@pierrelyon Great tip! I find that there is a "recipe" titled "Recipe 9 - Isolate your IoT devices". I purchased the book on the strength of your recommendation.

I found my issue: the group membership attribute should be "memberOf" instead of member as posted by OP.

@steveits Done, thanks for pointing me in the right direction. :)

@lpd7 said in PFsense Book:

PFb package

This thread may help pfblocker Documentation

@itpp21 Of course it’s not complicated, but it’s not documented that wildcards „any“ can be used.

@nogbadthebad yeah that side menu seems a bit messed up.

But if you go here

https://docs.netgate.com/pfsense/en/latest/

You can see there should be stuff under there on the menu on the left

recipes.jpg

@jimp
Thanks a lot! I have not seen this in the docs.

Sorry, my bad.

Anywayys- great information and explanation on the place you linked.

Going to disable now ;)

/KNEBB

It's a limitation of the platform used for the documentation. They did recently add case insensitive searching recently, but it may be a bit yet before it's in a stable version we use for the public docs.

@tong Thanks for sharing your link. Not sure what happened to my original upload. I have re-uploaded. Here is a new link to my copy:

https://drive.google.com/file/d/1-k0u99CjNLqbb4WM0llzXrnO49k2Q2q5/view?usp=sharing

Fixed, thanks!

@jarrod I tried getting this work, but I have problems with the correct VPN setup. Can you share which "Authentication Method" you are using? Thank you very much!

@serverteam Same here - I own an SG-1100 and looks like ~24 days ago a core developer added armv7 and aarm64 to the build servers. Hopefully, next release will contain these modules in the kernel.

https://redmine.pfsense.org/issues/7467#note-18

Wow! Thanks for this amazing guide!

@jimp said in Documentation missing L2TP client:

It really isn't.

hehe that wasn't clear but I actually was referring to pfsense as being versatile and not L2TP/IPSEC vpns

Those docs are likely in need of an update but at that time the recommendation was not to use OpenDNS because of its security but because of its blocking features which, again at the time, were available for most users to control what sort of responses were allowed.

They'll all get updated and cleaned up eventually, as time allows.

I a bit new, getting my pfSense and FreeIPA setup. The above stuff "mostly" works, but I have a few comments / questions.

For example, in the bind credentials field, who else should I be using and what designation. If I use something like cn=admin it doesn't work. Actually, I can't get anything besides cn=Directory Manager to work.

Also, for the SSL credential creation. What would be a good set of working answers to get the damn thing to work?

You are right, it works fine. I lost something when convert the multi-line command to one line.

Thanks,

Thanks for contributing to the Italian translation! While we have been working towards putting the tooling in place that allows the docs to be translated, we'll probably hold off on translating them as it adds a bit of complexity and friction to documentation workflow that we still need to plan for.

@Mamukata If you follow the tutorial above. The little bit it doesnt explain is the opening of ports 1515 at both sites but you should be able to add the rules discussed in the comments. Ive used it for a year with no problems.

Maybe you only need to delegate 16 /60s. Whatever example is chosen will not match everyone's needs.

Do you run your NTP server at the 1000Mb level?

Anyone who is running a heavy traffic UDP server and is getting kernel panic crashes will come across this thread. They have every reason to have this info. This will help them and save them weeks of troubleshooting.

If you don't tune your NIC drivers for heavy traffic you'll run into kernel panics. See thread: https://forum.netgate.com/topic/144075/ryzen-3-2200g-randomly-crashing/22

And existing (Not as fine tuned) documentation: https://docs.netgate.com/pfsense/en/latest/hardware/tuning-and-troubleshooting-network-cards.html

This just adds on to that existing NIC tuning doc for handling heavier traffic loads.

Is it possible to setup a wildcard using this method? On GoDaddy's website I enter * but in pfSense it is not a valid input. Thanks.

hello thanks for the reply, yes I saw many posts that talk about this but in nessno I saw how to make the exclusions of a client, now I read your link, thanks a lot I'll let you know.
P.s: I have already configured squid and squidguard and works perfectly proxy filter and access list block, now I want to exclude some LAN clients
I'll update you, thank you

@gwaitsi said in Rescue Shell with no documentation:

"Mount the drive and edit/delete it." - saw the post, you would see the errors. i chose ufs with GPT partition.

So then mount the correct partition, not the whole disk. Again, RTFM:
https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mount-unmount.html
https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/disk-organization.html