Re: [pfSense] Nat between vlans

2018-03-30 Thread Moshe Katz
Enabling iOS devices to find a printer on a separate subnet is easy - just install the Avahi package. I have used this in the past, and it works very well. Moshe On Fri, Mar 30, 2018, 1:03 PM Yılmaz Bilgili wrote: > Thank you for your reply. Especially IOS devices can not find others if > they

Re: [pfSense] 10GBASE-T hardware

2018-03-29 Thread Moshe Katz
On Wed, Mar 28, 2018 at 9:44 PM, Paul Mather wrote: > On Mar 27, 2018, at 8:10 PM, Moshe Katz wrote: > > Many thanks for the information and advice. It is much appreciated. > > > According to the specs that I found on HP's website, your HP switch does > > not suppo

Re: [pfSense] 10GBASE-T hardware

2018-03-27 Thread Moshe Katz
Note: that should say CAT*6*A, not *7*. Other than that, no changes. -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Tue, Mar 27, 2018 at 8:10 PM, Moshe Katz wrote: > According to the specs that I found on HP's website, your HP switch does > not support 10Gb, only 1Gb on it

Re: [pfSense] 10GBASE-T hardware

2018-03-27 Thread Moshe Katz
ey perform well. (Note that Approved Optics does not have official Ubiquiti cables, but many on the Ubiquiti forums report that it works with Cisco and other brand cables as long as they are 2 meters or shorter. In a single rack, that should not be an issue.) Moshe -- Moshe Katz -- mo...@ymkatz.net

Re: [pfSense] Access Point config: separating guest from permissible users

2018-03-11 Thread Moshe Katz
u said you already have multiple LANs, you should be familiar with this process.) 9. Configure firewall rules between the different interfaces as necessary. That should be enough to get you started. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 <(301)%20867-3732> On

[pfSense] SIP Port forwarding - will the SIP Proxy help me with this?

2018-03-10 Thread Moshe Katz
that? Any other ideas? Thanks, Moshe -- Moshe Katz -- kohenk...@gmail.com -- +1(301)867-3732 ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Access Point config: separating guest from permissible users

2018-03-10 Thread Moshe Katz
to do this. Most hardware supports running multiple SSIDs (a.k.a. WiFi network names) on a single band, so you could have both of your WiFi networks on both bands - 5Ghz for performance and 2.4Ghz for longer range. Most modern dual-band devices will automatically pick the best oft eh two sign

Re: [pfSense] Configs or hardware?

2018-02-19 Thread Moshe Katz
comes a point in time at which it's time to move on, and ten years is a very long life for commodity computing hardware. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] rules were ignored.

2017-08-21 Thread Moshe Katz
I know that negative experience isn't so helpful to diagnose an issue, but we have a very similar setup that's been in place for over 10 years, and we've never seen such a thing. Moshe On Mon, Aug 21, 2017 at 12:09 PM, greg whynott wrote: > I'm not seeking help but rather thought I'd share an

Re: [pfSense] Netgate SG-2220 and Leviton power supply

2017-08-02 Thread Moshe Katz
The page you linked to says that the SG-2220 needs 5A, but you say the Leviton power supply is 4A. That's probably a bad idea. In fact, according to the spec sheet though, the Leviton power supply is actually only 3.3A. That's almost definitely a bad idea. -- Moshe Katz -- mo...@

Re: [pfSense] IPv6 1:1 NAT problems

2017-08-02 Thread Moshe Katz
those have been IPv6 enabled for ages. It's an experiment to see how many visitors can get away with not noticing that they have no IPv4 connectivity. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 <(301)%20867-3732> On Wed, Aug 2, 2017 at 10:32 PM, Adam Thompson wrote: >

Re: [pfSense] 2.3.4-RELEASE (amd64) - Kernel Panics

2017-07-13 Thread Moshe Katz
-- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Wed, Jul 12, 2017 at 9:43 PM, WebDawg wrote: > Hello, > > I just upgraded 2.3.something to 2.3.4 and immediately upon reboot > experienced kernel panics/crash dumps over and over. The system would > cycle over and over. > >

Re: [pfSense] Migration from an old linux firewall

2017-03-29 Thread Moshe Katz
I'm not entirely sure how you had this working with your old firewall - I would think it would have the same issue. The best thing for you to do would be to separate the two LANs. You probably don't need to change any cabling because most server network cards let you set a default VLAN to use. (If

