It's working! for the first time in over a month! I was on the phone with Centurylink and tried it again and it worked!

Clients may not need a certificate if it's an auth-only setup. The client GUI can't know what the server expects, the user has to configure it properly. There is only so much foot-shooting the GUI can prevent.

I assume that was not during a test since it shows 100% idle on all CPU cores. Can we see the loaded output during a test? Steve

As a hint: see here why do not use schedeule for block rules ! https://forum.netgate.com/topic/156963/scheduled-block-rule-does-not-seem-to-block-existing-established-connections/5?_=1600535854178 is there no other way round ? than to shut down the interface ? brNP

@edmond this is a sweet one ! thx gonna try this ;)

Thanks. I updated it to 4000000. Hopefully I will not see all those errors again as was reported by others in those threads

Yes you can keep the other settings in place. That way if you have clients that are not using pfSense, for DNS for whatever reason, they will still be able to hit the servers using the url. Steve

Hmm, I think that's all automated so unless you used an email that triggered some spam filter I'd check our reply did not get filtered by yours. Steve

Wow, thanks for the prompt response! I missed the part about the floating rule in the documentation. Thanks! :)

Some are in this list [https://reputation.alienvault.com/reputation.generic] which I use as an URL Table (IPs) Alias. If I had more bandwidth I would offer to host them.

@AKEGEC here you go Release 0.73 Build platform: 64-bit Unix (GTK + X11) Compiler: gcc 9.3.0 Compiled against GTK version 3.24.14 Source commit: 745ed3ad3beaf52fc623827e770b3a068b238dd5 Release 0.74 Build platform: 64-bit x86 Windows Compiler: clang 11.0.0 (https://github.com/llvm/llvm-project/ bc15bf66dcca76cc06fe71fca35b74dc4d521021), emulating Visual Studio 2013 (12.0), _MSC_VER=1800 Embedded HTML Help file: no Source commit: 014d4fb151369f255b3debed7d15a154fd9036f5

Hi Steve, thanks for the hint regarding tweaks for the Zotac Boxes. I stumbled over the threads regarding the Realtek NICs of these boxes. After reading a bit in this thread https://forum.netgate.com/topic/135850/official-realtek-driver-binary-1-95-for-2-4-4-release/138 I found hints in my logs, that this could be the problem in my case. So I installed the Realtek driver and give it some time... Thanks again and best regards! Meson

@rafthebee , Did your try to create a pass rule to allow LAN3 to talk LAN1? Make sure the protocol set to ANY and the rule is above other rules and don't forget to apply changes.

Thanks

i upgraded to the newest version of that beta thing... now im stuck in a boot loop :( i´ve reinstalled the whole box. i will try all that stuff this weekend. i hope i have time for it xD

and thanks to be accurate on answers

Hmm, well I would retry until you are able to connect to something closer to you. iperf.scottlinux.com works for me (although that's actually no-where near me ) You should run the test in both directions and use multiple streams so: iperf3 -c iperf.scottlinux.com -P 4 and iperf3 -c iperf.scottlinux.com -R -P 4 Steve

@kiokoman said in How take out configuration file from corrupted disk ?: from console if you are able to get there, mount a usb stick and copy the file ? Thank You for help! This is the first tough that come in to my head after I push "Post" button in this forum :)