If it makes sense to invert the match in your case, then I guess do so. You haven't said what "specific ip range" is so I can't really say one way or the other. Source ports for DNS queries are random. So any there.

Got this inquiry return from the proxy service, which usually never replies: That is what should be happening, the encryption is done by the ssh connection, the tunnel just passes data through that encrypted connection to the proxy.

@chpalmer: @phil.davis: others in the delayed hemisphere were still awaiting New Year. Lucky guy!  I haven't been sleeping at midnight come new years in years and don't do any of the parties either..  Kids somehow know you want sleep (or something else) and can read your mind!    ;D :o :D    ) Actually I was up at midnight local time, UTC+05:45, the leap second happened at 05:45 local time, by which time I was well-and-truly asleep.

@KOM: Enjoy the holidays and come back fresh in 2017! Merry Christmas to you as well! Thanks for helping out so much around here.  :)

thanks johnpoz, your right it doesnt take long to do it for all the servers so…

No, we Dutch are not stupid: we founded the USA and some other countries (many, actually :-)). We're just not always responding at the second since we're busy founding new countries, new stock exchanges, and new trillion EUR companies. So I'm late to this party to say: thank you and wish you well @ Ubiquity: and EXCELLENT choice in my book. We've had this hardware for many years, and it NEVER failed. Disruptive technology reads: Ubiquity. I'm sure you will be a most valuable contribution to that already very valuable company. Be well, and, as we say in The Royal Kingdom of The Netherlands: eat much vegetables, not fat fast food mcdronalds junk  ;D :P :-[ :-* ;)

What version of pfsense is that?  Is not current that is for sure..

It definitely helps. SMF organizes them pretty well in the admin panel and it's easy to group the email notifications if multiple people report the same topic.

with no technical details of how your doing it, you are likely to recieve the same amount of assistance. in short, explain how its done, otherwise its moot.

Usually those specific errors are a side effect of clients sending unexpected things to a captive portal web server process. Those log messages, and others like them, can be turned off: Status > System Logs, Settings tab, uncheck "Log errors from the web server process".

Time to upgrade.

You may want to ask your question somewhere else that General Discussion. This forum is for talking about random stuff like what your favorite color is.

While this is really really stupid on Sony's part - and just really lazy.. There is one thing to have a default password, that if the user doesn't change it that is on them.  But these back doors are just horrific!!  Especially on a device that could get exposed to public internet.. Yeah clearly more ammo on why these iot things need to be isolated and monitored, and for sure do not expose inbound traffic from the internet to them..

Sure that's their MO.  Their software is what people want.  Whatever it comes on is another story. The airport software is pretty cool - but yeah not very tweaker friendly.  It's easy to keep up with mesh stuff though as it will lay out all the devices and remember their passwords and stuff.

powershell is often microsofts favorite excuse for not making a way to do something in the actual user interface configuration system, Exchange and HyperV are notorious examples of their laziness at making good solid full featured, managable systems, as well as over-complicating things needlessly. Not suprised you have to resort to PS to make that happen.