Re: [pfSense] USB question

2017-03-16 Thread Moshe Katz
For front USB ports (on a traditional case -- small form factor may have the front ports directly connected too), the best way is to open the case and unplug them from the motherboard. For the ports on the motherboard itself, the glue and/or covers that other people suggested are likely your best o

Re: [pfSense] DNS problem

2017-02-19 Thread Moshe Katz
, PiHole -> pfSense, or pfSense -> Internet) seems to be the problem. Set a filter on the packet capture to capture only DNS traffic (port 53). Then you can see if the request is malformed, if no response ever comes back, or if the response is malformed. Moshe -- Moshe Katz -- mo...@ymkatz.n

Re: [pfSense] pfsense rules

2016-12-08 Thread Moshe Katz
This is exactly what we have done for our guest WiFi network to allow users on the WiFi to access the Internet and all of the public services that run on our internal network. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Thu, Dec 8, 2016 at 11:51 AM, Luc Paulin wrote: > Hi

Re: [pfSense] FW: Programatically add IP to Alias

2016-11-06 Thread Moshe Katz
he dynamic DNS to the other users. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Sat, Nov 5, 2016 at 8:18 PM, Kelly Prescott wrote: > Create a dynamic dns name for your ip address, have your client update it > when it gets a new ip and use the dns name as your alias. >

Re: [pfSense] is there a way to get pfsense to not fetch help from the internet?

2016-09-30 Thread Moshe Katz
lp.php to point to your local copy. Keep in mind that you will probably have to do this again every time you update pfSense. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Fri, Sep 30, 2016 at 11:33 AM, qmail wrote: > Everythime i as for help from pfsense, it appears that it

Re: [pfSense] 2 networks Cards, but OPT1 not acess internet.

2016-09-23 Thread Moshe Katz
t outgoing traffic rule on each interface. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Fri, Sep 23, 2016 at 2:03 PM, Rodrigo Cunha wrote: > Ii list, have a problem > I make 2 networks wich 2 private ips diferents i have three diferents > enernet cards. > the Pfs

Re: [pfSense] nat or routing?

2016-09-09 Thread Moshe Katz
uld only have a single hop - directly from .15 to .250. It will never hit the pfSense. What type of switches do you have? How are they configured? Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Fri, Sep 9, 2016 at 12:31 PM, Pol Hallen wrote: > Does the traceroute fail on the

Re: [pfSense] nat or routing?

2016-09-09 Thread Moshe Katz
Does the traceroute fail on the first hop, or does it get to the pfSense? Can you share with us the actual terminal output of the traceroute? -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Fri, Sep 9, 2016 at 12:21 PM, Pol Hallen wrote: > In Status/System Logs/Settings check the &

Re: [pfSense] nat or routing?

2016-09-09 Thread Moshe Katz
quot; - Source: "LAN3 net" - Destination: "HostsWebAllowedFromWifi" - Destination Port Range: "PortsWebAllowedFromWifi" - Rule on LAN3 interface (our guest WiFi): - Action: "Pass" - Source: "LAN3 net" - Destina

Re: [pfSense] Bridging to wireless interface issues (ping not working) on 2.3.2

2016-09-08 Thread Moshe Katz
Ray, Can you clarify which IP range is assigned where? We can make an educated guess based on the information you provided, but it's always better to have confirmation. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Thu, Sep 8, 2016 at 6:06 AM, Ray wrote: > Hi,

Re: [pfSense] 3 hard locks this week... any ideas?

2016-09-01 Thread Moshe Katz
I have seen those symptoms on three different machines over the years, and all of them were hardware failures - RAM on one of them, power supply on another, and an old consumer-grade PCI network card on the third. (Most of the pfSense machines I support are running low-end salvaged hardware, so in

Re: [pfSense] NAT from WAN to LAN

2016-08-15 Thread Moshe Katz
ou and the Internet, so your pfSense is doing "double NAT" - a.k.a NAT inside NAT. While this usually works, it's poor network design and it can sometimes cause weird problems. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Sun, Aug 14, 2016 at 4:55 AM, Antonio wrote:

Re: [pfSense] Ethernet card supporting gpon g984.2+ ?

