• Manual patching

    6
    0 Votes
    6 Posts
    296 Views
    stephenw10S

    If after upgrade it shows as revertable then it was in the upgrade and you should just remove the patch without reverting it.

  • What does WAN monitoring do?

    11
    0 Votes
    11 Posts
    752 Views
    stephenw10S

    @JKnott said in What does WAN monitoring do?:

    If the WAN fails, what mechanism is there, in pfSense, to force change?

    It will change the default gateway (default route) and hence anything using that. If you have set the default gateway to a failover group it will use the gateways from within that. If it's set to automatic is just uses the next gateway that is UP which can be an issue is that is, say, a VPN.

    If you're policy routing traffic you can set a load-balance or failover gateway group and pf forces traffic via that as states are opened. If a gateway is marked down it is removed from the group.

  • after update 4200 to 24.11 queues status page no longer works.

    7
    0 Votes
    7 Posts
    642 Views
    stephenw10S

    The increased CPU usage is probably due to change in the gui reload process. See: https://forum.netgate.com/post/1191398

  • Unable to connect to internet - WAN receiving IP address

    11
    0 Votes
    11 Posts
    825 Views
    D

    @eagle61 Thanks for the heads up, will definitely keep it in mind. Haven't managed to get IPv6 working yet, so strong chance it isn't support, but will keep checking.

  • Authenicated NTP

    78
    4 Votes
    78 Posts
    20k Views
    L

    @JonathanLee, @MatthewA1 Thanks!

    I updated to 24.11 and noticed that we now have authenticated NTP key setting in the GUI (Services->NTP)!

    cb02144e-92fd-48b7-89f4-02002b845551-image.png

    For those using NIST servers, I tweaked the following settings. I'm not 100% sure I needed to click "Prefer".
    1e01b44d-883d-43f7-95ff-a948405c3859-image.png

    I finally took the leap and used the Patches GUI to (re) apply the authentication status patch. Here are the settings I used.
    24f29e0b-ce52-4c9b-8eec-3a00a15b5236-image.png

    -LamaZ

  • Errors with OpoenVPN, CRL, AEAD

    18
    0 Votes
    18 Posts
    1k Views
    A

    @Log1cal-Big7935 just mute them

  • Status of pfSense CE 2.7.2

    9
    0 Votes
    9 Posts
    1k Views
    G

    @ahking19 OK thanks for correcting me - I thought he did.

  • Negate 4200 rj45 port to SFP+ ?

    5
    0 Votes
    5 Posts
    336 Views
    B

    @stephenw10 - Thanks for the response. I'll keep your points in mind as I see what I can do with my first managed switch.

  • WAN periodically Rebooting

    184
    0 Votes
    184 Posts
    32k Views
    D

    @diyhouse: Trying to get log files...but web documentation does not seem to work,.. will have to contact Draytek tomorrow..

    adsl idle dti_on # Followed by sys reboot

    Does not give me the ability to pull logs in the diagnostic window

  • SG1100 increase memory after 24.11

    4
    0 Votes
    4 Posts
    348 Views
    stephenw10S

    You probably have some pkgs installed with lists etc?

    You're still at >20% unused RAM though.

  • ps ax | grep -i "nginx: master"

    11
    0 Votes
    11 Posts
    929 Views
    GertjanG

    @JonathanLee

    the nginx GUI web server doesn't use "/usr/local/www/nginx-dist" or "/usr/local/www/nginx" which links to the first.

    It still works, though : https://pfsense.yourlocaldoimain.tld/nginx :

    069a610b-39ff-47e0-9e77-2b5217541b1a-image.png

    These were the initial html files that come with a basic install of ngins, like apache2.
    A simple html index file to demonstrate that the server works.
    These files have been put out of the way 'somewhere'.

    The nginx config file is here : /var/etc/nginx-webConfigurator.conf

    You'll find this :

    server { listen 443 ssl http2; listen [::]:443 ssl http2;

    so it's actually simple to do this :

    server { listen 192.168.1.1:443 ssl http2; listen [::]:443 ssl http2;

    (maybe you should also add the IPv6 of your LAN)

    to make it listening only on LAN (nad localhost) and no where else.

    Do not edit this config file.
    Edit the file that edits the config file : /etc/inc/system.inc, look for the function system_generate_nginx_config(), you'll get the picture 😊

  • Pfsense in Azure : Image and Hub and Spoke router Mode

    3
    0 Votes
    3 Posts
    865 Views
    stephenw10S

    A lot has changed in 6 years. What exactly have you setup so far?

  • Unable to start Unbound after switch away from KEA

    17
    0 Votes
    17 Posts
    1k Views
    M

    @stephenw10

    Yep starts up fine, no issues.

    Unless i can reproduce it or others have a similar issue might have to throw this in the mystery box.

  • 0 Votes
    16 Posts
    2k Views
    S

    @getcom
    Thank you! That worked!

  • pf sense going down

    11
    0 Votes
    11 Posts
    876 Views
    stephenw10S

    Unclear. By 'router' here you mean the gl.inet GL-MT6000? And that is connected to the pfSense LAN?

    I can only imagine that device drops the link to the LAN when it reboots and the other device does not. However that should not affect the WAN. The other possibility is that during boot it comes up with a subnet that conflicts with the WAN causing the default to flip.

    But however it's doing it you should definitely set WAN_DHCP as default to prevent it trying to use the VPN as default.

  • device has not been registered for pfSense+

    10
    0 Votes
    10 Posts
    944 Views
    chpalmerC

    @stephenw10 said in device has not been registered for pfSense+:

    Yes adding or removing any NIC, including USB, will change the NDI.

    If you run pfSense-repoc -DN at the CLI it wil print the NDI actually being sent to the repo servers to check against.

    Well dag nabit! Thanks Steve! I just promised Craig I will never do such a bad thing again.. 😌

    I should have been using my test box to test and not my primary.

  • How to debug iPhone WiFi calling degrading after ~10 minutes?

    42
    0 Votes
    42 Posts
    5k Views
    D

    Found a setting on newer iOS that may help here as well … wife was reporting in parts of the house her phone would swap from WiFi back to 5g during a call

    Can try disabling Settings -> Cellular -> Wi-Fi Assist (“automatically use cellular data when Wi-Fi connectivity is poor”)… maybe a dead spot or between APs fools the iPhone to opt for the crappy cellular signal ?

  • Nextcloud AutoConfigBackup Service?

    2
    0 Votes
    2 Posts
    175 Views
    stephenw10S

    I've not seen anyone use Nextcloud specifically but it's just a matter of code. 😉

    See: https://docs.netgate.com/pfsense/en/latest/backup/remote-backup.html

  • 0 Votes
    5 Posts
    417 Views
    the otherT

    hey all,
    I could narrow it down...
    found my zyxel switch was causing the problem...it is (I guess) another bad IPv6 implementation. So I offed my v6 Interface on my xs1930. Still reachable with v4 and no more spamming my logs.
    Thank you for your hint @stephenw10 :)

  • FreeRadius BlastRADIUS Warning in System Logs - How To Mitigate?

    5
    0 Votes
    5 Posts
    3k Views
    stephenw10S

    I don't believe so since the radius traffic never leaves the firewall.

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.