@Patch Never needed after sales support. They have been massively used by a large community of users, so I've always found every information I needed just by... "praying St. Google" 😄 .

Anyway here is PCengines support page and, from there, the bios update info page.

@georgelza said in advise/view of this machine for home use/FW:

what would everyone's view of of the 4 core/8Gb option, as a min bottom line spec.

The four core should be sufficient with 16 RAM... if your expected life cycle is 3 - 5yrs and depends on your home network needs...yeah, I know how one feedback can be puffing...you might have to be the guinea pig. Hope others chime in...

As far as I know that doesn't affect anything in the pfSense base install but I'm looking to confirm that.

Steve

@definitelynotmyusername Thank you for your insights on VyOS! I joined the VyOS community forum and got some positive feedback.

@Wolfgangthegreat if you change the order - you prob do have to refresh the page your looking at.

@AndyRH but firewalled is what they are - you put them behind a firewall or you put them on a protected network.. etc..

Why should the users freaking care? I have never worked at a company where you told the users anything about security or moving of server.. Service X will be down over the weekend, etc.. Is about the most they got.. If they asked you might tell them yeah moving the service to a new server, moving the server to a new location..

Users don't have a clue to what a firewall even is, or a network segment in the first place.. Throwing in such terms is just like speaking gibberish to them..

Might as well say sldjfsldf sjfojsdfj shoasdhjdf theh Service X lajdfnslslsfdhoet down alajlsjdjflsjdf til monday..

Looks like it's a MIPs device. pfSense CE is x86 only so...nope. 😉

I've been doing a research about these switches and it seems that their L3 functions are half baked.
You must use the switch as the gateway and DHCP server, there is no NAT, you need to use ACLs through the CLI to filter traffic and even if you save the configuration, it won't survive a reboot.

If you are going to use this switch as a L2 only, it will do the job nicely.

@nullcure
I run pfsense CE in my home network. Since I just wanted "to give it a try" a few years ago, I run it on an APU2...so I never bothered trying to upgrade to a plus version (having read as well about some problems).

I plan on upgrading my network in the coming two years (changing to 2,5 GBit/s LAN), so my actual plan has a netgate device...with a plus version running.

What I miss under CE is the snapshot ability. Everything else is more than enough for my personal networking needs.

@Teo-En-Ming-0 said in ChatGPT says pfsense is the most popular open source firewall in the world:

ChatGPT says pfsense is the most popular open source firewall in the world

ChatGPT got that right and it will take a long time for that to change...you also came to the right place for the latest and greatest info source on pfSense...don't forget to familiarize yourself with Netgate docs: https://docs.netgate.com/pfsense/en/latest/general/index.html

Welcome!

It turned out that the Dell has four PCIe bridges that were failing. So, it was returned yesterday and now shopping for another.

@AndyRH said in Why you are scanned so soon:

I found it interesting that if you get a certificate for your web site you are publicly announced and apparently scanned immediately by the bad guys.

Ask for a certificate (a very public thing) from some CA, then know that they, the CA's, have to add you to the unique list, the same list half the computer related part of Havard (university in the US) is tapped into so they obtain data for their theses.
Something like that.

@johnpoz said in Why you are scanned so soon:

would be valuable to the bad guys

Hey, these guys are the future good guys, right ? No ?

Anyway : you use an IPv4 : you get 'scanned'. Most of it is innocent.

All my IF's with tags have PVID/"Native vlan" as 999 , and 999 is not used for anything, besides being "native".
Well ... except my Unifi WiFi IF .... I made that back when you couldn't TAG the "Control" stream for the UNiFI's.

And i have spread out the vlan load over two interfaces to improve throughput.

Vlan1 is also unused in my networks.

/Bingo