, Dec 17, 2008 at 10:52 AM, a800 pentes...@scanit.be wrote: Hello, I would like to know how the last FreeBSD security advisory http://security.freebsd.org/advisories/FreeBSD-SA-08:11.arc4random.asc affects pfSense. I understand it is not fixed in 1.2.1-RC4. It's been fixed in every

[pfSense Support] Network Perimeter Redundancy with pfSense session at DCBSDCon

2008-12-17 Thread Chris Buechler
info here: http://blog.pfsense.org/?p=334 - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

Re: [pfSense Support] sudden ssh problems with 1.2.1 rc1

2008-12-18 Thread Chris Buechler
On Thu, Dec 18, 2008 at 5:51 PM, JJB onephat...@earthlink.net wrote: Since about 10 am this morning, once a few ssh tunnels are up no new ssh connections are possible. With the tunnels down ssh connections are slow to connect and sometimes timeout when connecting. could there be some

Re: [pfSense Support] sudden ssh problems with 1.2.1 rc1

2008-12-18 Thread Chris Buechler
On Thu, Dec 18, 2008 at 7:40 PM, Bill Marquette bill.marque...@gmail.com wrote: Sounds like this may have been part of your issue. It sounds like you had multiple machines acting as carp master. Not a good idea. Yeah, and downgrading almost certainly did nothing (unless this is some

Re: [pfSense Support] FreeBSD SA-08:11 and pfSense

2008-12-18 Thread Chris Buechler
On Thu, Dec 18, 2008 at 10:00 AM, Bill Marquette bill.marque...@gmail.com wrote: On Thu, Dec 18, 2008 at 7:00 AM, a800 pentes...@scanit.be wrote: The FreeBSD advisory says one has to upgrade to 7.0-RELEASE-p6 to get he bug fixed. pfSense 1.2.1-RC4 image I have downloaded couple days ago says

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread Chris Buechler
On Sun, Dec 21, 2008 at 1:21 PM, Lenny five2one.le...@gmail.com wrote: I know for sure that my ISP routed the network. Should I not bother with the proxyarp solution? Don't touch proxy ARP, the chances of that causing a performance problem are virtually nil, and if the network is being routed

Re: [pfSense Support] Outbound NAT to Virt. IP issues. Maybe it's the config, maybe it's VMWare ESXi?

2008-12-22 Thread Chris Buechler
On Mon, Dec 22, 2008 at 6:31 PM, Jason Lixfeld jason-lists.pfse...@lixfeld.ca wrote: Hi Dimitri, It is a CARP address, yes and it does in fact match the mask on the WAN interface; they are both /28. After doing some more digging, I figured it out. It was a VMWare thing. I had to set the

Re: [pfSense Support] replication oddities

2008-12-22 Thread Chris Buechler
On Mon, Dec 22, 2008 at 12:28 PM, Paul Mansfield it-admin-pfse...@taptu.com wrote: In upgrading our firewall cluster whilst also renumbering the network, I've taken copies of the config, edited and uploaded to new machines. As part of process I've done diffs to check I've not screwed up!

Re: [pfSense Support] FAILURE - READ_DMA48 status

2008-12-25 Thread Chris Buechler
On Wed, Dec 24, 2008 at 9:37 PM, Alexandre F. Guimaraes alexandre.fguimar...@gmail.com wrote: Paul, I forgot to tell, this problem occurs after a fresh install of PfSense, after some hours running ok, the problem appears on monitor screen and pfsense system log. The system continues running

[pfSense Support] 1.2.1 released!

2008-12-26 Thread Chris Buechler
see http://blog.pfsense.org/?p=340 - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

Re: [pfSense Support] 1.2.1-RC4 failover supposed to be stateful? OpenVPN config sync?

2008-12-26 Thread Chris Buechler
On Fri, Dec 26, 2008 at 7:11 PM, Jason Lixfeld jason-lists.pfse...@lixfeld.ca wrote: I have made an OpenVPN change, on the master, but that rule has not been replicated to the secondary. I know it's not IPSec, but there was no option to sync OpenVPN settings, so I thought maybe IPsec was

Re: [pfSense Support] 1.2.1 Upgrade - Digital Signature Invalid?

2008-12-27 Thread Chris Buechler
On Sat, Dec 27, 2008 at 9:23 PM, Tim Nelson tnel...@rockbochs.com wrote: Hot on the heels of the 1.2.1-RELEASE, I've just attempted to upload the pfSense-Full-Update-1.2.1.tgz to a production router that is currently running 1.2-RELEASE. The upload succeeds but I'm greeted with a nasty

Re: [pfSense Support] 1.2.1 released!

