I followed the HA guide and so far it's working.
e715e4d9-1b8c-4ace-a960-17a49037e55d-image.png

@maglub If your main focus is automation and later on managing only/primarily through automated processes (as you write: later overwritten by ansible...), then perhaps you're looking at the wrong product and should take a look into TNSR?

@johnpoz

i can pay bgp server service.. 🎅

Yes, I agree with this. It sounds like you are trying to use a remote access login you have been given to do something it was never intended to do. If you need a site-to-site VPN ask your office IT staff.
Trying to work past the IT admins is recipe for a bad time, possibly up to getting fired for it level if you ended up exposing the office network to something inadvertently. 😉

Steve

@EmilyCogentAS174

done .

https://apple.stackexchange.com/questions/157424/what-are-api-smoot-apple-com-and-other-hosts-my-iphone-is-secretly-talking-to

@occamsrazor said in Need a powerbackup:

go down the gas generator route, and are using sensitive electronic equipment,

Well no you wouldn't plug direct into the gas generator ;)

But from his reaction to the cost of just a tripplite, I think a simple gas generator and a smaller ups to plug it into is more in his budget.

Historical data was removed from the ntop-ng package some time ago as it was broken beyond practical use.
There is a feature request open to re-work it:
https://redmine.pfsense.org/issues/7000

You should export the netflow data to something else if you need that long term:
https://docs.netgate.com/pfsense/en/latest/monitoring/exporting-netflow-with-softflowd.html

Steve

I'm a newbie here. I don't know much about IPv6. Thanks for your thread.

Moved out of pfSense hardware.

In the last 24 hours I've seen that whole subnet plus every single IP in:
52.192.157.0/24
112.175.120.0/24
112.175.124.0/24

I'm only seeing these on port 25, as that's all that's open. Found a way to identify the packets, though. They now fall into a fail2ban trap and are blocked at pfSense.

EDIT: And last week it was the whole of 185.40.12.0/24, 185.40.13.0/24, 185.40.14.0/24 and 185.40.15.0/24.

185.40.12.0/22?

Thank you both for your efforts.