2016-08-09 Thread Moshe Katz
lt to deal with.) Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Tue, Aug 9, 2016 at 8:10 PM, Alexandre Paradis < alexandre.para...@gmail.com> wrote: > Hello everyone, > > I am trying to figure out if a Mellanox connect X-2/3 will support a 10 gig > gpon gbic. >

Re: [pfSense] looking for perfect pfsense box for home?

2016-08-04 Thread Moshe Katz
message, and I'm glad to find that I was reading too much into those words. I look forward to continuing to support pfSense with my participation and, in the future, purchases when the opportunity presents itself for me to do so. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Thu

Re: [pfSense] looking for perfect pfsense box for home?

2016-08-03 Thread Moshe Katz
ht me into the pfSense community ten years ago in the first place. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Wed, Aug 3, 2016 at 9:36 PM, Jim Thompson wrote: > Here's all you need to know: > > 1) we only test releases on the hardware we sell, or have sold in t

Re: [pfSense] Mini-USB console on new pfSense certified hardware

2016-08-01 Thread Moshe Katz
dapter. You could also use a set of USB over twisted pair adapters, but those aren't necessarily the most dependable pieces of hardware over long distances. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Mon, Aug 1, 2016 at 4:10 PM, Karl Fife wrote: > USB HOST to RS232 ada

Re: [pfSense] Lightning strike

2016-07-25 Thread Moshe Katz
On Jul 25, 2016 7:06 PM, "Jim Thompson" wrote: > Pic of 7541, see for yourself. > > http://imgur.com/5RiHxOz > > On Mon, Jul 25, 2016 at 5:57 PM, Moshe Katz wrote: > > > Since you described that the board has isolation transformers, I would > > assume

Re: [pfSense] Lightning strike

2016-07-25 Thread Moshe Katz
ut looking at the board directly. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Mon, Jul 25, 2016 at 5:41 PM, Karl Fife wrote: > The 6th Ethernet port (em5) on my Lanner fw-7541D died Saturday night > during the electrical storm. Just the one port. > > Appar

Re: [pfSense] pfSense switch

2016-05-24 Thread Moshe Katz
Yes. You need to make sure that any firewall rules to allow LAN traffic are applied to the bridge instead of to just a single interface (whichever interface used to be your LAN). Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Tue, May 24, 2016 at 11:24 AM, FrancisM wrote: >

Re: [pfSense] pfSense switch

2016-05-24 Thread Moshe Katz
Yes, you can, but don't expect the performance to be as good as a real switch. What the real switch is doing in hardware, you will be doing in software. To do this, you need to add those ports to a "Bridge" interface and set that bridge to be your LAN. Moshe -- Moshe Katz -- m

Re: [pfSense] IPv6 with Comcast and two pfSense - invalid prefix length, XID mismatch

2016-05-20 Thread Moshe Katz
On Fri, May 20, 2016 at 12:19 PM, WebDawg wrote: > On Fri, May 20, 2016 at 11:06 AM, Moshe Katz wrote: > > > If you have static IPs from Comcast, you cannot put the device in bridge > > mode. The way that Comcast static IPs work is that your Comcast device > > advertis

Re: [pfSense] IPv6 with Comcast and two pfSense - invalid prefix length, XID mismatch

2016-05-20 Thread Moshe Katz
If you have static IPs from Comcast, you cannot put the device in bridge mode. The way that Comcast static IPs work is that your Comcast device advertises itself to the rest of Comcast's network as the route to your static addresses. In effect, just pretend that this Comcast device is in Comcast's

Re: [pfSense] IPv6 with Comcast and two pfSense - invalid prefix length, XID mismatch

2016-05-19 Thread Moshe Katz
nd runner-up of Consumerist's "Golden Poo Award" for worst company in America. -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Thu, May 19, 2016 at 2:49 PM, Steve Yates wrote: > I neglected to mention it but I did find and read many articles on > Comcast modem suppor

Re: [pfSense] IPv6 with Comcast and two pfSense - invalid prefix length, XID mismatch

2016-05-18 Thread Moshe Katz
at defies all logical explanation, Comcast will not let you BYOM if you use static IPs. Some people (also mentioned in the forum link above) have gotten prefix delegation to work by asking Comcast to switch their SMC router for a Netgear one. -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___

Re: [pfSense] What might be throttling my wireless?

