Subcategories

  • Discussions and feedback related to this forum

    606 Topics
    3k Posts
    N

    Only OpenVPN-compatible user certificates are shown

    If a client is missing from the list it is likely due to a CA mismatch between the OpenVPN server instance and the client certificate, the client certificate does not exist on this firewall, or a user certificate is not associated with a user when local database authentication is enabled.

    Clients using OpenSSL 3.0 may not work with older or weaker ciphers and hashes, such as SHA1, including when those were used to sign CA and certificate entries.

    OpenVPN 2.4.8+ requires Windows 7 or later
    Links to OpenVPN clients for various platforms:

  • Community Hiring and For Hire postings related to jobs that require pfSense software skills

    27 Topics
    114 Posts
    w0wW

    @sef1414
    Name it "run.sh", copy to pf and chmod according documentation
    https://docs.netgate.com/pfsense/en/latest/development/boot-commands.html#shell-script-option
    You will see messages in the system log like those quoted in the script after logger command.

  • Best Wishes!

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    H

    Thank you and all the best to all of you  :)

  • Strange Test results…..

    Locked
    6
    0 Votes
    6 Posts
    5k Views
    B

    @sullrich:

    @maunded:

    Yes, the client software reports the errors, I believe they were all request timeouts, when I say 10+ I mean there were on average about 10-15 errors in 9000 requests

    I dont have the vmtools loaded on any of the servers, I will try that next week.

    Any idea why the request/sec was so low for pf?  I thought that it may be because the client software I am using is sending all requests from one machine?  Does pf have some sort of connection throttling?  Is it trying to defend itself against a SYN flood? Is there anywhere I might start to look for errors?

    D.

    In a nutshell: VMWare + FreeBSD networking performance sucks.  I would try these tests with real hardware.  I know this is not what you want to hear but its true.

    There's also a possibility that it's state table collisions (pf flushes expired states every 10 seconds by default).  In the real world you'll see connections from a larger number of IP addresses so this tends to be less of an issue.  This may, or may not be the problem here, just offering up another suggestion ;)

    FWIW, I've got hosts that do 1000 state table insertions and removals / second with 90K active states w/ no problems.  This is on PF's native platform though, I can't speak for FreeBSD although a number of people have mentioned similar numbers to me personally.

    –Bill

  • Some one have an idea (USBKey + PfSense)

    Locked
    5
    0 Votes
    5 Posts
    4k Views
    S

    In reality, it's not an old box, Its an "old" HP DL-380 G4 (about 1 year of life)…
    I see on the BIOS and they support boot by the usb port.

    thanks again

  • Signs You're Having Thanksgiving Dinner with a Geek

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    S

    @Cyrandir:

    …Only drawback would be if the turkey actually made it's saving throw....

    HAHAHAH now THAT is humor!!!

  • Benefits of moving to lighty over mini_httpd?

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    S

    @submicron:

    I saw that lighty has been moved back into the tree, which is great news.  As I understand it, using lighty will make captive portal really snappy but what are the other benefits we can expect to enjoy from the transition?

    Have you followed the mini_httpd bugs threads?  That alone makes it worth it.

    Other than that:

    fast-cgi

    additional caching

    bsd license

    output-compression

    doesnt need to fork for every incoming connection

  • Looking for a special nic

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    R

    Hi ZGamer,
    Take a look here http://www.routerboard.com/rb44.html.
    This ain't low profile but at least it's multiport…
    Hope it helps.
    Cheers

  • Forum vs mailing list

    Locked
    11
    0 Votes
    11 Posts
    8k Views
    S

    @smoked1:

    Mailing lists are a bit of a pain. I think everything should be on the forums.

    What you think is different from what others think.  A forum allows people to be "loose" whereas a mailing list makes you think twice before blabbering.  Not saying your blabeering, just pointing out the differences that I have noticed.

  • 512meg Compact Flash drive - $15.79 (after rebate)

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    Z

    @sullrich:

    @Cyrandir:

    That's dirt cheap!  Too bad I don't really have a good excuse to buy one…. Good tip for the community though!

    How about a 9.99$ one?  Just wait until black friday…

    http://www.blackfridayads.com/stores.php?sid=6

    Ya, I was looking around on the black friday stuff. For the stuff for Black friday there were 1 gig compact flash cards for like $30ish….heck compusa has 160gig sata drives for $19

  • A little shocked at the current "jonathan" count.

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    S

    sounds good!  we'll take it!

  • Wcome to SMF!

    Locked
    5
    0 Votes
    5 Posts
    7k Views
    H

    That's great! We can centralize the discussion for the PFSense and share the experience to anybody who interested for PFSense!!! I am lovin it!!!  ;D

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.