Hi there! It's good to know that there is another Filipino here who is interested in pdSense. I am just a newbie here and hopefully I'll enjoy my stay. I haven't heard that much about pfSense users in the country though.

new one…

Count and display IP who tried to logon via SSH with bad password

#!/bin/sh clog /var/log/system.log | grep -ia "sshd.*failed.*password" | sed 's/^.* \(\([0-9]\{1,3\}\.\)\{3\}\)\([0-9]\{1,3\}\).*$/\1\3/' | sort | uniq -c | sort -n

I wanted to do it with a do while loop like the first script but it's stop on the "read line" condition and never stop

where did you order it from? link?

@chpalmer:

Are you using a modem that you can ping?

What are you using as a switch?

Have you tried different ports on the switch?

wiggled wires during ping?

yep as w/ my example everything is OK w/ another box, network situation same xcept for the router (PFsesne or ClearOS)

I have, to make sure, tried wiggling the wires and they're pretty stable…
switch im using is a DGL-4500 gaming router w/ DHCP and other routing features turned off.. just used as switch during my tests..and yes no conflicting IPs w/ it too

sorry, I didnt realize about the specific features, that can be a big trade off.
I would like to get the bsd issue fixed so i will be reading/posting on their forums.

.. man, i really suggest, just take donations via paypal and forget about all the hassles of SSL and maintain a secure payment interface, etc etc.. it's really not worth it.. i should know i have a few sites and projects that asks for donations.. including a foundation for saving a certain type of Fruit bats.. .. never had a prob w/ paypal.. and their charges are fair for all the headache they solve for me..

and incase you didnt know, yes PAYPAL can process payments/donations from people WITH or WITHOUT paypal accounts…

@Cry:

That's an attitude that'll get you flamed on many forums (if you're lucky and not just banned). Seriously - why should people keep answering the same questions time and time again? Particularly when the questions have been asked and answered dozens of times already. You should always try searching the documentation and forum before posting questions. Of course, even if it's been asked before you won't always find it as sometimes you have to know the answer to find it, but if you've made the effort that's what counts.

Assuming you're not running packages you'll have no running performance impact. Booting will take a bit longer but that's all.

You need the likes of FreeNAS to do that. It's your choice and your risk ;) I'd suggest that disk space is cheap.

haha well point taken CryHavok, thanks much

and thanks for 4) and 5).. im good now.

:D

Good day sir.

DaveGreen, it's better to ask your own question rather than adding it to the middle of somebody else's.

It depends on the VPN technology you're using, but ISTR that VPN Passthru is only for the client end.

Doesn't look like that's an official one, though it's hard to say (one of the devs may have set it up and forgot about it). sullrich says he didn't make it, and he's usually the one that does most everything on twitter.

@jmullinix:

In a Multi-Wan setup with failover, is there a way to get PFSense to fire an http request to another machine?

What I would like to do is write a script in asterisk that is fired by a web request that resets the Sip Nat Parameters and reloads asterisk.

John Mullinix
Cohutta.Com, Inc.
1.706.632.3343

Im just about to try out PFSense sometime this week , so im reading around ahead.. and this Failover HTTP Request notification would be soo awesome .. i can already imagine the Php scripts i could cook up to take advantage of such an event notifcation.. i wish there was such a feature :D

I am trying to achieve the same thing. I want a WAN IP address from a remote location, both places running pfSense, via IPSec or any other method. I do have an active IPSec tunnel to my remote location, but I cannot figure out how to make BOTH locations have the SAME WAN IP. I have searched "routing over IPsec" within the forum to no avail. Any help at all would be greatly appreciated.

If you have your own DNS, some places have done this by having stupidly low TTLs and then having DNS hosted on or updated by the firewall. (I think that's how Barracuda does it).

Relying on DNS for that is asking for trouble though, there's no telling who caches that info longer than you expect them to.

In file Subs-post.php, function sendmail().

starting at line 670

apache_reset_timeout(); } } else -- $mail_result = $mail_result && smtp_mail($to_array, $subject, $message, $send_html ? $headers : "Mime-Version: 1.0" . $line_break . $headers); ++ $mail_result = $mail_result && smtp_mail($to_array, $subject, $message, $headers); // Everything go smoothly? return $mail_result;

!attention! I did not test it but looks like this is the line causing problem.

I've used pfSense behind a bridged modem and behind a NAT modem and it works fine either way, though with double NAT happening you can expect issues with certain protocols like SIP, IPsec, and probably FTP.

Some info on here: http://en.wikipedia.org/wiki/Ethernet_over_twisted_pair

But also:

You are having problems, so obviously it is not ideal for your situation (Could be cable quality, amount of the ends that got untwisted, crosstalk, etc, etc. Lots to go wrong, very little to go right) Switches/Hubs are cheap and would be less problematic If you want to expand in the future, you're stuck If you want gigabit in the future, you need all four pairs You seem to have forgotten the first rule of cable pulling (at least around here): Why pull one when you can pull two? :) Though that may be the fault of whoever originally ran the cable.