2016-05-15 Thread Moshe Katz
When I had problems with throughput through Unifi Access Points with pfSense, I replaced every network component, including the pfSense box and the access points. In the end, my problem turned out to be an issue in how some of the VLANs were handled by the (defective) switch. Can you test to see w

Re: [pfSense] USB3 to ethernet adaptor

2016-05-03 Thread Moshe Katz
wo used Dell switches that have been great. Like WebDawg, I have had a lot of good experiences with buying Dell 28xx switches on eBay. Note that you will probably also find a lot of 27xx switches on eBay. While those are also gigabit (unlike the 26xx and older, which only have 2-4 gigabit por

Re: [pfSense] Fw: new message

2016-04-26 Thread Moshe Katz
I sent an email to list-ow...@lists.pfsense.org asking for action on this. All of those people are on the list itself too, but it may help get something done. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Tue, Apr 26, 2016 at 10:08 AM, WebDawg wrote: > On Tue, Apr 26, 2016

Re: [pfSense] Ambiguous gateway monitoring

2016-04-15 Thread Moshe Katz
quot; router while I order and replace hardware is painful! -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Fri, Apr 15, 2016 at 2:23 PM, Steve Yates wrote: > Are either of you on 2.3? > > > https://doc.pfsense.org/index.php/2.3_New_Features_and_Changes#Gateways.2FRouting >

Re: [pfSense] Ambiguous gateway monitoring

2016-04-15 Thread Moshe Katz
only thing wrong with it is that the software just plain wasn't designed for this use-case. Anyone please feel free to correct me if this information is no longer correct. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Fri, Apr 15, 2016 at 1:31 PM, Karl Fife wrote: > I&

Re: [pfSense] Disable DHCP domain-name request

2015-11-20 Thread Moshe Katz
boxes that receives a domain name in the DHCP response. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Fri, Nov 20, 2015 at 4:05 AM, Marco wrote: > We receive the interface network configuration on the WAN via DHCP. > This works, however somehow our ISP or the modem pushes a doma

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-28 Thread Moshe Katz
On Tue, Jul 28, 2015 at 3:54 PM, Ryan Coleman wrote: > > > On Jul 28, 2015, at 2:50 PM, Moshe Katz wrote: > > > > On Tue, Jul 28, 2015 at 3:44 PM, Vick Khera vi...@khera.org>> wrote: > > > >> On Sun, Jul 26, 2015 at 10:31 PM, Ryan Coleman > >

Re: [pfSense] How do I harden my pfsense install WRT TLS and ssh?

2015-07-28 Thread Moshe Katz
me that people always have their sites set up so that www redirects to bare, bare redirects to www, or both bare and www show the same content. While this may not always be true, it is an assumption that Qualys and many other people make, so it is included in the grade. Moshe -- Moshe Katz -- mo..

Re: [pfSense] Pfsense on VMware in Hetzner

2015-06-10 Thread Moshe Katz
Do you have the IP alias entered once for the whole /29 subnet or do you have all of the addresses entered as individual virtual IPs? We had a similar issue when we switched from Verizon DSL to Verizon FIOS many years ago - the Virtual IPs had worked on the DSL when they had been defined as a grou

Re: [pfSense] pfSense as GUI and stripped OS for dedicated Cacheing name server

2015-03-31 Thread Moshe Katz
ng-dns-server I think there also used to be something on the Wiki, but I can't seem to find it there or via the WayBack Machine. If all you hook up to the pfSense box is a LAN connection, then it doesn't do any firewall/routing stuff but you can still use its DNS server, DHCP server, etc

Re: [pfSense] FW: Virus Detected

2015-03-24 Thread Moshe Katz
h the ISP, but I doubt that it'll make any difference. Just ignore the message. Your virus scanner did catch it, after all. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Tue, Mar 24, 2015 at 6:09 AM, Mikey van der Worp wrote: > Em? > > Why is this list sending me vir

Re: [pfSense] Dynamic DNS and Route 53

2015-03-11 Thread Moshe Katz
Just three things to add to what Brian said. For Windows hosts, run "ipconfig /flushdns" to clear the cache. (You can also use "/displaydns" to set what's in the cache, but you're going to have to ease through the entire thing so it's probably not worth it.) If you are using Google Chrome (on any