2008-12-28 Thread Chris Buechler
On Sun, Dec 28, 2008 at 3:25 PM, Karl Fife karlf...@gmail.com wrote: I just upgraded from 1.2 Embedded to 1.2.1 Embedded: Is the following a regression? Yep - the SVG graphs used to not require any authentication, they were open to anyone who had access to the port your webUI was running on

Re: [pfSense Support] 1.2.1 released!

2008-12-28 Thread Chris Buechler
On Sun, Dec 28, 2008 at 4:39 PM, Karl Fife karlf...@gmail.com wrote: I copied the 1.2.1 image to a new CF card, and 'restored' the configuration parameter file I had just exported using the backup/restore function. So far that's the only problem I've detected. Ah, ok, yeah that's the safe way

Re: [pfSense Support] port aliases

2008-12-29 Thread Chris Buechler
On Mon, Dec 29, 2008 at 11:13 PM, Glenn Kelley gl...@typo3usa.com wrote: perhaps its just me - but i did a search online and figured let me ask I created an alias for ports - such as tcpIN , tcpOut, udpIn, udpOut, I however, when going to create a rule find it is basically impossible to put

Re: [pfSense Support] Proxy ARP issues

2009-01-04 Thread Chris Buechler
On Sun, Jan 4, 2009 at 3:26 AM, Morgan Reed morgan.s.r...@gmail.com wrote: In an attempt to diagnose the fault I tcpdump'ed the WAN2 interface and watched a connection attempt from outside, I saw x.x.208.65 posting ARP requests for x.x.208.70 but I saw no replies. If you had proxy ARP

Re: [pfSense Support] em0: Watchdog timeout -- resetting

2009-01-04 Thread Chris Buechler
On Sat, Jan 3, 2009 at 8:50 PM, Nathan Eisenberg nat...@atlasnetworks.us wrote: The error I am seeing is em0: Watchdog Timeout -- Resetting, which seems to have several root causes. I have tried disabling ACPI, both in the BIOS, and in the bootloader. I have disabled all nonessential devices

Re: [pfSense Support] rebooting and pftpx error messages

2009-01-04 Thread Chris Buechler
On Sat, Jan 3, 2009 at 9:03 PM, Alexandre F. Guimaraes alexandre.fguimar...@gmail.com wrote: I´ve embedded version using 1.2.1 built on Thu Dec 25 14:48:40 EST 2008 with 4GB CF Card. The server reboot by it self two or three times per day, see http://devwiki.pfsense.org/pfSenseRebooting

Re: [pfSense Support] em0: Watchdog timeout -- resetting

2009-01-04 Thread Chris Buechler
On Sun, Jan 4, 2009 at 10:39 AM, k_o_l k_...@hotmail.com wrote: Try configuring the portfast feature on the cisco switch for all ports connecting to the FW. This should move the ports from disabled to forwarding without going through all the spanning tree stages which could take up to 50 sec.

Re: AW: [pfSense Support] em0: Watchdog timeout -- resetting

2009-01-05 Thread Chris Buechler
On Mon, Jan 5, 2009 at 2:02 PM, Nathan Eisenberg nat...@atlasnetworks.us wrote: Admittedly, I did not expect to run into hardware/driver issues when I was buying these NICs. :( In fact, that's exactly the reason I went with Intel HW in the first place. Usually that's an accurate

Re: AW: [pfSense Support] em0: Watchdog timeout -- resetting

2009-01-05 Thread Chris Buechler
On Mon, Jan 5, 2009 at 8:32 PM, Nathan Eisenberg nat...@atlasnetworks.us wrote: Any thoughts on a next step in troubleshooting? As I suggested earlier in this thread: http://doc.pfsense.org/index.php/Policy_on_FreeBSD_issues Most frequently these issues are driver bugs. We do not have any

Re: [pfSense Support] FTP Helper Question

2009-01-06 Thread Chris Buechler
On Tue, Jan 6, 2009 at 6:43 PM, David Rees dree...@gmail.com wrote: I recently upgraded a site to 1.2.1 and had some problems with inbound FTP afterwards. In doing my troubleshooting, I noticed that the pftpx daemon never starts on the WAN interface - regardless if the Disable FTP Helper

Re: [pfSense Support] FTP Helper Question

2009-01-06 Thread Chris Buechler
On Tue, Jan 6, 2009 at 9:24 PM, David Rees dree...@gmail.com wrote: Hmm, I'm pretty sure that we had a NAT rule forwarding port 21 to the internal server, but it was a Proxy-ARP IP which would explain why it wasn't getting started - though I'm pretty sure we tried an Other VIP. Only CARP

