A lot of questions



  • Hi, I'm an newbie home-user and just 6 hours ago I installed pfSense 1.0.1
    I'm not good at dealing with this king of boxes and that's why I'm asking you a lot of questions ;D

    1. Is it possible to create back-up of current configurations of rules and etc, that I could export them to other pfSense box which is newer version?
    2. Is it possible to use pfSense for separate servers behind router - mailserver, web, torrent-tracker or something else? Has it somewhere a howtos' for that?
    3. Is it possible to run pf box on such drive - I-RAM http://www.gigabyte.com.tw/Products/Storage/Products_Overview.aspx?ProductID=2180&ProductName=GC-RAMDISK ?
    4. I have a home-network router with WAN port and I don't know how to attach pf box after him. Could you explain with simple step what I must do? I'm already assigned IP for LAN nic - 192.168.1.10. How can I control the box from other location - not only form local network?
    5. Which are best 10/100/ (or 1000Mbps) NICs for pfSense? Can I use fiberoptic NICs for best results? Which fiberoptic NIC models are supported?
    6. I installed it on K6-2 300MHz 128MB SDRAM with 2 3Com EtherLink III ISA NICs. How much ips can be router/shaped on it? And what is the slowest PC-based platform known that run pfSense?
    7. Is it possible to stop/start Internet access of certain ips/hosts on a specific time?

    Sorry for my newbish questions, but I'm not a professional and want to learn more advanced things than gaming on Windows :D



  • welcome

    Please search before asking

    1. none hardware related might work, never tried thow
    2. best practice don't install things on it, that connects with the outside world ( it's a firewall )
    3. http://www.freebsd.org/releases/6.2R/hardware-i386.html for supported hardware on pfsense
    4. wan router -> pfSense you probably get an ip from it's dhcp to the pfSense box….
    5 / 6 WAN <-> LAN TCP throughput of about 17 Mbps, including NAT, when run with the default configuration. On faster platforms (like net4801 or WRAP), throughput in excess of 50 Mbps is possible (and > 100 Mbps with newer standard PCs).
    7. http://forum.pfsense.org/index.php/topic,3969.0.html

    @Have^Fun@



  • OK, this is my DMZ page of router's setting. Which IP I must use for WAN - my public or the router's internal 192.168.1.1? The address 192.168.1.5 is which I'll assign for pfbox WAN IP.

    For servers I mean other physical pfSense machines work as mailserver, ftp,…

    Tnaks for info



  • Looks like it supports a bridgemode (PPPoE/DHCP mode on top of that screenshot). The best thing is to use this so the pfSense gat#s a real public IP at it's WAN.



  • Thanks, but I have a problem with DSL router - with static, PPPoE or DHCP address for pfbox's WAN interface I haven't Internet access. Now I'm using WAN MAC spoof option to gain access. Of course I tested it with DMZ option, but realized that I cannot ping from WAN to public network ???



  • Try to reboot the DSL-Router or power it down for some minutes. What kind of connection do you have? DHCP? PPPoE?



  • I'd restarted it a couple of times (I'm a former LAN technician) ;D
    There's no arp request from WAN nic (I tested 3 differenent nics) - arping from other machines, connected to routers' switch. Yes, these machines have different IP addresses to eliminate potencial IP conflicts.



  • @hoba:

    What kind of connection do you have? DHCP? PPPoE?



  • @hoba:

    @hoba:

    What kind of connection do you have? DHCP? PPPoE?

    public static IP address



  • @Darth_Potato:

    @hoba:

    @hoba:

    What kind of connection do you have? DHCP? PPPoE?

    public static IP address

    Regardless of a static IP, you still have to be using one of those protocols to connect.



  • @sdale:

    Regardless of a static IP, you still have to be using one of those protocols to connect.

    Nevermind, now I'm having access with HEAD version about 3-4 days ago from the repo. Realized that even I've perfect physical connection with router there's no outgoing traffic to him from pfbox. Of course, I tested with another WAN nics with better quality - 3Com -TX|NM and Intel 10/100/1000. Maybe there is some incompatibility with the router ::)



  • Maybe you need a crossovercable to connect to the router?



  • @hoba:

    Maybe you need a crossovercable to connect to the router?

    Tested with it already. Every router from that class has Auto MDI/MDI-X, and this is not important for the case. Everything is fine now with HEAD version.

    Now I have 2 offtopic questions - has project a wishlist for future options and a bug's history, including all problems (not their fixes) from a project's first version to now? I've already checked timeline, there's a huge database of tickets which I cannot explore one by one?



  • CVS Trac is the only option but there are some bugs that have been corrected without opening tickets for them. So only looking at the tickets won't help you unless you read the commit logs as well.


Log in to reply