Subcategories

  • Discussions and feedback related to this forum

    607 Topics
    3k Posts
    johnpozJ

    @microserfs and what IP was that - clearly your current IPv6 address is not block that I show you connected with.. And the only other IPv4 I see you using is not blocked.. You would have to let me know what IP you were coming from that was blocked.. Send it to me via PM if you don't want to make it public.

  • Community Hiring and For Hire postings related to jobs that require pfSense software skills

    27 Topics
    114 Posts
    w0wW

    @sef1414
    Name it "run.sh", copy to pf and chmod according documentation
    https://docs.netgate.com/pfsense/en/latest/development/boot-commands.html#shell-script-option
    You will see messages in the system log like those quoted in the script after logger command.

  • Alternative to DMS Radius Manager

    1
    0 Votes
    1 Posts
    901 Views
    No one has replied
  • Help requested on interesting networking challenge (vpn, nat, etc).

    5
    0 Votes
    5 Posts
    1k Views
    T

    @kejianshi:

    The ideal solution would be to use something like a hardware wireless client that also has several ethernet adapters that you can plug your cameras into.

    Why are you wireless only?  Are you double NATed?

    (sorry - pic didn't load at first)

    Looks like your VPN server is in the wrong place to make this happen unless its a bridged network?

    The VPN server is at my local site.  So, I guess technically a site-to-site setup would work, but would require another pfSense box on hand and in the same cabinet.  Then I would need a small private LAN for the Windows PC and the Camera Recorder.

    I am single NAT'ed by the 4G <-> Wifi unit, which is my only access to the outside world (internet).  To solve the "no wifi on the video box" problem, I can share the wifi internet on my Windows PC, which then becomes double NAT'd.  I don't think that is a problem if I could VPN client out of that NAT system into my local pfsense server, as it would tunnel through both NATs I assume.

    I am trying to achieve this without additional hardware, the best I have come up with is a Raspberry pi in a bridge mode, but with a VPN Client connection included that "dials home" to the home office.

    This, plus VPN connection:
    https://rbnrpi.wordpress.com/project-list/wifi-to-ethernet-adapter-for-an-ethernet-ready-tv/

  • Adblocking ~ Adblock Plus

    11
    0 Votes
    11 Posts
    24k Views
    S

    @Mr.:

    BB has pfBlockerNG 1.0 ready, and awaits code review by the admins. pfblockerNG 2.0 (which BB is working on) is planned to have adblocking support.

    Wooow, sounds awesome. I can´t wait to test the pfblockerNG :-p

    Thanks to all for your replies
    Regards

  • Question on automatic updates

    3
    0 Votes
    3 Posts
    1k Views
    F

    I understand
    Thank you

  • Hangouts?

    7
    0 Votes
    7 Posts
    2k Views
    M

    I don't think I ever got any newsletter too. I think  ;D

  • Throttle videos pfsense

    2
    0 Votes
    2 Posts
    1k Views
    H

    .sfw,.flv  extensions would only throttle loading the video players, but not the video stream. I wonder if you can throttle videos without just throttling sites.

  • State of [u3g] & [cdce]

    4
    0 Votes
    4 Posts
    1k Views
    ?

    This is one of the most informative pages i have ever seen regarding this matter.

    http://www.dd-wrt.com/wiki/index.php/3G_/_3.5G

  • Can't stop.. .nooo can't stop, the logging

    1
    0 Votes
    1 Posts
    532 Views
    No one has replied
  • 2.2 RC soon?

    8
    0 Votes
    8 Posts
    2k Views
    ?

    @Harvy66:

    At the time of this post, all 2.2 bugs are closed out

    https://redmine.pfsense.org/projects/pfsense/roadmap#2.2

    I'm eagerly awaiting 2.2.1

    Some people just want to watch the world burn.

  • First Computer Build

    19
    0 Votes
    19 Posts
    4k Views
    ?

    I worked on a Submarine Tender so it was a large ship. We had the big iron upstairs(VAX 8600) But i only did data entry and requisition status on that via a terminal in our workspace down in the bowels of the boat…Next door to our shop was "Tech Library" for the repair department and they had microfiche and TRS-80's. What a contrast... Was really surprised to see Tandy onboard. The VAX was mounted on special shock mounting and the TRS-80's were commodity. The VAX was actually a Sperry unit but Unisys had bought the company. From the looks of the above pictures it may have been a rebadged DEC maybe ruggedized by Sperry for shipboard use..

  • PfSense getting love from Slashdot

    3
    0 Votes
    3 Posts
    798 Views
    ?

    I, for one, welcome linux's new robot overlord.

  • Wrong Interface Statistics reported by pfSense

    3
    0 Votes
    3 Posts
    794 Views
    C

    Where are you seeing seemingly wrong interface stats? Status>Interfaces pulls from one set of counters, the RRD graphs from another, and they should match up.

    The last person making that claim here a few days ago found out his ISP was clearly wrong and way off in their stats, the interface stats were correct. That's eventually found to be the reasoning in most all the cases.

