@stephenw10 said in samba server: Nope. Is the short answer. Technically yes, but you shouldn't is the longer one. Steve thanx steve

@nogbadthebad Thanks Nog. I am thinking of testing moving an Apple TV to the IoT.

Thanks for your answers

@jcasale said in Issue with pfSense and having to restart constantly: Where should I look as to the cause of the problem? I looked at the systems logs and have not seen anything that stuck out. Was the Liva PC a wise hardware decision? If not, what hardware would you recommend? It seems that your backup is also corrupted and often it's caused by power failure. Its time for a clean install and clean configuration. No one can comment on your new hardware when you haven't stated what you bought.

@macusers First of all, again check your internet-facing IP on the LTE router. If this is not a real public IP, your ISP provides only a private subnet to you and there is nothing you can do. You will not get any traffic from the internet to your router, cause this is controlled by the ISP. In this case you can only use it for upstream connections.

@ducati0927 What turned out to be the problem? I have the same thing going on with a Spectrum modem right now.

Less important, but I am reducing cable usage on my switch by using 1 10GbE link instead of four 1 Gb links.

The only antivirus you might have on pfSense, clamav, only scans traffic that is cached by Squid. It is probably not doing anything for traffic coming over a VPN. But even if it is it's no substitute for AV on hosts where it can have far more visibility. Steve

That should work. We're going to need to see some data to find out why it isn't. Can we see the ifconfig output with the new card and the interfaces assigned? Steve

@akuma1x said in Block personal wireless devices at work: It is in a safe spot, just in case they need it Sticky note on the monitor?

The logs are straight from Strongswan so maybe: https://wiki.strongswan.org/projects/strongswan/wiki/Loggerconfiguration Though I don't see any specifics there. There are existing log parsers for strongswan though as it's widely used. You might look at those. Steve

@viktor_g Hi Viktor, i`ve tested patch - it works, L2TP start automatically during boot, thanks a lot!

@stephenw10 No, it's not needed anymore. The only difference with a standard config is PAP.

@ali-ilyas said in PFSense On 4G To Remotely Access PLC (Programmable Logic Controller): I tried using Pfsense to access a PLC over VPN without having to enter router or default gateway info into PLC but didn't work. Also you will need to have a route setup on your local machine or router to the remote LAN network that sends traffic to the pfsense box that is performing the outbound NAT to the remote LAN. Hopefully it will be using a subnet that is different from your local network.

This is targeted for CE-next in redmine but seems to have stalled. Does CE-Next mean 2.5.2 or 2.6.0 ?

If you are hitting that it mostly affects VPN tunnels using the interface address. Whatever nuance it is causes the interface to return a VIP as the primary address. However you will find it doesn't cause a problem for pf using the system alias 'WAN address' for firewall rules or outbound NAT for example. If you can use a VIP there instead of the interface address that will be unaffected. Steve

There were significant changes in pf after 2.5.1 which will be in 2.5.2, especially in state handling. That panic is unlikely to still happen on 2.5.2, or at least would have a different backtrace which would be more helpful.

@mfld ill do that.. thanks a lot!