@wallabybob:
On my home network al the systems get their IP address from DHCP. If that doesn't apply to your network a different solution will be required.
Wow…them all being static is what it was. When I changed them to DHCP it worked like a charm. I then noticed the difference is that when static the ipconfig would not show the dns suffix and when I typed that in walla... Thank you!
I have 2 Failover IP's and i was told i could configure it if i do the following
/etc/network/interfaces
auto lo eth0
iface lo inet loopback
iface eth0 inet static
address IP Failover
netmask 255.255.255.255
broadcast IP Failover
post-up route add Dedicated Server IP but end in .254 dev eth0
post-up route add default gw Dedicated Server IP but end in .254
post-down route del Dedicated Server IP but end in .254 dev eth0
post-down route del default gw Dedicated Server IP but end in .254
/etc/resolv.conf
nameserver 123.123.123.13
–
Im not sure how i could do this in pfSense, tried to find the /network/interface file but cant locate it to add the post up and down routes.
Could i do this using the GUI?
You can't, no certification program exists for pfSense and there is a great amount of debate as to whether or not a pfSense certification is even meaningful or worth the effort.
I had the same infection on a computer yesterday. Kaspersky didn't detect it. I manually added it to quarantine.
I had tried to disinfect it the previous day. That's when the mouse started moving weirdly all by itself until I unplugged the network cable.
Depending on your shell scripting ability, you could
take a tcpdump on your WAN interface of (say) 20 packets with output redirected to a file, sleep 5 minutes, repeat using an incremented file name (with leading zeroes so the names sort usefully). The RRD graph will show you which files are of interest. The tcpdump output will give you source IP for the traffic. The port numbers may give you an idea what the traffic is attempting to do.
to help reduce the number of files your script might watch the wan interface statistics from netstat and only log after an interval of high traffic. (# netstat -I em0 -b will give you bytes sent and received on em0.
The FreeBSD man pages at http://www.freebsd.org/cgi/man.cgi will give more detailed information on tcpdump and netstat.
Good hunting.
follow those directions and enter your cable modems gateway (or any IP) as the monitor IP, I entered my cable modems gateway (Private LAN IP at first, that didnt help, then I did the Public IP and it worked)
For states that is true, but last I knew you couldn't have two connections sharing the same outgoing port number. (Ermal would know for sure). pf may be smarter than I'm giving it credit for.
I'm using two pfsense boxes. too.
WAN1 –
--- pfSense1 - LAN -172.16.0.0/16 - WAN - pfSense2 - LAN - 172.17.0.0/16
WAN2 --/
pfSense1 is using LoadBalancing
pfSense2 is using SQUID + Lightsquid
it ist NOT necessary to double NAT on pfSense1 and pfSense2. I do NAT on pfSense1 to the internet, but I use pfSense2 as a router/firewall WITHOUT NAT. To disable NAT, you can google or find information in the pfSense docs ( http://doc.pfsense.org/index.php/How_can_I_completely_disable_NAT%3F.
It works for me fine. But you need to configure Static Routes on pfSense1.
It's not a problem on 2.0… Just tried it again, selected shared key, unchecked the auto generate box, and the form field came up and was editable.
If it's on 1.2.3, I haven't seen that happen there at all either, it's been working for years.
@dreamslacker:
Try adding a rule to put ICMP traffic into qacks and try again.
I am a noob and have just been experimenting abit with pfsense so i have no idea how to add that kinda rule i checked in firewall > rules but cant find any "qacks" i checked all things in the firewall menu and cound not find any like that sorry its probly easy but as i am noobish can some one maybe point me to a guide or howto that explain this? Or just give me a hint where to find it? :)
