Local host is a single special purpose address. But, like any IP address, it can listen on multiple ports for different services. Port 5000 would not interfere with DNS. It doesn't apply to a VLAN though. Localhost is only valid on that specific host. Anything else would be unable to connect to it without some forwarding in place; on the host itself. Steve

@nollipfsense not for me

That's not the part that got to me; it was the redundant PSU that's the most rare to find.

Check the source: https://github.com/callmekass/pfSense-palenight It's just one css file saved in the css themes folder.

I raised it, we shall see. I believe the issue we hit last time was one of economics rather than a technical problem. Maybe that has changed.

I was stumbling over that thread here and want to give my "two cents" on top of that. A real WiFi MESH network is using the HWMP (protocol) to guaranty a good working together between the devices with out no problems. "Some" vendors, as an example MikroTik, are setting up there own HWMP such HWMPplus from MikroTik, so it is not compatible to any other or normal HWMP protocol and only there own hardware, will work "nice" together. So if other vendors now also do something like that, configuring out there own version of the HWMP (protocol) it can be that then devices there are not only from one vendor, getting problems out here.

I have no idea, I've never seen either of those devices. I'd suggest asking on the F5 forum.

@lhoust Have any other pfSense+ Users been flagged for Commercial TeamViewer Usage, even though they were NOT paying themselves to access their own Computers (on an Occasional Basis)??? Nope. Use it for my mothers machine and we are both behind a pfsense instance.

@chpalmer Wished I could but at approx $400 plus taxes for a temporary service, I'll have to pass. T-Mobile support suggested to try the Arcadyan box and I am waiting to receive it. The Fast 5688W appears to be designed around offering the WIFI 6...got better speed but that bypass my robust firewall so, no way.

@jonathanlee pfSense: The Definitive Guide Pocketbook– 31. Oktober 2009 9 used in good conditions and 1 fresh new available for nearly ~60 € if you type in your delivering address you will see if they are delivering to your country.

@oguruma First place I would have a look at the Netgate store if there will be something (devices) matching your needs or according to your whole situation. If not you could; Devices from the Netgate store Qotom mini PCs on Alibaba HSIPC devices on amazon.xy older Intel J1900 devices on eBay used Atom till Xeon E3 servers at eBay or refurbished elsewhere There will be for sure something that is matching your budget and fitting your needs. But without knowing your entire use case or installation you will do, we are all only doing guesswork here. So perhaps you may provide us with some more informations about your usage case!? Internet speed, provider DSL, VDSL, Fiber,..... Packets for installation like snort, Squid & SquidGuard, pfBlocker-NG, ClamAV, cellular,....... OpnVPN, WireGuard or plain IPSec?

@johnpoz The github ip's seems to have been removed from the list , the pfSense would only have logged those if they were in there. dhylands.github.io has address 185.199.108.153 dhylands.github.io has address 185.199.110.153 dhylands.github.io has address 185.199.111.153 dhylands.github.io has address 185.199.109.153 https://raw.githubusercontent.com/jpgpi250/piholemanual/master/DOHipv4.txt https://raw.githubusercontent.com/jpgpi250/piholemanual/master/DOHexceptionsIPv4.txt Here i suppose Mar 23 12:30:55 php-cgi 6601 rc.update_urltables: /etc/rc.update_urltables: Updated UA_DOH_IPV4_JGPI content from https://raw.githubusercontent.com/jpgpi250/piholemanual/master/DOHipv4.txt: 80 addresses added. But as mentioned above .. It got us to dig a bit deeper in FF and DOH (prevention). And i have learned a lesson in "blindly trust" external lists. But it's only the 2'nd time in like a year, that i have had issues w. that list. So it seems OK'ish /Bingo

I am fin here too

Hmm, well likely something sent a gratuitous ARP for every IP somehow. Or pfSense queries everything but that would really only happen if you ran a scan. As I said it's just odd though it's unlikely to hurt anything.

@michmoor what would it take you 3 seconds to know if pihole is not answering, or unbound is not answering? if dns is not working and I query unbound, and it works - its pretty much a given that pihole is the problem ;) I don't recall pihole ever going down btw ;) And while some users report issues with unbound - I can not recall the last time I had any issues with it, mine never restarts, unless I do it on purpose sort of thing. Nor does it just stop.. Both have been pretty rock solid if you ask me.. Then again I am not loading 47 million things into dnsbl, nor do I forward, and sure and the hell if I did forward it wouldn't be doing it over tls nor would I be having dnssec set if I forwarded. And I don't register dhcp clients either, where unbound needs to restart every few minutes because some update to a dhcp client ;) And my isp is pretty much rock solid.. I always have a cmd prompt open, it takes what 3 seconds to do a dig directly to pfsense IP vs the default dns of unbound. I currently show unbound up for 12 hours, I made some adjustments this morning to my static reservations for some lightbulbs and needed to change some names, so unbound restarted. Other than my changes I pretty sure unbound would be running for the last 20 and half days.. which is the time pfsense has been up.