• Terrapin SSH Attack

    Pinned
    33
    16 Votes
    33 Posts
    44k Views
    STLJonnyS
    @willowen100 It basically forces your ssh (on the Windows side) to utilize that encryption algorithm. You'll need to do that on any machine you ssh from. I'd have rather found a more elegant workaround (preferably on the pfSense side, so the mod only has to be done in one location), but this works in a pinch.
  • pfSense Hangouts are available on YouTube!

    Pinned Locked
    1
    5 Votes
    1 Posts
    17k Views
    No one has replied
  • Share your pfSense stories!

    Pinned Moved
    76
    0 Votes
    76 Posts
    68k Views
    V
    Mine may be typical, maybe not..... Took over a large sennior living facility with a pretty robust it infrastructure spread between 4 IT rooms, 23 access points, 12-14 switches, and 200 internal devices and 200 guest/resident devices, all being run by a Sonicwall TZ350. I had been wanting to reallign everything network wise for some time but the TZ had 2 ports that were failing. I had worked with ClearOS from back in the ClarkConnect days and started searching for something similar. I found PfSense and it just fit what I wanted to do. I tested it a bit on an old Athalon64x2 rig for proof of concept and had planned on installing on a mini pc or something, but I wanted 6 nics. Standing in my main IT room I looked down and in the bottom of the rack were 4 HP DL380s, 2 of which were decommissioned 2 years ago. It's such huge overkill for hardware that it's hard to explain, but who wouldn't want redundant power supplies, raid 60 with 25 drives and remote system monitoring through ILO? lol I spun one up and loaded PfSense and started tweaking. 2 weeks ago I switched over and have been working out gremlins since.. Overall it's gone well, just one snag that a couple members here have been very kind in helping me work out. Thank you to this page for all the help. [image: 1697753147328-pfsense1.png]
  • Intermittent Connection On One Machine

    2
    0 Votes
    2 Posts
    22 Views
    J
    Well I just tried to connect my Proxmox machine to my NAS and that won't connect either. That did remind me that I had trouble getting two of the VMs connected at first as well. They seemingly started working for no reason. They have not had a problem since. They can still connect the the SMB share, but the Proxmox host can not. My new Proxmox machine can connect to the SMB share, byt can not connect the repositories to download templates. That one seems like a DNS issue. I'm honestly beyond lost at this point. Everything I set out to do this weekend has ground to a halt until I get this sorted out.
  • if_pppoe problems with php-fpm causing loops. (resolved)

    77
    0 Votes
    77 Posts
    15k Views
    C
    @w0w said in if_pppoe problems with php-fpm causing loops. (resolved): @chrcoluk said in if_pppoe problems with php-fpm causing loops. (resolved): issue related to fragments What issue? A little bit more info now as to why if_pppoe fixed it. I think mpd tcpmssfix wasnt working properly, if_pppoe uses scrub instead for same feature. I did a little bit of testing with iperf and that reports a weird mss value when using mpd combined with tcpmssfix. I havent however confirmed on the cloudflare icmpcheck.popcount test yet as site seems to be down now.
  • Pfsense and windows domain

    14
    0 Votes
    14 Posts
    144 Views
    stephenw10S
    Yeah you cannot have two DHCP servers. You must choose one and I would use the DC for that. Configure it o use the same subnet as pfSense and pass the pfSense LAN address as a default gateway to clients.
  • Does pfsense have a old outdated SSHD version, and how to update it?

    3
    0 Votes
    3 Posts
    38 Views
    TommyMooT
    @stephenw10 OK, Thanks for the info, its no issue for me, as I only have allowed to connect to my pfsense via SSH by the LAN side, just been curious and wondered about the warning! Thank you
  • Where to report a security vulnerability in Pfsense Admin GUI

    3
    0 Votes
    3 Posts
    55 Views
    A
    @patient0 said in Where to report a security vulnerability in Pfsense Admin GUI: https://www.netgate.com/security Thanks mate
  • Managing SMTP Notifications

    2
    0 Votes
    2 Posts
    789 Views
    A
    @joelwhrs I will bump this a bit. Not sure if you figured a way to create custom SMTP triggers, for instance: link goes down, link comes up, no internet, ACL event, etc. I'm also looking for a way to create simple event trigger. From what I understand, all notifications are "fixed", I get one when device is booting or when it finish booting, or cert about to expire. On that note, where to find list of notifications? I just upgraded to 25.07.01.
  • Internet on LAN

