@ipfftw sure

Return-Path: <info123@geoattendance.com> Delivered-To: **********@may.nu Received: from mail.may.nu by mail.may.nu (Dovecot) with LMTP id r3d1F8ibCmEAdQAA7RFmPA for <**********@may.nu>; Wed, 04 Aug 2021 15:53:12 +0200 Received: from alpha.xprohosting.com (f012.fuchsia.servdiscount-customer.com [217.79.181.12]) by mail.may.nu (Postfix) with ESMTPS id 2909D17C036E for <**********@may.nu>; Wed, 4 Aug 2021 15:53:08 +0200 (CEST) Authentication-Results: mail.may.nu; dkim=pass (2048-bit key; unprotected) header.d=geoattendance.com header.i=@geoattendance.com header.b="SLa04DyS"; dkim-atps=neutral Received: from r22710 (unknown [40.77.63.56]) by alpha.xprohosting.com (Postfix) with ESMTPSA id 35CDB34CA593 for <**********@may.nu>; Wed, 4 Aug 2021 15:53:08 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=geoattendance.com; s=202009; t=1628085188; bh=FoCUUax9aL+R62ReUNyY9gsQPsuhHPLNyC8eXoKsv6A=; h=From:To:Date:Subject:From; b=SLa04DyS8KOLi8bqYBPLfvk7lqQzewCkc2vR8PsBV1z8F/8kyuZU+0Yo4xoBv7DIo z6hupnWk3i615wrSCDxqN2ShuokuVoxkcrTykOBgbk2/63jFfigsOZlgJ/Wv4hLX8D t9KWHfYjlLu9rUWRferINJWM4z36GwkbJP7P+ArWQWNQgoQVGj4V4bODK24G5/8+u5 CI9tgbFmhJhZJ6Due1P29b5Q+Bdoqt2tVU6quD3TqW4vHJkA0/l1slsvWoqUhFunvA MYcxOX+pEZMFrlEmVkqHlbfqD300Wmbt8vYCQRCJwk6dqN1Gy6FU1QPQ/1XV7ru20k BzlhVy1LoabwA== MIME-Version: 1.0 From: "app invoice" <info123@geoattendance.com> To: **********@may.nu Date: 4 Aug 2021 13:53:08 +0000 Subject: Premium package activated for **********@may.nu cloud account. Enjoy feaures and services. Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 X-Spam-Status: No, score=1.7 required=4.5 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG, MIME_HTML_ONLY,MISSING_MID,SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.2 X-Spam-Level: * X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.may.nu

and

Return-Path: <office@d2turboparts.com> Delivered-To: **********@may.nu Received: from mail.may.nu by mail.may.nu (Dovecot) with LMTP id pt2cBSj7CmHZNAAA7RFmPA for <**********@may.nu>; Wed, 04 Aug 2021 22:40:08 +0200 Received: from vmi314772.contaboserver.net (autoq.ro [213.136.74.59]) by mail.may.nu (Postfix) with ESMTPS id 22FC217C036E for <**********@may.nu>; Wed, 4 Aug 2021 22:40:06 +0200 (CEST) Authentication-Results: mail.may.nu; dkim=pass (2048-bit key; unprotected) header.d=d2turboparts.com header.i=@d2turboparts.com header.b="daoofF1+"; dkim-atps=neutral DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=d2turboparts.com; s=default; h=Content-Transfer-Encoding:Content-Type: Subject:Date:To:From:MIME-Version:Sender:Reply-To:Message-ID:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=FoCUUax9aL+R62ReUNyY9gsQPsuhHPLNyC8eXoKsv6A=; b=daoofF1+w3pvvKfo+ERt1hAdqn rJ1oLc7KfAggISxUkG/zSwdy9V+PIJB4qCoy2W6BNYBBvfjStjQhsyQWnnhncAH8Ly8BOS3PIV5px 43gJ8funa4hhs35Y7Vs9PbDkrTqzHTbKi+n+SqI2/w7lfekHwDS1em4ixVJIFvyZs75YAw+BpZ7YF UcEz7kcE9o9jiCMm6b875UBpSTdZvr7mBs4rEOTzlbRR6YujxCDt+RS+FoehthUjAbG8wz4IG1kVn z+c9dF62yeqXE8s6gcLI7KtBDK7mnwtp0DQEm5Rv4hSvxqbZvmdMT9C3L/c3oqFdlYjNDBLcIn9F7 DQjShqpg==; Received: from [20.74.174.147] (port=51985 helo=r2074) by vmi314772.contaboserver.net with esmtpsa (TLS1) tls TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (Exim 4.94.2) (envelope-from <office@d2turboparts.com>) id 1mBL04-0008Eh-QJ for **********@may.nu; Wed, 04 Aug 2021 20:48:14 +0300 MIME-Version: 1.0 From: "app info" <office@d2turboparts.com> To: **********@may.nu Date: 4 Aug 2021 17:48:14 +0000 Subject: Order for **********@may.nu cloud account placed. Please confirm delivery and purchase. Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - vmi314772.contaboserver.net X-AntiAbuse: Original Domain - may.nu X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - d2turboparts.com X-Get-Message-Sender-Via: vmi314772.contaboserver.net: authenticated_id: office@d2turboparts.com X-Authenticated-Sender: vmi314772.contaboserver.net: office@d2turboparts.com X-Source: X-Source-Args: X-Source-Dir: X-Spam-Status: No, score=1.7 required=4.5 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG, MIME_HTML_ONLY,MISSING_MID,SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.2 X-Spam-Level: * X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.may.nu

I would say yes.... and compared to just a year ago for super cheap.