Re: [pfSense] polling pfsense status for a combined dashboard

2015-01-27 Thread Moshe Katz
@athompso.net > > As Adam said, I'm pretty sure that there used to be something in the Wiki. However, I'm also pretty sure that it was targeted at pfSense 1.x and that it was removed from there because something in the 2.x changes broke it. Moshe -- Moshe Katz -- mo...@ymkatz.net --

Re: [pfSense] Enforcing policy routing gateway

2015-01-11 Thread Moshe Katz
n all other interfaces except the VPN. (Aliases could help simplify that, but you may or may not actually want to do it, depending on the rule complexity.) Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ pfSense mailing list ht

Re: [pfSense] ldaps:// + FreeRADIUS2 package on 2.1.5-RELEASE (amd64)

2014-12-16 Thread Moshe Katz
DAP server supports it. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Wed, Dec 17, 2014 at 12:06 AM, Jérôme Alet wrote: > > Hi there, > > Does anyone know how to use ldaps:// to connect to the LDAP server from > FreeRadius's configuration web form in pfSense

Re: [pfSense] Proxy Local Users - how to change password

2014-11-14 Thread Moshe Katz
interface. Your changes would also likely be overwritten when the firewall reboots. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list

[pfSense] Any experience with Broadcom 5709 in HP network card?

2014-11-09 Thread Moshe Katz
ettings in the pfSense web interface. Will the claimed "support" work with pfSense, or is this one of the card types that doesn't work? Thanks, Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List mailing list Lis

Re: [pfSense] Disabling auto tone on APU1

2014-10-28 Thread Moshe Katz
it's annoying and loud in my > office. Boo. > > Thanks, > Ryan > It's at the bottom of system_advanced_notifications.php. There is a checkbox "Disable the startup/shutdown beep". -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 _

Re: [pfSense] bogon networks

2014-09-28 Thread Moshe Katz
The pfSense bogon list is at https://files.pfsense.org/lists/fullbogons-ipv4.txt and the current version there also doesn't have your block. Make sure that your pfSense has the newest list. (This should usually be done automatically, but you should be able to do it from the console/SSH by running

Re: [pfSense] OT: Good network switch for 10 machines?

2014-09-23 Thread Moshe Katz
! Thanks! > > > Kenward > If you don't need to do any fancy routing or VLAN stuff, just go on Amazon or NewEgg and get the top-rated 16-port *unmanaged* gigabit switch. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List

[pfSense] HPET timer issues?

2014-09-23 Thread Moshe Katz
the system timer to LAPIC, and the load now looks much more like what I expect it to be. My question is two-fold: 1. Has anyone else seen this behavior? 2. I haven't noticed any performance issues after the switch, but is there anything that I need to be concerned about? Thanks, Moshe --

Re: [pfSense] Port forward with a schedule

2014-09-09 Thread Moshe Katz
the schedule disables the filter > rule. > > Thanks > Peter, It's probably not the most elegant of solutions, but you could try putting in a *deny* rule for the times that you do not want to allow access. Just make sure that it is higher up in the rules list than the

Re: [pfSense] Failed Downloads

2014-08-02 Thread Moshe Katz
On Aug 1, 2014 6:46 PM, "Brian Caouette" wrote: > > I subscribe to a karaoke service for my DJ business. When i'm connected to pfsense downloads are failing. This is what it looks like in squid realtime: > > 01.08.2014 18:41:10 > 192.168.1.10 > NONE/411 > http://www.kjmediaservices.com/safefiles/D

Re: [pfSense] How can this be done?

2014-07-31 Thread Moshe Katz
he setup itself. I used an Apple Airport Express as my travel router, but there are others that may work better - and the Airport Express is very hard to troubleshoot because it has no web interface. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] pfSense 2.1 + Squid3 + SquidGuard redirect

2014-07-17 Thread Moshe Katz
t Squid itself is caching the > response from when my configuration was previously broken? > > Thanks, > Dean > > > On Thu, Jul 17, 2014 at 12:00 PM, Moshe Katz wrote: > >> The first thing you can check is whether the error is being introduced in >> SquidGuard

Re: [pfSense] pfSense 2.1 + Squid3 + SquidGuard redirect

2014-07-17 Thread Moshe Katz
The first thing you can check is whether the error is being introduced in SquidGuard itself or later in the stack. Run "/usr/pbi/squidguard-squid3-amd64/bin/squidGuard -c /usr/pbi/squidguard-squid3-amd64/etc/squidGuard/squidGuard.conf" in a shell (console or SSH) and pass those URLs to it to see t

Re: [pfSense] Dependencies on older packages?

