[pfSense] CoDel QOS

2015-02-06 Thread WebDawg
Can someone tell me the proper way to apply CoDel QoS? http://en.wikipedia.org/wiki/CoDel https://forum.pfsense.org/index.php?topic=88162.0 I am getting conflicting answers on how it is applied. >From what I have read, you just turn it on, that is it. No parameters. I was trying to find just

Re: [pfSense] Visual seperators?

2015-02-10 Thread WebDawg
That would be cool. On Tue, Feb 10, 2015 at 6:44 AM, wrote: > Hi, > > Is there any possibility to create "groups" or otherwise have seperators > between rules on the firewall page? Basically what I'm trying to do is make > it easier to see which rules are "connected" could be based on host or >

Re: [pfSense] Firewall Reboots at Halt

2015-02-10 Thread WebDawg
You mean this: https://doc.pfsense.org/index.php/Halt_System ? The fact that it reboots instead of halting? On Tue, Feb 10, 2015 at 1:25 AM, pratap koppal wrote: > Hi All, > > Configured Firewall+Squid+Squidguard on Pfsense version 2.1.3. Everything is > working well exept, when i Halt Firewal

Re: [pfSense] Migrating from RouterOS to PFSense

2015-02-10 Thread WebDawg
On Tue, Feb 10, 2015 at 1:41 AM, Tiernan OToole wrote: > Good morning all. > > For the year or so, i have been running Microtik Router OS on either their > own hardware or my own hardware, and all has mostly been good, bar the fact > the OS wont see more than 2Gb of ram and my machine has 8... > >

Re: [pfSense] Triggering VPN connections

2015-02-10 Thread WebDawg
I had to do something like this at one point except my VPN box was separate. Using firewall rules to specify gateways to use with destination ips and such. You want to see what ip is on an interface first and then decide to connect or not? Please explain more. On Mon, Feb 9, 2015 at 11:05 PM, C

Re: [pfSense] Triggering VPN connections

2015-02-11 Thread WebDawg
etworks. > Is this possible? > > On Tue, Feb 10, 2015 at 10:27 AM, WebDawg wrote: >> >> I had to do something like this at one point except my VPN box was >> separate. Using firewall rules to specify gateways to use with >> destination ips and such. >> >

Re: [pfSense] Design Best Practice Question

2015-03-06 Thread WebDawg
On Fri, Mar 6, 2015 at 2:16 PM, Tim Hogan wrote: > I am looking for some advice from the group about the best way to put > pfSense in my environment so that it can filter all traffic. The cable > provider that I use has given me a /29 of static IP address and one of > those addresses is assigned

Re: [pfSense] Issue with OpenVPN certificate depth validation and long certificate subjects

2015-03-10 Thread WebDawg
On Sat, Mar 7, 2015 at 2:32 PM, David Durrleman < david.durrle...@shift-technology.com> wrote: > [I am not subscribed to this list; please kindly copy me on any answer] > > Hi, > > I believe I have found a bug in pfsense. I am reporting it here per > https://doc.pfsense.org/index.php/Bug_reporting

[pfSense] pfSense FreeBSD Version

2015-03-10 Thread WebDawg
I have an issue with the version of BSD used in pfSense and my hardware. I was given the following advice to fix some hardware I use with pfSense and I would like to try it: Please try a snapshot of HEAD. It should try to allocate a PCI bus number for your second device which is currently failin

Re: [pfSense] Router on a stick limiting

2015-03-11 Thread WebDawg
On Wed, Mar 11, 2015 at 7:16 AM, Jon Munford wrote: > I am running a standard router on a stick setup with pfsense as the router > and a l3 switch doing the vlan routing. Im trying to do a limiter on those > routes in my LAN firewall of PFsense but it's not working like i think it > should. Is

Re: [pfSense] pfSense FreeBSD Version

2015-03-12 Thread WebDawg
On Thu, Mar 12, 2015 at 12:20 AM, Jim Thompson wrote: > > We’ve recently made a -CURRENT, but not -HEAD. Not all of the patches > apply cleanly to -CURRENT, though it’s close. > > More information about which hardware you’re having trouble with might > help, too. > > jim > > I am looking for th

Re: [pfSense] pfSense FreeBSD Version

2015-03-16 Thread WebDawg
That seems pretty clear to me that the fix to the driver is only in the HEAD branch, and could theoretically be merged back to 10.x branch by copying the diffs from commit 261790. So what you need to do is try booting the bleeding edge HEAD branch of the kernel and if it detects the second NIC you

Re: [pfSense] connecting from LAN network to pfsense WAN IP?

2015-03-16 Thread WebDawg
On Sun, Mar 15, 2015 at 7:54 PM, Maik Heinelt wrote: > > Hello, > I have multiple IPs running on my pfsense 2.1 router. > Sometimes a server from LAN needs to connect to a WAN IP of the same > pfsense router, but this doesn't seems to work. > > For example mail server (LAN 11.11.11.1, but WAN 221

Re: [pfSense] 2.2.1-RELEASE sudo issues?