I just built a PfSense firewall using an old Lenovo ThinkCenter M92p ($50) with two generic RTL8125B 2.5Gbps nics ($25 each)... FYI, I had to manually add the drivers using pkg add...

https://www.amazon.com/gp/product/B08952DDML/ref=ppx_yo_dt_b_asin_title_o00_s00?ie=UTF8&psc=1

On the LAN side my workstation has a Rosewill 10GBE card from Newegg ($75)

https://www.newegg.com/rosewill-rc-nic412v2/p/N82E16833166130?Description=pcie%2010gbe%20card&cm_re=pcie_10gbe%20card--33-166-130--Product&quicklink=true

Everything connects through a ZyXel XGS1250-12 Switch. ($160)

I have an Arris 33 Cable Modem that has a 2.5 GBE port. ($150)

For the first time I am getting a Speedtest download > 1GBPS (1356.96 Mbps from Comcast Xfinity).

31f82068-ca68-457d-baf3-98b1bc7dc3d9-fasted speedtest.png

Well ring fence is valid term in finance world - it means separation of assets or profits.. So I could see why a cfo would use such a term to describe a segmented network.

We have used the term for people, when a employee is ours, but only allowed to work for a specific customer and not any other projects, etc.

But if the networks were allowed to talk to each other at all - then the term would break down in validity. I wouldn't use the term to describe the segmentation of networks in a location that can talk to each other.

But say you had a location for example in china that wasn't allowed to talk to the rest of global network - guess you could say they are ring fenced ;)

@Lococent said in be honest are you worried about corona:

I've done the same. Let me tell my story. I have lost my job and the only source of income, and trust me, I've been extremely worried about it. But soon I learned how to use video editor and started working as a freelancer on Upwork. Soon I started earning very good money from home just with video editing skills. I am happy now that I lost my boring job that took all my time. Now I have more free time and money

That is great, I like the fact that people now can work from their computers and not being linked anywhere

@hadi57

if you want to restict connection time you might also want to
separate the domesitc helper from rest of the family net (just to think about)
anothe thing to point out ... think about bandwidh limitation for the helper

easy way like @NogBadTheBad said
DHCP with a fixed IP
then set up alias for this ip eg domHelper
set up scheduler
the firewall rule with scheduler for this alias

other way
captive portal (used with a network (this will separate the helper from the family net)
and schedule time

another way
set up a separate wifi with a vlan on your pfS
then you can also separate
and with the scheduler solve the connection time prob

brNP

@esogas said in gs348t static IP - no admin page:

I went to the browser for the admin page of the switch it wouldn't pull up.

Might be good advice.

I never use that browser to configure network devices, which I use to browse the web.

For this purpose I installed a Chromium or Iridium or LibreWolf (for Firefox fork) browser, without any addons, the default setting should always delete and or not store cookies + history, and of course use CCleaner or similar.

https://docs.netgate.com/pfsense/en/latest/recipes/http-client-proxy-transparent.html

ssh into pfsense box > shell >

pkg install -g libidn2 ca_root_nss pkg add "https://install.speedtest.net/app/cli/ookla-speedtest-1.0.0-freebsd.pkg"

then simple run speedtest

@lawrence90 Steam works fine through pfSense without anything special needing to be done. Your problem sounds more like data corruption.

If you flag it then a moderator can edit you post and change the title liker it says there.
I have done so for this. But there is no way to mark a thread solved beyond that.

Steve

@pete35 said in What's the difference between WS-C2960S-48LPD-L and WS-C2960S-48LPS-L ?:

I would like to mention, that the used 2960 have serious power supply problems.

I haven't had any PSU issues w. my 2960X'es , but they are in a Clima Controlled Server room.
But i'd hate to be in the same room & pay the electricity bill.

But you could be right .. If the switch has already had ie. 5..7 years of 24/7 runtime , especially in a hot environment.

/Bingo

@matinsnaff

You asked the one question that can be answered by yourself in 5 minutes ;)
pfSense has something Cisco can't offer :
If you have an older (thus non used) desktop PC somewhere, snap in a second (third etc) extra NIC, and you're to discover it for yourself.
The initial set-up will have a WAN and LAN interface, and perfectly working initial firewall rules.
Which means 'none' on WAN so nothing enters.
And a single "pas all" rule on LAN so everybody can do what she/he wants on the net.

At this moment, you'll face just one issue : your firewall will be as good as the admin guy handling it.
Typically, it could be a close to "set it and forget it installation". Just update it ones in a while.

If you want to,play with the many 'whistles and bells' : please, do understand that they work for you as long as you understand how they work.

@matinsnaff said in Is PFsense a Good Choice For a Small Business Office?:

(blocking websites that we use for no reason

Could it be true that some sites do 'break' ones in a while ? It happens to all of them.
Router/firewall do not block randomly some sites. If that happens, go for the door that says 'admin' and ask the guy behind it some questions.

Btw : there is no need to buy a device to get your hands on the manual : the manual is freely available.

@billjcarlos #1 I don't think there are many Canadians here so you probably won't get many replies. #2 it's going to die in the Senate anyway so forget about it. I'm really surprised at the lengths the Libs, NDP and Greens went to ramrod this through despite all the pushback, and the Cons were the voice of reason for once in their lives.

@stephenw10
Thank you