@cs Thanks for the feedback. Looks like they've found a bug. I reported this issue a couple of weeks ago: https://github.com/pcengines/coreboot/issues/469

@norcarde A transparent proxy would solve your application problems, but they are a hassle to setup and can introduce their own problems.

@jfish said in remote mail server rejects connection after 2 hours: Has the remote host black listed my external IP address now Is that a question or a fact ? Check with them ? Packet capture the traffic to them, using their IP, TCP, and the ports 110 143 or whatever you use. If you set Outlook to sync with mail servers every minute or so, then yes, you would get blacklisted everywhere ^^

@hawksploit said in Pfsense logo error: this path /usr/local/www/logo.svg I told you that @gertjan said in Pfsense logo error: Or really changing some "image files" (which are not image files ;) ) ? so have a look at that a "svg" file is. You can open it with Notepad, as it is a text file, not an image file. <svg id="logo" role="img" aria-labelledby="pfsense-logo" x="0px" y="0px" viewBox="0 0 282.8 84.2"> <title id="pfsense-logo-svg">pfSense Logo</title> .......

@danielvanderwal said in Wrong external IP set after rc.newwanip restarting pppoe0: @viktor_g Thanks Victor, this seems a related/the same issue. Could we contribute with our Logs to this bug in anyway. For us it's a bit of a show stopper. Are there any workarounds possible or would reverting to 2.4.5-p1 the only option? pfSense 2.4.5-p1 doesn't support Virtual IPs on PPPoE interfaces, this is a new 2.5 feature: https://docs.netgate.com/pfsense/en/latest/releases/2-5-0.html#virtual-ip-addresses

@johnpoz Also, according to the RFC, those addresses are not to be pre-configured. They are supposed to use the automatic method.

You just enabled SSH? You hadn't yet added a firewall rule or port forward to access it? Hard to imagine what that could have caused if so. Is it inaccessible both internally and externally? Can you get the serial console connected to anything locally? It's possible the process required to generate the SSH keys is simply using all the available CPU cycles if something else was already stuck using a lot. If that is the case it may finish doing that after some time and become available again.

@cool_corona Or checking out (depends on the usage) 2.5.2 Beta tree. If you're running a box at home that should be no biggie. For a company box I'd stay at 2.4.5 (and switch update paths to that, so your packages won't go nuts) and wait for release (candidates) of 2.5.2.

@viragomann Thanks for pointing that. So I guess I need to wait till the next update. Also I have noticed if I run a speedtest on the firewall using speedtest-cli, WAN1 shows the desired result but WAN2 shows around 0.69 Mbps as download and 1.08 Mbps as upload. WAN1 and WAN2 are 10Mbps leased line. However if WAN1 is down then the speedtest for WAN2 shows the desired result. I know there was a big discussion whether to run speedtest on Firewall or not but this is just for testing. Moreover it's just a 10Mbps line. Is this also a bug.

@flow said in Rule/Aliases creation with easyrule: Furthermore, is it possible to create/modify aliases from the Pfsense shell? According to redmine, that feature should be coming in 2.5.2.

@razer1073 I have a Qotom PC too and it's OK with pfsense. As mentioned above, you should be asking in the OPNsense forum.

@razer1073 Forgotten to enable the interfaces?

Yup you can just use one interface. Yes, having two routers in one subnet is a recipe for asymmetry. https://docs.netgate.com/pfsense/en/latest/troubleshooting/asymmetric-routing.html#troubleshooting-asymmetric-routing If you disable pf entirely in pfSense it won't care but your other should should if it's a proper stateful firewall. The correct way to do that is use a separate transport subnet between pfSense and the other firewall that doesn't have any clients in it. Steve

Mmm, that shouldn't be possible. Try running a packet capture on that interface and check the time between the CARP packets. The Sec would have to be sending in less than 1s intervals to demote the Pri. Or maybe something else using those VHIDs? Steve

@helyon You need to determine if it's a DNS issue or general connectivity and that's where the ping test will tell you.

@jimbohello I can't see what your configuration, but how about try to reboot and check if the config is still correct.

@jimp dude! you are famous. About 2017 controversy pfSense vs OPNsense in court. https://www.youtube.com/watch?v=y8R5-xNeHY8

@johnpoz said in how to connect pfsense to Wi-Fi?: NeXTSTEP ;) which was based on the Mach (kernel), and sure had some source from unix BSD.. You seem to imply that it is freebsd derived from that statement.. ;) The history of Unix is really messed up. I saw a diagram of the various Unix lineage and it was a real pile of spaghetti. This is due to the origins at AT&T and how they distributed it to colleges etc. for little more than the cost of a tape & shipping. One result was that everyone was borrowing from everyone, at least until SCO started claiming the others were stealing from them, including IBM's JFS, which was originally developed for OS/2 and ported to AIX. Since AIX was IBM's version of Unix, anything on it, including JFS, was "owned" by SCO. The various BSDs evolved from the original Berkeley Software Division (BSD), which in turn started from what AT&T had provided. Sun also did a lot of development, based on BSD. It's curious how just about the entire world, other than desktops, runs on some *nix version and most of that is now Linux, all the way from smart watches to the big supercomputers. One of my cousins is a nuclear physicist (he works with neutrinos) and runs Red Hat Linux on both his own notebook computer and on the supercomputer he uses in his work. Even that helicopter on Mars runs Linux.

@akegec LOL but it's a Netgate SG5100