pfSense® Software

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Subcategories

Messages from the pfSense Team

Announcements and information about pfSense software posted by the project team

174
Topics

1684
Posts

I'm curious as to why Go was chosen for the UI? I have zero interest in starting a language war, no Rust vs Go nonsense. I'm also not questioning the appropriateness of Go.

I'm interested in what language attributes made it attractive or was it simply you already have the people and you can get to work immediately?

I'm speaking from experience where I have had to pick a tool set for service development (purely back-end) but skipped over obvious choices because of a lack of people ready to go. I've personally never done full stack work in any serious way, and have zero interest in such things. Front end development is an unpleasentness I'm happy to leave to others. :)
General pfSense Questions

Discussions about pfSense software that do not fit into one of the more specific categories below.

20059
Topics

119887
Posts

@johnpoz look at the diagram, on the router the printer is configured with static ip this is the 192.168.x.x network
the firewall has another network 192.168.1.1.
now I want the printer configured on the router to work on the firewall
1613066696267-1612911584563-img-20210209-wa0000.jpg
Installation and Upgrades

Discussions about installing or upgrading pfSense software

8435
Topics

52360
Posts

R

@dominikhoffmann Nice find.
Firewalling

Discussions about firewalling functionality in pfSense software

7958
Topics

45925
Posts

D

OK after reading around some more, I see that I didn't realize the full implications of the options I am using here.

I see that I can manually delete this affected IP from diagnostics => tables => virusprot and that the rules there are supposed to persist for an hour.

I see there is an open feature request from 2011 for more control around this functionality but I take it that that is not going to happen.

Thanks for helping me work through this.

Is there any supported method to limit the rate of new connections without hour long global blocks for users who exceed the threshold?
NAT

Discussions about Network Address Translation (NAT)

4748
Topics

25783
Posts

P

Trying to set up the following.

<192.168.10.10/24> <-> {192.168.10.1/24} <-> [external internet IP 1] <-> [external internet ip 2] <-> {192.168.20.1/24] <-> <192.168.20.10>

192.168.10.10 and 192.168.20.10 are routers (with IPSEC capabilities) that need to see each other. 192.168.10.1 and 192.168.20.1 are LAN interfaces of 2 different pfSenses. Each pfSense has an external IP address.

Nothing else needs to be on these pfSenses. I think this should be a 1:1 NAT situation. I set up a 1:1, and doing a packet capture, I can see the packets on the LAN (192.168.10.1) interface coming from 192.168.10.10. Good. UDP traffic port 500 and 4500.

But I don't see anything on the WAN interface of the first pfSense (with external internet IP 1).

It appears that the pfSense is blocking the traffic from LAN to WAN.

Help, please :)
HA/CARP/VIPs

Discussions about High Availability, CARP, and utilizing additional IP addresses

2123
Topics

9719
Posts

B

@lhatroch
Vlans and Interface settings are never replicated.
Vlans needs to be created manually on each member (node), and assigned/applied to interfaces in same order on both nodes.
-> https://docs.netgate.com/pfsense/en/latest/recipes/high-availability.html
L2/Switching/VLANs

Discussions about Layer 2 Networking, including switching and VLANs

531
Topics

4387
Posts

@randy9000

First off, routers don't pass VLANs, so the rules will have no effect. You say the tag isn't being passed. How do you know that? You can use Packet Capture on pfsense to see what's being sent on the LAN, though you'll have to set Level of detail to something higher than Normal, though I've forgotten which. On the switch end, you can configure port mirroring, so that you can use Wireshark to view the frames.
Routing and Multi WAN

Discussions about routing and Multiple WAN uplinks (WAN Failover, WAN Load Balancing, etc.)