    Locked
    3
    0 Votes
    3 Posts
    74 Views
    stephenw10S
    Yup let's use the other thread: https://forum.netgate.com/topic/198990/
  • 0 Votes
    3 Posts
    37 Views
    stephenw10S
    You might be hitting this bug: https://redmine.pfsense.org/issues/16362 Do you see the syslogd service stop in Status > Services? If so check for a connection refused message in the main system log against the remote server.
  • pfblocker not working

    3
    3
    0 Votes
    3 Posts
    70 Views
    stephenw10S
    Yes geoip blocking is never 100% accurate. Check the alias table in Diag > Tables. Make sure it actually contains the subnets you're trying to block. It's often better to pass traffic based on an alias rather than trying to block alias. But that really depends on what traffic you need to serve there.
  • PFSense Interface changes after adding 4th Adapter in ESXI

    5
    0 Votes
    5 Posts
    65 Views
    A
    You may edit the PCI ordering of the devices in the vmx config file of the VM to ensure the nics stays like before and the newly created Nic will be the next available vmx<N> adapter. ethernet4.pciSlotNumber = "40" ethernet3.pciSlotNumber = "39" ethernet2.pciSlotNumber = "38" pciBridge0.pciSlotNumber = "17" pciBridge4.pciSlotNumber = "21" pciBridge5.pciSlotNumber = "22" pciBridge6.pciSlotNumber = "23" pciBridge7.pciSlotNumber = "24" scsi0.pciSlotNumber = "16" usb.pciSlotNumber = "32" ethernet0.pciSlotNumber = "33" ethernet1.pciSlotNumber = "34" ehci.pciSlotNumber = "35" vmci0.pciSlotNumber = "36" sata0.pciSlotNumber = "37" This is an example of a VM in HW Version 21. It may look different on previous versions. Key is to have the pciSlotNumber of ethernet<N> adapter in order and no conflicts with other devices.
  • Reboot via ssh does not work?

    11
    0 Votes
    11 Posts
    220 Views
    chudakC
    @stephenw10 said in Reboot via ssh does not work?: Hmm, weird. Well definitely check the logs after trying and failing to reboot via SSH. So far I could not reproduce it. So will keep my eye on it.
  • 25.07(.1) change to DynDNS? Incorrect VIP detection for GW groups!

    9
    0 Votes
    9 Posts
    197 Views
    M
    I updated the redmine with a new patch. Let us know if that helps.
  • iPhone tethering

    15
    0 Votes
    15 Posts
    316 Views
    dennypageD
    @Qinn FWIW, if you want the loader.conf.local file backed up in the config, you can create a custom patch in System / Patches. Since you are patching against an empty file, be sure that you do not enable Auto Apply.
  • 0 Votes
    8 Posts
    217 Views
    A
    @stephenw10 Swapped in Unifi gateways at 4 of 5 locations and setup site magic. Dead simple, reboots fine. Going to test that for now. Big PFSense fan here, bought 2 6100 max and 2 8200 max. this wasn't an easy choice but these ongoing reboot issues are not sustainable. Thank you stephen. If I roll back, ill msg back here for some help.
  • pfSense Login Emails

    16
    0 Votes
    16 Posts
    313 Views
    N
    @Gertjan Thanks for this. It worked in 2.8.1 CE. I appreciate it.
  • pfSense Computers Rebooting

    11
    0 Votes
    11 Posts
    240 Views
    GertjanG
    @newUser2pfSense said in pfSense Computers Rebooting: I don't have a serial connector on this new machine. It's a "PC" type device right ? So it has a VGA build in, and USB for a keyboard ? Then good news, you don't need the serial console port at all. You already found it. The 'VGA or DHMI' screen + usb key board were the equipment you used to install it in the first place, is your 'console' access. This 'console' access works even when NICs are not initialized and not known yet .... this is the access you need. Btw : your old PC with pfSense : get out the disk, hook, it up to another PC (now : remember : this drive won't have any 'Microsoft ' partitions ... ^^), mount the drive in the OS, and you can 'inspect' it.
  • how can I identify a Win 10 (specific) PC on a network?

    17
    0 Votes
    17 Posts
    234 Views
    AndyRHA
    @Gertjan Steam runs just fine on Linux and they support the majority of games on Linux. There are office alternatives. Outlook is nice.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.