A quick use of Google will find you what you're after ;)

http://www.linitx.org/forum/
http://forums.imedialinux.com/

etc, etc, etc

Sorry forgot about the other general forum…...

Posted this at Experts-exchange but have not gotten an answer and I am under the gun to get this done today.

That tool seems to be a non windows solution so I will have to keep searching.

Thanks for the effort.

Mark

With Captive Portal you can provide the authentication portion. Outside of that there is no native functionality. There is no point in porting one of the two linux NAC solutions due to the integration with iptables on the linux-side. It would need to be written from the ground up with PF in mind.

Great idea!

I would suggest a wiki page that anyone could go in and edit. Then post updates to the page to this thread (or a similar one) so anyone can watch the thread for updates.

Or, people could post updates as a reply to a thread, and then have the original author update the main post with the updates so they are easy to read - but then if the original author goes MIA the info in the thread can lag…

Aliases ar not only making things easier or mkore readable, they also help to keep the amount of rules pretty low when using ports aliases in combination with hosts- or networkaliases.

Info –> Versions

Live CD with Installer
The Live CD platform allows you to run directly from the CD without installing to a hard drive or Compact Flash card. The configuration can be saved on a floppy disk or USB flash drive. Some features are not compatible with the live CD platform. In most circumstances, this should only be used as an evaluation of the software with your particular hardware.

Hard drive installation
The live CD includes an installer option to install pfSense to the hard drive on your system. This is the preferred means of running pfSense. The entire hard drive must be overwritten, dual booting with another OS is not supported.

Embedded
The embedded version is specifically tailored for use with any hardware using Compact Flash rather than a hard drive. CF cards can only handle a limited number of writes, so the embedded version runs read only from CF, with read/write file systems as RAM disks. Packages are not supported on embedded versions.

I'm talking about a whole other system. Life FreeNAs is not a firewall, but its based off the same monowall code. I'll look into the freeNas Option for now.

No and No. Actually these rules are on a per year basis iirc. So if you block let's say on January the 1st it will block on that day every year (2008, 2009, 2010,…). Why is a 15 minute slice not enough? A Cronjob will run every 15 minutes to see if the ruleset has to be changed and recreate and reload the filter if needed. Making smaller slices will put additional load on the firewall as it would have to check for changes more often. We thought 15 minutes intervals should be enough usually.

@tacfit:

I moved off Microsoft's ISA 2004 firewall.

:o   thank goodness for that!  :)

back in the day, I setup OpenBSD at my network edge and built the pf.conf by hand, mainly to learn, and liked it a lot. eventually got lazy, and setup a soekris/m0n0wall, but wished it was openbsd based or at least had pf.  then I heard about pfsense, but I just sort of followed the progress forever and never tried it.    eventually my network expanded and outgrew m0n0 and I required some of pfsense's better features like loadbalance, and I'm pretty impressed.  I don't use captive portal nor have tons of users, I just have a handful of very bandwidth hungry users and I wouldn't use anything other than pfsense at this point

Not in 1.2.  See the traffic shaping bounty.

Thanks, I just added this feature to 1.3/HEAD.

Donate it to the pfSense Team or me :)

If it is with HD run freebsd with webserver,syslog etc
and http://www.askozia.com/pbx/ or http://www.freenas.org/ could be the way too

just an opinion : if you don't have yet a compleate monitoring solution, you can use nagios, you can find freebsd plugins.Or GroundWorkOpensource (like this you can define checks for all you need  ;))

nice done…maybe i will change my pix 515 even for pfsense.
btw: i can recomand OTRS ticket system....i use it for some years and it's quite nice.

@Cry:

@Eugene:

It is news for me that it is obsolete ;-)

Hey, it's only been around for 15 years or so:

http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing (for those that haven't come across it yet)

Agree, I misread Kris… He does not reject terms network of class A,B,C. He  simply does not think in these terms:

@Kris.J:

I don't ever think in terms of Class A,B,C anymore - it's obsolete.

Sorry.

Great! thanks. Now I know ABC of BSD :-)))
By the way pfSense is a great job, Thank you guys!

