Showing posts from August, 2006


I started using syndication recently. I like the idea of reading the news in Thunderbird instead of having to go to 10 websites. Of course you can read this blog via RSS :).

PfSense follow-up

I have been using PfSense for a month now, so I thought I should post about it... I ran into a few problems that I'd like to share:

Unexpected crashes caused by a PSU that was not powerful enoughAll my devices/computers lost their IP address (DHCP)I solved the first problem using an 1.5A PSU (I was using a 0.8A PSU). It only crashed once since then, but my target is more... 0 (a firewall shouldn't crash).

For the second problem, I increased my lease time to 1 week. Logs show nothing about what could have caused this incident (according to the logs, PfSense's DHCP server was still serving clients correctly).

NOTE: RC2 is out, I'm trying that right now...


I just started playing with Nagios, an open-source monitoring software package (GPL). I used to use monit instead, but there are two limitations of monit that made me switch:
It can only do port/protocol checks on remote hostsIt has no tolerance setting for check failures (it sends a warning as soon as there is one failure)On the other hand, Nagios has tools that allows a Nagios server to perform "local" checks on remote servers, via the network (check_snmp, check_nt, check_nrpe and check_ssh). It has as side effect that it can monitor Windows servers quite well. The web interface enough for my needs.

Note: I'm still using monit for process checks, as Nagios can't do that as well as monit does (monit uses the information in the lockfile to see if the process is still in memory, and uses user-defined commands to restart the process if it is not in memory).

Here is how Nagios works, basically:
The tools that do the checks are called pluginsObjects have to be defined (t…