@jrey
In installed the RC without any patch applied,

IP list on graph was again mostly empty
applied the patch (my modified one) as described above.

IP's are listing fine again..

I'll go back after a bit of lunch and try the original patch, see if that is any different or works. (because that is/was likely something else) as the actual real lines needed to make it go are the same.

@johnpoz said in No Internet Access from LAN (Solved with last good config backup):

And unless you setup ssl through the proxy it like 99.9999 going to be utterly pointless

John, you make a valid point and to be honest, I have had this like like for years and glad you pointed this out to make me rethink its implementation. I do have an SSL for the the webgui but that's it. As I had said, this was a set and forgot but that turns to nonsense. Your https statement also punches me in the gut with reality...really appreciate the feedback. I shall remove...

Send me your order number or old NDI in chat and I'll check.

If you have a spare port you can bridge that to the VLAN to get that device onto it. But otherwise you'd need a VLAN capable switch somewhere, yes.

OK, thanks. Everything is being updated so that may just not have happened yet.

@othomas said in Web Configurator traffic is not being fragmented when it should be:

User data TCP/IP over IPSEC, over IPSEC (again), then over GTP-U. We had to do MSS clamping down to 1280 bytes.

ugghh - yeah that isn't fun..

Hi @stephenw10 , glad you liked it!
I Opened a feature request at https://redmine.pfsense.org/issues/14923

2.7 was released in June. See: https://docs.netgate.com/pfsense/en/latest/releases/versions.html

Currently the config version in 2.7 is the same as in Plus 22.05.1 so you can install 2.7 and import the config again.

Downgrading directly is not supported at this time.

@chudak Well no, not really. Better to have it all in one place instead of many threads in many forum categories.

See: https://docs.netgate.com/pfsense/en/latest/services/snmp.html

And the linked hangout: https://www.netgate.com/resources/videos-monitoring-pfsense-24-with-snmp

The fan status probably isn't available since pfSense doesn't see that.

Steve

I understand. Thanks for the feedback.

Link?

A quick look into pricing looks like:
https://shop.netgate.com/products/pfsense-software-subscription

And Enterprise TAC at a home user, ok maybe if you need it?

Yes backup the config and try re-installing clean to be sure.

At the command line run:

pkg-static install realtek-re-kmod

Then:

echo 'if_re_load="YES"' >> /boot/loader.conf.local
echo 'if_re_name="/boot/modules/if_re.ko"' >> /boot/loader.conf.local

Then reboot and check the boot logs show the 1.98 driver:

re0: <Realtek PCIe GbE Family Controller> port 0x1000-0x10ff mem 0xf7a00000-0xf7a00fff,0xf7900000-0xf7903fff irq 16 at device 0.0 on pci1 re0: Using Memory Mapping! re0: Using 1 MSI-X message re0: ASPM disabled re0: version:1.98.00 re0: Ethernet address: 00:0d:b9:38:30:10

Steve

Nice, I expected closer to 3GB so that doesn't seem unreasonable. 👍

No only pfSense Plus is available in AWS.

@hspindel said in ping from WAN disallowed by default?:

pinging my DDNS name

Well if you have your vpn up, and it reports the vpn IP as your ddns name, and then you ping the ddns name - then yeah you would be pinging the vpn endpoint.

@bumpmark said in PSA - 2.7.0 and ssh keys:

It seems that Microsoft has decided Win11 users don't need a later version

Not sure why anyone would limit themselves to what MS puts out - just use the another.. You can grab windows version here

https://www.mls-software.com/opensshd.html

Microsoft Windows [Version 10.0.19045.3570] (c) Microsoft Corporation. All rights reserved. C:\>ssh -V OpenSSH_9.4p1, OpenSSL 1.1.1v 1 Aug 2023 C:\>

Or just use your fav client, I use securecrt most of the time, its not a free option. But it is a very robust client.. There is also https://itefix.net/copssh-client which has 9.5p1

C:\tools\copssh_client_7.12.0_x64_free\bin $ ssh -V OpenSSH_9.5p1, LibreSSL 3.7.3

Putty is a common fav as well.