2015-03-17 Thread WebDawg
On Tue, Mar 17, 2015 at 1:48 PM, Manojav Sridhar wrote: > Just upgraded my pfsense to 2.2.1-RELEASE, > > [2.2.1-RELEASE][user@host]/usr/lib: sudo > Shared object "libintl.so.9" not found, required by "sudo > > Cant seem to fin the libintl.so.9, this breaks the sudo package. Anyone > else run into

Re: [pfSense] "Packages are currently being reinstalled in the background." since last night... nothing showing on the console...

2015-03-18 Thread WebDawg
On Wed, Mar 18, 2015 at 1:12 PM, Tiernan OToole wrote: > A reboot seems to have solved the problem here… I had Sarg, Squid3 and a > few others installed. I did notice that before the reboot, if I went into > system/packages, I got a message saying packages where being installed… > > > > The pack

Re: [pfSense] "Packages are currently being reinstalled in the background." since last night... nothing showing on the console...

2015-03-18 Thread WebDawg
> 2015-03-18 17:32 GMT-03:00 Ryan Clough : > >> On my box there was a very long running "rm" process while packages were >> being reinstalled. >> >> I seem to remember something similiar, I figured it was doing something...I just really wonder why it was doing anything to the huge number of files i

Re: [pfSense] freak vulnerable for pfsense

2015-03-20 Thread WebDawg
On Thu, Mar 19, 2015 at 8:58 AM, Vick Khera wrote: > pfsense < 2.2 have a split-brain openssl. so to test the version that > you're getting with the openvpn service, you need to check the openssl > linked to it. In this case "/usr/lcoal/bin/openssl version" will tell you > it is newer. > > Howeve

Re: [pfSense] blocking torrents and web based https proxies

2015-03-26 Thread WebDawg
May I ask why you would like to block it all? On Mar 24, 2015 3:12 AM, "Rizwan Saeed" wrote: > Hi Guys, > > > > I am managing a 1000+ university network. pfsense is working fine. The > only problem I have is that the students bypass all the security with web > vpn’s and free https proxies. So I w

Re: [pfSense] Assign IP Address with /32 Mask on WAN Interface

2015-03-30 Thread WebDawg
On Mon, Mar 30, 2015 at 6:14 AM, Vick Khera wrote: > > On Sat, Mar 28, 2015 at 11:42 AM, day knight wrote: > >> I see the configuration script doesn't allow you to pick /32 address when >> configuring an interface as my default gateway is not in the same subnet. I >> have limited IPs and run pfs

Re: [pfSense] Bundling multiple OVPN client connection into one fat pipe...

2015-03-30 Thread WebDawg
On Mon, Mar 30, 2015 at 3:01 AM, Tiernan OToole wrote: > Morning all.. > > > Stupid(ish) question for you... > > > I have a PFSense box in the house with 3 internet connections (2x240/24 > cable modems and a 70ish/20mb VDSL line). I am wondering if i setup 3 OVPN > connections to a single (lar

Re: [pfSense] Bundling multiple OVPN client connection into one fat pipe...

2015-04-01 Thread WebDawg
On Wed, Apr 1, 2015 at 5:38 AM, Chris Bagnall wrote: As I understand it, the problem is usually packets arriving out of order at the far end leading to retransmissions of the apparently 'missing' packets. That is basically what I figured with the latent connections. Considering what the type o

Re: [pfSense] testing email

2015-04-08 Thread WebDawg
Same here, > > Viruses being detected by my ASSP spam filter coming in from the list and > denying delivery. Had to re-enable my account this AM. > > Doug > > -- > Ben Franklin quote: > > "Those who would give up Essential Liberty to purchase a little Temporary > Safety, deserve neither Liberty n

Re: [pfSense] pppoe

2015-05-01 Thread WebDawg
On Fri, May 1, 2015 at 6:25 AM, lathes wrote: > Hi, > > Has has anyone had any trouble getting pppoe working in pf sense? I have > the modem set up in bridge mode and it dose work fine plug in into a > laptop. The PPP logs in pfsense shows that a connection is made and ipv4 ip > address allocated

Re: [pfSense] load balancing between multiple IPSec tunnels

2015-05-20 Thread WebDawg
On Wed, May 20, 2015 at 7:06 AM, Tiernan OToole wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Morning all. > > Might be a stupid question (or even idea) but i will ask anyway. > > I have a server in Germany with a PFSense VM on it. I also have a > PFSesne machine in Dublin. The m

Re: [pfSense] load balancing between multiple IPSec tunnels

2015-05-20 Thread WebDawg
On Wed, May 20, 2015 at 7:54 AM, Tiernan OToole wrote: > > > if i a reading correctly, i would be thinking Layer 2 would > essentially be at a frame level, so it would be closer to Link > Aggregation with Ethernet connections... > > - --Tiernan > > People have done it. I have tried it with OpenV

Re: [pfSense] Weird issue not sure if it's PFSense or not

2015-05-26 Thread WebDawg
On Tue, May 26, 2015 at 1:04 PM, Mamun Ahmed wrote: > Thanks Adam for your response, I have to say I didn't think of that, > bearing in mind that the other devices seem fine on my network, and the > funny thing is that Amazon devices can browse everywhere except for the > secure (https) pages on

Re: [pfSense] Loading pfSense on Netgate 1U rack mount server c2758

2015-07-02 Thread WebDawg
On Thu, Jul 2, 2015 at 11:31 AM, Paul Upson wrote: > I recently purchased this device and am now trying to load pfSense onto it > using a usb stick. Each time the load fails with the following error. > Mounting from cd9660:/dev/iso9660/PFSENSE fails with error 19. I found a > post that said to ad

Re: [pfSense] Access Point Recommendations?

