Categories

  • 375 Topics
    1k Posts
    P
    We’re excited to announce the release of Netgate TNSR 26.02, our latest update packed with powerful new features, expanded capabilities, and over 30 bug fixes and enhancements. What’s New in version 26.02? VPF High Availability State Synchronization Allows peers to automatically re-synchronize connection data when they restart VPF Statistics Output Filters Users can now filter VPF connection statistics output by connection type. This makes troubleshooting and gathering NAT statistics simpler and easier to read. Dynamic Routing Prefix-List Sequence Numbers Input validation no longer allows sequence numbers to start at 0. Upgrading TNSR will renumber entries in the prefix list starting at 1 VPP and DPDK Updates VPP is updated to version Stable/2510, and DPDK is updated to 25.07 Release Notes: https://docs.netgate.com/tnsr/en/latest/releases/release-notes-26.02.html Blog Post: https://www.netgate.com/blog/netgate-releases-tnsr-software-version-26.02 Learn More: https://www.netgate.com/tnsr
  • 122k Topics
    778k Posts
    GertjanG
    @F3lix In your latest packet trace, do I see DHCP traffic from other devices ? Packet 2 and 3 : both are an "offer", one has a IP to offer, the other doesn't ? Both mention : Client-Ethernet-Address a8:2b:dd:6b:80:5f A DHCP offer without an IP address ? ( ??) You can limit the packet capturing with MAC addresses, add the one of your PXE client and the pfSense interface. No more other DHCP traffic will show up in the packet trace. Is this xxx.xxx.xxx.53.67 > RFC1918 ?! If so, don't hide it. We all use RFC1918 like 192.168.x.y ^^ @F3lix said in KEA DHCP PXE boot: file "a8-2b-dd-6b-80-5f\boot\efiboot\amd64\bootx64.efi" Is that correct ? Just asking, I do think I know what PXE is, never used it myself though.
  • 20k Topics
    129k Posts
    D
    Question from a beginner: After some research on this topic, and not having any progress, I will ask here. My firewall is a netgate pfsense 4200 with the packets PFBlockerNG and HAProxy. To leave my email server with SOGo groupware untouched I added a second physical web server to my setup for other purposes. Therefore I configured HAProxy on my pfsense firewall. I can reach both servers from outside, but only if I delete the NAT rule of server 1 or server 2. If I have both NAT rules enabled, domain 2 is directed to domain 1. My installation looks like this: Domain 1: mydomain.tld Email server 1 with SOGo webmail needing https: server 1 is running on 192.168.180.48 Domain 2: www.mydomain.tld Web server 2 with different web apps needing https: server 2 is running on 192.168.180.50 The Let's Encrypt certificates are managed on the servers. So I need HAProxy to just direct the traffic to the right server. My question: what am I doing wrong? Why does server 2 get directed to server 1? Is it because I configured both NAT rules with target 443 and NAT can only use a port once? Both NAT rules are identical to this picture below (except address): [image: 1772700220801-be867ffc-1a8c-47d2-9498-f3fdb6ff9c29-grafik.png]
  • 43k Topics
    267k Posts
    nonickN
    @Bob.Dig said in Update pfSense Netgate 6100: Ich meine von JeGr gelesen zu haben, dass es zuletzt Probleme mit manchen OpenVPN-Konfigurationen gab Ich denke das es dieser Beitrag war. DCO So wie ich das lese betrifft das nur wenn DCO aktiviert ist, das wäre bei mir nicht der Fall.
  • Information about hardware available from Netgate

    3k Topics
    21k Posts
    w0wW
    Tried a different approach — basically using caching. Not sure if this is what was meant or not, but here are two patches: The first patch adds a new function to save a cached version of the Dashboard page. The second patch modifies index.php to call it when needed. --- /usr/local/www/guiconfig.inc +++ /usr/local/www/guiconfig.inc @@ -31,6 +31,25 @@ header("X-Frame-Options: SAMEORIGIN"); include_once('phpsessionmanager.inc'); include_once("util.inc"); + +// --- FAST DASHBOARD: BACKGROUND SAVER --- +function save_dashboard_snapshot() { + // Only take a snapshot if this is a clean load of the main page (no POST data, no AJAX) + if (strpos($_SERVER['SCRIPT_NAME'], 'index.php') !== false && empty($_POST) && !isset($_GET['get_updates_only'])) { + $html = ob_get_contents(); + // SECURITY CHECK: Ensure we are saving the actual dashboard (has widgetSequence) and user is logged in + if (!empty($html) && strlen($html) > 5000 && strpos($html, 'widgetSequence') !== false && !empty($_SESSION['Username'])) { + @file_put_contents("/tmp/dashboard.cache", $html); + } + } +} + +// Start output buffering and register the shutdown function +if (strpos($_SERVER['SCRIPT_NAME'], 'index.php') !== false && !isset($_GET['get_updates_only'])) { + ob_start(); + register_shutdown_function('save_dashboard_snapshot'); +} +// --- END FAST DASHBOARD --- function pfSense_csrf_callback() { include "csrf_error.php"; --- /usr/local/www/index.php +++ /usr/local/www/index.php @@ -95,4 +95,43 @@ $platform = system_identify_specific_platform(); +// --- FAST DASHBOARD: CACHE LOGIC --- +$is_valid_cache = false; + +// 1. Determine if we should serve the cache (strictly on clean login) +if (empty($_POST) && !isset($_GET['get_updates_only']) && !isset($_GET['logout'])) { + if (!empty($_SESSION['Username']) && empty($_SESSION['dashboard_cache_shown'])) { + $is_valid_cache = true; + } +} + +// 2. CACHE KILLER: If saving settings (POST), destroy the old cache +if (!empty($_POST) && !isset($_POST['login'])) { + @unlink("/tmp/dashboard.cache"); + $_SESSION['dashboard_cache_shown'] = true; +} + +// 3. SERVE CACHE +if ($is_valid_cache && file_exists("/tmp/dashboard.cache")) { + $_SESSION['dashboard_cache_shown'] = true; + + // STRICT ANTI-CACHE HEADERS: Prevent browser from caching this output locally + // This fixes the "seeing dashboard after logout" bug + header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); + header("Cache-Control: post-check=0, pre-check=0", false); + header("Pragma: no-cache"); + + // Output the static snapshot + readfile("/tmp/dashboard.cache"); + + // Trigger background AJAX update + echo "<script>setTimeout(function(){ if (typeof(ajax_update) === 'function') ajax_update(); }, 500);</script>"; + exit; +} else { + // 4. LIVE MODE FALLBACK: Guarantee live mode for normal browsing + if (!empty($_SESSION['Username'])) { + $_SESSION['dashboard_cache_shown'] = true; + } +} +// --- END FAST DASHBOARD --- ## Include each widget php include file. ## These define vars that specify the widget title and title link. After first and every logout or saving changes on dashboard cache is re-saved. As usual if you want to try it, do it at your own risk. For me it works much better then previous minimal mode selector button.
  • Information about hardware available from Netgate

    44 Topics
    211 Posts
    AriKellyA
    It looks like unified web management could be coming soon. It would be great if it means easier control and management of all web services in one place. Let's see if any companies announce more details about it!
  • Feel free to talk about anything and everything here

    4k Topics
    19k Posts
    S
    @Karthik-S https://www.netgate.com/support/contact-support
Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.