..... and he opened a second account spamming the same stuff. We are done here!

@nick-loenders VLAN 70 is untagged on port 8. The switch port on the 7100 needs to match the switch port it is patched to. It's just like any other external switch with a pfSense lagg connected to it as a "trunk" link.

@johnpoz said in Question about DNS:

A great read, even if latest version is a bit dated is the DNS and BIND book.

Thank you, it looks very interesting! Added to the to-read list!

@sequimite
Hi, I bought my Qotom Mini PC in Sept 2018.
Here is the full output of dmesg, if you want to dig deeper.

[2.5.2-RELEASE][root@pfsense.lan]/root: dmesg ---<<BOOT>>--- Copyright (c) 1992-2020 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 12.2-STABLE fd0f54f44b5c(RELENG_2_5_0) pfSense amd64 FreeBSD clang version 10.0.1 (git@github.com:llvm/llvm-project.git llvmorg-10.0.1-0-gef32c611aa2) VT(efifb): resolution 1920x1080 CPU: Intel(R) Core(TM) i5-5300U CPU @ 2.30GHz (2294.74-MHz K8-class CPU) Origin="GenuineIntel" Id=0x306d4 Family=0x6 Model=0x3d Stepping=4 Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE> Features2=0x7ffafbff<SSE3,PCLMULQDQ,DTES64,MON,DS_CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,TSCDLT,AESNI,XSAVE,OSXSAVE,AVX,F16C,RDRAND> AMD Features=0x2c100800<SYSCALL,NX,Page1GB,RDTSCP,LM> AMD Features2=0x121<LAHF,ABM,Prefetch> Structured Extended Features=0x21c2fbb<FSGSBASE,TSCADJ,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,NFPUSG,RDSEED,ADX,SMAP,PROCTRACE> XSAVE Features=0x1<XSAVEOPT> VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID TSC: P-state invariant, performance statistics real memory = 4294967296 (4096 MB) avail memory = 3999698944 (3814 MB) Event timer "LAPIC" quality 600 ACPI APIC Table: <ALASKA A M I > FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs FreeBSD/SMP: 1 package(s) x 2 core(s) x 2 hardware threads random: unblocking device. WARNING: Bogus Interrupt Trigger Mode. Assume CONFORMS. WARNING: Bogus Interrupt Polarity. Assume CONFORMS WARNING: Bogus Interrupt Trigger Mode. Assume CONFORMS. WARNING: Bogus Interrupt Polarity. Assume CONFORMS ioapic0 <Version 2.0> irqs 0-39 on motherboard Launching APs: 1 2 3 Timecounter "TSC-low" frequency 1147368110 Hz quality 1000 wlan: mac acl policy registered random: entropy device external interface ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (ipw_bss_fw, 0xffffffff8073dd40, 0) error 1 ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (ipw_ibss_fw, 0xffffffff8073ddf0, 0) error 1 ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (ipw_monitor_fw, 0xffffffff8073dea0, 0) error 1 iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (iwi_bss_fw, 0xffffffff80765730, 0) error 1 iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (iwi_ibss_fw, 0xffffffff807657e0, 0) error 1 iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (iwi_monitor_fw, 0xffffffff80765890, 0) error 1 000.000018 [4336] netmap_init netmap: loaded module module_register_init: MOD_LOAD (vesa, 0xffffffff8140c3e0, 0) error 19 kbd1 at kbdmux0 random: registering fast source Intel Secure Key RNG random: fast provider: "Intel Secure Key RNG" [ath_hal] loaded mlx5en: Mellanox Ethernet driver 3.5.2 (September 2019) nexus0 efirtc0: <EFI Realtime Clock> on motherboard efirtc0: registered as a time-of-day clock, resolution 1.000000s cryptosoft0: <software crypto> on motherboard padlock0: No ACE support. acpi0: <ALASKA A M I > on motherboard acpi0: Power Button (fixed) cpu0: <ACPI CPU> on acpi0 hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0 Timecounter "HPET" frequency 14318180 Hz quality 950 Event timer "HPET" frequency 14318180 Hz quality 550 Event timer "HPET1" frequency 14318180 Hz quality 440 Event timer "HPET2" frequency 14318180 Hz quality 440 Event timer "HPET3" frequency 14318180 Hz quality 440 Event timer "HPET4" frequency 14318180 Hz quality 440 atrtc0: <AT realtime clock> port 0x70-0x77 irq 8 on acpi0 atrtc0: Warning: Couldn't map I/O. atrtc0: registered as a time-of-day clock, resolution 1.000000s Event timer "RTC" frequency 32768 Hz quality 0 attimer0: <AT timer> port 0x40-0x43,0x50-0x53 irq 0 on acpi0 Timecounter "i8254" frequency 