Re: [pfSense Support] pfsense 1.2.1 wizard bug

2009-01-06 Thread Chris Buechler
On Wed, Jan 7, 2009 at 2:20 AM, Veiko Kukk veiko.k...@krediidipank.ee wrote: I reinstalled my two machines and on both times the initial setup wizard asked for wan IP-s, but did not save the address. Later, when checking WAN interface configuration, the IP address field was empty, but gateway

Re: [pfSense Support] pfsense 1.2.1 wizard bug

2009-01-07 Thread Chris Buechler
On Wed, Jan 7, 2009 at 5:16 AM, Veiko Kukk veiko.k...@krediidipank.ee wrote: Ok, I have one additional bug (at least I'm considering that as bug). When creating port forwarding and also adding automatically apporpriate firewall rules and then deleting that port forward rule, the firewall rules

Re: [pfSense Support] pfsense 1.2.1 wizard bug

2009-01-07 Thread Chris Buechler
On Wed, Jan 7, 2009 at 8:22 AM, Christopher Iarocci ciaro...@tfop.net wrote: I found that the bogon networks in 1.2.1 include at least one legit network. I found out the hard way when one of my VPN tunnels wouldn't establish and it drove me crazy for hours. Turned out unclicking the bogon

Re: [pfSense Support] Secondary IP range for WAN LAN

2009-01-07 Thread Chris Buechler
On Wed, Jan 7, 2009 at 9:34 AM, bsd b...@todoo.biz wrote: Hello, I have requested and obtained from my hosting company an new range of public IPs. How can I configure PFSense to use these knowing that they will be routed on the same physical cable as my previous IPs (WAN if) ? In other

Re: [pfSense Support] Really need some help

2009-01-07 Thread Chris Buechler
On Wed, Jan 7, 2009 at 1:08 PM, Atkins, Dwane P atki...@uthscsa.edu wrote: Is the 1.2.2 going to be a full release or is it RC1? Full release, only 4 changes. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For

Re: [pfSense Support] pfsense 1.2.1 wizard bug

2009-01-07 Thread Chris Buechler
On Wed, Jan 7, 2009 at 7:56 PM, Christopher Iarocci ciaro...@tfop.net wrote: 173.2.245.101 173.* doesn't exist in the bogons file. Upon going to diagnostics--ping, I put in google.com as the host and it resolved and returned pings. I believe my firewall can access the internet. I can say

Re: [pfSense Support] Multi-WAN PPTP?

2009-01-07 Thread Chris Buechler
On Wed, Jan 7, 2009 at 8:55 PM, Morgan Reed morgan.s.r...@gmail.com wrote: On Thu, Jan 8, 2009 at 11:29 AM, Christopher Iarocci ciaro...@tfop.net wrote: I have a single WAN setup and PPTP has been broken since I upgraded to 1.2.1. In version 1.2 it worked perfectly. I've tried changing

Re: [pfSense Support] Couple OpenNTPd Ticket Comments Fix

2009-01-07 Thread Chris Buechler
On Wed, Jan 7, 2009 at 11:15 PM, David Rees dree...@gmail.com wrote: It's not a complete fix, anyway. It actually breaks that other ticket. :-( I'll look at it more when I get a chance. That's exactly what I was afraid of, it would break something else. :) We're confident in the fixes that

Re: [pfSense Support] HELP adduser command 1.2-RELEASE

2009-01-08 Thread Chris Buechler
On Thu, Jan 8, 2009 at 10:34 AM, Nicolas Fabris nicolas.fab...@osprera.org.ar wrote: Hi Folks, Can some1 help me? I have no adduser command on 1.2-RELEASE Can I downlad some port to fix this problem? No, you cannot add users (even if you had the adduser binary, they would be overwritten).

Re: [pfSense Support] Multi-WAN PPTP?

2009-01-08 Thread Chris Buechler
On Thu, Jan 8, 2009 at 3:10 PM, Christopher Iarocci ciaro...@tfop.net wrote: That being said, does ANYONE have a clue why my PPTP server is suddenly broken after the 1.2.1 upgrade? BTW, doing more testing, I tried eliminating the Radius server and used local authentication. The same exact

Re: [pfSense Support] DMZ to LAN access

2009-01-08 Thread Chris Buechler
2009/1/8 Curtis LaMasters curtislamast...@gmail.com: Sounds like a NAT issue. Manually configure our outbound NAT or tell it not to NAT. Not necessary. Traffic between internal interfaces isn't NATed unless you enable AON and configure it to do so. The firewall rules on the DMZ interface