7222
Topics

34104
Posts

C

@alex-atkin-uk I have tried routing data from the interface's page but also not working specially for TCP connections.

also tried the manual fix by adding rules for TCP connections on the interface's page with any flags and sloppy state but not even routing to the determined gateway.

but if i made servers of Facebook or twitch static routes on specific gateway and bypassing firewall rules for it's traffic, it works just fine.
Traffic Shaping

Discussions about traffic shaping and limiters

2738
Topics

14850
Posts

T

I can confirm. I'm running two firewalls in high availability (one hardware and the other VMware) and both are experiencing this issue. I'm running cbq on all internal interfaces and all internal interfaces are VLANs. I will disable cbq and see if it clears up.
db:0:kdb.enter.default> bt Tracing pid 12 tid 100095 td 0xfffff800057a8740 kdb_enter() at kdb_enter+0x37/frame 0xfffffe0004259610 vpanic() at vpanic+0x197/frame 0xfffffe0004259660 panic() at panic+0x43/frame 0xfffffe00042596c0 trap_fatal() at trap_fatal+0x391/frame 0xfffffe0004259720 trap_pfault() at trap_pfault+0x4f/frame 0xfffffe0004259770 trap() at trap+0x286/frame 0xfffffe0004259880 calltrap() at calltrap+0x8/frame 0xfffffe0004259880 --- trap 0xc, rip = 0xffffffff80ec014e, rsp = 0xfffffe0004259950, rbp = 0xfffffe0004259980 --- ether_8021q_frame() at ether_8021q_frame+0x2e/frame 0xfffffe0004259980 vlan_transmit() at vlan_transmit+0xc8/frame 0xfffffe00042599f0 vlan_altq_start() at vlan_altq_start+0xb4/frame 0xfffffe0004259a20 cbqrestart() at cbqrestart+0x64/frame 0xfffffe0004259a50 rmc_restart() at rmc_restart+0x6f/frame 0xfffffe0004259a80 softclock_call_cc() at softclock_call_cc+0x141/frame 0xfffffe0004259b30 softclock() at softclock+0x79/frame 0xfffffe0004259b50 ithread_loop() at ithread_loop+0x23c/frame 0xfffffe0004259bb0 fork_exit() at fork_exit+0x7e/frame 0xfffffe0004259bf0 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0004259bf0
DHCP and DNS

Discussions about DHCP, DNS Resolver (Unbound), DNS Forwarder (dnsmasq), and general DNS issues

4829
Topics

29268
Posts

R

HI...
We recently changed Internet providers. And I noticed that I'm having problems with DNS resolutions. The weird part is that the DNS resolution fails to work after about 6-8 hours of change.

To restore functionality, I need to reboot the ISP bridged router and pfsense. Or delete and re-enter DNS settings on the pfsense.

We contacted ISP tech support, and they said it's the firewall, and not the ISP device. Does anyone know what is causing this issue?

pfBlockerNG and DNsBL are disabled, and DNS resolver is enabled. Is there a way to see what's causing this issue

We did not have this issue with the earlier ISP. We changed ISPs because the earlier provider did MAC binding for static WAN IPs. But not the new provider.
IPv6

Discussions about IPv6 connectivity and services

1528
Topics

13892
Posts

B

I just noticed, that in Services / DHCPv6 Server I can explicitly see the wrongly configured prefix size.
But still: I have no clue how to change this.
7a4a2da8-afbb-4f3c-bc41-b56171c841e5-image.png
IPsec

Discussions about IPsec VPNs

4872
Topics

20088
Posts

D

@msswift Thank you that fixed it for me too!
OpenVPN

Discussions about OpenVPN

7727
Topics

41971
Posts

V

@routeless
So the PIA server pushes the default route to you, I guess.
Did you assign an interface to the openvpn client instance?
WireGuard

Discussions about WireGuard

93
Topics

824
Posts

I have noticed that I am seeing more sites blocked when I use WG vs OpenVPN. Is anyone else seeing more domains blocking traffic when using WG vs OpenVPN?
Captive Portal

Discussions about Captive Portal, vouchers, and related topics

3147
Topics

16278
Posts

A

@free4 I will check and see what it looks like. Thanks for the troubleshooting steps. Right now I do see 2 rules for each MAC (one inbound, one outbound) but I can't confirm if the devices are working.

We are using a hard timeout in the captive portal settings (although that should be unrelated since they're white listed).

I'm hoping to replicate and grab a packet capture on Monday.

Thanks!
webGUI

Anything that does not fit in other categories related to the webGUI

1706
Topics

8112
Posts

B

If I remove the ~38000 IPv6 kernel routes I did get installed via BGP, then I'm able to access general setup.
Wireless

Discussions about wireless networks, interfaces, and clients

1598
Topics

9720
Posts

R

Hi guys,

I'm experiencing random drops in 4G connectivity without successful restore of the connection. The connection drops happen randomly once a month, beside the connection is rocket stable. Maybe the connection drop is triggered by an issue on the carrier side, however, I'd expect that pfSense successfully reconnects afterwards. It seems that it tries without success.