1193182 Hz quality 0 Event timer "i8254" frequency 1193182 Hz quality 100 Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1808-0x180b on acpi0 pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0 pci0: <ACPI PCI bus> on pcib0 vgapci0: <VGA-compatible display> port 0xf000-0xf03f mem 0xf6000000-0xf6ffffff,0xe0000000-0xefffffff irq 16 at device 2.0 on pci0 vgapci0: Boot video device hdac0: <Intel Broadwell HDA Controller> mem 0xf7514000-0xf7517fff irq 16 at device 3.0 on pci0 xhci0: <Broadwell Integrated PCH-LP chipset USB 3.0 controller> mem 0xf7500000-0xf750ffff irq 21 at device 20.0 on pci0 xhci0: 32 bytes context size, 64-bit DMA xhci0: Port routing mask set to 0xffffffff usbus0 on xhci0 usbus0: 5.0Gbps Super Speed USB v3.0 pci0: <simple comms> at device 22.0 (no driver attached) hdac1: <Intel Broadwell HDA Controller> mem 0xf7510000-0xf7513fff irq 22 at device 27.0 on pci0 pcib1: <ACPI PCI-PCI bridge> irq 16 at device 28.0 on pci0 pci1: <ACPI PCI bus> on pcib1 igb0: <Intel(R) PRO/1000 PCI-Express Network Driver> port 0xe000-0xe01f mem 0xf7400000-0xf741ffff,0xf7420000-0xf7423fff irq 16 at device 0.0 on pci1 igb0: Using 1024 TX descriptors and 1024 RX descriptors igb0: Using 2 RX queues 2 TX queues igb0: Using MSI-X interrupts with 3 vectors igb0: Ethernet address: 40:62:31:01:77:82 igb0: netmap queues/slots: TX 2/1024, RX 2/1024 pcib2: <ACPI PCI-PCI bridge> irq 17 at device 28.1 on pci0 pci2: <ACPI PCI bus> on pcib2 igb1: <Intel(R) PRO/1000 PCI-Express Network Driver> port 0xd000-0xd01f mem 0xf7300000-0xf731ffff,0xf7320000-0xf7323fff irq 17 at device 0.0 on pci2 igb1: Using 1024 TX descriptors and 1024 RX descriptors igb1: Using 2 RX queues 2 TX queues igb1: Using MSI-X interrupts with 3 vectors igb1: Ethernet address: 40:62:31:01:77:83 igb1: netmap queues/slots: TX 2/1024, RX 2/1024 pcib3: <ACPI PCI-PCI bridge> irq 18 at device 28.2 on pci0 pci3: <ACPI PCI bus> on pcib3 igb2: <Intel(R) PRO/1000 PCI-Express Network Driver> port 0xc000-0xc01f mem 0xf7200000-0xf721ffff,0xf7220000-0xf7223fff irq 18 at device 0.0 on pci3 igb2: Using 1024 TX descriptors and 1024 RX descriptors igb2: Using 2 RX queues 2 TX queues igb2: Using MSI-X interrupts with 3 vectors igb2: Ethernet address: 40:62:31:01:77:84 igb2: netmap queues/slots: TX 2/1024, RX 2/1024 pcib4: <ACPI PCI-PCI bridge> irq 19 at device 28.3 on pci0 pci4: <ACPI PCI bus> on pcib4 igb3: <Intel(R) PRO/1000 PCI-Express Network Driver> port 0xb000-0xb01f mem 0xf7100000-0xf711ffff,0xf7120000-0xf7123fff irq 19 at device 0.0 on pci4 igb3: Using 1024 TX descriptors and 1024 RX descriptors igb3: Using 2 RX queues 2 TX queues igb3: Using MSI-X interrupts with 3 vectors igb3: Ethernet address: 40:62:31:01:77:85 igb3: netmap queues/slots: TX 2/1024, RX 2/1024 pcib5: <ACPI PCI-PCI bridge> irq 16 at device 28.4 on pci0 pci5: <ACPI PCI bus> on pcib5 ath0: <Atheros 9287> mem 0xf7000000-0xf700ffff irq 16 at device 0.0 on pci5 ath0: [HT] enabling HT modes ath0: [HT] enabling short-GI in 20MHz mode ath0: [HT] 1 stream STBC receive enabled ath0: [HT] 1 stream STBC transmit enabled ath0: [HT] 2 RX streams; 2 TX streams ath0: AR9287 mac 384.2 RF5133 phy 15.15 ath0: 2GHz radio: 0x0000; 5GHz radio: 0x00c0 ehci0: <Intel Wildcat Point-LP USB 2.0 controller> mem 0xf751a000-0xf751a3ff irq 23 at device 29.0 on pci0 usbus1: EHCI version 1.0 usbus1 on ehci0 usbus1: 480Mbps High Speed USB v2.0 isab0: <PCI-ISA bridge> at device 31.0 on pci0 isa0: <ISA bus> on isab0 ahci0: <Intel Wildcat Point-LP AHCI SATA controller> port 0xf0b0-0xf0b7,0xf0a0-0xf0a3,0xf090-0xf097,0xf080-0xf083,0xf060-0xf07f mem 0xf7519000-0xf75197ff irq 19 at device 31.2 on pci0 ahci0: AHCI v1.30 with 4 6Gbps ports, Port Multiplier not supported ahcich0: <AHCI channel> at channel 0 on ahci0 acpi_button0: <Sleep Button> on acpi0 acpi_button1: <Power Button> on acpi0 acpi_tz0: <Thermal Zone> on acpi0 acpi_tz1: <Thermal Zone> on acpi0 atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0 atkbd0: <AT Keyboard> irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] est0: <Enhanced SpeedStep Frequency Control> on cpu0 Timecounters tick every 1.000 msec hdacc0: <Intel Broadwell HDA CODEC> at cad 0 on hdac0 hdaa0: <Intel Broadwell