2015-07-23 Thread WebDawg
On Thu, Jul 23, 2015 at 8:46 AM, Karl Fife wrote: > Your point about having a one-off solution is a great one. Installing a > single UniFi AP would be unnecessarily complex. > > The TP-Link TL-WA801nd is a BGN-only device. Do you (or anyone) have a > preferred stand-alone AC access point? > > >

[pfSense] Signed Images/Sums

2015-08-15 Thread WebDawg
I see that the sha256 sum is listed with the download of pfSense but are there any digital signatures available? ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] client VPN on IOS

2015-09-15 Thread WebDawg
On Tue, Sep 15, 2015 at 9:04 AM, Jan Tichý wrote: > > Setup of the server was a bit tricky, but after that no any issues for three years. Search for tutorial on YouTube - plenty hits. > > On iOS you need install App "OpenVPN" others might work too. > > Use Client Export Utility to generate setting

Re: [pfSense] Routing some trafic throught OpenVPN

2015-09-16 Thread WebDawg
On Wed, Sep 16, 2015 at 1:39 AM, Andrej Ferčič [PCklinika] < and...@pcklinika.si> wrote: > > Hello! > > I am sure that this issue has been already discussed, but I can not find any arhive. So, please give me some directions where to search or any link to thread containig the following: > > 1. Is th

Re: [pfSense] Routing some trafic throught OpenVPN

2015-09-16 Thread WebDawg
On Wed, Sep 16, 2015 at 10:09 AM, Andrej Ferčič [PCklinika] < and...@pcklinika.si> wrote: > Tnx, for reply > > VPN with OpenVPN is not a problem at all. I have problems resolving route > in OpenVPN. If I add additional interface based on openvpnc, becouse I will > need it later when defining gatew

Re: [pfSense] pfSense + AD not resolving DNS

2015-10-01 Thread WebDawg
On Oct 1, 2015 9:01 PM, "Yukiteru Amano" wrote: > > Hi everybody, I have installed a box using pfSense 2.2.4 with this > configuration: > > 1 x CPU Core 2 Duo (2.66 Ghz) > 2 Gb de RAM (DDR800) > 1 x HDD WD 500 GB > 1 x Intel 100/1000 Gbps for WAN (em0) (configure for DHCP ISP) > 1 X Realtek 8169 f

Re: [pfSense] pfSense IP stack crashing.

2015-10-14 Thread WebDawg
On Oct 12, 2015 2:27 PM, "Bryant Zimmerman" wrote: > > I have two routers in an CARP stack. > The primary yesterday started crashing it's IP stack. > Things run for a bit of time and then all IP's become unresponsive. The > secondary pfSense box takes over the VIP's and things keep running. Now

Re: [pfSense] pfSense IP stack crashing.

2015-10-15 Thread WebDawg
On Thu, Oct 15, 2015 at 7:45 AM, wrote: > Hmh, > > 3 things you could try come up to my mind. > > 1. I'd try another SD-Card (if you are using nanoBSD, my guess is, that > you use an SD-Card?). Put the Master in permanent maintenance mode and shut > it down, take out the SD-Card and check for err

Re: [pfSense] Bandwidth graph

2015-10-16 Thread WebDawg
On Fri, Oct 16, 2015 at 1:11 AM, Walter Parker wrote: > Years ago, there was a package for pfSense that graphed total bandwidth for > the Day, Month, Year using bar charts. It would show the top days with > bandwidth and total usage for the month. > > It was not bandwidthD or the RRD graphs. I ca

Re: [pfSense] Has anybody experiance with installing on Openstack?

2015-10-22 Thread WebDawg
On Wed, Oct 21, 2015 at 9:52 PM, Frank Lowe wrote: > I am trying to do this now. I have Pfsense working in proxmox. I now have > an Openstack cloud controller running comput and neutron(single host) I am > now trying to figure out how to > have pfsense on the tenant network with an external (open

Re: [pfSense] Has anybody experiance with installing on Openstack?

