@stephenw10 Oki)))

Yup, that^. Restoring a config is easy compared with trying to create a mirror after install.

@stephenw10 Thanks much!!

@stephenw10 That's neat! Thanks for the information

Hello Steve, Thank you for replying. In fact, we were listening to IPv4+IPv6 in bind. I just changed that parameter to listen only on IPv4. Waiting to see if this happens again. Thanks a lot. Birama

Hi, I was looking for the same thing and found that there is a "/etc/pfSense-rc.shutdown" script. At the bottom it runs all executable scripts in "/usr/local/etc/rc.d/shutdown.*.sh". So I'm guessing that creating such a script will achieve what we are both looking for. The catch now would be to guarantee that the creation of such a script will survive an update. I would guess yes. What it won't survive is a reinstall. The filer package addon can be used to create this script and also sync it in a ha cluster.

Mmm, latency like that can really only be traffic shaping in pfSense, if it was something in pfSense. Some cable modems are known to behave like that though.

That doesn't appear to be a specific exploit/vulnerability so it's difficult to assess. The usual precautions apply though; don't open services on your firewall to the internet.

@NickJH said in Why does losing internet make me lose my LAN?: May 16 11:54:44 pfSense php-fpm[75615]: /rc.start_packages: Restarting/Starting all packages. May 16 11:54:44 pfSense anmuscle[85684]: Starting anmuscle May 16 11:54:44 pfSense anmuscle[4545]: Stopping anmuscle May 16 11:54:46 pfSense anmuscle[11836]: Successfully stopped anmuscle May 16 11:54:46 pfSense anmuscle[13056]: Finished configuring DTTS pf rules May 16 11:54:47 pfSense anmuscle[14274]: Successfully started anmuscle on 13443 Something looks like it's out of sequence here. When packages are restarted they are all first "stopped". Then started. Here, for "anmuscle" : the stop starts with a start (now two instances are running ?), then a stop .... and then a start again. Strange. I also upvote unbound here.

Thanks, that fixed it! Not sure why I was too afraid to try that.

@stephenw10 Yes, on aws EC2s

hi @Gertjan thanks for the replies

Alrighty! Thank you so much for the explanations... and for writing it in a way I can understand. That message makes sense now. I really appreciate everyone's help!

Since I can't edit my post anymore. The problem fixed itself after about 3 hours? How is that a thing? Edit"2". https://tweakers-net.translate.goog/nieuws/221976/delta-en-caiway-klanten-hebben-problemen-met-google-diensten-door-storing.html?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp Still.... amazing how it was working on the phone without a vpn to the router and not with, whilst some clients were having no issues at all and others just plain refusing...

Does WAN2 actually have a DHCP lease? Is the WAN2 gateway shown in Diag > ARP? It could just be an upstream issue at the ISP.

https://redmine.pfsense.org/issues/15499

@stephenw10 said in Rearranging the interfaces: Not worth it IMO. I get some peoples ocd tendencies, etc. But the only time I ever look at the assignment page is to take a screenshot to show users which is way more often than I actually go in their myself for something ;) You can sort by name in the widget you might have on your dashboard, and the drop down to go to an interface is sorted as well with that check box.. I could see maybe if was a really long list and you didn't want to scroll through them all or something?

Its almost certainly blocked on the client device directly. So like Windows firewall, if it's a Windows device.

Ah, nice.