Well… i guess you will have to ask to your boss! :-D

It seems you just want to hack into pfsense and enable uPnP. :-P

jimp,

Thank you very much.  tip was exactly what I was looking for!

Much appreciated!

I was watching something (on CSPAN) about 3Com being bought by a Chinese company and they mentioned that the CIA bought some Lenovos and used them for unclassified data, it came out that Lenovo bypassed their security using the motherboard software hardware and downloaded stuff to their servers.
I wasnt able to find any info on this when I saw this so I couldnt get specifics, found it interesting though.

Your problem is probably because you're using RFC1918 addresses on the WAN and public addresses on the LAN - backwards for the way it works in the real world.  Either reverse your allocation, don't use RFC1918 addresses on the WAN or try removing the block for bogons

the link of italian forum is this:
http://lublog.tuttoeniente.net/archives/151/fonera-4-eliminare-wifi0-stuck-beacon-resetting-bmiss-count-4

GoDaddy is about as cheap as I've seen ($99) but EV certs are not something you can get "urgently".  If you've got all the paperwork you'll need you're looking at the better part of a business day.  Since you're getting one on behalf of someone else it may well take longer.

There are power supply calculators online that let you configure a system and average load, and they in turn tell you what size power supply you would need to run those components at the given load. Granted, that will only get you ballpark, but it's a start.

Many hardware review sites also test power draw on the stuff they review. See anandtech.com and silentpcreview.com for some examples.

If your servers have 650W and 450W psu, then they are almost certainly drawing something less than that. In fact, most systems will typically draw half or less of the rated max from their power supply. On the flip side, the rating is DC output, so innefficiency will dictate that the psu is drawing something more from the wall than its output.

In the end, your best bet is to meter it at the wall, as Jim said.

i don't know about pftop, but some times pfsense displays rate/speed in kbps.

fine jimp point taken , i will do as u said….

thanks & regards,
NM04

ok i get it ….!!
thanks to you both Jimp and cry...!!

Thanks for replying to my queries.
I experimented with squid and squidgaurd its working a little bit, but need to be configured well for proper functioning.

Best Regards

using 1.2

has been up for 329 days now, going to celebrate with a beer once I hit 365. ;)

@sap68:

1 + 2: what it's the goal to proxy all traffic outbound?
The spambot or trojan can't communicate directly through internet ad will be blocked?

The goal is to control all the outbound connections, ideally by not allowing any direct outbound traffic.  By forcing all outbound traffic through a proxy you can manage it better, and log it all.  If you install an email server and configure it to scan for (and block) spam and malware then that should stop any spambots.

By forcing all outbound email through a single, managed, email server and all other outbound traffic through a proxy (or opening a single port for for a single computer where the program can't work through a proxy) you can log everything.  Once you've got those logs you have to go through them to find the problems and deal with them.  It'll take time and effort to do that.

Assign the IPs statically (either directly or via DHCP static settings) and then apply your policy routing rules based on the source IP, not port/protocol.

Meh, I don't get certs for resumes, I get them (at least Cisco certs) because they're a great way to fill in the blanks between things that you've taught yourself and things you just picked up by working with the product.  I think having online tests that one could test himself against so he knows what he doesn't know would be great.  Even if you don't get a piece of paper at the end.

Now I feel dumb, I thought I needed HTTP_AUTH somewhere.  Thank you, jimp.