2015-10-23 Thread WebDawg
On Thu, Oct 22, 2015 at 11:16 PM, Chris Buechler wrote: > On Thu, Oct 22, 2015 at 4:19 PM, WebDawg wrote: > > On Wed, Oct 21, 2015 at 9:52 PM, Frank Lowe > > wrote: > > > >> I am trying to do this now. I have Pfsense working in proxmox. I now > have > >

Re: [pfSense] Backup/Restore to another router

2015-10-26 Thread WebDawg
On Mon, Oct 26, 2015 at 12:26 PM, Edward Holcroft wrote: > Hello list > > I am setting up my second pfSense box, with a view to eventually replacing > 20 Pelink Balance routers on my network. > > The first one works great and I have IPSec tunnels working between it and > all the Peplink sites. No

Re: [pfSense] Virtualized pfsense virtio net limiter issue

2015-11-10 Thread WebDawg
ck from this list about this: Chris Buechler | 23 Oct 06:16 2015 Re: Has anybody experiance with installing on Openstack? Chris Buechler 2015-10-23 04:16:19 GMT On Thu, Oct 22, 2015 at 4:19 PM, WebDawg wrote: > On Wed, Oct 21, 2015 at 9:52 PM, Frank Lowe > wrote: > >> I am try

Re: [pfSense] Disable DHCP domain-name request

2015-11-20 Thread WebDawg
On Fri, Nov 20, 2015 at 2:05 AM, Marco wrote: > We receive the interface network configuration on the WAN via DHCP. > This works, however somehow our ISP or the modem pushes a domain > name to the pfSense box which is undesirable. > > I assume that the DHCP client requests the domain name. I have

Re: [pfSense] Shutdown Interface?

2015-12-08 Thread WebDawg
On Mon, Dec 7, 2015 at 10:40 AM, Joshua Young wrote: > We have recently been the target of DDoS attacks. The same interface is > targeted each time. Is there any way we can shut down this interface > automatically when this happens? Is there a way to maybe set a threshold > for traffic and, whe

Re: [pfSense] VPN client

2015-12-09 Thread WebDawg
On Tue, Dec 8, 2015 at 11:15 PM, Ted Byers wrote: > Is it possible to use pfsense as a client, replacing a Checkpoint > UTM-1 Edge W with AES256 ? You see, I have one of these Checkpoint > routers that has failed, and it had been used as a client to a VPN. I > know I can use pfsense to provide V

Re: [pfSense] Shutdown Interface?

2015-12-13 Thread WebDawg
On Fri, Dec 11, 2015 at 3:33 PM, Doug Lytle wrote: > It would appear you're just interested in being confrontational. I have you > have a nice day. > > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project w

Re: [pfSense] Shutdown Interface?

2015-12-13 Thread WebDawg
On Fri, Dec 11, 2015 at 9:03 AM, Robert Obrinsky wrote: > I am sorry to hear of the distributed responsibilities for the network, and > that only makes your job harder. > > Any possibility of using a protocol analyzer (Wireshark) to see what is > going out and where it is going? If you have manage

Re: [pfSense] Lost limiter config after upgrade

2015-12-16 Thread WebDawg
I just tried a limiter through the wizard and it killed all traffic out the wan. Just talked to someone on #pfsense @freenode and they had the same issue. On Tue, Dec 15, 2015 at 1:32 AM, Chris L wrote: > Yeah there’s a difference between the upgrade fails and the upgraded system > just doesn’t

Re: [pfSense] FTP trouble.

2016-02-11 Thread WebDawg
On Thu, Feb 11, 2016 at 1:25 PM, J. Echter wrote: > Hi, > > i have a tool which uodates its data by ftp. Nothing sepcial... > > But, i cant use it as i get errors like 'no data', error 227 'entering > passive mode' and so on. > > As far as i know should passive mode be working without any afford.

Re: [pfSense] FTP trouble.

2016-02-13 Thread WebDawg
On Fri, Feb 12, 2016 at 11:24 AM, J. Echter wrote: > Hi, > > dont laugh. it was the f. antivirus > > thanks for your inrerest :) > AV on the server system? ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the pro

Re: [pfSense] Problem with new Unit

2016-02-19 Thread WebDawg
On Thu, Feb 18, 2016 at 7:30 PM, David Ross wrote: > Current device is an xxx running pfSense 2.0.1-RELEASE > > New device is an SG-2440 running pfSense 2.2.6-RELEASE > > I decided that trying to reload the configuration file with that big of a > gap in versions was asking for trouble so I built

Re: [pfSense] recover vnstat data

2016-02-19 Thread WebDawg
On Thu, Feb 18, 2016 at 6:39 PM, Nenhum_de_Nos wrote: > Hi, > > I just installed a new pfsense here as a test, it worked well so far, so now > I would like to take there the vnstat database files. I can't write them, the > fs os RO. I would not like to open the case and shut them both down. Is t

Re: [pfSense] PFSense for high-bandwith environments

2016-02-23 Thread WebDawg
On Thu, Feb 18, 2016 at 11:29 AM, Rainer Duffner wrote: > >> Am 18.02.2016 um 19:13 schrieb Walter Parker : >> >> There is an optimization coming for pfsense. There is a new user space >> routing daemon. netmap I think, that can reach line rate on 10G NICs (14.88 >> Mpps). There was a BSDCon that

