Subcategories

  • Discussions about development snapshots for pfSense Plus 25.07

    61 Topics
    872 Posts
    luckman212L

    adding here from https://redmine.pfsense.org/issues/16331 for more discussion and eyes:

    On my home 6100 that I factory erased and formatted with a fresh 25.07RC via Netgate installer (25.07.r.20250715.1733) I am having a bad situation occur where the default route (0.0.0.0/0) gets removed if the link drops (no carrier) on my WAN. This includes during operation, or at boot-time. The default route is not replaced by anything, thus breaking just about everything.

    I thought it might have been because I have a S2S Wireguard tunnel that uses Policy Based Routing and has a Peer with "Allowed IPs" set to 0.0.0.0/0 but I tried disabling that peer and the behavior continued. I have tried rebooting a few times to be sure this wasn't a one-off.

    If I manually go to System > Routing and choose a specific V4 gateway (my Tier2) then things start to work again.

    Similarly, if I ssh in and type

    route add default <ip_of_my_tier2_gw>

    That gets things working temporarily as well.

    My setup is:

    FIOS via a 10Gtek SFP+ adapter on ix0 as Tier1 (DHCP+DHCP6) a Teltonika RUTX11 as my Tier2 WAN on ix2 (RJ45) LAN on ix1 (another SFP+ to a Unifi 10G switch)

    Packages installed currently are:

    acme arping aws-wizard Backup Cron Filer iperf ipsec-profile-wizard mDNS-Bridge Netgate_Firmware_Upgrade Nexus pfBlockerNG Shellcmd softflowd sudo System_Patches Tailscale WireGuard

    I have a couple of status_output.tgz debug archives collected before and immediately after a reboot. Happy to send those off to whoever @netgate to help troubleshoot this, or any other sort of troubleshooting. I'm surprised nobody else has hit this during the beta testing.

  • Build pfSense 2.0.3 without ixgbe driver built-in

    8
    0 Votes
    8 Posts
    3k Views
    stephenw10S

    @Altar:

    What about pfSense upgrades ?

    Shall they leave my driver and loader.conf.local untouched ?

    loader.conf.local will be copied across an update but the module will not. This is only sensible when you think about it as an update may render the module incompatible and could potentially stop the system booting.

    It would be interesting to find some way around this though as most updates do not change the kernel. You could keep a copy of it in /root/ which is preserved across an update (in Nano at least) for easy copying back to /boot/modules. I haven't tried that.

    Steve

  • Concurrent Online Users

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    L

    It appears this information comes from the ARP table, and so this is where I have grabbed the qty from.

  • Diff to upgrade pfsense

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    jimpJ

    There are things that do a binary diff, but it's really not worth the effort. Just use the normal firmware update files, not much reason to rock the boat there and potentially miss or break something.

  • Where to find the wol module/class in pfsense

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • IPsec with certs - vpn_ipsec_force_reload() failure

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • How to submit a patch (adding ovh.com DDNS service) ?

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    stan-qazS

    I got some assistance on submitting a new widget here: http://forum.pfsense.org/index.php/topic,58278.msg312391.html#msg312391

    Or just the git links here: http://forum.pfsense.org/index.php/topic,59193.msg318188.html#msg318188

  • Issues with newest 2.0.3-PRERELEASE

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    jimpJ

    check_reload_status is a command broker of sorts. It accepts commands from scripts and handles actions based on those commands.

    When your link goes down/up, it fires off rc.newwanip. When that happens, some commands run that tell check_reload_status to do things like update firewall rules and so on, then check_reload_status will run the commands as needed.

    What you're seeing is a side effect of some other issue, check_reload_status on its own isn't actually the problem, it's whatever issued the large number of commands to it.

  • Need help with error message on pFsense 2.1 package builder system

    Locked
    6
    0 Votes
    6 Posts
    4k Views
    jimpJ

    Yep, they do make things easy.

    also make sure to watch the spacing on the command I put in above, some options are quite picky about where spaces are/are not (PHP's getopt is a bit weird sometimes)

  • Questions about submitting new syslog-ng package

    Locked
    14
    0 Votes
    14 Posts
    10k Views
    O

    @laleger
    I must say "Thank you for that Package and all the work you have done".
    It always thought, wouldn't it be great to use the Diskspace for some long-time logging. For example Captive-Portal logging, which User was online and was doing which crime…

    @terry_e
    It is only available for Pfsense 2.1

  • Amazon EC2 AMI

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    E

    Yes!  Please if you can make that public, it would be very helpful.