Audio Function Group> at nid 1 on hdacc0 pcm0: <Intel Broadwell (HDMI/DP 8ch)> at nid 3 on hdaa0 hdacc1: <Realtek ALC662 rev3 HDA CODEC> at cad 0 on hdac1 hdaa1: <Realtek ALC662 rev3 Audio Function Group> at nid 1 on hdacc1 hdaa1: No presence detection support at nid 27 pcm1: <Realtek ALC662 rev3 (Analog 2.0+HP/2.0)> at nid 20,27 and 24,25 on hdaa1 ugen0.1: <0x8086 XHCI root HUB> at usbus0 ugen1.1: <Intel EHCI root HUB> at usbus1 Trying to mount root from ufs:/dev/gptid/9c856434-c67b-11e8-8e1f-406231017782 [rw]... Root mount waiting for: usbus0 usbus1 CAM uhub0: <0x8086 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0 uhub1: <Intel EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus1 uhub0: 15 ports with 15 removable, self powered uhub1: 2 ports with 2 removable, self powered Root mount waiting for: usbus1 CAM ugen1.2: <vendor 0x8087 product 0x8001> at usbus1 uhub2 on uhub1 uhub2: <vendor 0x8087 product 0x8001, class 9/0, rev 2.00/0.03, addr 2> on usbus1 uhub2: 8 ports with 8 removable, self powered Root mount waiting for: CAM Root mount waiting for: CAM Root mount waiting for: CAM Root mount waiting for: CAM Root mount waiting for: CAM Root mount waiting for: CAM Root mount waiting for: CAM ada0 at ahcich0 bus 0 scbus0 target 0 lun 0 ada0: <Hoodisk SSD SBFM01.2> ACS-4 ATA SATA 3.x device ada0: Serial Number J7DTC7A21276330 ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 8192bytes) ada0: Command Queueing enabled ada0: 30533MB (62533296 512 byte sectors) mountroot: waiting for device /dev/gptid/9c856434-c67b-11e8-8e1f-406231017782... CPU: Intel(R) Core(TM) i5-5300U CPU @ 2.30GHz (2294.74-MHz K8-class CPU) Origin="GenuineIntel" Id=0x306d4 Family=0x6 Model=0x3d Stepping=4 Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE> Features2=0x7ffafbff<SSE3,PCLMULQDQ,DTES64,MON,DS_CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,TSCDLT,AESNI,XSAVE,OSXSAVE,AVX,F16C,RDRAND> AMD Features=0x2c100800<SYSCALL,NX,Page1GB,RDTSCP,LM> AMD Features2=0x121<LAHF,ABM,Prefetch> Structured Extended Features=0x21c2fbb<FSGSBASE,TSCADJ,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,NFPUSG,RDSEED,ADX,SMAP,PROCTRACE> Structured Extended Features3=0x9c000600<MCUOPT,MD_CLEAR,IBPB,STIBP,L1DFL,SSBD> XSAVE Features=0x1<XSAVEOPT> VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID TSC: P-state invariant, performance statistics padlock0: No ACE support. aesni0: <AES-CBC,AES-CCM,AES-GCM,AES-ICM,AES-XTS> on motherboard coretemp0: <CPU On-Die Thermal Sensors> on cpu0 lo0: link state changed to UP vlan0: changing name to 'igb0.4' vlan1: changing name to 'igb0.5' ng0: changing name to 'pppoe0' igb0: link state changed to UP igb0.4: link state changed to UP igb0.5: link state changed to UP tun1: changing name to 'ovpns1' ovpns1: link state changed to UP pflog0: promiscuous mode enabled load_dn_sched dn_sched FIFO loaded load_dn_sched dn_sched QFQ loaded load_dn_sched dn_sched RR loaded load_dn_sched dn_sched WF2Q+ loaded load_dn_sched dn_sched PRIO loaded load_dn_sched dn_sched FQ_CODEL loaded load_dn_sched dn_sched FQ_PIE loaded load_dn_aqm dn_aqm CODEL loaded load_dn_aqm dn_aqm PIE loaded igb3: link state changed to UP igb0: link state changed to DOWN igb0.4: link state changed to DOWN igb0.5: link state changed to DOWN igb0: link state changed to UP igb0.4: link state changed to UP igb0.5: link state changed to UP igb0: link state changed to DOWN igb0.4: link state changed to DOWN igb0.5: link state changed to DOWN igb0: link state changed to UP igb0.4: link state changed to UP igb0.5: link state changed to UP ng_pppoe[15]: no matching session igb3: link state changed to DOWN igb3: link state changed to UP ng0: changing name to 'pppoe0' igb3: link state changed to DOWN igb3: link state changed to UP ng0: changing name to 'pppoe0' igb3: link state changed to DOWN igb3: link state changed to UP ng0: changing name to 'pppoe0' igb3: link state changed to DOWN igb3: link state changed to UP ng0: changing name to 'pppoe0' igb0: link state changed to DOWN igb0.4: link state changed to DOWN igb0.5: link state changed to DOWN igb0: link state changed to UP igb0.4: link state changed to UP igb0.5: link state changed to UP