Re: [pfSense] Broke my NAT reflection

2016-03-24 Thread WebDawg
On Wed, Mar 23, 2016 at 7:14 PM, Ryan Coleman wrote: > And it would appear to be fixed again… clueless, I am. > > >> On Mar 23, 2016, at 6:14 PM, Ryan Coleman wrote: >> >> So I moved my server and firewall to a new location and am trying to get a >> sliced network set up for the new location (tr

Re: [pfSense] pfSnese 2.3 unresponsive on

2016-04-14 Thread WebDawg
On Wed, Apr 13, 2016 at 6:11 PM, Rosen Iliev wrote: > Hi guys, > > Just upgraded my embedded pfsense to 2.3. > I have problems getting to the box (web or ssh) it just time outs. > On the web I sometime I get Nginx 504, sometime, just nothing. > Eventually I got logged in, try to check what's goin

Re: [pfSense] Upgrade from 2.2.x to 2.3 - upgrading formware since almost 7 hours.

2016-04-14 Thread WebDawg
On Thu, Apr 14, 2016 at 1:53 PM, J. Echter < j.ech...@echter-kuechen-elektro.de> wrote: > Am 14.04.2016 um 19:32 schrieb J. Echter: > > Hi, > > > > here, everything works as expected. :) > > > > But i have a upgrade running since round about 7 hours... > > > > > > I didn't check full backup before

Re: [pfSense] pfSense on vmware ESXi 6.0

2016-04-14 Thread WebDawg
On Thu, Apr 14, 2016 at 4:40 PM, Olivier Mascia wrote: > > Hello, > > I'm looking for advices and best practices when running pfSense (this time it will be 2.3) in a vmware VM. I'm offered to move some resources to a virtual datacenter made of dedicated hardware hosts in clusters, running ESXi 6.

Re: [pfSense] pfSense on vmware ESXi 6.0

2016-04-14 Thread WebDawg
On Thu, Apr 14, 2016 at 6:02 PM, Olivier Mascia wrote: > > Le 14 avr. 2016 à 23:54, WebDawg a écrit : > > > > https://blog.pfsense.org/?p=1716 > > > > They have an appliance you can purchase now. > > Eyes blinking. > And it's available through the pfS

Re: [pfSense] openvpn topology subnet with pfsense 2.2.6 server/2.3 client

2016-04-15 Thread WebDawg
On Apr 15, 2016 4:39 PM, "Joseph L. Casale" wrote: > > Does a facility exist to bypass the UI and invoke a static config for an openvpn server? > I do not see a means through the web ui to create a configuration which permits static > addressing in subnet mode? > > Thanks, > jlc >

Re: [pfSense] pf2ad update to pfSense 2.3

2016-04-17 Thread WebDawg
On Fri, Apr 15, 2016 at 12:39 PM, Luiz Gustavo S. Costa < luizgust...@luizgustavo.pro.br> wrote: > Hello, > > Who wants to go now testing the pf2ad update to pfSense 2.3 can now > apply the script with the following command: > > fetch -q -o - http://projetos.mundounix.com.br/pfsense/2.3/samba3/pf2

Re: [pfSense] Upgrade from 2.2.x to 2.3 - upgrading formware since almost 7 hours.

2016-04-17 Thread WebDawg
On Fri, Apr 15, 2016 at 10:17 AM, J. Echter < j.ech...@echter-kuechen-elektro.de> wrote: > Hi, > > maybe the squid cache was a reason for this. > > 7 hours was really lomg, i had to stop myself from 'interrupting' it :D > > But now all runs smooth. > > Keep up the good work! > > Greetings > > Juer

Re: [pfSense] HA and OpenVPN

2016-04-25 Thread WebDawg
On Mon, Apr 25, 2016 at 2:12 PM, Steve Yates wrote: > I missed that also, way back when, thanks. We had been connecting to > either router1 or router2's WAN IP. If router2 is not the CARP master, you > can connect to it, but it will try to send the response back out through > router1 so one can

Re: [pfSense] Fw: new message

2016-04-26 Thread WebDawg
On Tue, Apr 26, 2016 at 8:49 AM, Randy Morgan wrote: > This is not a group for advertising weight loss products, I hope this is > not going to become a discussion group that allows advertising of this type. > > Randy > > Randy Morgan > CSR > Department of Chemistry and Biochemistry > Brigham Youn

Re: [pfSense] Long delay before DHCP issued leases appear n the DHCP lease table

2016-04-30 Thread WebDawg
On 04/28/2016 11:06 PM, Karl Fife wrote: > I've been 'subdividing' some growing networks into multi-lan; guest, > management networks etc. > > On every occasion I've observed that it has taken considerable time > (perhaps 10 to 20 minutes) after the DHCP server begins issuing new > leases (to host

Re: [pfSense] PFSense breaks TCP-Sessions

2016-05-01 Thread WebDawg
On 05/01/2016 08:15 AM, Jens Kühnel wrote: > Hi, > > I'm a very satisfied PFSense User for a very long time, but I'm running > into a problem that I can not fix, even after a long time of searching. > > To get a real IPv4-Address to my home with only a DSLite connection. I'm > using PFSense with

