Moshe Katz | 1 Mar 01:13 2011
Picon

Re: restart command

This may help you a bit:

Moshe

------------------------------
Moshe Katz
-- moshe-krODWyr1gIysTnJN9+BGXg@public.gmane.org
-- +1(301)867-3732



On Mon, Feb 28, 2011 at 6:18 PM, Joseph Rotan <joseph.rotan-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
Hi,
 
i've been searching in the internet for a linux command that can send a restart command to a windows PC, i'm not quite sure if this could be achieved but i'm having a pfsense 1.2.3 box that is connected to 10 PC's in a LAN and i'm just trying to build up a sequence here on how could each PC on the LAN restart itself after ending their internet session.
 
Something similar to TCP/IP ports when the internet sesion is ended from pfsense each TCP/IP port activate a command to tell the PC to restart.
 
I have been trying some batch file or DOS command process but could not complete the requirements.
 
Has anyone ever tried this application before.
 
Appreciate any advise on how I could test it out.
 
Thanks
 
Joseph.

Chris Buechler | 1 Mar 04:02 2011
Picon

2.0-RC1 now available!

http://blog.pfsense.org/?p=585

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe@...
For additional commands, e-mail: support-help@...

Commercial support available - https://portal.pfsense.org

Shali K.R. | 1 Mar 12:29 2011
Picon

boot time increased

Dear all,

I have stared using pfSense before 2 months ,am using squid ,squidguard ,lightsquid etc...today i restarted the machine but it taking 20 mins for booting squidguard sync takes 10 mins is there any way to optimize this??/

--
Thanks & Regards

Shali K R
Server Administrator
Vidya Academy of Science & Technology
Thrissur,Kerala.
Mob:9846303531


Jorge Fábregas | 1 Mar 12:42 2011
Picon

Re: 2.0-RC1 now available!

On 02/28/2011 11:02 PM, Chris Buechler wrote:
> http://blog.pfsense.org/?p=585

Thanks Chris.  I've been using the beta for  a while (updating it thru
the WebGUI). By updating this beta...will it be the same as this RC1? or
is RC1 from another tree now?

Thanks,
Jorge

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe@...
For additional commands, e-mail: support-help@...

Commercial support available - https://portal.pfsense.org

Andy Graybeal | 1 Mar 13:26 2011

DNS forwarding log? Finding which machine is accessing what site.

Greetings,
I'm wondering if there is a DNS forwarding log?  I don't have a DNS 
server installed here at the site, I use OpenDNS for my name servers.

I have a machine that is requesting a website that supposedly is related 
to malware according to OpenDNS.

How would I figure out which machine this is on my network?  I figure 
the best way would be with a DNS forwarding log, but there isn't one... 
and I don't know much about this stuff anyway and I'm eager to learn.

Thank you,
Andy

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe@...
For additional commands, e-mail: support-help@...

Commercial support available - https://portal.pfsense.org

Warren Baker | 1 Mar 13:34 2011
Picon

Re: DNS forwarding log? Finding which machine is accessing what site.

On Tue, Mar 1, 2011 at 2:26 PM, Andy Graybeal
<andy.graybeal@...> wrote:
> Greetings,
> I'm wondering if there is a DNS forwarding log?  I don't have a DNS server
> installed here at the site, I use OpenDNS for my name servers.
>
> I have a machine that is requesting a website that supposedly is related to
> malware according to OpenDNS.
>
> How would I figure out which machine this is on my network?  I figure the
> best way would be with a DNS forwarding log, but there isn't one... and I
> don't know much about this stuff anyway and I'm eager to learn.

You can use tcpdump on your LAN interface to see which IP is
requesting the website:

tcpdump -i <lan_interface> -n host name_of_malware_website

replace <lan_interface> with your real name of lan interface (eg. em0).

The tcpdump will show you the IP that is requesting the page of
name_of_malware_website

Something like the following:

tcpdump -i en1 -n host 196.36.108.168

14:32:55.465558 IP 10.0.1.57.50963 > 196.36.108.168.80: Flags [.], ack
1, win 4380, length 0
14:32:55.465765 IP 10.0.1.57.50963 > 196.36.108.168.80: Flags [P.],
seq 1:218, ack 1, win 4380, length 217
14:32:55.466266 IP 196.36.108.168.80 > 10.0.1.57.50963: Flags [.], ack
218, win 5840, length 0
14:32:55.506885 IP 196.36.108.168.80 > 10.0.1.57.50963: Flags [P.],
seq 1:267, ack 218, win 5840, length 266

--

-- 
.warren

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe@...
For additional commands, e-mail: support-help@...

