Categories

• TNSR

  Discussions about TNSR

  TNSR Announcements

  Feedback

  Installation and Upgrades
  254
  Topics
  874
  Posts

  L

  @jimp Thank you sir

• pfSense® Software

  Discussions about pfSense Software, click a category below

  Messages from the pfSense Team

  General pfSense Questions

  Installation and Upgrades

  Firewalling

  NAT

  HA/CARP/VIPs

  L2/Switching/VLANs

  Routing and Multi WAN

  Traffic Shaping

  DHCP and DNS

  IPv6

  IPsec

  OpenVPN

  WireGuard

  Captive Portal

  webGUI

  Wireless

  SNMP

  Documentation

  Development

  Gaming

  Virtualization

  Hardware

  Bounties

  Retired
  103341
  Topics
  622759
  Posts

  D

  I have been using the pfatt script to with no issue. My connection I have 5 static IPs associated with my account. However I have been unable to get the gateway to show online. My Internet appears to work no issue but the gateways section on the dashboard shows Offline 100% loss for my static IP gateway. The DHCP acquired gateway shows online with RTT of 0.6ms and RTTsd of 0.06ms and no packet loss.
  My /var/log/pfatt.log file shows:

  [pfatt.sh] :: pfSense + AT&T U-verse Residential Gateway for true bridge mode [pfatt.sh] :: Configuration: [pfatt.sh] :: ONT_IF: igb2 [pfatt.sh] :: RG_IF: igb3 [pfatt.sh] :: RG_ETHER_ADDR: <removed> [pfatt.sh] :: loading netgraph kernel modules... OK! [pfatt.sh] :: attaching interfaces to ng_ether... OK! [pfatt.sh] :: building netgraph nodes... [pfatt.sh] :: creating ng_one2many... OK! [pfatt.sh] :: creating vlan node and interface... OK! [pfatt.sh] :: defining etf for igb2 (ONT)... OK! [pfatt.sh] :: defining etf for igb3 (RG)... OK! [pfatt.sh] :: bridging etf for igb2 <-> igb3... OK! [pfatt.sh] :: defining filters for EAP traffic... OK! [pfatt.sh] :: enabling one2many links... OK! [pfatt.sh] :: removing waneapfilter:nomatch hook... OK! [pfatt.sh] :: enabling igb3 interface... OK! [pfatt.sh] :: enabling igb2 interface... OK! [pfatt.sh] :: enabling promiscuous mode on igb3... OK! [pfatt.sh] :: enabling promiscuous mode on igb2... OK! [pfatt.sh] :: ngeth0 should now be available to configure as your pfSense WAN [pfatt.sh] :: done!

  gateways.png
  My biggest issue is I am trying to troubleshoot slow connectivity. Part of my issue is DNS which I am digging into but also wondering if since this gateway is down if that is part of my issue?
  Current pfsense firmware is on 2.4.4

• pfSense Packages

  Discussions about pfSense software packages

  Cache/Proxy

  IDS/IPS

  Traffic Monitoring

  pfBlockerNG

  ACME

  FRR
  16382
  Topics
  103956
  Posts

  K

  So, I'm trying to setup Squid as a proxy for http and https. It's driving me nuts, because this is a vanilla config. I think it's probably something simple, but I'm at a loss as to what the problem is.
  CONFIG

  Defaults on most settings for squid Transparent proxy NOT enabled (proxy is configured with both ports in browsers) ACL for source network set Root CA setup on firewall and cert loaded into client. local cache disabled (for now) A/V and authentication disabled Squidguard not loaded (yet)

  SYMPTOMS

  Http traffic seems to proxy OK (neverssl.com and others) HTTPS traffic just hits the firewall with no response. Tons of syn packets. Client just eventually times out, no other errors. No denials in the firewall logs (Same rule allows 3128 & 3129 ports) There is NO record of httpS traffic in '/var/squid/logs/access.log', only the http stuff

  I'm baffled. It's like the checkbox that enables SSL filtering isn't even checked (I've unchecked, and checked and rebooted twice).

  Any thoughts?

• pfSense International Support

  Discuss pfSense in other languages

  Chinese

  Deutsch

  Español

  Français

  Indonesian

  Italiano

  Russian

  Nederlands

  Norwegian

  Portuguese

  Polish

  Romanian

  Swedish

  Turkish
  40420
  Topics
  255520
  Posts

  

  @pfsense1975 said in Dual WAN und DNS Zuweisung:

  "Für die Internettelefonie, Push Service Mails und einige andere Funktionen verwendet die FRITZ!Box immer die DNS-Server des Internetanbieters."
  Die DNS Server die man per Hand einträgt werden also für die Telefonie ignoriert.

  Das stellt dann aber die Frage welchen Modus das betrifft. Man kann die Fritzen ja zweierlei einbinden:

  Als reiner IP Client per DHCP - wie ein normaler PC hinter der Sense agierend
  oder Internetverbindung via IP herstellen (so oder so ähnlich genannt), dann bleibt die Box selbst aktiv im Routermodus.

  Die Frage ist, ob die Box in beiden Fällen den DNS ignoriert der geliefert wird oder nicht. Und ob sie in Fall 2) nicht die vorgeschaltete pfSense als "Provider" nimmt (da Internetverbindung aufbauen) und daher dann deren DNS Zuweisung annimmt?

  Cheers

• Official Netgate® Hardware

  Information about hardware available from Netgate

  1549
  Topics
  11102
  Posts

  C

  @stephenw10 Ok I'll do that and report back.

  But I must say that I am surprised that you have NOT tested GPONs in the SFP port. Wouldn't it be safe to say that service from an Internet Upstream provider other than in a data center could reasonably be expected to be delivered via this method ? All of the small businesses I work with here either get a Bell Canada Fiber hookup using this GPON or a local Cable company that provides RJ-45 handoff. Last I checked the SG-6100 was NOT designed to service a Cage in a Datacenter, I would think that that option would be covered by the 7100's and up.
  One more question I have with respect to these ports, why are there NO LEDs indicating connection and service ? I was thinking that the port was actually not working at some point as there is NO visual cue like for the ETH port.

• Netgate Announcements

  Information about hardware available from Netgate

  17
  Topics
  61
  Posts

  Q

  @mbooth Great news! We all are waiting for the updates

• Off-Topic & Non-Support Discussion

  Feel free to talk about anything and everything here

  Forum Feedback

  Community Job Board
  2954
  Topics
  16173
  Posts

  P

  @johnpoz
  Hey John, you ever worked at a University ;) Er nothing is quite as fast as you want it to be. I agree some of that stuff needs to be updated, but if you like shoot him a note about your ideas. These folks actually listen to others. Ironically there is a company in Germany called IoT Inspector https://www.iot-inspector.com/ that has absolutely nothing to do with the academic work.