Re: [pfSense] IPsec: tunneling both IPv4 and IPv6 between two sites

2016-05-01 Thread WebDawg
On 05/01/2016 02:35 AM, Olivier Mascia wrote: >> Le 1 mai 2016 à 04:26, Jim Pingle a écrit : >> >> On 4/30/2016 6:57 AM, Olivier Mascia wrote: >>> Sorry for having asked this question. >>> While I had tried to find the answer before posting, I finally found the >>> answer seconds later. >>> >>>

Re: [pfSense] USB3 to ethernet adaptor

2016-05-02 Thread WebDawg
On May 2, 2016 1:56 AM, "Frans Meulenbroeks" wrote: > > Hi, > > Has anyone experience using USB3 to ethernet adapters ? I need an extra > interface but my HW (Intel NUC) does not have room for another card). > Anything recommendable? > > Best regards, Frans. > _

Re: [pfSense] USB3 to ethernet adaptor

2016-05-03 Thread WebDawg
Before anyone goes out and purchases one of the GS switches from netgear please look at these posts: http://seclists.org/fulldisclosure/2016/Jan/77 http://seclists.org/fulldisclosure/2016/Mar/25 I was also very interested in those switches for the very same reason that Frans is. Honestly, if yo

Re: [pfSense] USB3 to ethernet adaptor

2016-05-03 Thread WebDawg
I hate when people push other options but if you do invest some time and money into VLANs it will pay off. You could give that Intel NUC so many more interfaces then just two. If you want to try USB stuff check here: https://www.freebsd.org/releases/10.3R/hardware.html#usb Click the "[amd64, i3

Re: [pfSense] pfsense on watchguard XTM 810

2016-05-03 Thread WebDawg
On Tue, May 3, 2016 at 2:08 AM, Eero Volotinen wrote: > Hi, > > Does anyone has instructions how to install pfsense on watchguard XTM 810? > which image is requires? is console cable required? what type of console > cable is needed? > > -- > Eero > ___

Re: [pfSense] PFSense breaks TCP-Sessions

2016-05-03 Thread WebDawg
Did you try ipv6 inside the tunnel also? On Tue, May 3, 2016 at 1:56 PM, Jens Kühnel wrote: > Am 01.05.2016 um 18:29 schrieb WebDawg: > > > > > > On 05/01/2016 08:15 AM, Jens Kühnel wrote: > >> Hi, > >> > >> I'm a very satisfied PFSense U

Re: [pfSense] USB3 to ethernet adaptor

2016-05-06 Thread WebDawg
What USB adapter where you using? On Thu, May 5, 2016 at 5:09 PM, Sean Pohl wrote: > As a general note, I have had trouble with them if I run the adapter through a > USB3 hub and then connect to an Ethernet cable. The system would periodically > kernel panic and once I plugged it directly into t

Re: [pfSense] pfSense 2.3_1 ntpd isn't restarting

2016-05-06 Thread WebDawg
Anything in the logs? On Fri, May 6, 2016 at 3:42 PM, J. Echter wrote: > Hi, > > i did the 2.3_1 update and all seemed fine, but my ntpd service isn't > coming back up. > > I even rebooted the machine and it still doesn't start. > > There's also nothing in the logs. > > sockstat -l | grep 123 sho

Re: [pfSense] pfSense 2.3_1 ntpd isn't restarting

2016-05-06 Thread WebDawg
I would try running ntpd from shell and see what happens. On Fri, May 6, 2016 at 3:45 PM, J. Echter wrote: > Am 06.05.2016 um 22:43 schrieb WebDawg: >> Anything in the logs? >> >> On Fri, May 6, 2016 at 3:42 PM, J. Echter >> wrote: >>> Hi, >>> >&g

[pfSense] Fwd: [Openvpn-announce] New OpenVPN 2.3.10 Windows installers (I604/I003) released

2016-05-09 Thread WebDawg
How do we get an update for the export util? -- Forwarded message -- From: Samuli Seppänen Date: Wed, May 4, 2016 at 4:02 AM Subject: [Openvpn-announce] New OpenVPN 2.3.10 Windows installers (I604/I003) released To: "openvpn-de...@lists.sourceforge.net" , openvpn-us...@lists.sour

Re: [pfSense] Aggregated WAN traffic

2016-05-10 Thread WebDawg
On Tue, May 10, 2016 at 9:29 AM, FrancisM wrote: > On Tuesday, 10 May 2016, Vick Khera wrote: > >> On Tue, May 10, 2016 at 9:45 AM, Randy Morgan > > wrote: >> >> > Having said that there is some question in my mind as to how this >> actually >> > works. Some of what I read indicates that the agg

Re: [pfSense] Aggregated WAN traffic

2016-05-10 Thread WebDawg
On Tue, May 10, 2016 at 12:14 PM, WebDawg wrote: > On Tue, May 10, 2016 at 9:29 AM, FrancisM wrote: >> On Tuesday, 10 May 2016, Vick Khera wrote: >> >>> On Tue, May 10, 2016 at 9:45 AM, Randy Morgan >> > wrote: >>> >>> > Having said