Unfortunately I'm not a wireless expert :( As soon as the device is restarted, the modem connects fine again.

My setup is as follows: PC Engines APU2 with Sierra MC7710 on German Telekom network in a remote location (good coverage).

Please find the ppp log below. If there is anything else required, I'm happy to supply.

Thank you for any input!
Mar 4 05:54:56 pvob ppp: [wan_link0] LCP: no reply to 1 echo request(s) Mar 4 05:55:06 pvob ppp: [wan_link0] LCP: no reply to 2 echo request(s) Mar 4 05:55:16 pvob ppp: [wan_link0] LCP: no reply to 3 echo request(s) Mar 4 05:55:26 pvob ppp: [wan_link0] LCP: no reply to 4 echo request(s) Mar 4 05:55:36 pvob ppp: [wan_link0] LCP: no reply to 5 echo request(s) Mar 4 05:55:36 pvob ppp: [wan_link0] LCP: peer not responding to echo requests Mar 4 05:55:36 pvob ppp: [wan_link0] LCP: state change Opened --> Stopping Mar 4 05:55:36 pvob ppp: [wan_link0] Link: Leave bundle "wan" Mar 4 05:55:36 pvob ppp: [wan] Bundle: Status update: up 0 links, total bandwidth 9600 bps Mar 4 05:55:36 pvob ppp: [wan] IPCP: Close event Mar 4 05:55:36 pvob ppp: [wan] IPCP: state change Opened --> Closing Mar 4 05:55:36 pvob ppp: [wan] IPCP: SendTerminateReq #22 Mar 4 05:55:36 pvob ppp: [wan] IPCP: LayerDown Mar 4 05:55:36 pvob check_reload_status: Rewriting resolv.conf Mar 4 05:55:36 pvob ppp: [wan] IFACE: Down event Mar 4 05:55:36 pvob ppp: [wan] IFACE: Rename interface ppp0 to ppp0 Mar 4 05:55:36 pvob ppp: [wan] IPV6CP: Close event Mar 4 05:55:36 pvob ppp: [wan] IPV6CP: state change Stopped --> Closed Mar 4 05:55:36 pvob ppp: [wan] IPCP: Down event Mar 4 05:55:36 pvob ppp: [wan] IPCP: LayerFinish Mar 4 05:55:36 pvob ppp: [wan] Bundle: No NCPs left. Closing links... Mar 4 05:55:36 pvob ppp: [wan] IPCP: state change Closing --> Initial Mar 4 05:55:36 pvob ppp: [wan] IPV6CP: Down event Mar 4 05:55:36 pvob ppp: [wan] IPV6CP: state change Closed --> Initial Mar 4 05:55:36 pvob ppp: [wan_link0] LCP: SendTerminateReq #8 Mar 4 05:55:36 pvob ppp: [wan_link0] LCP: LayerDown Mar 4 05:55:38 pvob ppp: [wan_link0] LCP: SendTerminateReq #9 Mar 4 05:55:40 pvob ppp: [wan_link0] LCP: state change Stopping --> Stopped Mar 4 05:55:40 pvob ppp: [wan_link0] LCP: LayerFinish Mar 4 05:55:40 pvob ppp: [wan_link0] Link: DOWN event Mar 4 05:55:40 pvob ppp: [wan_link0] LCP: Down event Mar 4 05:55:40 pvob ppp: [wan_link0] LCP: state change Stopped --> Starting Mar 4 05:55:40 pvob ppp: [wan_link0] LCP: LayerStart Mar 4 05:55:40 pvob ppp: [wan_link0] Link: reconnection attempt 1 in 4 seconds Mar 4 05:55:44 pvob ppp: [wan_link0] Link: reconnection attempt 1 Mar 4 05:55:44 pvob ppp: [wan_link0] CHAT: Detected Hayes compatible modem. Mar 4 05:55:47 pvob ppp: [wan_link0] CHAT: The modem is not responding to "AT&F&C1&D2E0S0=0M1" at ModemCmd: label. Mar 4 05:55:47 pvob ppp: [wan_link0] MODEM: chat script failed Mar 4 05:55:47 pvob ppp: [wan_link0] Link: DOWN event Mar 4 05:55:47 pvob ppp: [wan_link0] LCP: Down event Mar 4 05:55:47 pvob ppp: [wan_link0] Link: reconnection attempt 2 in 2 seconds Mar 4 05:55:49 pvob ppp: [wan_link0] Link: reconnection attempt 2 Mar 4 05:56:03 pvob ppp: [wan_link0] CHAT: The modem is not responding to "AT" at ModemCmd: label. Mar 4 05:56:03 pvob ppp: [wan_link0] MODEM: chat script failed Mar 4 05:56:03 pvob ppp: [wan_link0] Link: DOWN event Mar 4 05:56:03 pvob ppp: [wan_link0] LCP: Down event Mar 4 05:56:03 pvob ppp: [wan_link0] Link: reconnection attempt 3 in 3 seconds Mar 4 05:56:06 pvob ppp: [wan_link0] Link: reconnection attempt 3 Mar 4 05:56:20 pvob ppp: [wan_link0] CHAT: The modem is not responding to "AT" at ModemCmd: label. Mar 4 05:56:20 pvob ppp: [wan_link0] MODEM: chat script failed Mar 4 05:56:20 pvob ppp: [wan_link0] Link: DOWN event Mar 4 05:56:20 pvob ppp: [wan_link0] LCP: Down event Mar 4 05:56:20 pvob ppp: [wan_link0] Link: reconnection attempt 4 in 2 seconds Mar 4 05:56:22 pvob ppp: [wan_link0] Link: reconnection attempt 4 Mar 4 05:56:23 pvob ppp: [wan_link0] CHAT: +CGDCONT=1,"IP","Internet.t-d1.de" Mar 4 05:56:23 pvob ppp: [wan_link0] CHAT: Detected Hayes compatible modem. Mar 4 05:56:23 pvob ppp: [wan_link0] CHAT: Dialing server at *99#... Mar 4 05:56:23 pvob ppp: [wan_link0] CHAT: ATDT*99# Mar 4 05:56:23 pvob ppp: [wan_link0] CHAT: Connected at 100000000. Mar 4 05:56:23 pvob ppp: [wan_link0] MODEM: chat script succeeded Mar 4 05:56:23 pvob ppp: [wan_link0] Link: UP event Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: Up event Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: state change Starting --> Req-Sent Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: SendConfigReq #10 Mar 4 05:56:23 pvob ppp: [wan_link0] ACFCOMP Mar 4 05:56:23 pvob ppp: [wan_link0] PROTOCOMP Mar 4 05:56:23 pvob ppp: [wan_link0] ACCMAP 0x000a0000 Mar 4 05:56:23 pvob ppp: [wan_link0] MRU 1500 Mar 4 05:56:23 pvob ppp: [wan_link0] MAGICNUM 0x8f0c9bf1 Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: rec'd Configure Request #11 (Req-Sent) Mar 4 05:56:23 pvob ppp: [wan_link0] ACCMAP 0x00000000 Mar 4 05:56:23 pvob ppp: [wan_link0] AUTHPROTO CHAP MD5 Mar 4 05:56:23 pvob ppp: [wan_link0] MAGICNUM 0x4f1e7b2c Mar 4 05:56:23 pvob ppp: [wan_link0] PROTOCOMP Mar 4 05:56:23 pvob ppp: [wan_link0] ACFCOMP Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: SendConfigAck #11 Mar 4 05:56:23 pvob ppp: [wan_link0] ACCMAP 0x00000000 Mar 4 05:56:23 pvob ppp: [wan_link0] AUTHPROTO CHAP MD5 Mar 4 05:56:23 pvob ppp: [wan_link0] MAGICNUM 0x4f1e7b2c Mar 4 05:56:23 pvob ppp: [wan_link0] PROTOCOMP Mar 4 05:56:23 pvob ppp: [wan_link0] ACFCOMP Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: state change Req-Sent --> Ack-Sent Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: rec'd Configure Ack #10 (Ack-Sent) Mar 4 05:56:23 pvob ppp: [wan_link0] ACFCOMP Mar 4 05:56:23 pvob ppp: [wan_link0] PROTOCOMP Mar 4 05:56:23 pvob ppp: [wan_link0] ACCMAP 0x000a0000 Mar 4 05:56:23 pvob ppp: [wan_link0] MRU 1500 Mar 4 05:56:23 pvob ppp: [wan_link0] MAGICNUM 0x8f0c9bf1 Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: state change Ack-Sent --> Opened Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: auth: peer wants CHAP, I want nothing Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: LayerUp Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: rec'd Discard Request #12 (Opened) Mar 4 05:56:23 pvob ppp: [wan_link0] CHAP: rec'd CHALLENGE #1 len: 35 Mar 4 05:56:23 pvob ppp: [wan_link0] Name: "UMTS_CHAP_SRVR" Mar 4 05:56:23 pvob ppp: [wan_link0] CHAP: Using authname "t-mobile" Mar 4 05:56:23 pvob ppp: [wan_link0] CHAP: sending RESPONSE #1 len: 29 Mar 4 05:56:23 pvob ppp: [wan_link0] CHAP: rec'd SUCCESS #1 len: 4 Mar 4 05:56:23 pvob ppp: [wan_link0] LCP: authorization successful Mar 4 05:56:23 pvob ppp: [wan_link0] Link: Matched action 'bundle "wan" ""' Mar 4 05:56:23 pvob ppp: [wan_link0] Link: Join bundle "wan" Mar 4 05:56:23 pvob ppp: [wan] Bundle: Status update: up 1 link, total bandwidth 100000000 bps Mar 4 05:56:23 pvob ppp: [wan] IPCP: Open event Mar 4 05:56:23 pvob ppp: [wan] IPCP: state change Initial --> Starting Mar 4 05:56:23 pvob ppp: [wan] IPCP: LayerStart Mar 4 05:56:23 pvob ppp: [wan] IPV6CP: Open event Mar 4 05:56:23 pvob ppp: [wan] IPV6CP: state change Initial --> Starting Mar 4 05:56:23 pvob ppp: [wan] IPV6CP: LayerStart Mar 4 05:56:23 pvob ppp: [wan] IPCP: Up event Mar 4 05:56:23 pvob ppp: [wan] IPCP: state change Starting --> Req-Sent Mar 4 05:56:23 pvob ppp: [wan] IPCP: SendConfigReq #23 Mar 4 05:56:23 pvob ppp: [wan] IPADDR 0.0.0.0 Mar 4 05:56:23 pvob ppp: [wan] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Mar 4 05:56:23 pvob ppp: [wan] IPV6CP: Up event Mar 4 05:56:23 pvob ppp: [wan] IPV6CP: state change Starting --> Req-Sent Mar 4 05:56:23 pvob ppp: [wan] IPV6CP: SendConfigReq #31 Mar 4 05:56:24 pvob ppp: [wan] IPCP: rec'd Configure Nak #23 (Req-Sent) Mar 4 05:56:24 pvob ppp: [wan] IPCP: SendConfigReq #24 Mar 4 05:56:24 pvob ppp: [wan] IPADDR 0.0.0.0 Mar 4 05:56:24 pvob ppp: [wan] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Mar 4 05:56:25 pvob ppp: [wan] IPV6CP: SendConfigReq #32 Mar 4 05:56:25 pvob ppp: [wan] IPCP: rec'd Configure Nak #24 (Req-Sent) Mar 4 05:56:25 pvob ppp: [wan] IPCP: SendConfigReq #25 Mar 4 05:56:25 pvob ppp: [wan] IPADDR 0.0.0.0 Mar 4 05:56:25 pvob ppp: [wan] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Mar 4 05:56:26 pvob ppp: [wan] IPCP: rec'd Configure Nak #25 (Req-Sent) Mar 4 05:56:26 pvob ppp: [wan] IPCP: SendConfigReq #26 Mar 4 05:56:26 pvob ppp: [wan] IPADDR 0.0.0.0 Mar 4 05:56:26 pvob ppp: [wan] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Mar 4 05:56:27 pvob ppp: [wan] IPV6CP: SendConfigReq #33 Mar 4 05:56:27 pvob ppp: [wan] IPCP: rec'd Configure Nak #26 (Req-Sent) Mar 4 05:56:27 pvob ppp: [wan] IPCP: SendConfigReq #27 Mar 4 05:56:27 pvob ppp: [wan] IPADDR 0.0.0.0 Mar 4 05:56:27 pvob ppp: [wan] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Mar 4 05:56:27 pvob ppp: [wan] IPCP: SendConfigReq #27 Mar 4 05:56:27 pvob ppp: [wan] IPADDR 0.0.0.0 Mar 4 05:56:27 pvob ppp: [wan] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Mar 4 05:56:28 pvob ppp: [wan] IPCP: rec'd Configure Nak #27 (Req-Sent) Mar 4 05:56:28 pvob ppp: [wan] IPCP: SendConfigReq #28 Mar 4 05:56:28 pvob ppp: [wan] IPADDR 0.0.0.0 Mar 4 05:56:28 pvob ppp: [wan] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Mar 4 05:56:29 pvob ppp: [wan] IPV6CP: SendConfigReq #34 Mar 4 05:56:29 pvob ppp: [wan] IPCP: rec'd Configure Nak #28 (Req-Sent) Mar 4 05:56:29 pvob ppp: [wan] IPCP: SendConfigReq #29 Mar 4 05:56:29 pvob ppp: [wan] IPADDR 0.0.0.0 Mar 4 05:56:29 pvob ppp: [wan] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Mar 4 05:56:30 pvob ppp: [wan] IPCP: rec'd Configure Nak #29 (Req-Sent) Mar 4 05:56:30 pvob ppp: [wan] IPCP: SendConfigReq #30 Mar 4 05:56:30 pvob ppp: [wan] IPADDR 0.0.0.0 Mar 4 05:56:30 pvob ppp: [wan] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Mar 4 05:56:31 pvob ppp: [wan] IPV6CP: SendConfigReq #35 Mar 4 05:56:31 pvob ppp: [wan] IPCP: rec'd Configure Nak #30 (Req-Sent) Mar 4 05:56:31 pvob ppp: [wan] IPCP: SendConfigReq #31 Mar 4 05:56:31 pvob ppp: [wan] IPADDR 0.0.0.0 Mar 4 05:56:31 pvob ppp: [wan] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Mar 4 05:56:32 pvob ppp: [wan] IPCP: rec'd Configure Nak #31 (Req-Sent) Mar 4 05:56:32 pvob ppp: [wan] IPCP: SendConfigReq #32 Mar 4 05:56:32 pvob ppp: [wan] IPADDR 0.0.0.0 Mar 4 05:56:32 pvob ppp: [wan] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Mar 4 05:56:33 pvob ppp: [wan] IPV6CP: SendConfigReq #36 Mar 4 05:56:33 pvob ppp: [wan] IPCP: rec'd Configure Nak #32 (Req-Sent) Mar 4 05:56:33 pvob ppp: [wan] IPCP: not converging Mar 4 05:56:33 pvob ppp: [wan] IPCP: parameter negotiation failed Mar 4 05:56:33 pvob ppp: [wan] IPCP: state change Req-Sent --> Stopped Mar 4 05:56:33 pvob ppp: [wan] IPCP: LayerFinish Mar 4 05:56:35 pvob ppp: [wan] IPV6CP: SendConfigReq #37 Mar 4 05:56:37 pvob ppp: [wan] IPV6CP: SendConfigReq #38 Mar 4 05:56:39 pvob ppp: [wan] IPV6CP: SendConfigReq #39 Mar 4 05:56:41 pvob ppp: [wan] IPV6CP: SendConfigReq #40 Mar 4 05:56:43 pvob ppp: [wan] IPV6CP: parameter negotiation failed Mar 4 05:56:43 pvob ppp: [wan] IPV6CP: state change Req-Sent --> Stopped Mar 4 05:56:43 pvob ppp: [wan] IPV6CP: LayerFinish Mar 4 05:56:43 pvob ppp: [wan] Bundle: No NCPs left. Closing links... Mar 4 05:56:43 pvob ppp: [wan] Bundle: closing link "wan_link0"... Mar 4 05:56:43 pvob ppp: [wan_link0] Link: CLOSE event Mar 4 05:56:43 pvob ppp: [wan_link0] LCP: Close event Mar 4 05:56:43 pvob ppp: [wan_link0] LCP: state change Opened --> Closing Mar 4 05:56:43 pvob ppp: [wan_link0] Link: Leave bundle "wan" Mar 4 05:56:43 pvob ppp: [wan] Bundle: Status update: up 0 links, total bandwidth 9600 bps Mar 4 05:56:43 pvob ppp: [wan] IPCP: Close event Mar 4 05:56:43 pvob ppp: [wan] IPCP: state change Stopped --> Closed Mar 4 05:56:43 pvob ppp: [wan] IPV6CP: Close event Mar 4 05:56:43 pvob ppp: [wan] IPV6CP: state change Stopped --> Closed Mar 4 05:56:43 pvob ppp: [wan] IPCP: Down event Mar 4 05:56:43 pvob ppp: [wan] IPCP: state change Closed --> Initial Mar 4 05:56:43 pvob ppp: [wan] IPV6CP: Down event Mar 4 05:56:43 pvob ppp: [wan] IPV6CP: state change Closed --> Initial Mar 4 05:56:43 pvob ppp: [wan_link0] LCP: SendTerminateReq #11 Mar 4 05:56:43 pvob ppp: [wan_link0] LCP: LayerDown Mar 4 05:56:43 pvob ppp: [wan_link0] LCP: rec'd Terminate Ack #11 (Closing) Mar 4 05:56:43 pvob ppp: [wan_link0] LCP: state change Closing --> Closed Mar 4 05:56:43 pvob ppp: [wan_link0] LCP: LayerFinish Mar 4 05:56:43 pvob ppp: [wan_link0] Link: DOWN event Mar 4 05:56:43 pvob ppp: [wan_link0] LCP: Down event Mar 4 05:56:43 pvob ppp: [wan_link0] LCP: state change Closed --> Initial Mar 5 01:01:01 pvob php-cgi: rc.dyndns.update: Dynamic DNS (xxx.xxx.xxx) There was an error trying to determine the public IP for interface - wan (ppp0 ). Mar 5 06:46:41 pvob syslogd: kernel boot file is /boot/kernel/kernel
SNMP

