@ofloo Read http://nginx.org/en/docs/http/configuring_https_servers.html Go here : https://github.com/pfsense/pfsense/blob/de9ba32bd3531ccf74e143391deaacb77e085097/src/etc/inc/system.inc#L1364 and https://github.com/pfsense/pfsense/blob/de9ba32bd3531ccf74e143391deaacb77e085097/src/etc/inc/system.inc#L1396 and make the listen (and IPv6 listen) more restrictive. Be careful : there is no such thing as a default LAN interface. You could hard code the IP of the interface t to listen to. Or extract it from $g['interfaces'['lan']['ipaddr']

@squirrelly the end of an era https://www.netgate.com/blog/announcing-pfsense-plus.html

It seems to be a common issue: https://forum.netgate.com/topic/161324/openvpn-is-not-working-if-client-is-reconnected-immediately/14 It works by adding "nobind" or "lport 0" to client cfg file.

Thanks a lot guys - amazing great help always here

@jimbo-1 Please look at this to restore your default firewall: https://docs.netgate.com/pfsense/en/latest/config/factory-defaults.html Then read these: https://docs.netgate.com/pfsense/en/latest/firewall/best-practices.html https://docs.netgate.com/pfsense/en/latest/recipes/example-basic-configuration.html You need to be able to talk to LAN net.

Compile your own image for that specific system complete with all the required hardware details and customisations. Then flash it. In reality, unless you're an experienced developer with both ARM and FreeBSD, you don't. Each of the ARM devices we have built images for required significant development effort. Steve

@viragomann said in Port forwarding: @ulflaursen said in Port forwarding: Should I first forward the port from the mobile broadband router to pfSense, and the forward it further on to the Synology? Exactly this. You have to put the Synology into the LAN behind pfSense and reconfigure its IP. Then forward the traffic to pfSense WAN and again on pfSense to the Synology. Consider that pfSense does not allow access from private networks on WAN by default. So if your broadband router does masquerading on incoming forwarded traffic it might be blocked. You can enable access from private addresses in the WAN interface settings by removing the check at "Block private networks". Thanks a lot man :-) /Ulf

Do you have some sort of problem with my personal opinion of the lack of info given in this thread @papdee Yes I am a global moderator.. That has little to do with my personal opinion on specifics, just like you can post your opinion on something, so can I ;) Where did the OP give any details worth anything? Love for you to point them out to me.. Do you actually feel this thread has use to the next guy having a problem? I am not seeing it.

@cool_corona I'll try it, thanks!

@johnpoz I deleted all the Outbound NAT rules and added one as you suggested. I also disabled 'pull routes' in client config. Everything working well so far and NTP status is still showing 377's for the five individual servers. I presently have 1.1.1.1 and 9.9.9.9 in System > general > DNS servers. Leak tests showing VPN public IP (good) and DNS servers as cloudflare and quad9 (should I care? Is it cloudflare trust vs VPN provider trust?). Here are my DNS Resolver settings in case I'm wrong/confused on something. [image: 1619191128573-pfsense-dns-resolver-settings.png]

@kom said in First time user / install problems: @ulflaursen said in First time user / install problems: but should the "pfSense box" not have DHCP enabled as default? When you installed it, part of the step of configuring LAN is it asks you if you want to enable DHCP and if yes then it asks for the IP range to manage. Perhaps you missed that. Give yourself a 192.168.1.2 address, login to pfSense gui and check your Services - DHCP Server settings. That, or reconfigure LAN and do the DHCP part again (option 2 in the console menu). Thanks a lot @KOM it works!! /U

Well no issue since my last update. It was the driver ;-)

@netblues I have done other tests: I plug a mikrotik or a linux netbook and I get immediate pppoe working connection. With PFSense some days I get immediate connection even if I restart the box several times. Other days starts again in an infinite loop but after several hours it "repairs" itself. In this cases if I put a mikrotik/linux I get immediate connection so it is not a pppoe server fault. I will try a pcap but I need some hints.

@gertjan system has already been reinstalled.. I think I have things working well now. I will not make any changes till I know it is rock solid. New to all of this and just learning about the features. I lots of options in the package manager.. Just making sure my network is secure (more than it was)