Re: [pfSense] Limiters on LAN, WAN

2016-05-12 Thread WebDawg
On Thu, May 12, 2016 at 11:52 AM, Steve Yates wrote: > A question on where to set up a limiter...if it is set on a LAN rule > and has in/out limiters set, will the limiter only apply to outbound traffic > matching the rule (from __ to any)? Or would that match, say, the response > to a

Re: [pfSense] Limiters on LAN, WAN

2016-05-12 Thread WebDawg
On Thu, May 12, 2016 at 1:11 PM, Steve Yates wrote: > I have the limiters configured as you show. But are you saying you would > normally set your limiter on rules on both the LAN and WAN? Basically, I > should set it on LAN for now and when the bug is fixed set it on WAN also? > > -- > > Stev

Re: [pfSense] Limiters on LAN, WAN

2016-05-12 Thread WebDawg
On Thu, May 12, 2016 at 1:42 PM, Steve Yates wrote: > To explain my need it's for limiting traffic for several tenants of > an office building, so each gets up to "n" amount of bandwidth. Each has a > static IP and their own router. > > Maybe I was just overthinking it. Having

Re: [pfSense] Limiters on LAN, WAN

2016-05-12 Thread WebDawg
Yates wrote: > No we're actually using NAT and private IPs inside the building. We use 1:1 > NAT if a tenant needs a public IP. > > -- > > Steve Yates > ITS, Inc. > > -Original Message- > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf

Re: [pfSense] What might be throttling my wireless?

2016-05-15 Thread WebDawg
So much information and I still do not think we know enough! Do you have a UniFi controller installed somewhere? Are the units upgraded fully? Are you using VLAN networks on the unifi devices to do more then one network. You could start by not doing the internet speed test first. I would go f

Re: [pfSense] IPv6 with Comcast and two pfSense - invalid prefix length, XID mismatch

2016-05-20 Thread WebDawg
On Wed, May 18, 2016 at 6:14 PM, Steve Yates wrote: > We have an application with a Comcast-provided SMC router and two pfSense > routers (Comcast <- building <- tenant). The building router (v2.3.0) gets > an IPv6 address and can ping out. However in its DHCP logs I see: > > dhcp6c in

Re: [pfSense] IPv6 with Comcast and two pfSense - invalid prefix length, XID mismatch

2016-05-20 Thread WebDawg
On Fri, May 20, 2016 at 11:06 AM, Moshe Katz wrote: > If you have static IPs from Comcast, you cannot put the device in bridge > mode. The way that Comcast static IPs work is that your Comcast device > advertises itself to the rest of Comcast's network as the route to your > static addresses. In

Re: [pfSense] IPv6 with Comcast and two pfSense - invalid prefix length, XID mismatch

2016-05-20 Thread WebDawg
On Fri, May 20, 2016 at 1:31 PM, Moshe Katz wrote: > On Fri, May 20, 2016 at 12:19 PM, WebDawg wrote: > > > On Fri, May 20, 2016 at 11:06 AM, Moshe Katz > wrote: > > They will not let you bring your own modem if you have a static IP. > > I wrote the last message on

Re: [pfSense] Update 2.3_1 to 2.3.1 failed

2016-05-24 Thread WebDawg
On Tue, May 24, 2016 at 11:34 AM, Chris Buechler wrote: > On Tue, May 24, 2016 at 5:33 AM, OSN | Marian Fischer wrote: > > Hi list, > > > > when i try to update one carp member from 2.3_1 to the latest update > (2.3.1) it fails after > > > > # snip > > Updating pfSense-core repository catalogue.

Re: [pfSense] Update 2.3_1 to 2.3.1 failed

2016-05-24 Thread WebDawg
On Tue, May 24, 2016 at 2:18 PM, Chris Buechler wrote: > On Tue, May 24, 2016 at 1:28 PM, WebDawg wrote: > > On Tue, May 24, 2016 at 11:34 AM, Chris Buechler > wrote: > > > >> On Tue, May 24, 2016 at 5:33 AM, OSN | Marian Fischer > wrote: > >> > Hi li

Re: [pfSense] How to manually update 2.3 onwards?

2016-05-25 Thread WebDawg
On Wed, May 25, 2016 at 4:18 AM, Wue Bob wrote: > > On 24/05/16 15:08, Pete Boyd wrote: > > I see the release notes say "Removed "full update" or "full slice" > > upgrade for systems on 2.3 to later versions" - is this what I am seeing? > > > > How do I manually update pfSense now please? > > Goo

Re: [pfSense] USB3 to ethernet adaptor

2016-05-25 Thread WebDawg
On Mon, May 2, 2016 at 1:56 AM, Frans Meulenbroeks < fransmeulenbro...@gmail.com> wrote: > Hi, > > Has anyone experience using USB3 to ethernet adapters ? I need an extra > interface but my HW (Intel NUC) does not have room for another card). > Anything recommendable? > > Best regards, Frans. > __

Re: [pfSense] USB3 to ethernet adaptor

2016-05-26 Thread WebDawg
On Thu, May 26, 2016 at 11:14 AM, RB wrote: > On Wed, May 25, 2016 at 6:25 PM, Volker Kuhlmann > > I disagree. While it'll work, its security is nowhere near the same. It > > depends on the VLAN switch's firmware being bugfree (we all know about > > how likely that is), it adds complexity, and it

Re: [pfSense] How to manually update 2.3 onwards?

