I a bit new, getting my pfSense and FreeIPA setup. The above stuff "mostly" works, but I have a few comments / questions. For example, in the bind credentials field, who else should I be using and what designation. If I use something like cn=admin it doesn't work. Actually, I can't get anything besides cn=Directory Manager to work. Also, for the SSL credential creation. What would be a good set of working answers to get the damn thing to work?

You are right, it works fine. I lost something when convert the multi-line command to one line. Thanks,

Thanks for contributing to the Italian translation! While we have been working towards putting the tooling in place that allows the docs to be translated, we'll probably hold off on translating them as it adds a bit of complexity and friction to documentation workflow that we still need to plan for.

@Mamukata If you follow the tutorial above. The little bit it doesnt explain is the opening of ports 1515 at both sites but you should be able to add the rules discussed in the comments. Ive used it for a year with no problems.

Maybe you only need to delegate 16 /60s. Whatever example is chosen will not match everyone's needs.

Do you run your NTP server at the 1000Mb level? Anyone who is running a heavy traffic UDP server and is getting kernel panic crashes will come across this thread. They have every reason to have this info. This will help them and save them weeks of troubleshooting. If you don't tune your NIC drivers for heavy traffic you'll run into kernel panics. See thread: https://forum.netgate.com/topic/144075/ryzen-3-2200g-randomly-crashing/22 And existing (Not as fine tuned) documentation: https://docs.netgate.com/pfsense/en/latest/hardware/tuning-and-troubleshooting-network-cards.html This just adds on to that existing NIC tuning doc for handling heavier traffic loads.

hello thanks for the reply, yes I saw many posts that talk about this but in nessno I saw how to make the exclusions of a client, now I read your link, thanks a lot I'll let you know. P.s: I have already configured squid and squidguard and works perfectly proxy filter and access list block, now I want to exclude some LAN clients I'll update you, thank you

@gwaitsi said in Rescue Shell with no documentation: "Mount the drive and edit/delete it." - saw the post, you would see the errors. i chose ufs with GPT partition. So then mount the correct partition, not the whole disk. Again, RTFM: https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mount-unmount.html https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/disk-organization.html

I'm sittin' on the dock of the bay Watchin' the tide, scroll away I'm sittin' on the dock of the bay Wastin' time Songwriters: Otis Redding / asdffdsa6131

yepp, that I've been using. Also discovered the apple configurator that seems interesting. I will come back after I recreate the whole ipsec stuff, as i tried few of them and need to take it from scratch.

Should not need anything special on the firewall, other than static outbound on UDP 500 which is the default configuration. Your phone should make an OUTBOUND IPsec connection and do all the wifi calling bits over that.

Loading the configuration from USB during the installer requires using DOS/FAT32 formatted USB media, thus the Windows-style path in that specific instance. It's the odd one, otherwise we prefer to use UNIX-style paths.

I was looking the other day. Seems to have gone away. Id just ask as you go.