Eugene.

I use Zenoss on FreeBSD v6.2 to monitor servers, switches, routers, etc. -everything with an IP & SNMP- on the county government's WAN - we like it very much!

-Kris

@Monoecus:

Where did you put your page to? Is it running on the pfsense box?

I have my website hosted on my NAS box (QNAP), and I've made a virtualhost just for this purpose, it works like a charm!
Then I just redirect to that host with the arguments I want to show on the page.

Also, see the many threads where people ask if they can turn pfSense into a general purpose server.  The usual answer is that you're on your own…

connect it through another com port to pfsense and edit the /etc/ttys file to mark the port as secure.
That should give you a standard unix login prompt.

http://home.comcast.net/~hqh/html/tworouters.htm

;)

BTW : I sometimes have no connection between secondary router/ap (DI-624) and primary router after a reboot of the DI-624 ; so also no internet connection as the DI-624's WAN port is not used.

A single ping from the DI-624 menu option to the primairy router's IP address is enough to make all ok again.

I recommend you contact freenas and send them the following link which is a search of the PFSense CVS timeline for ALIX. It lists the changes needed to make m0n0wall and PFSense work with the ALIX board.
http://cvstrac.pfsense.com/search?s=alix&t=1&c=1

Other than that you could suggest to freenas developers to chat with PfSense developers so they can get the changes necessary to make it work on the ALIX board.

More collaboration between FreeBSD, PFSense, m0n0wall, FreeNAS, PC-BSD, DesktopBSD and Askozia will help make everyone of them better. In fact I think as PFSense, m0n0wall, FreeNAS, PC-BSD, DesktopBSD and Askozia become more popular I think FreeBSD itself will be improved and become more popular.

Best Regards,
Mark

there are static

Usually cards based on Atheros chipsets work flawlessly. It is the most recommended name I hear all around.

I'm not sure if pfSense's UPnP implementation supports that, however go re-read my previous post - if you're not using trivially guessable IPs for your pfSense host and the exploit doesn't target pfSense explicitly then you're probably ok.

The following thread may eventually contain some of the answers: http://miniupnp.tuxfamily.org/forum/viewtopic.php?t=433

I wish I knew more about Digg.com.  I would be able to get more Diggs if I did,  I made some errors in my submission due to my inexperience with digg.  I thought I would be able to edit my submission much like a forum.  No such luck.  I should have pointed the Digg post to a webpage or pfsense.com.

So if this Digg entry does not really go anywhere I plan on redoing and resubmitting.  We need to get about 50-55 diggs in the first 24 hours to help the Entry go to the upcoming section first page (Or so I hear).  I assume out of the 5k or so registered users at the forums we ought to be able to get a big chunk of that number.  If we have any way of rallying the registered digg users from the forums that would be very helpful toward getting some more exposure for the project.

hi!!  :D

thanks for reply…

@cmb:

It looks like you're trying to fsck a mounted partition on a running system?

**No, i run fsck -y in single mode
I download the iso image in tree times and install this iso in tree pc´s and say this error in the tree pc´s..

excuse my english.. thanks…**.

If it's not there it has been removed.
Search the forum and you will find out.

Selling a self made CD for $1 should be fine, IMHO.
That's about the cost and stuff. You don't get rich with that and it promotes pfSense.

Nevermind…it appears to have been a routing issue.  Thanks.

If your system wasn't shut down cleanly, fsck -y automatically runs at next boot. If you get thrown to a prompt where you have to manually run it (though I don't think that's even possible), running fsck -y manually will work.

I'm confused on exactly what you're seeing.

If you're to a point where fsck -y isn't fixing the file system problems, you have some serious issues that will probably require a reinstall.

microsoft has a section regarding known issues concerning KB939653.  it basically says to uninstall and reinstall your security software. i uninstalled McAfree Internet Security and my browser worked perfectly. i then reinstalled and everything was fine as well.  it has to do with changed file signatures after doing the update.

http://support.microsoft.com/kb/942818/

if uninstalling the update improved performance i probably wouldn't have gone any further, but my browser performance did not improve even after uninstalling.