• Why PFsense sucks

    Locked
    29
    0 Votes
    29 Posts
    17k Views
    C
    @stephenw10: @Cino: You just can't try a card in the box and expect it to be 100% stable without researching the wifi card and its driver for freebsd. I think that says it all. For many people that is a reason why pfSense sucks. For a M$ based solution (and increasingly Linux) you can just try a card and have a reasonable expectation that it will work well. As pfSense becomes more popular it is inevitable that more first time users are going to be disappointed. There are probably far more satisfied users but most of those don't complain.  ;) Yeah this entire thread can be summarized as FreeBSD's wireless drivers for some cards really suck, and on the rest the guy has no idea what he's doing, things like creating MAC address conflicts and wondering why the network breaks. But Linux has much the same issues with drivers, you really have to research your cards before you buy one especially since many of the bigger manufacturers (DLink, Linksys, etc.) will change the chipset used in their cards without changing the model # at all, so even finding a working model # on some cards is no assurance you're going to get the same card they used to sell under that model. It looks like the situation with wireless will be getting a lot better with FreeBSD 9. Adrian Chadd has done quite a bit of work in FreeBSD 9 for a commercial software company that uses FreeBSD in their appliances and relies heavily on wireless. I have hopes that will be a great step forward on wireless.
  • PfSense and Comcast

    Locked
    7
    0 Votes
    7 Posts
    11k Views
    B
    I can kind of explain what's going on with the SMC gateway. Think of it as a router / firewall / modem all in one. Basically the device has several IP addresses assigned to it. IIRC there are actually two real world IPs on the device, one is only seen by comcast on the router's wan port, then there is another real world IP on the routers LAN port. The device routes traffic between these two IPs so you can get your live subnet. There is also a firwall that resides off of the router's lan port, which will do NAT. Both the router LAN and the NAT'ed firewall are live on all 4 ports of the switch. So when you put in the correct information for a static IP address, the pc will find the appropriate gateway and use that to get through the SMC router and to the internet. If you just use a DHCP lease that is handed from the SMC firewall and your traffic flows through that then into the SMC router and to the internet. So it would look something like this: COMCAST ROUTER   |   / WAN SMC ROUTER PORT   |   / LAN SMC ROUTER PORT -> FIREWALL   |                                        |   /                                      /         4 PORT SMC SWITCH It's kind of neat how it's setup because it is possible to use both static IPs and have clients behind the firewall at the same time. The networks don't really cross but if you had a packet sniffer on your lan it might be possible to see traffic from the other subnet. Obviously if this is a concern you would only use one or the other. The other thing that you get is even with having only 1 static IP address you technically get 2, because a /30 gives 4 addresses.
  • MOVED: squid/havp preventing certain downloads, help please.

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Basic Configuration

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • FTP Client behind PfSense 2.0

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    A
    I am also having same problem with Pfsense 2.0. I am using multiple WAN connections and Squid + Squidgaurd. Every thing is working fine but FTP :( no luck I am tried same options as u did. Well in my case if i connect to my FTP server. MY FTP server responds and did not show any listing of folders. and disconnect me after some time without showing anything. I have also tried this VIA Filezila to connect to FTP but have Error. EcoNNREFUSED. Anyone please help us. Thanks
  • Approaching the limit on PV entries vm.pmap.shpg need nano editor

    Locked
    4
    0 Votes
    4 Posts
    7k Views
    W
    /boot/loader.conf and /boot/loader.conf.local are for loader variables, not sysctls. Modify sysctls through System -> Advanced, click on System Tunables then click on the "+" at the bottom of the page to add a new entry.
  • Specify the route for traffic?

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Creating VLANs

    Locked
    5
    0 Votes
    5 Posts
    7k Views
    D
    The DGS-3100 has a slightly more complex VLAN setup, hence, the exact steps are as follows if you want to allow all LAN ports access to the Switch configuration (in this instance, you would use a computer on Ports 2-32 or 43-47 to access the switch management): Go to L2 -> Asymmetric VLAN and enable it. Go to L2 Features > Forward & Filtering >DLF Filtering Mode: Select All (check the box), Select Forward all DLF packets. Apply. Go to L2 -> 802.1Q VLAN: Edit Default VLAN (VID 1). Select Ports 1 & 33-42 as non-members. Select Ports 2-32, 43-47 as untagged. Click Apply. Click on the Add/ Edit VLAN tab. Add a new VLAN with VID = 2, Name = LAN. Select Port 1 as Tagged. Select Ports 2-32 as Untagged. Select Ports 33-48 as Non-member. Click Apply. Click on the Add/ Edit VLAN tab. Add a new VLAN with VID = 3, Name = Freeswitch. Select Port 1 as Tagged. Select Ports 33-42 as Untagged. Select Ports 2-32, 43-48 as Non-Member. Click Apply. Click on the Add/ Edit VLAN tab. Add a new VLAN with VID = 4, Name = Wifi. Select Port 1 as Tagged. Select Port 48 as Untagged. Select Ports 2-47 as Non-Member. Click Apply.
  • SQLite support?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    pttP
    You MUST reboot your FW and all be "recognized"  ( you will be able to choose the database in FusinPBX menu )
  • Pftop output

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • PFSense and Ultrasurf

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    stephenw10S
    He means set source ports to all and set destination to 127.0.0.1. However I fail to see how that could possibly work.  ::) If you research Ultra Surf at all you will find it's very difficult to block. It's specifically designed to bypass firewalls and filters. Steve
  • Discard frame w/o leading ethernet header (len 4294967294??)

