@pfnow I have a Phillips AndroidTV and dug into the network traffic a bit. With the above setup the multicast and unicast traffic passes fine through the networks. But when the Youtube app on my pixel phone tries to open the Youtube app on the TV a 403 Error is returned which is I think the cause why the TV is not being shown in the list. I think like @wrightsonm said, the Chromecast possibly only allows casting from the local subnet. I'm thinking if it may be possible to bypass that with NAT, but I haven't tried that yet and I'm a bit reluctant since I want to avoid NAT as much as possible and find a better solution. Unfortunately I haven't yet found if my TV has this src ip restriction and since @JacobS successfully casted with this setup that restriction may not be a standard chromecast thing.

@stephenw10 said in Settings clean up ?: You only have to upload a config file manually without checking the xml was valid one time. The pain will teach you not to do that again. Oh I know about the pain to make errors in XML That's why I asked initial question :) What's interesting that I don't see interface dead entry in this XML, so maybe unrelated Thx

@jimp Well what do you know... I restarted it and ran the built in memtest and it's memory error city. Thanks for the tip! I'll chunk it.

You can: pfSsh.php playback changepassword <username> Though I'm not sure it would be easy to automate that since it expects user input for the password. We don't allow entering the password in the command line parameters in that script since it's not secure. You could look at /etc/phpshellsessions/changepassword and make your own copy that does what you want in a more script-friendly way.

@stephenw10 Thanks. I changed it to ip4 only as you suggested. I may be limiting only one main LAN ip to access it. I can't do anything else on my 2nd AP because it has limited setting options. Thanks again.

You can disable the http referer check from the console using the php shell. It's one the available playback scripts there. You can't set the gateway or default route as you were because pfSense does not use the FreeBSD RC system. Anything you set there is ignored. Steve

@steve_b PHP Response .:/etc/inc:/etc/inc/web:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/ The path was indeed missing. A reboot fixed the problem. Thank you all for your time!

This: https://github.com/pfsense/pfsense/blob/master/src/usr/local/www/widgets/widgets/system_information.widget.php#L63 But that calls get_system_pkg_version which runs pfsense-upgrade. You could probably do something similar off the firewall if you have something that knows about FreeBSD pkg-ng. Steve

@stephenw10 Yeah makes sense, what caught my attention was the % used in the dashboard, I used to run at 18% then saw 33 made me wonder. I can really do with a new dashboard, I saw some discussions on other boards about them but they seem time consuming to build but they looked sweet and you can really get creative with what is displayed.

pfSense doesn't use the FreeBSD rc system so you can't do something like that. What you can do is add your own script in /usr/local/etc/rc.d See: https://docs.netgate.com/pfsense/en/latest/development/boot-commands.html#shell-script-option Steve

Yes, need to better define the issue. DHCP not working? DNS not working? Check the system logs first, it will probably show you want is failing. Assuming anything is failing. It could also be something else on the network causing issues. Steve

@bhollingsworth said in WAN not getting IP address on reboot: I'm not sure what to think now. Any thoughts? Does it still fail when the data tap isn't connected? If so, that would tend to indicate a hardware problem, which it masked by it. And I do not use IPv6 so I can't comment on that. Well, why not give it a try? You'll have to move to it some time.

@cool_corona yes 3xWAN 1xLAN include failover tested and working on 2.5.2 brNP

I have not seen anything like that for FreeBSD/pfSense but it's not complex, it could probably be ported easily enough. You might be able to do it with a mirror port on a bridge and some filtering. Or maybe just using netcat in a script. Steve

My understanding from the breeze over I did of that article linked to - is you could send it to different servers based on name - but you need to use the proxycommand from your ssh client.. Which seems like more work then just using a different local domain or IP ;) and not bouncing off the proxy. That could come in handy if all your clients that wanted to talk to different ssh servers were outside your network vs doing a reflection connection from the local netework.

Is there nothing more shown? I expect to see more in the connection attempt. At least something indicating if the server side is refusing the auth attempt or just timing out or responding at all. It's not uncommon to see several connection attempts required like that though. Especially if it was just disconnected. Steve

@sgseidel said in Unable to ping Ubuntu software repository: maintainer for Suricata so thanks for alerting me. and also the Snort package don't take it as intrusive (I know grandchildren are important too): the 1 year I described as a deep learning, but don't let that put you off... you say you're retired (IT spec.), so you might have more time to learn this great tool