@josephchrzempiec said in Stoping one computer seeing the router page or other computers?: a computer can still A computer does nothing. What OS ? If you use W10, set your network type to Public (not Private). On the interface of pfSense, put a firewall rule on top, blocking the IPv4 of that PC. [image: 1614671177130-0d5196ca-c5e8-466d-b338-461ffd9f41a1-image.png] Do you use the https GUI access ? Then block https also. Same for SSH. Btw : later on you discover that you should probably also block the IPv6 from your PC. That's probably the moment you should put this PC on a separate OPTx network.

@keyser Done on Server and done of Pfsense. All my internal buffering issues were resolved with this "Set-NetTCPSetting -SettingName "Datacenter" -MinRtoMs 300" wired or wireless, clean, direct play files, no issues, so server to switches and devices, again, wireless controller is a vm on the same vds as the pfsense server and no issues (LG TVs playing 144mbit streams, no buffering direct play) I removed pfsense, tested with an ASA firewall, tested with a 4451, issues are gone (I need my IPTV to work for I'm kinda stuck with PFSense and opnsense but opnsense has its issues) There something weird about uploading to people, the pfsence just seems to crap the bed on it. To add, 30-40 Streams at 20Mbit each, zero issues.......trancoding, the second a direct play hits and its bitrate is over 20Mbit, buffering like an idiot and only with a pfsence firewall.

For that kind of setup you'll also need the patch from https://redmine.pfsense.org/issues/11433 on 2.5.0/21.02

@howaziti Read my 3 posts hee https://forum.netgate.com/post/944383 /Bingo

@alex-ku What do you mean by CSV parts ?

@noplan said in unbound question generate keytag query _ta-4f66: _ta These : [image: 1614586564796-45d46f59-ddc4-4232-851b-0cbb020660e8-image.png] are inoffensive. They show that Unbound is using DNSSEC. (Most of) not all sites are not set up to expose DNSSEC in their domain. For your own domains : if your domain registrat has a plug-and-play version avaible, consider using it. But document yourself first for its advantages and inconveniences. Use https://dnsviz.net/ to check DNSSEC status of a domain.

@nguser6947 I don't know about the Netgate boxes, but that certainly wasn't the case with the community version. A few weeks ago, the computer I was running pfsense on died. When I installed it on the new computer I was able to copy over the config and it worked fine.

Missed this in my initial post but after doing another search I came across this: 1. Temporarily enable IPv6 on your LAN interface and set IPv6 Configuration Type to "Static IPv6", then assign it an IPv6 address ("::1" without quotes works with mask /128). Then Save. 2. Go to Services/DHCPv6 Server & RA/LAN/Router Advertisements then set Router Mode to "Disabled". Then Save. 3. Go back to the LAN interface and set IPv6 Configuration Type back to "None" then Save. Seems to have worked and I can now make changes to the LAN interface.

I was getting "diag.backup.php" file when a backup was generated. It appears this was a temporary issue. I'm now getting the normal file format (.xml) after a reboot.

You also are using public IPs in the P2 and NATing to them? How is it failing? More info needed! Steve

@choggy2840 Should have post in Firewall section to attract the best responses. Using floating rule aliases could simplify your firewall.

My issues were in part related to this I still think something isn't quite right, but will post in the proper forum.

Thanks for the link. Saving the wan settings again was the solution for getting IPv6 working again.