@zatno "72% increase in cyberattacks against healthcare sector over the weekend"

https://www.jpost.com/breaking-news/cyberattack-attempts-towards-israeli-hospitals-thwarted-govt-682221

@tman222
this is my config for the ublox

server 127.127.20.0 mode 89 iburst prefer minpoll 2 maxpoll 4 fudge 127.127.20.0 flag1 1 flag3 1 time1 0.0 time2 0.025 refid GPS tos mindist 0.060 server 192.168.10.200 server 151.3.106.211 server ntp1.inrim.it server ntp2.inrim.it pool 0.it.pool.ntp.org pool 1.it.pool.ntp.org

this is the results

remote refid st t when poll reach delay offset jitter ======================================================================================== oNMEA(0) .GPS. 0 l 11 16 377 0.0000 0.0002 0.0003 +192.168.10.200 .GPS. 1 u 42 64 377 0.0996 -0.0002 0.0149 +151.3.106.211 .GPS. 1 u 40 64 377 24.2144 0.1478 0.9674 -193.204.114.232 .CTD. 1 u 59 64 377 25.2698 -4.7052 0.3729 +193.204.114.233 .CTD. 1 u 49 64 377 12.5229 0.0942 0.3967 0.it.pool.ntp.org .POOL. 16 p - 256 0 0.0000 0.0000 0.0010 1.it.pool.ntp.org .POOL. 16 p - 256 0 0.0000 0.0000 0.0010 -37.247.53.178 193.204.114.233 2 u 57 64 377 11.9465 1.0424 0.6543 -162.159.200.123 10.20.14.167 3 u 37 64 377 25.2151 0.8878 0.4707 +212.45.144.206 193.204.114.232 2 u 9 64 377 10.5258 0.5104 0.3046

2bec0572-bb2b-4b3f-bb7e-f9ea25d706d3-image.png

@bingo600

PI-Hole released a new version yesterday.
Seems like the fix is working.

I had no "DENY's at 07.00" this morning

/Bingo

@subham

An IP address is mostly a resource that is shared in time to different users.
Depending on what users do while using an IP, their actions can trigger defence measures on the sites they visit. Later on, when you visit the same site using the same IP, you see the issues you've been seeing.

Several solutions :
If you're able to change the WAN IP you're using right now, do so.
If not possible, get a WAN IP for yourself.
If not possible, relocate yourself : go to another place, so you do not share the place any more where (common) WAN IP is 'blacklisted'.
If not possible, use a VPN - take one of those you see in every Youtube video.
Last but not least : locate those who are activated the blacklist system on the site you visit. Shut them down / make them stop.

I actually graduated with both my masters and bachelors from [url snipped mod - not a actual wgu link] and then decided to make a career change. I thought I would need to complete a 'traditional' bachelors, but after reaching out to 11 DO schools regarding my bachelors degree, 9 got back to me (2 never replied) and stated my WGU degree would be accepted as it is regionally accredited. One school suggested I complete 60 science credits prior to applying, which is already in my plan. I'm completing all required & suggested DO pre-reqs at a CC.

Case is available again - person that claimed it has the 12 pro max, this case will not work for that. This case is for 12, or the 12 pro. Which are the same size and use the same case.

@pimpmyrouter Do you have details of your BT 4G setup. I'm using a huawei b818 for my WAN 2 currently which works but I have to pay for the 4G SIM and I only need connection for some lab work. So using the BT 4G would suffice.

(It would be ideal if I can create a VPN connection to a server I have in the cloud.)