Re: [pfSense Support] Couple OpenNTPd Ticket Comments Fix

2009-01-08 Thread Chris Buechler
On Thu, Jan 8, 2009 at 8:46 PM, JJB onephat...@earthlink.net wrote: So does OpenVPN on pfsense have a known vulnerability, Maybe. This: http://security.freebsd.org/advisories/FreeBSD-SA-09:02.openssl.asc --- III. Impact For applications using OpenSSL for SSL connections, an invalid SSL

[pfSense Support] 1.2.2 released

2009-01-08 Thread Chris Buechler
see http://blog.pfsense.org/?p=351 - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

Re: [pfSense Support] Multi-WAN PPTP?

2009-01-08 Thread Chris Buechler
On Wed, Jan 7, 2009 at 7:29 PM, Christopher Iarocci ciaro...@tfop.net wrote: I also noticed that when I save the config, it shows the PPTP server address as 0.0.0.0 in the log, even though I clearly have the WAN IP address in that field. There's at least one problem, that has to be an IP on

Re: [pfSense Support] mail archives

2009-01-08 Thread Chris Buechler
On Wed, Jan 7, 2009 at 7:11 AM, Paul Mansfield it-admin-pfse...@taptu.com wrote: http://www.pfsense.org/index.php?option=com_contenttask=viewid=66Itemid=71 the link to mail-archive doesn't work for the support or discussion lists Fixed, thanks for the heads up.

Re: [pfSense Support] Auto Update page 1.2.1 / 1.2.2

2009-01-09 Thread Chris Buechler
On Fri, Jan 9, 2009 at 8:55 AM, Pete Boyd petes-li...@thegoldenear.org wrote: After upgrading 1.2.1 to 1.2.2, /system_firmware_check.php says: A new version is now available New version: 1.2.1 Current version: 1.2.2 Update source: http://updates.pfSense.com/_updaters; That didn't get

Re: [pfSense Support] DMZ to LAN access

2009-01-09 Thread Chris Buechler
On Fri, Jan 9, 2009 at 3:15 AM, Peter Todorov pmi...@gmail.com wrote: Curtus, I am no so familiar with pfsense architecture to do SSh login and manual rewriting conf files. I have NAT yes it is AON because I have dual WAN configuration. That's not necessary. There is very old, outdated

Re: [pfSense Support] Dual WAN failover not working

2009-01-09 Thread Chris Buechler
On Fri, Jan 9, 2009 at 4:14 AM, Veiko Kukk veiko.k...@krediidipank.ee wrote: Please, somebody confirm this bug or help me solve possible misconfiguration, I really need to have wan failover. It's not a bug. you have something configured wrong, and not nearly enough info for anybody to tell

Re: [pfSense Support] Multi-WAN PPTP?

2009-01-09 Thread Chris Buechler
On Fri, Jan 9, 2009 at 1:08 PM, Christopher Iarocci ciaro...@tfop.net wrote: Chris, Does it matter which IP address on my LAN it is? Should it be the LAN IP of the PFSense box, or something other than that? Just pick an unused IP on your LAN. Does the radius server see requests coming

Re: [pfSense Support] SVG graphs fixed in Google Chrome

2009-01-09 Thread Chris Buechler
On Fri, Jan 9, 2009 at 11:24 AM, Dave Warren dave-use...@djwcomputers.com wrote: FWIW, I just switched to the Chrome developer channel, SVG graphs started working in 1.2.1. Interesting. I believe it was a Chrome bug, but we were able to work around it.

Re: [pfSense Support] 1.2.2 upgrade signature issue

2009-01-09 Thread Chris Buechler
On Fri, Jan 9, 2009 at 4:48 PM, Volker Kuhlmann hid...@paradise.net.nz wrote: On Sun 28 Dec 2008 15:35:47 NZDT +1300, Chris Buechler wrote: http://blog.pfsense.org/?p=284 I added that info to the 1.2.1 release announcement as well. Maybe it would be a good idea to also add that to the 1.2.2

Re: [pfSense Support] 1.2.2 released

2009-01-11 Thread Chris Buechler
On Sun, Jan 11, 2009 at 11:22 AM, Karl Fife karlf...@gmail.com wrote: Just upgraded to 1.2.2 this morning 1 Tested SVG Graphing on both IE 6 7 works on HTTP, but not HTTPS. Nice work. As documented, I understand the non-support for IE on https if it's not conforming to de-facto or

Re: [pfSense Support] Bridging 4 auto MDIX eth interfaces for LAN zone doesn't work correct

