@Frogg said in Port 443 timeout using Netcat but is working in browser: Forwarder & Resolver (Now changed to enabled) was disabled Huh? You can not use both at the same time.. You run into a race condition.. Which one are you using? Place your host override in the one your using.. They both allow for overrides. Do a directed query to pfsense to validate it returns your records you put in host override.. C:\>dig @192.168.9.253 ahost.domain.tld ; <<>> DiG 9.16.6 <<>> @192.168.9.253 ahost.domain.tld ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8719 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;ahost.domain.tld. IN A ;; ANSWER SECTION: ahost.domain.tld. 3600 IN A 192.168.1.4 ;; Query time: 0 msec ;; SERVER: 192.168.9.253#53(192.168.9.253) ;; WHEN: Tue Sep 08 13:40:59 Central Daylight Time 2020 ;; MSG SIZE rcvd: 61 C:\>nslookup Default Server: pi-hole.local.lan Address: 192.168.3.10 > server 192.168.9.253 Default Server: sg4860.local.lan Address: 192.168.9.253 > ahost.domain.tld Server: sg4860.local.lan Address: 192.168.9.253 Name: ahost.domain.tld Address: 192.168.1.4 Pfsense in my case is 192.168.9.253

@sanketgroup said in Bandwidth Limiter does not work when Specific Gateway defined under DHCP: Action = Pass /// Interface = OPT1 /// Source = OPT1 net /// question: Destination = shall it be Single Host (UTM 10.5.20.2) or OPT2 net That is not a policy route.. You have to select gateway in the rule if you want to route. 10.5.20.2 would be setup as a gateway in pfsense. Did you read the link provided? You would then be able to create an outbound nat for it.. Hybrid is all that is needed. As to your whatever your workstation does for cards and teaming - that has zero to do with vm passing tags or not passing tags for a vlan.. But sure if you want to create another vm nic and do it that way that works too.. How you do vlans and do your connections have little to do with the logistics of the network. Pfsense doesn't care if its a vlan or a native interface.. How you tie that to the physical world is up to you.

@MCITDept Running on a 1to 1 nat should be ok with vpn's. The only way to assign wan ip's to internal routers is to route them. It will require additional subnets though. Still your setup sounds a bit complicated. Perhaps eliminating internal routers and moving vpn's to the edge where they belong, could make your life easier.

Thank you for your answer

@Fabio-Giacobbe The scenario I posted was specific to IPSec. But don't feel bad, we've all been in similar NAT-induced (read: confusing) situations. Glad you got it figured out!

@stephenw10 thanks for the pointers! I messed up my camera to a point where I had to factory reset, the problem disappeared after reset and not getting DUP! pings any more. But I will watch out if that happens again and share the results of packet capture.

Next server IP should have been set to the gw IP/LAN

Because the current version is x64?

If it was a config error can you access the console to roll it back? Did you make the change via the gui? What change did you make? Steve

@jwj said in DNS filtering Church project: It's a fools folly to think he can. It can't go perfectly for anyone

@nimamhd Thanks again for your response. I'm a newbie to this Freeradius stuff, so I'm not familiar with unlang. In Daloradius there is a "Disconnect User" button. I just thought that there was something simple one can do with it to get it to work.

Yeah, hybrid should work just fine for you. -Rico

@wxppro said in Console report interface down while it is working (and FreeBSD reports "up")?: It is quite stable, running for months without any issue. As you think, if that's right for you.... I only project our experience forward... +++edit: f.e.: https://forum.netgate.com/topic/156637/making-interface-usb-network-interface-persistent-on-reboot

@renjithb ???? Are you saying you can't use ssh or a browser? Or are you referring to the serial port?

@koko_adams I think no

It's just missing? Is it a valid xml file? You can just copy it to /conf and rename it but you will need to reboot into it and if there is an issue with the file it may not reboot correctly. Steve

I've been running beta firmware on my UDMP since putting it into production in my home network. I love the new controller's dashboard and DPI statistics, but I don't think it's worth it. I have this great XG-1541 pfSense router that is not realizing its potential. So I'm waiting on my CloudKey to arrive so I can continue configuring my UniFi AP's and switches, but I think I'm ditching the UDMP and its pretty DPI statistics and going with something more reliable and likely faster (not that I need super duper fast for a home network). I'm not sure if it's my internet provider or the UDMP, but since exchanging my USG-4P for UDMP, I've had issues where I will click a link and 20% of the time there is either a significant delay or the link won't load at all. Images on some sites won't load initially and require a refresh of the webpage. Even as I'm writing this, I keep getting notifications from the Netgate Forum that my connection was lost. Not sure what is causing this, but my patience has worn thin. Just dread all the time that will be involved creating my 9 VLAN's, reserving IP's, and recreating my network. Should be worth it in the long run though.

The important question there is if the crash reports are similar or identical even. If they are it may be a software issue. If they are different every time it's probably a hardware problem, most likely bad ram. Though if it was I might expect it to crash at random times not just at boot. Steve

@stephenw10 Just FYI, so not to think i just abandoned it. I have been trying to catch a moment, but it simply hasn't surfaced while i was looking. But do know that as soon as it does, i will reply.