Commercial support available - https://portal.pfsense.org

Andy Graybeal | 1 Mar 14:14 2011

Re: DNS forwarding log? Finding which machine is accessing what site.


> You can use tcpdump on your LAN interface to see which IP is
> requesting the website:
>
> tcpdump -i<lan_interface>  -n host name_of_malware_website
>
> replace<lan_interface>  with your real name of lan interface (eg. em0).
>
> The tcpdump will show you the IP that is requesting the page of
> name_of_malware_website
>
> Something like the following:
>
> tcpdump -i en1 -n host 196.36.108.168
>
> 14:32:55.465558 IP 10.0.1.57.50963>  196.36.108.168.80: Flags [.], ack
> 1, win 4380, length 0
> 14:32:55.465765 IP 10.0.1.57.50963>  196.36.108.168.80: Flags [P.],
> seq 1:218, ack 1, win 4380, length 217
> 14:32:55.466266 IP 196.36.108.168.80>  10.0.1.57.50963: Flags [.], ack
> 218, win 5840, length 0
> 14:32:55.506885 IP 196.36.108.168.80>  10.0.1.57.50963: Flags [P.],
> seq 1:267, ack 218, win 5840, length 266
>
>

Warren,
Thank you.  I will try it.

-Andy

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe@...
For additional commands, e-mail: support-help@...

Commercial support available - https://portal.pfsense.org

Seth Mos | 1 Mar 14:16 2011
Picon

Re: 2.0-RC1 now available!

Op 1-3-2011 12:42, Jorge Fábregas schreef:
> On 02/28/2011 11:02 PM, Chris Buechler wrote:
>> http://blog.pfsense.org/?p=585
>
> Thanks Chris.  I've been using the beta for  a while (updating it thru
> the WebGUI). By updating this beta...will it be the same as this RC1? or
> is RC1 from another tree now?

RC1 is the same branch as before, what used to be tagged as BETA5 became 
RC1 over the weekend.

Regards,

Seth

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe@...
For additional commands, e-mail: support-help@...

Commercial support available - https://portal.pfsense.org

JASON JAMES | 1 Mar 18:02 2011
Picon
Picon

Multiple WAN subnets

We currently use PFSense as a perimeter firewall it does all of our NAT as
well. We recently ran out of public ip's and had another subnet issued to
us. The problem is whether I add a new interface or set it up as a static
route we can't get it to be reachable from outside. I know I am missing
something small, I have been skimming through the pFsense book again and
nothing is popping out. Anyone have any ideas? If I add it as an
interface, I can ping whatever ip address I bind that interface too but
adding virtual ips and then setting up NAT for additional ips in that
block are not routeable. 

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe@...
For additional commands, e-mail: support-help@...

Commercial support available - https://portal.pfsense.org

Ryan Rodrigue | 1 Mar 20:13 2011

RE: Multiple WAN subnets

Could you use virtual IPs assigned to the wan interface?  I use them now for
a different subnet and it works fine for me.  I assign the virtual IP and
use 1:1 nat.

 
Ryan
Rodrigue                                                                    
                                             
                      P.O. Box
4336
Systems
Technician                                                                  
                                                   Houma, LA 70361
A A R Electronics,
Inc                                                                         
   Phone (985) 876-4096
510 West Tunnel
Blvd                                                                        
    Phone (800) 649-7346
Houma, LA
70360                                                                       
                 Fax (985) 853-1034
RadioTech1 <at> aaremail.com                                                     
     www.aarelectronics.com 

 


-----Original Message-----
From: JASON JAMES [mailto:jamesj <at> milton.k12.wi.us] 
Sent: Tuesday, March 01, 2011 11:02 AM
To: support <at> pfsense.com
Subject: [pfSense Support] Multiple WAN subnets

We currently use PFSense as a perimeter firewall it does all of our NAT as
well. We recently ran out of public ip's and had another subnet issued to
us. The problem is whether I add a new interface or set it up as a static
route we can't get it to be reachable from outside. I know I am missing
something small, I have been skimming through the pFsense book again and
nothing is popping out. Anyone have any ideas? If I add it as an interface,
I can ping whatever ip address I bind that interface too but adding virtual
ips and then setting up NAT for additional ips in that block are not
routeable. 




---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe <at> pfsense.com For additional
commands, e-mail: support-help <at> pfsense.com

Commercial support available - https://portal.pfsense.org




__________ Information from ESET NOD32 Antivirus, version of virus signature
database 5917 (20110301) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com




Gmane