2014-06-11 Thread Moshe Katz
s of packages than the ones already installed. Is this to be > expected? > > The only other package I had installed was iperf (via the GUI). > > Thanks, > > Brian. > I'm not sure that it's a big deal, at least for wget. On my pfSense test machine which is cur

Re: [pfSense] installing vmtools

2014-05-21 Thread Moshe Katz
On Wed, May 21, 2014 at 11:57 AM, Moshe Katz wrote: > >> On Wed, May 21, 2014 at 2:39 PM, Florio, Christopher N < >> flo...@email.unc.edu> wrote: >> >>> Any idea a URL that I could get this package from? Sounds like a good >>> option. >> >>

Re: [pfSense] installing vmtools

2014-05-21 Thread Moshe Katz
.freebsd.org/pub/FreeBSD/ports/amd64/packages-9-current/perl5/(or the i386 location) for other versions of 5.12, 5.14, and 5.18 Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List mailing list List@lists.pfsense.org https://lists.pfs

Re: [pfSense] High iostat

2014-05-12 Thread Moshe Katz
s/i386/packages-8.3-release/Latest/lsof.tbz " (The 8.3 version of the package should work even on the older 8.1-based pfSense. I've had no problems with it on an older testing box I have.) Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 __

Re: [pfSense] Intel Pro/1000 PT Quad Port PCI-e Gigabit Ethernet

2014-05-10 Thread Moshe Katz
these (and the Dual-port Pro/1000 MT version) in pfSense with no problems. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] Annoying Comcast Issue When Changing Hardware

2014-05-10 Thread Moshe Katz
swapped around? > > -A > > > On Sat, May 10, 2014 at 7:55 PM, Moshe Katz wrote: > >> >> Hi Aaron, >> >> Most cable modems I have worked with in the US (on Comcast, Optimum, and >> RCN) all do ARP caching, so you need to reboot them when you change the

Re: [pfSense] Annoying Comcast Issue When Changing Hardware

2014-05-10 Thread Moshe Katz
SL, it is best to already be on the phone with Verizon support to have them manually clear the cache. At least rebooting the cable modem is something you can do yourself. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] TCP leak, new OpenSSL flaw

2014-04-30 Thread Moshe Katz
; "Firewall" page. You can use "pfctl -sa" to verify that the "scrub" rules exist on your firewall. I have not been able to determine on my own whether pfSense is affected by 14:09 or not. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] Interface options for pfsense

2014-04-22 Thread Moshe Katz
On Sun, Apr 20, 2014 at 6:32 PM, Volker Kuhlmann wrote: > I've been running pfsense for many years (and been very happy with it) > on scrapped PCs with a Sun 4-port Ethernet PCI card because I need 5 > Ethernet ports. > > Now freebsd dieing on the hme driver effectively turns those cards into > sc

Re: [pfSense] RDP port forward based on destination name.

2014-03-27 Thread Moshe Katz
On Mar 27, 2014 4:22 PM, "Chris Bagnall" wrote: > On 27/3/14 8:17 pm, Walter Parker wrote: > >> That's what I would recommend. The VPN can serve as a second gateway to >> protect the RDP from the outside world, so you could pitch this solution >> as >> higher security method of network access. >>

Re: [pfSense] RDP port forward based on destination name.

2014-03-27 Thread Moshe Katz
I do this using one of the Windows servers as a "Remote Desktop Gateway". This feature is built in to the Remote Desktop server and client (so no need for VPN - though you may choose to use one anyway) a you need to do is enabled it on the server and set the client to use it. Moshe (Sorry for top

Re: [pfSense] Fwd: Firewall Log

2014-03-19 Thread Moshe Katz
On Mar 19, 2014 7:59 AM, "Brian Caouette" wrote: > > > > > Original Message > Subject: > Firewall Log > Date: > Thu, 13 Mar 2014 12:48:33 -0400 > From: > Brian Caouette > To: > pfSense support and discussion > > > Also seeing this in the log: > > Mar 13 11:37:36 > WAN > 0.0.0.0