  • POE Voltage Monitoring

    10
    0 Votes
    10 Posts
    2k Views
    stephenw10S

    Didn't see your PIC so i can't comment on that.
    If you already have the PoE card then might it be possible to write some drivers for it or interegate it in some cruder fashion.

    Steve

  • Data Compression: Is it Worth it?

    10
    0 Votes
    10 Posts
    3k Views
    H

    @stan-qaz:

    @Harvy66:

    BTRFS is not going to be production ready for a long time, it also has a lot of logic design issues that make it less than ideal for sysadmins. It wasn't designed by sysadmins, so they don't know the kinds of issues sysadmins have to deal with.

    Thanks for that information, it is interesting stuff to think about and I've filed a copy away for review prior to my next Linux upgrade. OpenSuse Linux is shipping BTRFS as the default filesystem for some partition types today in version 13.2 and they intend to fully move to it at some point. They have jumped too early before on technical decisions, recently on systemd, so I am a bit leery of their choices at this point and don't wish to have another mess like I did when they went to Reiser (spelling?) as a file system and then it went away.

    I don't see ZFS as a realistic option for my Linux needs due to the non-support by Linux distributions but since I'm not wedded to Linux as an operating system you make some interesting points that recommend an OS that offers native support for ZFS. For someone wedded to Linux the use of the ZFS format from the project might be a good option but it seems like it would be a lot safer to just go with a BSD and native ZFS.

    I hear the recent FreeBSD implementation of ZFS supports feature flags, which allows upgrades to not change the current ZFS, so you can properly snapshot and roll-back your OS. Say you have 10.1 installed, snap shot before upgrading to 10.2, and if something goes wrong, just switch back. Even maintain two snapshots and you can reboot into the other, or possibly run it in a jail.

    Always back-up your stuff  :p

  • Its about haproxy

    4
    0 Votes
    4 Posts
    1k Views
    P

    To disable webgui redirect go to: System: Advanced: Admin Access , then check the 'Disable webConfigurator redirect rule' checkbox.

    I don't have a tutorial.. But if you click around a bit it shouldnt be that hard to figure most things out..

    Frontent listens on a ip:port for incomming connections, then uses a backend that contains the webservers to loadbalance between.
    Using multiple shared frontends you can use acl's to add to the existing ip:port and send traffic to a different backend, for example when www.domain.com needs to be handled by a different backend&servers than mail.domain.com , while still listening on 1 port.

  • Wireless N

    11
    0 Votes
    11 Posts
    2k Views
    jahonixJ

    @Derelict:

    Right, which is a "whatever's there is there" approach which makes perfect sense.

    I second that!

    It's just that I don't like to over-emphasize WiFi with pfSense. I own and sometimes use an alix3d2 with b/g card inserted and configured. But I surely don't jump the bandwagon demanding .11ac from pfSense which would be next.

    Reliable WiFi is way more than entering an SSID, pass-phrase and off-we-go.
    Just recently I heard >30 competing APs in my living room within the 2.4GHz band. Not counting Bluetooth and ZigBee devices.
    Adding a WiFi card to my APU would only add to air pollution and be counter productive. However, the right AP in the right place does the trick.
    FWIW

  • Redirect Data Through Folder to NAS

    3
    0 Votes
    3 Posts
    755 Views
    H

    just create an iscsi target on your nas  & connect it on you windoze machine.

    should be completely transparent to almost any application

  • Not bad for a free pfsense box.

    3
    0 Votes
    3 Posts
    1k Views
    stephenw10S

    Can't complain at that price.  ;)
    Via padlock is nice. You'll find it can probably smoke the firebox in VPN throughput (with the correct encryption type) even though the processor is considerably less powerful.

    Steve

  • Liberar acesso ao proxy

    1
    0 Votes
    1 Posts
    625 Views
    No one has replied
  • FreeNAS experiences? Is it something?

    24
    0 Votes
    24 Posts
    6k Views
    stan-qazS

    You can get ZFS on Linux, just not along with Linux due to licence issues:

    http://zfsonlinux.org/

    http://zfsonlinux.org/faq.html#WhatAboutTheLicensingIssue

    ZFS is licensed under the Common Development and Distribution License (CDDL), and the Linux kernel is licensed under the GNU General Public License Version 2 (GPLv2). While both are free open source licenses they are restrictive licenses. The combination of them causes problems because it prevents using pieces of code exclusively available under one license with pieces of code exclusively available under the other in the same binary. In the case of the kernel, this prevents us from distributing ZFS as part of the kernel binary. However, there is nothing in either license that prevents distributing it in the form of a binary module or in the form of source code.

    Comparing them is beyond me and I've decided to reset the OpenSuse defaults and stick to Ext4 rather than the recommended BTRFS / XFS and sit it out until 13.3.

    Lots of good reading if you do a Google versus search.

    https://rudd-o.com/linux-and-free-software/ways-in-which-zfs-is-better-than-btrfs

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.