@nima.m:

Hoba,

What make SSL for WebGUI more secure ?

I notice that in menu –> Advanced --> webGUI SSL
It has both SSL and private key.
But pfsense never use that private key.

I test this function and it seams that right now, pfsense establish a secure (encrypted) tunnel for WebGUI communication, but it doesn't require the user that have the same private key as the pfsense for establishing the connection.

Am I right or I have missed something and there is a way for usiing that private key.

Yeah, you kinda missed something :)  The private key is so you can load an X.509 cert into the gui that you signed with a trusted CA to you as opposed to the pfSense default signed cert.  The webGUI doesn't require a client cert, nor does it use client cert for auth - maybe some day if someone is interested in making it work.

–Bill

No, but you are welcome to write a converter.

Your best bet atm is to do reverse engineering. Check out how the other packages do it: http://pfsense.com/cgi-bin/cvsweb.cgi/tools/packages/

(corrected)

Run this from a shell:

rm /var/db/rrd/wan-queues.rrd

Then reboot.

OK I have understood the difference. Probably I too got accustomed to windows  :D

Thanks,
that did the trick. Everything seems fine now.

Cheers,
//Eskild

It's pinging the gateway IP at WAN. As your other interfaces don't have gateways there is no quality for these.

Computers on your local LAN should not even be using the firewall to route.

They talk directly.

So I would say that your problem is most likely not related and if it is, you have a configuration issue in how you subnetted everything out.

/www

Make sure you are on the latest snapshot.  There was some bridge issues fixed recently.

http://www.pfsense.com/~sullrich/RELENG_1_SNAPSHOT_04-02-2006/

Absolutely.  We include prototype now which is absolutely incredible.

This is a perfect junior level task.  I welcome someone to take it on.

yeah, maybe it's due upgrade after upgrade  ;D

anyway, I'll make a fresh install this weekend on this box.

Thanks for your help people!

hang on, I just was playing aroud with the OS and found half of the work done alredy….  exept  im in condition where I am 90% asleep now, so I willl post my idea later

You may want to take a look at my wiki page…

http://wiki.pfsense.com/wikka.php?wakka=GeekGod

I'll see what I can do  :)

Did you do a full reinstall or an upgrade?  If you did a upgrade please reinstall from ISO.

Also, please start a new thread as this has nothing to do with the webGUI being slow, broken is completely different.

@jeroen234:

can't ypu upgrade the radius server so that it will use the new radius standerd ???

no i cant
that radius server in not free and developers dont want to change ports? so i have some kind of blackbox :(

maybe i can do patch and send it to you if it will be used in new versions

This problem was addresses a few days ago and is available in the testing snapshots located at http://www.pfsense.com/~sullrich/1.0-BETA1-TESTING-SNAPSHOT-1-29-06/