  • Can't access pfSense git anymore

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    S

    Thank you for your reply and the new link.

  • No 2.0.3-PRERELEASE Snapshots anymore?

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    jimpJ

    2.0.3 for now for most people, but there's not much left to do on 2.1 either before it moves to RC1.

  • Building 2.0.2-RELEASE ISO with FreeBSD 8.1

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    jimpJ

    No. 2.0.3 is frozen for anything but bug fixes.

    Why not 2.1? It's about to go RC1, and it's been stable for a while. It doesn't make much sense to resist it at this point if your hardware works there.

  • Deprecate IPv6 local tunnel endpoint

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    N

    Well, no reason, it just "feels" right. I know both IP addresses are valid, but somehow I think that the subnet is mine and the tunnel endpoint is not. I just want to control which IP address the firewall uses.

    The firewall has got two IPv6 addresses from the subnet, one being on a bridged interface (two physical ports and one vlan), the other a vlan.
    It also drives me crazy that after I deprecated the local tunnel endpoint the firewall now uses the IP address from the vlan, and not the bridge  :(
    and I have no clue how to change that. I tried to change the metric of the vlan interface but that didn't help.

    So, if you don't want to implement such a thing, is there a playce where I can put that command so that it is executed everytime the firewall boots up (or better, everytime the interface is brought up)?

  • How to setup daloradius with pfsense + Freeradius2 ?

    Locked
    1
    0 Votes
    1 Posts
    3k Views
    No one has replied
  • 0 Votes
    10 Posts
    5k Views
    S

    @ifconfig:

    @simontkk:

    Hi,

    Can anyone help me ? I have keep tried for this for last 2 week but still successful. Although I was successfully built the ISO out, but I still see there is some port error for syslog-ng ,  openssl  and IONCUBE ?

    May I know why ISO still able to built although there are some error on ports ? I want to know some logical concept behind this.

    May I know how to settle the error at above ?

    Thank you very much if anyone could help me.

    Best Regards,
    SIMON TIONG

    Hi. Building ports and building iso are individual. Building ports step builds and installs ports to computer you work in. In the next steps, the essential binaries and other files for pfSense are copied to pfSense's root by using copy.list.WHATEVER. If a file doesn't exist to copy, they are listed in the /tmp/pfPort/copy.list file.

    Hi ifconfig,

    First of all, thank you for your valuable information. I found that inside my /tmp/pfPort/copy.list it stated some error like following. May I know, do you any idea of what causing the error ?

    Could not locate lib/libgeom.so.4
    Could not locate usr/local/sbin/syslog-ng
    Could not locate sbin/rtsold
    Could not locate usr/local/lib/libxml.so
    Could not locate usr/local/sbin/slbd.sh
    Could not locate usr/local/bin/verifysig
    Could not locate usr/local/bin/radns
    Could not locate usr/local/bin/sqlite3
    Could not locate usr/local/bin/zmq_forwarder
    Could not locate usr/local/bin/zmq_streamer
    Could not locate usr/local/bin/zmq_queue
    Could not locate usr/local/sbin/dhclient
    Could not locate usr/local/sbin/dhcpleases6
    Could not locate usr/local/sbin/bpalogin
    Could not locate usr/local/sbin/haproxy
    Could not locate usr/local/lib/libevent-1.3e.so.1
    Could not locate usr/local/lib/php/20060613/pdo_pgsql.so
    Could not locate usr/local/lib/php/20060613/ioncube/ioncube_loader.so
    Could not locate usr/local/lib/php/20060613/ioncube/ioncube_loader_ts.so
    Could not locate usr/local/lib/olsrd_dyn_gw.so.0.4
    Could not locate usr/local/lib/olsrd_secure.so.0.5

  • Run script on shutdown

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    Z

    thanks, that put me in the right direction.

  • Openssl Error during build pfport !

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Can't able to start FreeRadius2 on pfSense 2.1 Beta1

    Locked
    11
    0 Votes
    11 Posts
    8k Views
    J

    Thanks!.. Mine mistake was shared secret. Actually I forgot it to configure in CP.

  • How are the syslog entries structured?

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.