Okay I understand. I tried the sloppy state behaviour tweak and it didn't work, but that's okay. As long as the forwarding works for everyone else once I get this set up proper, that'll be good enough. Thanks

Just watch fellowship of the bitches this week it's so funny... Anyway tried to ping LAN when prob occurs and reset states: Diagnostics > States > Reset States > check reset firewall states table> save

@steveits Yeah had seen the bitflipping and ntp article - somewhat relatable sure to such typo domains ;)

@steveits, Thanks for the links. I haven't yet been able to look at the traffic graphs under 'status' under similar conditions. When the opportunity presents itself, I'll look again. FWIW, the program being updated was TurboTax. It could be a bug, but unless I can repeat it, I hesitate to report it. Perhaps I'll just have to wait to the next release and keep my eye on it in the interim.

@harlemsquirrel-0 said in 2.5.1-RC: pid 37633 (unbound), jid 0, uid 59: exited on signal 11: I'm wondering if the "DNS Server Override" option in System > General Setup is causing some issues. Hi, Nope, if you use Unbound, why set this option? Why are you pushing DNS traffic to your ISP?

@jimp said in 504 Gateway Time-out on Dashboard and Firewall System Logs: If you have the firewall log widget on the dashboard, it likely would solve the problem. This was totally the case. Reset the local logging settings to factory defaults and setup a Synology as a syslog server and we are back to normal.

I am not sure what are you referring to, but you could participate on Fightback campaign against attackers. https://forum.netgate.com/topic/162424/fightback-campaign-against-attackers-your-participation-matters-%CA%95%CA%98-%CA%98-%CA%94 Edited:links

@jwjs In these dark times we should care, help and protect each other. I know we must respect your decision but your old posts could help others. As you Dutch people would say, "effe doorbijten." @Steve you do it manually by editing the database but I suggest leave it alone as it can make things unstable.

@gertjan thank you very much friend. Your answers and advice were of great importance

OpenSSL is a part of the base operating system and not a separate package, so it cannot be updated on its own.

Yeah just checked - and seeing the same thing. Using 2 different acme certs in haproxy.. But those certs are not listed as in use in cert manager.. Using 21.02-RELEASE-p1 (amd64) built on Mon Feb 22 09:39:51 EST 2021 haproxy_devel 0.62_3 example [image: 1617267143130-certs.png]

You're OK. So inbound would likely be 1:1 NAT then. Our setup is old, but for Outbound probably either Hybrid or Manual with a manual entry for each server: Source: 10.1.1.1/32 Destination: any (the Internet) NAT Address: 2.2.2.2

@ddave said in GUI and SSH not available: What can I do with it other than to reboot? First things first : put your mouse in a mask, and send it on a holiday. Keyboard now : Use option 8 : "god mode" ;) Enter : cd /var/log ls -al Where "cd"is exacly the same "cd" on the PC you are using right now. "ls" is what Bill (Gates) renamed in "dir". Show the logs, like system.log, with cat system.log or cat system.log | more ( use space bar to scroll through, or q to quit ).

@johnpoz said in GUI is only showing last 2000 log entries. Where can I see the rest?: The ! can be used Cooool ! A simple !:: works for me : now I see only portal traffic

@johnpoz said in Received used SG-1100 - can it hold malware?: edit: Oh guess you can't change that.. @johnpoz said in Received used SG-1100 - can it hold malware?: Some looking and yeah username is monuser and password is secret.. Just like shown above.. Not sure why you would be worried about that?? Right. It's hard coded in the UPS script settings in the NAS. You can edit them of course. But the next update of your NAS (DSM) will reset them. Here it is : /usr/syno/etc/ups/upsd.users (SSH into your Diskstation) edit : Keep in mind that in this cas eit's the NAS connecting to the pfSense IP 192.168.1.1, the NAS is thus the client. You can protect NTP access of your pfSense as you wish, using firewall rules.

@rigidconduit said in Issue with pfsense taking a nose dive until reboot: http://www.dslreports.com/speedtest/67867354 To get full A's, see this forum biggest thread here Home pfSense Software Traffic Shaping Stay away from 're' NIC drivers

From further investigations, it seems that LCP Config Request is sent by pfsense to client before authentication. Is there a way to make pfsense send LCP Config Request at autentication (when user/password form is validated) ?

@ghost-0 said in DHCP, sometimes, confuses VLAN/LAN interfaces...: The switch this occurs on is a non-managed switch, thus port mirroring is not an option. How are you separating the VLAN then? Perhaps you could provide a diagram of your network.