OK Thanks… jimp

1 vote from me

compared to monowall i think pfsense boot is a bit slower and to reach a ready state monowall  takes less than 30s compared to pf which takes a little over 1min30secs on the alix board.

Aaaah, I did not realize this.
Thanks for the info.

Thank you for the pointers. I'm going to have another crack at this after getting my board updated.

I put "0" in the logout-field, but its not retained. Every other number remains, so its a little bug here. Autologout is NOT disabled. If the disabling of the autologout is not wished, this sentence should disappear: "Enter 0 to never expire sessions. NOTE: This is a security risk!"

Snap from today 13 has still the DNS-problem!

You have to use Remote Access (User Auth) with LDAP, per-user certs are not managed for LDAP users and for the moment (and probably for 2.0 release) they can't be used in combination with LDAP.

In my experience, sometimes the Atheros cards seem to kind of need some "calibration" time or something like that.  Combinations of tests with trying different channels and/or rebooting (not necessarily in that sequence) might possibly help it fix itself quicker.  Might also want to try adjusting your antennas.  Both cards I've used did this and in both cases it eventually went away and didn't come back even after rebooting or power cycling.

Currently the 802.11ng mode and 802.11na mode (not available on your card, since it doesn't support 5 GHz channels) do not support 802.11n rates, even if you do get it to function in 802.11n mode.

pfSense 2.0 is still in beta. This is one area that still needs work. There are already some tickets open about it.

what i wanted to confirm is

rules under LAN, r they for downlaod or upload as u can see the rule on my LAN is lan ip to * which is WAN so isnt that suppsoed to be the upload?

and also when u have rules in LAN  meaning the direction is out by default or in?
so how would u match packets, *(WAN) to LAN ip because the source and destination would change based on the direction of the traffic

Ebay is your friend….X335 without C2T cable, is like a woman without boobs..............

Found the problem.  I noticed in my logs, I had this error:

php: : The command '/usr/bin/nice -n20 /usr/local/bin/rrdtool update /var/db/rrd/wan-queues.rrd -t :wan:qACK:qDefault:qP2P:qVoIP:qGames:qOthersHigh:qOthersLow N:U:U:U:U:U:U:U:U' returned exit code '1', the output was 'ERROR: unknown DS name '''

Removed the traffic shaper, ran rm /var/db/rrd/queue and re-enabled the traffic shaper and now everything is grand.  As expected, I've lost all queue data, but the totals are there and now make sense.  As a good side effect, my status -> queues also now make sense (before they did not show data that made sense).

The problem does come back quickly though.

Cheers for that. Should have remembered the VPN options and I really must catch up with the pfSense developments. It works so well I forget its there and I don't keep up with changes.

Hmm, works fine for me.  I do it every time I upgrade to a new 2.0 snapshot, because upgrading from one 2.0 build to another hasn't worked yet on my system.  This is on an Alix 2c3 with a 512MB CF card.

Same issue, connecting fine but no traffic passing.  :(

tried the latest AMD64 livecd, and although it boots, it gets as far as

IPsec: Initialized Security Association Processing.

but no further :-(

confirmed fixed in Thu Mar 11 02:58:04 EST 2010

Cheers

Arne

to Efonne:
thanks for the hint. It seems to work fine. I tried to find something like that in the interface section.

to jahonix:
I know that VLANs would be the best solution. But at the moment not all of our switchs support that. We will change that in the future.
The users in the different subnets (terminal server) have no rights to change the IP settings. They will not be able to reach a different subnet. We have more than 50 subnets at the moment, so the hint with the separate NICs will not work. The only way to do that at this time is the IP alias, I think. With our linux based router it works fine because the traffic between the subnets is not that much, just the RDP sessions to the different customers.

Will VLAN work with trunck ports on both sides? Because we work with virtualization.

Is there something with crl what I have not found jet?

Maverick