@johnpoz Working like a charm. Thaaaaank you!

I basically just had to click Hybrid outbound and save. Then Just add 1 more mapping for my new .11 subnet (just duplicated the original mapping that was already there)

I have a similar setup only with unifi switch and not edge switch and unifi APs

I have a VLAN 20 on my setup which is up and running which I configured last night.

Your Network configuration however is different. I selected VLAN only since pfsense was handling all my DHCP functionality. I see in your Network setup VLAN only is greyed out and says USW required (which I don't know what that means). In terms of DHCP mode, have you tried just setting it to None.

Did you setup a DHCP server on pfsense for the LAN within Pfsense. I terms of your Edge switch, it seems like you've setup your trunk port appropriately (I would guess - I've never used an edge switch).

A different site's connection suffers from LCP timeouts on a regular basis, possibly caused by VDSL resyncs due to changing SNR, though that's just a guess from occasionally seeing the negotiated connection speed changing. This particular site appears to be the worst behaved, though it runs the same hardware and almost identical configuration as my home connection (i3-7100 Gigabyte Brix, Cisco 3560CX & Draytek Vigor 130). A third site has a very stable PPPoE connection which runs for weeks at a time apart from occasionally where it all goes haywire; many LCP timeouts / reconnections within minutes and this very quickly causes the issue.

Hello,

I have the same issue here. I'm using pfsense 2.4.4.
Being in the pfsense network I have access to the standby node without any problem.
Trying to access the standby node from a different network, https access become unresponsive.

cmouse have you found a way to overcome this issue?

@jimp
Not a brower plugin. However, I did clear browser data which resolved the problem.
Menu>More Tools>Clear Browsing Data>Advanced>clear all except saved passwords, for all time.
Chrome works now.

If you have access to the GUI it's just Diagnostics > Backup & Restore

restore1.png

restore2.png

-Rico

@kkprasanth said in pfsense not blocking file extension:

@JKnott Can it be used on the setup ?

In order to do that, it would have to do deep packet inspection and be able identify file types. That's well beyond what pfSense is designed to do. Also, as mentioned above, TLS is often used these days, which means the data stream is encrypted and beyond deep packet inspection.

Ok, thanks for your response.
Happy new year!

Regards,
Damián

Hi,

You saw this :

@mohamed8080 said in The firewall has enountered an error:

(tried to allocate 268435464 bytes)

that is not just a number of random numbers, it was actually trying to get hold on
268 435 464 = a bit more as 268 Mega Bytes of memory in PHP working space.
That failed.

First check to know more about who/why/when : de activate pfblockerng.
No more problems, right ?
Next best test : remove some of the feeds. Start with the biggest ones. Put pfblockerng on a diet.

I imagine you've done the basics, like changing cables, using another card port as uplink, cleaning and reseating the card? If so, well, used cards and servers can fail in obscure ways. If having received no benefit from the previous changes to the config, I'd probably spend $20 on another NIC, maybe an i340.

@stephenw10 thanks

Those offloading options should be disabled by default (checked). It rarely improves performance and can cause massive problems so I would not recommend enabling them. You might also disable Hardware Checksum Offloading as that can cause problems on some NICs.
I would not normally expect bridging to cause a throughput issue on a system like that but if you were seeing output errors it was clearly hitting some issue. Unless you had a wifi interface in the mix there for example.

Steve

Mmm, the DHCP server should supply the interface address as the gateway if you don't specify anything. It's hard to think what could prevent that. If the interface was invalid in some way you would be able to set it in the first place.

Do you actually mean 172.16.1.1? 174.16.1.1 is not a private IP. It may be conflicting with something by some unlikely coincidence.

Steve

Well depends on what you make of "application blocking" It can be done native if your just talking the ports the application talk on..

But as its listed as optional, and it can be done with optional packages. snort and openappID and proxy for url filtering.

https://www.eclipse.org/forums/ ?

https://help.eclipse.org/2019-12/topic/org.eclipse.php.help/html/reference/preferences/php_executables/index.html

You actually have static public IPs on those servers? Or they are just forwarded by the comcast router?

To actually use public IPs directly there you would need to have a public subnet routed to you and to route that to pfSense in the Comcast device. It would need to be a different subnet that the Comcast WAN too.

If you are just portforwarding you need that setup through both routers. If they are all using the same port then you would need to use some intermediate ports on the pfSense WAN or have 4 WAN IPs.

Steve

OK. The issue I see is that to use the NIC with DPDK drivers, as I understand it, you need to unload any other drivers attaching to it. That means you can't use that NIC as an interface in pfSense. And that means that I'm not sure what traffic you can capture on this NIC. The only way I could see this being useful is if you connect it sepeartely to a mirror port.

Am I missing something?

Steve

Or just enter the url '/system_usermanager.php' directly.

Yep.

As soon as you see phrases that use the word
920487c2-e31e-47e5-b350-36b1b3f510ea-image.png
or inode for short, you know the file system isn't 'clean' - they call the state 'dirty' - and it chkdsk, sorry : fsck time.