Solved: Although a valuable tool for training, this book is poorly written. My problem was that I never set up a SQUID proxy server so that the host-only network could communicate through the gateway. What bothers me is that the book suggests in the chapter setting the SIEM vm up that you didn't necessarily HAVE TO set the squid proxy up. LIES. Like it went out if it's way to throw me off. XD Anyone else searching for this solution, here it is.

@kiokoman said in How to prevent users from LAN to know the external local WAN IP ?:

in the 90's i remember there was this conspiracy theory that antivirus computers create viruses in order to sell antivirus software... say no more ... now that your isp know your fear it will ddos you to take your money ... big fish eat small fish !

Because amateur may be You newer come under real DDoS.

P.S. Another perfect example of new attacks vectors, that You may newer know https://www.washingtonpost.com/news/innovations/wp/2017/07/21/how-a-fish-tank-helped-hack-a-casino/

The address does not change. Most devices use dynamic IP addresses, which are assigned by the network when they connect and change over time.

How can I configure this? Is there any tutorial's for IPV6 and setting up an IPv6 address on a PC behind the firewall that is accessible from the outside?

@JKnott The issue is not pfsense. Its the printer drivers. I thought is was the router because it started after I installed the router.

Thanks for your help!

Rick

@johnpoz said in Best router for Mining Rig?:

Yeah I have used dd-wrt and openwrt back in the day... And have put dd-wrt on friends and family machine when was stuck working with whatever cheap soho shit they had ;)

Both my son's router is running dd-wrt for example ;) My one son is running it on the soho wifi router in their "frat" house. That is what we call it even though its 4 guys in their early 30's sharing a house.. On a old wifi router I had laying around that I gave him/them..

The other one had me come over and setup their wifi - first thing I did was put dd-wrt on it so atleast it was usable.. Looking forward to the new house they bought in San Diego - 2 floors.. Going out to visit the grand kids in spring, one of my want to do while out there will be setting up good wifi... If he won't pay for something good - maybe I will make it a house warming gift setting up real system ;) Pretty sure it will be a unifi setup with a sg1100.. Have to wait and see what kind of internet he gets.. Might have to do a 3100?

But I would never suggest just some soho anything - if asking my opinion on how to do it "right".. While there are some much better products then we had 10 years ago.. Some of these mesh systems are pretty slick - but why do they not add some basics like vlan support.. They would open up the prosumer market to themselves for sure.. I know they want to make it simple to use and all - but come on the advanced features do not have to be enabled out of the box... Allow something simple like actual vlans vs this guest network nonsense. And now something like the google mesh that might be viable..

The new unifi dream for example looks promising.. Its a bit on the pricey side currently for your typical "home" user.. But it has some potential to be sure.. Now if you could put pfsense on something like that hardware - that would be killer ;)

Partnership between unifi and pfsense would be slickest shit since sliced bread if you ask me ;)

This is really amazing. Great information about blog.

@jstech The answer is in the link i posted :)

I wish you success. Hope you write some good content.

Oh. I wish you success in finding a problem.

My friend tried to do this, but it did not succeed.

Most times I've got this recently it was partially configured IPv6. Almost every page the browser had to timeout connecting at v6 and then would load fine at v4. That doesn't get worse over time though. And you can easily check it on a laptop by moving it to a different network.
I also found a laptop still using a real HD a few weeks ago. I couldn't believe how slow it was! 😉

Steve