@debom If your settings are different, try the settings below. In the Notification E-Mail auth password, enter your gmail password. The next step is VERY IMPORTANT. You MUST scroll all the way to the bottom of the page and click the Save button. Then click on the Test SMTP Settings button. The settings entered do not get used unless they are first saved. If it still does not work, you might have to go into your Google account security settings and allow less secure applications. I don't think this is necessary though. If you do allow less secure apps and it still doesn't help, don't forget to switch that setting back. https://support.google.com/cloudidentity/answer/6260879?hl=en [image: 1534436511203-e57d5a38-7a96-4e94-a047-081717253282-image.png]

Thanks this fixed it for me.

Hi, I do not know what the pfsense UniFi interface IP is as I just use 192.168.0.10 (which is reachable from UniFi 192.168.1.*) Could this be an issue? as devices are looking for it on 192.168.1? There is nothing setup on the DHCP page I uploaded previously, everything is blank apart from what you have already seen..

Contact netgate support, they will tell you if the wish to sell you a rebranded version

So, I have been watching my disk space again and it is creeping up again. It is up to 45% since I posted that I had gotten it down to 10%, 25 days ago. I have not made any changes.

Blocking Youtube ADs is like playing whack-a-mole.... They host the ADs on the same domain as the video so it will work sometimes and not others. There are some youtube based AD feeds, but YMMV on their use. If you see an AD on a web page, you can right-click on it from the browser and click "inspect". This will show the HTML of that element. If it contains a domain name, then it can be added to a DNSBL customlist to be blocked.

The Dell is neither I would expect that work. But it may have some Dell quirk. 115200 is the correct baud rate. If you're the serial console though you will need to boot from the USB image: https://nyifiles.pfsense.org/mirror/downloads/pfSense-CE-memstick-serial-2.4.3-RELEASE-amd64.img.gz Or set the console at boot: https://www.netgate.com/docs/pfsense/hardware/boot-troubleshooting.html#booting-with-an-alternate-console Steve

Your sig has been deleted.. Let me know if like something else in there.

@stephenw10 I'll take a closer look! Thanks!

You may not need interfaces for each subnet unless you're routing between them in pfSense. You will need whatever the upstream router is configured as a gateway in pfSense to add the static routes to. Steve

You would have to edit php file used when creating cert.. https://github.com/pfsense/pfsense/blob/master/src/usr/local/www/system_certmanager.php if ($act == "new") { $pconfig['method'] = $_POST['method']; $pconfig['keylen'] = "2048"; $pconfig['digest_alg'] = "sha256"; $pconfig['csr_keylen'] = "2048"; $pconfig['csr_digest_alg'] = "sha256"; $pconfig['csrsign_digest_alg'] = "sha256"; $pconfig['type'] = "user"; $pconfig['lifetime'] = "3650"; } Keep in mind that would be reverted every time you updated pfsense and that file gets redone, etc.

No. I mean pfSense screenshots of what you have done. And maybe start simple then get complicated.

Yeah, I had to purge the database in the end. All good now, and that script works like a charm. Thanks again for your help! Appreciated.

You could only do policy based routing on traffic that entered the firewall via some other interface. So port forwards on WAN maybe or traffic from LAN3 for example. Traffic from the firewall itself cannot use it as it must hit a firewall rule with the failover gateway group defined going into the firewall. https://www.netgate.com/docs/pfsense/book/multiwan/load-balancing-and-failover.html Steve

So, due to the peculiarities of my install I needed console access before an install was completed. As it happens, I was able to make a change and get the console output before pfSense loaded and over-wrote my configuration, which was just enough to get what I needed done. I will try other options to make this persistent as was mentioned in a previous post, but for a single-use I was able to make the change and use it the way I needed to. Hope this helps someone in future.

You can load that automatically at boot by including in /boot/loader.conf.local: if_urndis_load='yes' You will still hit the old issues of failing to boot if that interface is assigned and the phone gets disconnected though. Steve

Mmm, interesting suggestion. I would vote for that. You should open a feature request for it at https://redmine.pfsense.org if you have not already. Steve

Good decision!

There isn't a specific log entry for a configuration change or adding a new tunnel. The IPsec log (Status > System Logs, IPsec tab) will have events related to IPsec but it doesn't necessarily indicate a new tunnel or a config change itself.