Categories

• TNSR

  Discussions about TNSR

  TNSR Announcements

  Feedback

  Installation and Upgrades
  303
  Topics
  1055
  Posts

  

  @nbhatti As has been said, we don't know. For what you are describing to happen there would need to be practically zero traffic passing, to both BGP peers, at the same time, for long enough to trigger the hold timer expiration. It doesn't sound like that is the case from what you have stated. Some occasional packet loss will not cause two TCP sessions to stop passing traffic at the same time and not recover.

  I would packet capture the BGP sessions to the peers (TCP port 179) and try to capture the event. Then load it up into wireshark and see what happened to the session(s).

  This would best be done at from place in the topography like a switch mirror port mirroring the traffic of the port connected to the tnsr node.

• pfSense® Software

  Discussions about pfSense Software, click a category below

  Messages from the pfSense Team

  General pfSense Questions

  Installation and Upgrades

  Firewalling

  NAT

  HA/CARP/VIPs

  L2/Switching/VLANs

  Routing and Multi WAN

  Traffic Shaping

  DHCP and DNS

  IPv6

  IPsec

  OpenVPN

  Captive Portal

  webGUI

  Wireless

  SNMP

  Documentation

  Development

  Gaming

  Virtualization

  Hardware

  Bounties

  Retired
  106476
  Topics
  648618
  Posts

  

  @sledge said in early 2011 macbook pro i7 model. screen won't turn off and function keys don't work!:

  Any reason the 2012 is your sweet spot?

  It was only if you didn't already have the 2014 decked out with 16GB RAM, since those RAM is soldered...in your case, hallelujah. Yes, both device and thunderbolt to Ethernet adapter used Broadcom which is not compatible with Netmap.

  The thunderbolt two enclosure worked like a charm with Intel NIC, and I had no problem running Suricata on WAN and Snort on LAN both in-line mode despite that not recommended by the package maintainer. I just love the idea, and it works great as long as one is not using the same rules feed with both.

  I was lucky to find the thunderbolt PCI enclosure on eBay for close to $100 used (Akitio) and if you're unable to find one, I maybe able to help you out. I believe the current version of FreeBSD should have the fan driver but could be added and recompiled although I had not done it.

• pfSense Packages

  Discussions about pfSense software packages

  Cache/Proxy

  IDS/IPS

  Traffic Monitoring

  pfBlockerNG

  ACME

  FRR

  Tailscale

  WireGuard
  17308
  Topics
  108953
  Posts

  J

  Hello Fellow Netgate Community,

  I wanted to share with you that ClamAV has officially found a HTTPS virus!!!

  Screen Shot 2022-08-17 at 12.25.27 PM.png
  (IMAGE: C-ICAP Virus Table showing a Real Cookie based HTTPS virus caught in the act)

  Screen Shot 2022-08-17 at 12.29.17 PM.png
  (IMAGE: HTTPS VIRUS TESTING)

  Screen Shot 2022-08-17 at 12.30.30 PM.png
  (IMAGE: HTTPS VIRUS TEST CAUGHT)

• pfSense International Support

  Discuss pfSense in other languages

  Chinese

  Deutsch

  Español

  Français

  Indonesian

  Italiano

  Russian

  Nederlands

  Norwegian

  Portuguese

  Polish

  Romanian

  Swedish

  Turkish
  40988
  Topics
  259243
  Posts

  N

  @jdh said in OpenVPN - ne pas forcer trafic internet local dans le VPN:

  Je pense qu'il faut regarder, au niveau du Proxmox, les règles de firewall !
  Côté public entrant (=vmbr0), seul ssh doit être ouvert mais aussi limité

  Faisant de la sorte je vais me bloquer l'accès à l'interface web de Proxmox (?)
  Ce que j'en ai compris, Proxmox n'a qu'une IP qui est l'ip publique donc je ne vois pas comment faire dans cette nouvelle configuration pour y accéder si le port est fermé.

  @jdh said in OpenVPN - ne pas forcer trafic internet local dans le VPN:

  (Voire utiliser du 'port knocking' ... exemple https://www.linuxbabe.com/security/secure-ssh-service-port-knocking-debian-ubuntu NB : à essayer sur une autre machine avant d'appliquer à Proxmox !)

  Merci pour la ressource, c'est en effet intéressant. Du coup je me dis que c'est peut-être la solution à ma précédente interrogation pour accéder à l'interface web de proxmox.

  Avec cette configuration (2 adresses IP) je me rend compte à l'usage que je n'ai plus de demande de vérification que je ne suis pas un robot lorsque je me connecte à divers sites même une simple recherche google par exemple...

• Official Netgate® Hardware

  Information about hardware available from Netgate

  1770
  Topics
  13033
  Posts

  

  What bandwidth is your WAN? What speed do you see through Squid/Squidguard?

  How is that traffic routed? All over the VPN?

  Do you see anything logged?

  How is Squid configured? Proxying SSL traffic?

  Steve

• Netgate Announcements

  Information about hardware available from Netgate

  19
  Topics
  84
  Posts

  

  @kitsunexor I'm sorry you're experiencing an issue with your 1100.

  It looks like we are working through it in support now.

  The cause won't be the same as what is discussed in this thread because there have been hardware changes to prevent that since. The symptoms may be the same of course.

  Either way that device is in warranty so if it is determined to be a hardware issue we can get it swapped out for you.

  Steve

• Off-Topic & Non-Support Discussion

  Feel free to talk about anything and everything here

  Forum Feedback

  Community Job Board
  3040
  Topics
  16628
  Posts

  

  @zipping8761 haha - I warned you, but it a good learning experience ;)