@NollipfSense said in My French Brothers, Is This Fake?:

Is it real? @Gertjan

I'm not sure at all.
I'm 700 km away from Paris, and why I approach Paris it's always at FLT 30.

From what I know, the guy isn't that popular in France.

I've looked around (the net) a bit, and could only find references on a site called "tiktok".

edit : closing the wheel with some kind of sheet will make sensitive to the slight bit of wind. Apply some basic physicals rules and you'll know it's fake.

@johnpoz said in Do you use dhcp reservations?:

@JonathanLee said in Do you use dhcp reservations?:

I do not want any mac address cloning going on.

Who is going to clone your macs?

Hackers. Black hackers.
Or cyber warriors from China, Iran, russia. (They are in 120-180ms distance from Your data ;)

And for what purpose?

Steal money. Or steal some info about Your clients to steal MUCH MORE money from them.
2.
Make damage for Your country.

Mac cloning is only a thing if they are already on your network..

Because around 80% of devices at home, work and office are connected by WiFi, airsnort, fake DHCP server for MITM doing work well.

I would love to hear your theory how anyone could use that to do anything? That doesn't already have full access to my network anyway..

Hm. Are You serious? I do not believe that You say that…

BTW, I prefer to using “IP reservation “ feature ONLY as some sort of helpful feature in administration and of pf rules work.
And THIS IS NOT AS A SECURITY BARRIER any way!

When planning infrastructure each one need to keep in mind that MAC/IP - NOT MAKE DEVICE TRUSTED, this is just ID.
And like Your passport w/o photo or biometric chip,- may be stealing by someone.

One of the basic rules nowadays must be: EACH DEVICE MUST HAVE OWN SERTS. NO SERTS,- NO ANY RIGHTS, NO ACCESS ANYWHERE !

Am I wrong?

Done.
YEAH!!! my color CRT is back yeah!!! I loved this thing as a kid.

Screenshot 2024-06-28 at 23.13.27.jpg

@stephenw10

Noted on this, will do.

Thank you!

There is a chat facility that serves that function. It's generally better to keep things public though so others can benefit or contribute.

There is a long thread discussing third-party package building here: https://forum.netgate.com/topic/169749/pfsense-compile-requirements-for-3rd-party-software. There are other similar threads in that Development sub-forum.

Like @Gertjan stated, the best way to start is by analyzing an existing package that is similar in form and function to the one you wish to create. Packages on pfSense are either GUI-only, or they may have both a GUI part and then an underlying binary component that typically runs as a service (or background daemon). In that latter case, the GUI portion of the package is used to create the necessary configuration files and environment for the binary piece and then launches the binary piece as appropriate.

GUI packages are stored in the FreeBSD-ports repo of pfSense and will have pkg-pfSense- as their name prefix. The package will be stored in the appropriate subfolder of the ports tree (sysutils, security, network, etc.). The base URL for the pfSense FreeBSD-ports repo is on GitHub here: https://github.com/pfsense/FreeBSD-ports.

GUI portions of packages are typically written in PHP with a sprinkling of JavaScript if needed. There is an old XML framework for creating package GUI templates, but it is used less and less these days. Here is a link to the official package development docs that describe the XML template format: https://docs.netgate.com/pfsense/en/latest/development/develop-packages.html.

@ionoci said in pfSense Netdata - Verified and Working Elegantly !:

@KrPacMan I got it working on 2.7.2
In /usr/local/etc/pkg/repos/pfSense.conf + /usr/local/etc/pkg/repos/FreeBSD.conf

FreeBSD: { enabled: yes }

after that installed packages:

pkg install pkgconf bash e2fsprogs-libuuid libuv nano pkg install json-c py39-certifi py39-asn1crypto py39-pycparser py39-cffi py39-six py39-cryptography py39-idna py39-openssl py39-pysocks py39-urllib3 py39-yaml pkg install netdata

BIG thank you! I got some version mismatch during the installation but it worked anyways! I'm so very happy to get it working.

@murdof

Probably because your looking at forum messages that are 8 years old, from 2016. pfSense 2.2.6 is very ancient now.

@stephenw10 yeah it can work - but for one it would be flooding his syslog server, and 2nd for what valid reason would you want such a short lease..

lets do the math, every 5 minutes log to syslog.. Or every 12 hours..

so in 24 hours we would have 2, vs 288 ;), 1 week we have 14 vs 2016.. 2k junk entries in my syslog = why?

Why would the ISP want their clients renewing dhcp every 5 minutes... That just seems insane.. Lets say I have 100k users.. That is lot of renewals for zero point.. Unless they over over booked, and not all their users can be on at the same time?? Because they don't have enough IPs to hand out?

@ericafterdark I'm actually one of the authors of ctrld. If you're into fancy DNS routing, you may dig this article on how to use ctrld with pfSense, and what you can accomplish with it, especially if you use Control D as an upstream. https://github.com/Control-D-Inc/ctrld/wiki/pfSense-and-OPNsense-Operations-Guide

@michmoor said in who will offer free bgp transit and peering to me?:

@yon-0
You mean IPsec with BGP?
And you policy route over the vpn tunnel to me and I route you out my internet?

use gre sit wiregaurd openvpn all is ok. peering or transit. where are your network point.?

Hey everyone,
Ty for your input...question answered. :)

@bmeeks Thank you so much for your belief in my capabilities. But I just don't have the time or skills needed to start from scratch to learn all that.
The UI section could probably to some extent be cloned from the EAP psk UI section, but that would be TERRIBLE design as you could then input IP pools in two places.
So if this should be done there should be a change in the UI where the IP pool section is removed from the PEAP psk UI, and instead made into its own IP pool UI where you can enter the IP pool details and Groups (pool) name.
The PEAP psk should then have a selector to select which pool name (groups) to attach any PEAP psk ID to.

I have accepted it will likely never be a part of pfSense's capabilities, and I have started to deploy non-netgate/pfsense devices at customers now.
The final toll on Netgate when I'm done will be a loss of about 50 SG-xxxx devices in sale, but the real problem is actually that I'm starting to recommend another product to customers going forward because I cannot honestly recommend pfSense for companies that needs mobile user VPN.

I still love my pfSense for homeuse so It's not like I have lost faith completely ;-)

Good to see interest in said topic!!!

Here using an external GPS antenna to home antenna mounted on a satellite dish these days.

A graphical display would be a nice add.

Here ran the old Windows GPS apps on Linux using PlayonLinux and it worked well.

@JonathanLee ah Those were the days

@SteveITS - Makes total sense! Thanks for pointing me in the right direction!

Does this PPSK function tie into free radius at all on PF?

I have an omaada EAP670, configured without the controller (single ap). Using the controller is overkill for my needs. Was hoping to somehow configure the AP to let PF handle the PPSK/vlan assignments.

The omada controller does have ability to handle it as per these documents.

https://www.tp-link.com/us/support/faq/3152/

https://community.tp-link.com/en/business/forum/topic/620762

Not entirely clear from https://www.tp-link.com/ae/support/faq/2051/ if the PPSK function will continue functioning if the controller is shut down.