pfSense Gold Subscription

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - KOM

Pages: [1] 2 3 4 5 ... 362
1
NAT / Re: Wan and Lan on same IP range for test lab
« on: Today at 02:15:34 pm »
Instead of silently smiting me like a coward, perhaps you could use your big-boy voice and explain why I'm wrong?

2
NAT / Re: Wan and Lan on same IP range for test lab
« on: Today at 12:23:40 pm »
Perhaps you guys could help him out without the non-stop mockery and asshatism?  It's crap like this that gets a forum and product a bad name.  It really isn't that hard to help people without the goal of making them look stupid and making sure they realize it.  I normally wouldn't have said anything but you appear to be wallowing in this guy's lack of knowledge.

As for dok, he was a perfect example of weaponized autism.  He was very good at networking, and a total failure at relating to and interacting with people.  I won't miss him for a nanosecond, no matter how smart he was.

3
Quote
So is it worth my time to make use of TS with such a low bandwidth allocation?

The need for a shaper has nothing to do with your bandwidth.  The question is, are you having any problems on the network that a shaper could help with?  If your voip calls always work well and you aren't having any problems then I'd leave it alone.  If your voip calls & video streams are getting stepped on when there is a lot of other traffic then yes you could use a shaper.

Start with PRIQ instead of HFSC.  PRIQ doesn't require any bandwidth allocation like HFSC does, and it's a LOT easier to understand and configure.

4
It's getting stuck at what comes after cron, and I don't know what that is.

If I were you, I would try doing a full backup and then editing the file to replace any instances of your old NIC type with the new ones.  For example, if your old NICs were Intel em and now you have Realtek re, do a find/replace on em0 -> re0, em1 -> re1 etc. then restore from that file.  If the NIC order is weird then you may have to reassign the NICs from the console using the menu.

5
Traffic Shaping / Re: PRIQ Traffic Shaper - How to optimize ?
« on: December 15, 2017, 08:29:14 am »
The Queues page is useful for seeing if traffic is going into the queues as expected.

I can't think of how PRIQ could affect your line stability.  Modem resets shouldn't be happening at all.  All PRIQ does is let you define an order of packet processing and then it just follows it blindly, irrespective of bandwidth.  Other shapers like HFSC care very much about bandwidth settings, but PRIQ is dumb & simple.  I use PRIQ at my company.

6
General Questions / Re: Restoring part of my config to a new system
« on: December 14, 2017, 02:16:46 pm »
Quote
Is there a way I can partially backup bits of pfsense1  (namely NAT, firewall rules, Aliases) then I can recreate the Users, certs, gateways etc myself and restore those entries?

Yes.  Go to Diagnostics - Backup/Restore.  Under Backup Configuration, select the Backup area picklist and change it from All to whatever section you need.

7
Traffic Shaping / Re: Daily Allowance of WAN2 ... Possible???
« on: December 14, 2017, 10:40:36 am »
Quote
is this concept possible with pfsense?

pfSense has no cap management features that I'm aware of.

8
Traffic Shaping / Re: PRIQ Traffic Shaper - How to optimize ?
« on: December 14, 2017, 10:33:20 am »
PRIQ doesn't care about bandwidth.  It's purely for prioritizing specific traffic types, eg HTTP vs SSH vs email.  You can fiddle with the WAN/LAN bandwidth settings but they won't do anything with PRIQ.

9
Traffic Shaping / Re: Traffic almost always goes to default
« on: December 13, 2017, 03:47:57 pm »
I shape on WAN since that's where the wizard put my rules.

10
Traffic Shaping / Re: Traffic almost always goes to default
« on: December 13, 2017, 02:49:57 pm »
For your floating rules that redirect the traffic, are you using MATCH or PASS action?  Which interface are you shaping on?

11
Traffic Shaping / Re: Cannot reduce Interface bandwidth
« on: December 13, 2017, 09:52:47 am »
I've noticed that the wizard can certainly be odd at times, too  ;)  I was going to suggest blowing it all away and redoing it, but you managed to fix it yourself.

12
Traffic Shaping / Re: Bandwidth limit on a interface
« on: December 12, 2017, 08:15:47 pm »
Quote
Is the 2MB for the entire interface or is it for each individual device?

It depends on how you configure it.

I found this helpful:

https://www.reddit.com/r/PFSENSE/comments/3e67dk/flexible_vs_fixed_limiters_troubleshooting_with/

13
Firewalling / Re: Block external access to office IP adddress
« on: December 08, 2017, 11:19:50 am »
A port-forward is a NAT rule plus a firewall rule.  To restrict access to your NAT, simply specify proper sources.  Create an alias and then fill it with the IP addresses you want to allow, then use that alias as the Source on your WAN firewall rule.

14
Firewalling / Re: WAN out blocked TCP:a TCP:PA
« on: December 08, 2017, 11:17:11 am »
Are you experiencing any problems, or are you just concerned about log spam?  Blocked ACKs on an open interface are usually indicative of out of state traffic.

https://doc.pfsense.org/index.php/Why_do_my_logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection

If they really bug you, you can craft rules without logging that will not report those.

15
Firewalling / Re: Firewall rule not blocking
« on: December 07, 2017, 03:00:27 pm »
Glad to help.

Pages: [1] 2 3 4 5 ... 362