    Locked
    5
    0 Votes
    5 Posts
    5k Views
    bill_mcgonigleB
    Had a recurrence of this just now, with NAT outbound rules that all specify source addresses. Trying one variable at a time here (oh, I did change the Ethernet cable for good measure). Next is swapping the LAN interface to re2 on this card.
  • Setting up L2TP

    Locked
    8
    0 Votes
    8 Posts
    3k Views
    M
    I use only openvpn by myself but i have configured also pptp & l2tp vpn's for testing I haven't done a thing with ipsec on these three vpn's
  • How can I show all HDD on pfsense

    Locked
    6
    0 Votes
    6 Posts
    14k Views
    F
    @wallabybob: I don't think /var/log/dmesg.boot is a general FreeBSD facility - perhaps it is specific to pfSense. It is indeed, /var/run/dmesg.boot contains the dmesg buffer just after the boot even in a FreeBSD system. There is another reason why dmesg could not be right command for finding disks: dmesg shows the kernel buffer message, so if the kernel is long lived and has outputted several messages, dmesg has scrolled and disk information is lost. Other commands that will work are: atacontrol list for ata devices and camcontrol devlist for scsi, usb devices.
  • Tracking bandwidth usage per ip per day

    Locked
    5
    0 Votes
    5 Posts
    10k Views
    S
    There might be a solution using a pfSense package doing what we want after all.. I noticed while reading the readme, bandwidthd has the ability to log traffic to an external database: DATABASE SUPPORT Since version 2.0, Bandwidthd now has support for external databases.  This system consists of 3 major parts: 1. The Bandwidthd binary which acts as a sensor, recording traffic information and storing it in a database across the network or on the local host.  In this mode Bandwidthd uses very little ram and CPU. In addition, multiple sensors can record to the same database. 2. The database system.  Currently Bandwidthd only supports Postgresql. 3. The webserver and php application.  Bundled with Bandwidthd in the "phphtdocs" directory is a php application that reports on and graphs the contents of the database.   This has been designed to be easy to customize.  Everything is passed around on the urls, just tinker with it a little and you'll see how to generate custom graphs pretty easy. Using Bandwidthd with a database has many advantages, such as much lower overhead, because graphs are only graphed on demand.  And much more flexibility, SQL makes building new reports easy, and php+sql greatly improves the interactivity of the reports. My ISP has now switched over to the database driven version of bandwidthd entirely, we have half a dozen sensors sprinkled around the country, writing millions of data points a day on our customers into the system. INSTRUCTIONS As a prerequisite for these instructions, you must have Postgresql installed and working, as well as a web server that supports php. Database Setup: 1. Create a database for Bandwidthd.  You will need to create users that can access the database remotely if you want remote sensors. 2. Bandwidthd's schema is in "schema.postgresql".  "psql mydb username < schema.postgresql" should load it and create the 2 tables and 4 indexes. Bandwidthd Setup: 1. Add the following lines to your bandwidthd.conf file: Standard postgres connect string, just like php, see postgres docs for details pgsql_connect_string "user = someuser dbname = mydb host = databaseserver.com" Arbitrary sensor name, I recommend the sensors fully qualified domain name sensor_id "sensor1.mycompany.com" Tells Bandwidthd to keep no data and preform no graphing locally graph false If this is set to true Bandwidthd will try to recover the daily log into the database.  If you set this true on purpose only do it once. Bandwidthd does not track the fact that it has already transferred certain records into the database. recover_cdf false 4. Simply start bandwidthd, and after a few minutes data should start appearing in your database.  If not, check syslog for error messages. Web Server Setup: 1. Copy the contents of phphtdocs into your web tree some where. 2. Edit config.conf to set your db connect string You should now be able to access the web application and see you graphs.  All graphing is done by graph.php,  all parameters are passed to it in it's url.  You can create custom urls to pull custom graphs from your own index pages, or use the canned reporting system. In addition, you should schedule bd_pgsql_purge.sh to run every so often.  I recomend running it weekly.  This script outputs sql statements that aggregate the older data points in your database in order to reduce the amount of data that needs to be slogged through in order to generate yearly, monthly, and weekly graphs. Example: bd_pgsql_purge.sh | psql bandwidthd postgres Will connect to the bandwidthd database on local host as the user postgres and summarize the data. I didn't have time to test this yet, but in theory this would allow to: -Save usage date, also if the webconfigurator restarts -Display usage stats from EVERY ip -Make custom usage reports e.g. per ip per day Any comments on this, or maybe someone has even (successfully) tried this out already?
  • System log filled every minute

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    As I posted in the other thread, just replace the contents of that file with a known good copy like here: https://raw.github.com/bsdperimeter/pfsense/master/etc/gettytab
  • OpenNTPD started - even when disabled

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    OpenNTP is used for syncing time even when the service is not enabled. IIRC the difference is when it's "disabled" in the GUI, it is not setup to listen for client connections.
  • Ospfd on embedded

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    It should be fine
  • Getty repeating too quickly on port

    Locked
    6
    0 Votes
    6 Posts
    9k Views
    ?
    Just replaced it and the error disappeard. Thanks jimp Btw file wasnt empty so probably some blank lines.
  • Multicast-to-Broadcast bridging (LAN<–>WLAN)

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    ?
    It seems that in the pfsense forum only network noobs hang around ;) not any creative idea for this problem ?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.