2016-05-30 Thread WebDawg
On Wed, May 25, 2016 at 2:00 PM, Chris Buechler wrote: > On Tue, May 24, 2016 at 8:08 AM, Pete Boyd > wrote: > > I have a pfSense 2.3.0_1 which has had an issue connecting to > > pfsense.com to check for updates for years. That's not the issue, as far > > as I believe. Perhaps its LAN and WAN ar

Re: [pfSense] pfSense store router positioning

2016-06-05 Thread WebDawg
On Sun, Jun 5, 2016 at 11:25 AM, Walter Parker wrote: > Hi, > > I've be doing a bit of remodeling in the household and I noticed an > interesting issue with the temperature of the the router (an SG-2220). If I > put the router flat, it heated up to 53 Celsius (9AM mid 70's Fahrenheit > room temp)

Re: [pfSense] USB3 to ethernet adaptor

2016-06-06 Thread WebDawg
On Mon, Jun 6, 2016 at 9:00 AM, RB wrote: > > On Sun, Jun 5, 2016 at 7:02 PM, Volker Kuhlmann > > This is a laughable argument! > > I'm not here to argue, you are. More specifically, you're here to > press your personal point for open switch firmware. Your paranoia, > it's showing. > __

[pfSense] unbound DNS and pfSense failover

2016-06-06 Thread WebDawg
I am trying to figure out how to make unbound stop using my DNS server that is on my backup internet. I never want it to hit it ever unless the main WAN goes down. So the DNS forwarder can do this: Query DNS servers sequentially If this option is set, pfSense DNS Forwarder (dnsmasq) will query t

Re: [pfSense] Question about OpenVPN Point-to-Multi-Point Setup

2016-06-08 Thread WebDawg
On Jun 8, 2016 1:31 PM, "Vick Khera" wrote: > > On Wed, Jun 8, 2016 at 2:41 PM, Jeremy Bennett < jbenn...@hikitechnology.com> > wrote: > > > If you won't have mobile users, IPSec could be a viable option. > > > > iPhone mobile VPN works great with IPSec, no additional software needed. It > is all

Re: [pfSense] add Blocking in suricata just for some IPs

2016-06-20 Thread WebDawg
On Mon, Jun 20, 2016 at 1:27 PM, Daniel Eschner wrote: > Hi to everyone, > > is it possible to add blocking mode just to some IPs from a /24 Network? > I want to run that in test mode to see who much false positiv i will see ;) > > Cheers > > Daniel > > > _

Re: [pfSense] Wifi

2016-07-17 Thread WebDawg
On Sun, Jul 17, 2016 at 4:09 PM, Volker Kuhlmann wrote: > On Fri 15 Jul 2016 16:58:34 NZST +1200, Alexandre Paradis wrote: > > > You could put a regular nic, then plug a regular home wifi router (with > > dhcp disabled) on one of the lan port. > > This is probably the best bet. It makes the locat

Re: [pfSense] Wifi

2016-07-17 Thread WebDawg
On Sun, Jul 17, 2016 at 4:24 PM, Paul Galati wrote: > Find a decent router ($20 Netwgear WNR3500u with gigabit ports) or similar > that supports Tomato or DD-WRT. Routers that support these OSes are good > routers, just have not so good factory software on them. > > Paul > If you go with Paul's

Re: [pfSense] Lightning strike

2016-07-26 Thread WebDawg
On Mon, Jul 25, 2016 at 9:10 PM, Moshe Katz wrote: > From the picture, those are definitely surface-mount. I don't think I'd > recommend trying it yourself unless you have experience and comfort working > with SMD components. > > That said, if you do have the experience, it looks like the parts d

[pfSense] Cloning pfSense Repo

2016-07-28 Thread WebDawg
Should I be able to clone the pfSense repo and host it locally? Should I be able to set the repo url in pfSense to point to this? Also, I have no experience making package but sometimes I have to hack an init.d script in, can I do that with a package?

Re: [pfSense] Mini-USB console on new pfSense certified hardware

2016-08-02 Thread WebDawg
On Mon, Aug 1, 2016 at 7:03 PM, Jeremy Porter wrote: > There is an on-board UART to USB converter on the > RCC-VE/DFFv2/4860/8880/2440/2220. This is wired directly to the > chipset uart on the Rangely, at system voltage levels, not at RS232 > levels. (The USB convert chip is cost comparable to

Re: [pfSense] Unicast Flood

2016-08-17 Thread WebDawg
On Tue, Aug 16, 2016 at 11:08 PM, Karl Fife wrote: > Answering my own question: > > Unicast flooding is fundamental. Unicast flooding in response to a null > switching table is the only way for a frame to reach the intended host, say, > if the switching table had an entry which expired before it

  1   2   >