2009-01-11 Thread Chris Buechler
On Sun, Jan 11, 2009 at 9:22 AM, Dominik Schips domi...@s235.de wrote: Hello, I use a Soekris net5501-70 (4 eth interfaces with auto MDIX) with a lan1641 (4 eth interfaces). So I have 8 interfaces in this nice box. My LAN zone are the 4 auto MDIX eth ports brideged together and the other 4

Re: [pfSense Support] newbie missing something fundamental (Soekris 4801/ath0/AP)

2009-01-11 Thread Chris Buechler
On Sun, Jan 11, 2009 at 1:23 PM, William Bulley w...@umich.edu wrote: Here is the graphic: +-+ +--+ +-+ | | | | | ~ | ISP | - | m0n0wall | - | LAN ~ | | | | | ~ +-+ +--+ +-+

Re: [pfSense Support] 1.2.2 released

2009-01-11 Thread Chris Buechler
On Sun, Jan 11, 2009 at 6:02 PM, Karl Fife karlf...@gmail.com wrote: So to clarify, that would be to say auth IS sent in clear text across the network, when using HTTP web admin ? It's base 64 encoded, which is easily reversible without SSL. More info:

Re: [pfSense Support] newbie missing something fundamental (Soekris 4801/ath0/AP)

2009-01-11 Thread Chris Buechler
On Sun, Jan 11, 2009 at 8:20 PM, Sterling Windmill sterl...@ampx.net wrote: Wouldn't the LAN and OPT2 interfaces have to be bridged on his soekris in order to achieve what he wants? Otherwise they are on the same subnet and won't route, correct? Right. From his description, it sounds like

Re: [pfSense Support] Does anybody have working dual wan failover with pfsense?

2009-01-12 Thread Chris Buechler
Veiko Kukk wrote: Hi! I have tried everything i can imagine with no luck - upgraded to 1.2.1 (1.2.0 didnt work), made clean install and new configuration manually, reading every dual wan document from wiki and forums, configured only one router wih no carp interfaces... Dual wan failover is

Re: [pfSense Support] newbie missing something fundamental (Soekris 4801/ath0/AP)

2009-01-12 Thread Chris Buechler
On Mon, Jan 12, 2009 at 8:36 AM, William Bulley w...@umich.edu wrote: First, thanks very much for the reply. Second, I have one question: How does one set (and save) a default route (as in route add default 10.0.0.1) from within pfSense? On the WAN. The WAN interface needs to be the

Re: [pfSense Support] newbie missing something fundamental (Soekris 4801/ath0/AP)

2009-01-12 Thread Chris Buechler
William Bulley wrote: Is this behaviour essential to pfSense? It doesn't seem like it would be a FreeBSD requirement. Maybe a future enhancement to pfSense may make multiple interfaces more interchangeable or clone-like. What if my sis0 interface on my 4801 died (unlikely, to be sure). I

Re: [pfSense Support] DNS in a multi-wan environment

2009-01-13 Thread Chris Buechler
On Tue, Jan 13, 2009 at 6:24 AM, Chris Bagnall li...@minotaur.cc wrote: Greetings list, I have a number of multi-wan sites where the 2 connections are provided by different service providers, each of whom has different DNS servers. My usual practice has been to use one from each provider on

Re: [pfSense Support] hptrr: no controller detected on 1.2.2 and 1.2.1

2009-01-13 Thread Chris Buechler
On Tue, Jan 13, 2009 at 5:10 AM, Peter Todorov pmi...@gmail.com wrote: Hello again, After many tryouts for upgrading and fresh installing the 1.2.2 and 1.2.1 I got same error when system boots: ,,hptrr: no controller detected. I understand that comes with FreeBSD 7, but I cant find how to

Re: [pfSense Support] Bridging 4 auto MDIX eth interfaces for LAN zone doesn't work correct

2009-01-13 Thread Chris Buechler
On Tue, Jan 13, 2009 at 5:39 AM, Dominik Schips domi...@s235.de wrote: Here is my output from ifconfig: The bridge looks fine. The interfaces that are plugged in are forwarding, the ones that don't have link are discarding. Which interface wasn't working when you ran that?

Re: [pfSense Support] Multi-WAN PPTP?

2009-01-14 Thread Chris Buechler
On Wed, Jan 14, 2009 at 2:50 PM, Christopher Iarocci ciaro...@tfop.net wrote: I'd love to use OpenVPN, but the end users have to set it up themselves, and honestly, it's not easy enough for an end user to do. You can build an installer file that has no prompts for the user to click and auto

<    2   3   4   5   6   7   8   9   10   11   >