Re: [pfSense] screen package for pfsense

2014-03-10 Thread Moshe Katz
lready have) to keep the process running. (Something like this: "nohup tcpdump &") Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] DHCP and hostname

2014-02-26 Thread Moshe Katz
On Feb 26, 2014 9:32 AM, "kol" wrote: > > > Just wondering if someone could explain to me why does the pfSense syslog > show the host name (HP-SLVR in the output below) when requesting DHCP via > the LAN segment, but no host name displayed when requesting via the > wireless ? > > > > Feb 25 15:45

Re: [pfSense] Errors from packages that are no longer installed on pfsense

2014-02-20 Thread Moshe Katz
Spam" package and in the upgrade script for 025 to 026 and for 099 to 100. However, since it is not in the current default config file<https://github.com/pfsense/pfsense/blob/master/conf.default/config.xml>, I don't know if it's still needed. Since "vnstat" is a pa

Re: [pfSense] How to monitor left (free) space on hard drive ?

2014-02-09 Thread Moshe Katz
.2.tbz Alternatively, you could write a small PHP script that calls " send_smtp_message" in "/etc/inc/notices.inc" to send the email using the email notification settings that are set in "System" -> "Advanced" -> "Notifications", and cal

Re: [pfSense] Recent FreeBSD Security Vulnerabilities

2014-01-20 Thread Moshe Katz
ntion this workaround, if you do use SNMP, you can probably get away with only allowing SNMP traffic from trusted hosts. (In truth, you should be doing that anyway.) > http://www.freebsd.org/security/advisories.html > > Thanks, > Adam > HTH, Moshe -- Moshe Katz -- mo..

Re: [pfSense] Compile on Sun v215

2013-12-09 Thread Moshe Katz
On Dec 9, 2013 6:37 PM, "Adam Hunt" wrote: > > What parts of pfSense are so arch dependent. One would expect being based on FreeBSD would make it quite portable. > > > On Mon, Dec 9, 2013 at 3:25 PM, Jim Thompson wrote: >> >> it would be a lot of work. >> >> There was some work done back in histo

Re: [pfSense] Hardware requirements for gigabit wirespead

2013-11-05 Thread Moshe Katz
capacity, you will still be saving processor cycles for doing the other stuff that the machine needs to do. Whatever you do, stay* very far away* from the Celeron. Performance will likely be terrible. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732

Re: [pfSense] Hardware requirements for gigabit wirespead

2013-10-24 Thread Moshe Katz
RY boards (Intel NIC, onboard video, so > ideal for server environments). I'm going to second this one - stay away from Realtek NICs for real work (though if you go with AMD as I mentioned above, you'll likely be Broadcom onboard, not Intel, and y

Re: [pfSense] issue a STARTTLS command

2013-10-16 Thread Moshe Katz
says "Enable SSL/TLS Authentication". Make sure that box is checked, and it should work. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] naive suggestion: conform to US laws

2013-10-11 Thread Moshe Katz
On Fri, Oct 11, 2013 at 3:11 PM, Thinker Rix wrote: > On 2013-10-11 21:20, Walter Parker wrote: > >> Who would you trust more that ESF? Why,specifically, would you trust >> another group of people to be more trustworthy? >> > > The point is not untrusting ESF or anybody else. The point is that ESF

Re: [pfSense] Public /25 Network with Virtual IP

2013-08-15 Thread Moshe Katz
to work properly. I have absolutely no idea why this is the case, and I never had time to look into it further. If you do have to add them all individually, the easiest way is probably to add one, then download a Configuration backup, edit the backup file

Re: [pfSense] pfsense cannot find suitable hard drive to install on

2013-06-11 Thread Moshe Katz
te: > > Good to know it should work. If onlyi can get it to actually work. It has > 2 drives which I doubt both are bad so it's got to be some configuration. > I just wish I knew what I was doing. > > On 6/11/2013 at 9:08 PM, "Moshe Katz" wrote: > > On Tue, Jun

Re: [pfSense] pfsense cannot find suitable hard drive to install on

2013-06-11 Thread Moshe Katz
On Tue, Jun 11, 2013 at 11:48 PM, wrote: > I recently traded some old computer equipment for an HP Proliant DL360 G3. > Its a nice little rackmount with dual Intel Xeon 2.8GHz processors 3 > onboard gigabit NIC's and a PCI-X bus and 2 PCI-X expansion slots. Its > light on RAM at only 512MB but th

Re: [pfSense] Bouncing DNS access between different VLAN's on thier public addresses?

