@Trym:

"Actually what would be nicer is to make the rule show up in the rule list but greyed out, like the bogons/rfc rules do."

Could not agree more. For some reason I assumed this rule being invisible was set in stone. Showing it in the list will remove any and all confusion.

I just checked in that change, so it should be in future snapshots.

@Trym:

"Since we have the user manager now, it would be better for that to be a per-user checkbox instead of a global option."

Again, 100% agree, having this as a per-user setting is very sensible.

Added as a feature request with a "future" target.
http://redmine.pfsense.org/issues/997

Try installing CA certificate of the server in Your browser.
In Windows -> Control Panel -> Internet Options -> search for Certificates

I booted to the other slice and things only got worse, to the point that the web UI and console wouldn't even load.

So I pulled the CF out and did a fresh reimaging.

2.0-BETA4 (i386)
built on Wed Nov 3 16:54:58 EDT 2010
FreeBSD 8.1-RELEASE-p1
Platform nanobsd (2g)

I reloaded my config and installed squid. It appeared to install normally, and the Proxy server: General settings page was prefilled with the expected values. But when I changed some of those values and saved, I again got the white screen with the repeat messages of a read-only filesystem and errors on lines 69 and 70.

Still the values I entered were saved. On the Proxy server: Cache management page all the text boxes were blank, and the disk cache type was set to null. I entered the desired values for all these and saved. Again I got the error page, but the values stuck.

At this point squid appears to be functioning somewhat, although performance is low due to what appears to be excessive IO on the disk cache, which could be related, but I have no idea.

The ro errors are perplexing though. Additionally, I got the following alerts right after loading my config:

SSHD failed to start.
There were error(s) loading the rules: pfctl: DIOCADDRULE: Device busy The line in question reads [ DIOCADDRULE]:

The former I have not seen before. The latter I have.

If nobody else is having these issues then I guess that points to a problem with my config, but I don't think I'm doing anything too extraordinary there, and most of my config changes were made long before I started having problems, anyway.

This seems to be a bug, then.

Maybe somebody in the know cares to comment?

Ok ,i'll try next snap and inform you.

Thanks Jimp,it's ok with latest snap.

@chpalmer:

I had to invoke the setup wizard to make it work finally here…   Had the same problem getting it to work as you have...

Did not work here.

What I had to do to get the connection up was to select that new option for "empty servicename".
Without that option set, it would just not connect.

Then I tried to add the 2nd wan connection i have here. But there beta 4 fails miserably.
The only way to get both connections "up" was by rebooting the box.
Inside the "Status - interfaces" section, the disconnect button does not have any effect.
If one of the connections goes down -> reboot required.

I think I will wait for RC1 before trying again. back to 1.2.3 for now which just works. ;)

alright i got dmz to work.

i just can't get half-bridge to work. tried a lot of stuff too.

with half bridge,

opt1.ip == opt1.router.ip == public.ip == gateway.ip (system > routing)

on my test pc, this works fine.

on oct 12 build.

help appreciated thanks!

The above procedure solved my problems, I will write them down for future references! Thank you jimp!  :P

(Actually, I was reading 'man mount' on my OS X machine… And there was already scripts in the pfsense installation ready to use!)

FIXED IN NEWEST SNAPSHOT!!
THANKS PFSENSE TEAM!!!

I think the ALIX may work now, I thought it had some kind of redirection that would direct output to the serial port instead. It's probably something that just needs tested. There is support in the builder already to make VGA-enabled images, it's just a matter of setting up a builder and cranking out an image to test with.

Did you make sure that you don't still have LAN as part of the bridge?

Hi,

@ToxIcon:

did you get it to work ?  you should post over in Packages  for more help

Thanks for your interest. You're probably right.
I saw the link you posted in "packages" forum.

It's not finished… I'm having problems with simple beta 2.0 packages install (In a VM for testing) ;D
So I can't still test my compiled 1.4 squidGuard...

Warning: fwrite(): 64 is not a valid stream resource in /etc/inc/pkg-utils.inc on line 844 Warning: fwrite(): 64 is not a valid stream resource in /etc/inc/pkg-utils.inc on line 919 Warning: fwrite(): 64 is not a valid stream resource in /etc/inc/pkg-utils.inc on line 922

I tried with 29th & today's beta build… It's my 5th install...
I don't know if it's because of the VM or not. But I will try again untill I succeed!

I'll give feedback here.

Hi,

I received hardware pieces to have 1 if per GW ant it works now.
No more erroneous information (like every GW displayed as default).

I think there's a bug with this scenario. :)

I let you tag this thread as resolved or not (I'm not sure if it should be set as resolved).

Hi,

just wanted to say that ipsec (with certificates) works for me since about 4-5 months. I have 4 remote sites connected and never had a problem after setting it up.
Maybe you tried with some bad snapshots?

Hi again,

working my way thruw.

If the redirect page is to "big" it wont work for *nix systems.

I will attach 2 very easy and simple html files, the smaller one works on *nix, the bigger one will fail with the same error as mentioned above.

you will notice only difference is , the two big blocks of "dummy text" in a table collum.

I checkd lighthttpd error log but could not see anything…

test-big.txt
test-small.txt

@flyingtino:

Hi all,

Tried the snapshots 4 and latest update with pppoe server setup.
Created a rule to pass all the traffic from the pppoe clients. I can connect my client to the server but the firewall seems to keep blocking the traffic.
In pf 1.2.3 I'm able to set up the server and a pppoe tab appears in the firewall and enables me to create a rule and traffic passes.

Is there something missing in the beta or do I see something wrong.

Furthermore I want to use 2.0 pppoe server while I'm trying to create a setup mpd (limit) traffic shaping on the clients with radius.
I need some light on total setup.

Thanks in advance.

Anyone?

http://tujuhcahaya.com/oray/pfsense/1.jpg http://tujuhcahaya.com/oray/pfsense/2.jpg http://tujuhcahaya.com/oray/pfsense/3.jpg

that is the adress.. im sorry..