Interesting can you open a ticket with us at https://go.netgate.com we will get you the image file needed to reflash the unit. Thanks!

Pfsense doesn't know what the client OS is nor does it care.. Is your pc also wireless?

You can watch the traffic with Wireshark to get a clue. Also, if in doubt, remove pfSense from the equation. Do you have a cheap router you can drop in it's place?

No, just ignoring it.

Further information on both packages @johnpoz listed can be found in this sub-forum: https://forum.netgate.com/category/53/ids-ips. And here is some specific documentation created for the Snort package: https://docs.netgate.com/pfsense/en/latest/ids-ips/setup-snort-package.html.

Thank you, this was the problem...

If you used the wizard the match rules that put traffic in the queues will be on the floating rules tab. Create schedule in Firewall > Schedules. Edit the rule you want it to apply to and set the schedule there in the advanced section. Steve

Yes, VPN into pfSense and then access it from there is far more secure. If you are going to use port forwards you should definitely be using the secure server port (https). Steve

@stephenw10 I got it going. Literally every cable I tried was bad. I feel like an idiot haha. Thanks everyone

well when you manually set it only going to do ipv4? Turn off ipv6.. Does that make your issue go away? With ipv6 still off, set ipv4 to only 1 dns.. You sure this dns is working ;)

man - I'm embarrassed! I thought I'd disabled the proxy for testing but seems I hadn't. I disabled it, tests ran fine, re-enabled it and still worked - must have been a random glitch. thank you so much

Presumably to force you to purchased their VoIP offering. It should be relatively easy to do this by either handing the OpenDNS servers top client to use directly or by having clients use pfSense for DNS and have that forward to OpenDNS. In either case be sure to block or redirect DNS connections to other servers directly. Steve

@johnpoz said in Need to block PSIPhon app: openappid for psiphon I don't believe we have one for that in our detectors ruleset but you might be able to load one fro somewhere else. That is likely the only way you will block it and even then it's not guaranteed if that app is specifically designed to prevent detection. Steve

If you just want to test OpenVPN just setup a port forward to it on the edge firewall. You can use 1:1 NAT to forward all traffic to the test VM if you really need to. Apart from any other port forwards you might already have that is. Steve

Figured it out after you suggested the ping test, turns out i had not specified the gateway in the Windows dhcp scope.... So rookie mistake. Thanks

You mean specify a MAC address the voucher will be valid against in advance or just have the voucher locked to whichever MAC it is first activated against? Steve

post up your pcap of the dhcp conversation, discover, offer, request and ack. If your saying the dhcpd is sending out the correct mask, and others are using it correctly - then you got something wacked on those clients! Options shows that there was an option 1 of type Text with a blank value. Option 1 is - tada - subnet mask. So yeah that would F it up big time!! But you would of seen that in the offer, or lack of the offer containing mask.

Upgrade. Use sudo.