2013-04-29 Thread Moshe Katz
o the Internet. You can confirm this by looking at the routes page in the web interface. To fix it, you need to add a route manually to tell it to send the traffic out on the Internet instead of directly from one vlan to the other. Moshe -- -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 _

Re: [pfSense] timezone problem

2013-04-17 Thread Moshe Katz
On Wed, Apr 17, 2013 at 8:39 AM, Cristian Ionescu-Idbohrn < cristian.ionescu-idbo...@axis.com> wrote: > On Wed, 17 Apr 2013, Moshe Katz wrote: > > > > Did you reboot the machine after you changed the time zone? As I > > understand it, many system components don&

Re: [pfSense] timezone problem

2013-04-17 Thread Moshe Katz
e.org > http://lists.pfsense.org/**mailman/listinfo/list<http://lists.pfsense.org/mailman/listinfo/list> > Hello, Did you reboot the machine after you changed the time zone? As I understand it, many system components don't see the change unless you restart them, and the easiest way to r

[pfSense] Firmware bug in Intel Ethernet Controllers

2013-02-06 Thread Moshe Katz
Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] pfSense-2.0.2-RELEASE-arch.iso.gz

2013-01-19 Thread Moshe Katz
I see the CD images on all of the mirrors that I looked at. However, they are not called "pfSense-2.0.2-RELEASE-[arch].iso.gz". Instead, look for: "pfSense-*LiveCD*-2.0.2-RELEASE-[arch].iso.gz" Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 On Sat, Jan 19, 201

Re: [pfSense] installing a database server

2012-09-21 Thread Moshe Katz
n all kinds of other services on a pfSense box that I use for testing. The main issue will likely be network performance. As has been discussed many times on this list in the past, software routing is inherently slower than routing at a hardware level using purpose-built devices. Any addit

Re: [pfSense] pfsense 2.0.1, soekris 6501 and amd64

2012-09-12 Thread Moshe Katz
On Wed, Sep 12, 2012 at 1:38 PM, Nenhum_de_Nos wrote: > > On Wed, September 12, 2012 13:29, Moshe Katz wrote: > > On Wed, Sep 12, 2012 at 12:35 AM, Nenhum_de_Nos < > math...@eternamente.info>wrote: > > > >> hail, > >> > >> I tried and got: &

Re: [pfSense] pfsense 2.0.1, soekris 6501 and amd64

2012-09-12 Thread Moshe Katz
gt; > matheus The 6501 <http://soekris.com/products/net6501.html> uses 32-bit Atom E6xx chips, which are 32-bit only<http://en.wikipedia.org/wiki/List_of_Intel_Atom_microprocessors#Single-Core_Embedded_processors>. I'd try 32-bit and see if it works. Truth is though, that I'

Re: [pfSense] Ping Wan Virtual IP Firewall Rule - Is this possible?

2012-08-08 Thread Moshe Katz
On WAN, we set a rule for "Allow ICMP from * to *". You may be able to get by with a more-restrictive rule but this is the one we use. Moshe -- Moshe Katz -- mo...@ymkatz.net -- +1(301)867-3732 ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] Accessing web-interface on WAN network

2012-07-31 Thread Moshe Katz
o use the "IP Alias" type instead of the "Other" type and then not have to configure anything using ifconfig. I am away from the office for the next few days, but if you still need help when I get back I can plug something in on the W

Re: [pfSense] IP Alias and IPSec

2012-07-30 Thread Moshe Katz
one give me some advice on this? > > Cheers, > James > I don't know the full details, but I do know that certain Virtual Address types support/do-not-support certain features. I use ProxyARP Virtual Addresses on my systems (though I don't currently use IPSec so I don'

Re: [pfSense] Using pfSense to route inbound traffic via Domain Name instead of IP

2012-07-25 Thread Moshe Katz
people who have gotten Pound ( http://www.apsis.ch/pound/) to run on a pfSense box, but there is currently no package for it and therefore no GUI. Two parenthetical notes about SNI: - IIS 8 (release next month or so, RC currently available) does support SNI. - Windows XP does

  1   2   >