Netgate SG-1000 microFirewall

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - NOYB

Pages: [1] 2 3 4 5 ... 114
1
Official pfSense Hardware / Re: SG-1000 Crypto Engine?
« on: June 04, 2017, 06:19:41 pm »
Yes I do have cause for complaint.  Regardless of whether I've purchased the product or not.  The complaint is re: misleading advertisement/representation.  When such is practiced people can not rely on the information they are presented with.  Including me.

NOYB is not about being anonymous.  I've mentioned that before in these pfSense forums.  It really doesn't provide anymore anonymity that an abbreviated name.  But that is an of topic subject.  Nice deflection attempt though.

2
Official pfSense Hardware / Re: SG-1000 Crypto Engine?
« on: June 04, 2017, 04:33:00 pm »
The product page tech specs tout "crypto accelerator" but nowhere does it mention that it is not supported.  It is misleading.  People typically expect things that are included in tech specs to be supported and usable when they buy something.

If I had purchased one of those expecting to use the "crypto accelerator" I'd be really ticked off and demanding refund.  And rightfully so.

pfSense 2.5 doesn't even have a release date and is probably a year or more out.  So by the time SG-1000 has usable "crypto accelerator" support it will be over a year old.  In a year or more there may be other devices that are more appealing.

Very bad and distasteful business practice in my opinion.

3
Another thing you may want to do at some point is go through the BIOS and disable everything that is not needed.

4
Official pfSense Hardware / Re: SG-1000 Crypto Engine?
« on: June 03, 2017, 08:32:00 pm »
Not ready yet. The plan is to get it working for pfSense 2.5.

Pretty significant piece of information to be omitted from the product page.  Especially being that a pfSense 2.5 release date has not been set.  Even pfSense 2.4 hasn't been released yet.  So how many years out is pfSense 2.5 release?  Selling hardware without drivers for years.  Awesome!

5
webGUI / Re: dashboard widget for DHCP Leases
« on: June 03, 2017, 07:36:13 pm »
Widgets aught to refresh regularly.

They certainly ought to.  Not convinced though that they aught to.

6
webGUI / Re: Dashboard Interfaces Widget does not update
« on: June 02, 2017, 12:41:57 pm »
Even though it does update dynamically there may still be a problem with update not happening under certain conditions.

It's been a couple of weeks so I don't recall all the details.  Had an hour long ISP outage and when service was restore pfSense grabbed a new WAN IP address (DHCP).  But the widget never updated automatically.

Notes:
There were no local links or anything like that that went down that pfSense would be able to detect.
Single NIC; WAN is a VLAN, LAN is native

A fluke maybe?  I don't know.  Never attempted to reproduce.

2.3.4
i386 Full Install
RAM disk enabled

7
Here.  Let me fix that for you.

Don't email the *.opvn profile to your Android device, neither from Windows nor Debian: the Android email client corrupts the *.ovpn...
Period!!!

Here, let me fix that for you: Period

Comma.

UNLESS it is on your own LAN and you are both the only sender and receiver.

Nope.  Not even then.

8
Maybe it an NSA backup.  :-X

9
Here.  Let me fix that for you.

Don't email the *.opvn profile to your Android device, neither from Windows nor Debian: the Android email client corrupts the *.ovpn...


Don't email security certificates.  Especially private keys.  Period!!!

10
webGUI / Re: Web GUI is SOOOOO slllllllooooooowwww
« on: May 27, 2017, 01:20:20 pm »
Is there a way I can debug this?

You could use httpWatch to see if it shows any particular thing being slow to load.

Chrome has similar capabilities in the dev tools mode (F12).  Though httpWatch is much nicer in my opinion.

11
General Questions / Re: SMTP notifications over SSL?
« on: May 27, 2017, 01:06:02 pm »
Hi,
First day with pfsense. I'm trying to configure SMTP notifications. My mail server is behind a NAT on 10.10.10.2 and uses SSL on port 62933. I can connect to the SSL service over telnet from pfsense, but the pfsense gui says "Could not send the message to user@host.localdomin -- Error: could not connect to the host "10.10.10.2": ??

Do I need to load the SMTP server (self-signed) into pfsense somehow?

If a self-signed cert is being used, yes it will have to be trusted by pfSense.  There is a thread or two in the forums that should have enough how to info.

https://forum.pfsense.org/index.php?topic=115884.msg644702#msg644702
https://forum.pfsense.org/index.php?topic=115884.msg644709#msg644709


12
Feedback / SFF Friendliness
« on: May 27, 2017, 05:09:04 am »
Not a big "smart" phone user but SFF friendliness would be nice.

13
Installation and Upgrades / Re: Another upgrade problem
« on: May 27, 2017, 04:58:05 am »

...in the future I'll know to wait a couple of hours to make sure it's running well.

And that's the frustrating part.

14
Do  you have any firewall rules on the OpenVPN interface?  Maybe some holes in the firewall are needed to pass the desired traffic.

15
Installation and Upgrades / Re: Another upgrade problem
« on: May 25, 2017, 07:00:25 pm »
In my case it rebooted fine and proceeded to extract and install what was downloaded prior to the reboot.  That extract and install is where it was really sloooooow.  So you could be in about the same place.  Took an hour or so.  I had the console available though, so could see that it was at least progressing.  Otherwise probably would have rebooted in the middle of that as well.

So far don't recall anyone identifying cause or solution.

Pages: [1] 2 3 4 5 ... 114