I have been running unbound since before it was part of pfsense and an just an addon package - have never seen a hit from it.. It is rock solid in its performance - then again as I mentioned I would never "forward" my dns request I use it as intended which as a caching resolver.. If your concerned with your isp listening in on your dns - then send your dns requests through a vpn would be my suggestion. Trying to run dns over tcp so you can put it in a ssl tunnel is yeah going to be a performance hit on your typical dns udp query.

Very nice. It's waited this long, I'm sure it can wait a couple more weeks.

OK, so now go to the client PC or whatever it is and check its network settings to confirm that it is using pfSense DNS. If it is getting its network details from a DHCP server , then you need to ensure that this DHCP server is giving out pfSense LAN IP as the DNS for DHCP clients.

Hello! I had the same issue with my router and as it was said virtual interfaces solved the issue. VPN software was shown to be the most effective one. Though there's always a catch because some of them provide dynamic IP as well. Nord-VPN works for me but you might want to check reviews and compare different providers here's the source

Hi @viragomann, Thank you! you're the best. It works well. Kudos!

Did you renew your Gold subscription? The same thing happened to me, and it took me a day to realize that I forgot to renew Gold. Once I did that, everything started working properly.

@debom If your settings are different, try the settings below. In the Notification E-Mail auth password, enter your gmail password. The next step is VERY IMPORTANT. You MUST scroll all the way to the bottom of the page and click the Save button. Then click on the Test SMTP Settings button. The settings entered do not get used unless they are first saved. If it still does not work, you might have to go into your Google account security settings and allow less secure applications. I don't think this is necessary though. If you do allow less secure apps and it still doesn't help, don't forget to switch that setting back. https://support.google.com/cloudidentity/answer/6260879?hl=en [image: 1534436511203-e57d5a38-7a96-4e94-a047-081717253282-image.png]

Thanks this fixed it for me.

Hi, I do not know what the pfsense UniFi interface IP is as I just use 192.168.0.10 (which is reachable from UniFi 192.168.1.*) Could this be an issue? as devices are looking for it on 192.168.1? There is nothing setup on the DHCP page I uploaded previously, everything is blank apart from what you have already seen..

Contact netgate support, they will tell you if the wish to sell you a rebranded version

So, I have been watching my disk space again and it is creeping up again. It is up to 45% since I posted that I had gotten it down to 10%, 25 days ago. I have not made any changes.

Blocking Youtube ADs is like playing whack-a-mole.... They host the ADs on the same domain as the video so it will work sometimes and not others. There are some youtube based AD feeds, but YMMV on their use. If you see an AD on a web page, you can right-click on it from the browser and click "inspect". This will show the HTML of that element. If it contains a domain name, then it can be added to a DNSBL customlist to be blocked.

The Dell is neither I would expect that work. But it may have some Dell quirk. 115200 is the correct baud rate. If you're the serial console though you will need to boot from the USB image: https://nyifiles.pfsense.org/mirror/downloads/pfSense-CE-memstick-serial-2.4.3-RELEASE-amd64.img.gz Or set the console at boot: https://www.netgate.com/docs/pfsense/hardware/boot-troubleshooting.html#booting-with-an-alternate-console Steve

Your sig has been deleted.. Let me know if like something else in there.

@stephenw10 I'll take a closer look! Thanks!

You may not need interfaces for each subnet unless you're routing between them in pfSense. You will need whatever the upstream router is configured as a gateway in pfSense to add the static routes to. Steve

You would have to edit php file used when creating cert.. https://github.com/pfsense/pfsense/blob/master/src/usr/local/www/system_certmanager.php if ($act == "new") { $pconfig['method'] = $_POST['method']; $pconfig['keylen'] = "2048"; $pconfig['digest_alg'] = "sha256"; $pconfig['csr_keylen'] = "2048"; $pconfig['csr_digest_alg'] = "sha256"; $pconfig['csrsign_digest_alg'] = "sha256"; $pconfig['type'] = "user"; $pconfig['lifetime'] = "3650"; } Keep in mind that would be reverted every time you updated pfsense and that file gets redone, etc.

No. I mean pfSense screenshots of what you have done. And maybe start simple then get complicated.