@lohphat said in Email Notification error when using microsoft exchange: Newer Office365 tenants have MFA (Multi-Factor Auth) enabled (i.e. login verification by MSFT Authenticator app or SMS) so that simple name+password+STARTTLS is going to fail. You first have to ENABLE SMTP Auth as an allowed auth method in the users Mail / Manage Mail Apps settings. SMTP Auth is now DISABLED by default so it has to be checked for it to work at all. There is a way to disable this I believe by creating an "application password" which is accepted for auth, bypassing MFA. You have to set the user account to "Enforce" MFA first. Then go to https://mysignins.microsoft.com/security-info as the user and then add a method "App password" to create the static password to allow login without MFA. More detail here: https://d365demystified.com/2021/10/17/allow-users-to-create-app-passwords-in-office-365-multi-factor-authentication/ I'm working on this now as I just migrated to O365 and all my automated notifications are broken. Thanks. This is what was causing the issue... I enabled SMTP Auth and now everything works fine.

Hmm, why are you not going straight from pfSense to the LDAP server? With LDAP auth. Steve

The filter log format is described here: https://docs.netgate.com/pfsense/en/latest/monitoring/logs/raw-filter-format.html I'm not sure what sort of capability PRTG offers to parse that structure though. Steve

Ah, good to hear.

@xtjoras-0 Bom dia, Amigo estou na procura também de outra solução semelhante ou igual ao que o shallalist entregava, se achar alguma luz da um toque aqui também. Abraços.

Are you accessing the GUI using the LAN IP? Is pfSense the default gateway for the LAN side clients you're trying to access? The LAN side hosts might be blocking access from anything outside their own subnet. The Windows firewall will do that by default for example. Steve

Yeah, that's definitely pfBlockers DNS-BL returning the the single pixel it hosts. Just stopping pfBlocker is not enough to clear the DNS lists from Unbound. You have to disable DNS-BL and save/apply that. Steve

What response are you seeing now? What were you seeing?

You can run more than 2 HA nodes. It's not supported though. 3 is relatively easy, more requires some code changes. That's because the config sync code adds 100 to the advskew of the CARP VIPs for the target and the maximum is 255. So the 1st node is 0 on all CARP VIPs and syncs the 2nd node as 100. The 2nd node syncs (which it would not normally do) to a 3rd node at 200. Other parts of the config sync may fail. The DHCP servers auto configure two nodes to share the load but I have no idea what it would do with 3. The CARP VIPs can exist with many nodes as long as they advertise at slightly different rates. You would have to use multicast state sync if you need seamless failover so all nodes you see all other nodes. That could be a significant amount or traffic. I have occasionally seen people run more than two nodes but YMMV! Steve

@johnpoz said in Webconfigurator slow through MANAGEMENT interface after upgrade from 2.5.2 to 2.6.0: Well have no idea how your blocking on the outbound direction then? Lack of state? Exactly it passes the TCP:SYN outbound on MGMT on PF01. Then the SYN:ACK from PF02 goes dircet. Then the client responds ACK, there must be something to allow that in on PF01 LAN, but it's blocked outbound on MGMT because it never saw the SYN:ACK. Usually in that sort of setup you end up having to add sloppy-state/all-flags rules on every interface in the route, In and Out. You might be able to just check the box though: https://docs.netgate.com/pfsense/en/latest/troubleshooting/asymmetric-routing.html#automatic-fix Steve

In Firewall > NAT > Outbound first set the mode to Hybrid. Then add a rule on the LAN. Make it as specific as possible to avoid catching other traffic. So I would do at least: Source: OpenVPN subnet Destination: Access Point/Router IP address. Steve

@hellegaard1 said in How to get PFSense to work with Plex?: for some reason Plex just isn't working with the PFsense Well did you setup firewall rules on your bridge? And only allow the smb ports.. Bridge is at layer 2.. If you can access through the bridge to something via protocol X.. Then only reason you wouldn't be able to access protocol Y is you firewalled it. Can you ping your plex IP? When you ping it, do you see the mac even if you don't get a response? You can view your arp table on the client your pinging your plex with arp -a

DHCP is not running so you would need to set a static IP in the new subnet you set to access it. Steve

That's a v6 link-local address. I assume that is not your WAN MAC?

Ok, well I'm not sure how many of those setting actually apply when it's in bridge mode. Those NAT setting in particular seem unlikely to apply here since the router behind it is using that IP directly. I also note that the bridged router is showing the x1.x1.x1.x1 as being DHCPv4 and not static as you said. However we can't see the WAN setup there, it could just be a display glitch. Does pfSense work there with it's WAN set as DHCP? Given what we can see I would have expected the /30 IP to work as a VIP. Can we see exactly how that was setup? I could imagine it might require a different MAC to work which would be a problem. It could be a completely separate subnet enabled on the same link (ugly!) and might require using the /30 upstream gateway. In which case you would have to add the gateway and outbound NAT rules to use it. Steve

@keyser I tried it with a local user and tested it by testing the auth on the firewall. Just the time period, not the COA.

@akuma1x yep. I'm a dumbass. That was exactly the problem. Cant believe I didnt see or catch that. Thank you. Working now.

@frankyd3325 Hello It now lasts alot longer than 30 minutes (or it has in last few days, but still drops for no reason, or as you pointed out, when I make changes to rules/alias ect.... Why does Avahi daemon leave the group on all vlans ??? I wasn't adding rules/editing rules or anything, it just fired off? Is this normal behavior? Any ideas tips/solutions I'll take any help I can get

After a lot of failing I finally have a very first small success: My interim solution is using https://github.com/marjohn56/udpbroadcastrelay on another virtual machine I spin up just for that and more or less "disabling" my firewall (i.e. currently I allow way to much traffic between my networks... but as a starting point it works finally and I think from here I can work my way out by silently reading existing posts ;-)). I'm not very familiar with freeBSD, that's why using a separate LXC for that is more convinient to me. Now, that I know it CAN work, maybe (possibly never..) I will take the time and migrate that to my pfSense host. Anywas, thank you for your answers