Discussions about monitoring via SNMP

161
Topics

496
Posts

Y

Hello,
We manage the hard disk cache by swapstat_check.php.
It doesn't work sometimes. How can we monitor it by SNMP?
(We are using PRTG.)

Regards
Documentation

Discussions about pfSense documentation, including the book

161
Topics

1175
Posts

A

@jarrod I tried getting this work, but I have problems with the correct VPN setup. Can you share which "Authentication Method" you are using? Thank you very much!
Development

Topics related to developing pfSense: coding styles, skills, questions etc.

2.5 Development Snapshots (Retired)

1257
Topics

7386
Posts

As 2.5 has been released, this category has been retired.

To discuss 21.02.2/2.5.1 snapshots, use https://forum.netgate.com/category/83/

To discuss 2.6.0 snapshots, see https://forum.netgate.com/category/84/
Gaming

Discussions about playing network-based games behind pfSense from consoles, PCs, etc.

345
Topics

2159
Posts

J

I'm in the same boat right now. I had some issues connecting PS 2 some time ago
Virtualization

Discussions about virtualizing pfSense in hypervisors such as AWS, VMware, Hyper-V, Xen, KVM, qemu, etc

1568
Topics

9485
Posts

T

Based on : https://www.truenas.com/community/threads/qemu-guest-agent.91764/

I was installing Qemu-Agent on my TrueNas vm and decided to give it a run on my PfSense vm. Works A1 for me ;)

download package :
https://www.truenas.com/community/resources/qemu-guest-agent.167/

Enable ssh from PfSense Gui:
(System -> Advanced -> Admin Access - > Enable Secure Shell)

Upload using sftp to /root or whatever
Decompress archive

cp virtio_console.ko /boot/modules
Run : kldload virtio_console.ko
chmod +x qemu-ga
cp qemu-ga /usr/local/bin
chmod +x qemu-guest-agent
cp qemu-guest-agent /usr/local/etc/rc.d/qemu-guest-agent.sh

(remark qemu-guest-agent.sh needs .sh file extension to work)

vi /etc/rc.conf.local
qemu_guest_agent_enable="YES" qemu_guest_agent_flags="-d -v -l /var/log/qemu-ga.log" virtio_console_load="YES"
Install Schellcmd package and create the following commands
COMMAND: service qemu-guest-agent SHELLCMD TYPE: shellcmd COMMAND: cp /root/qemu-guest-agent /usr/local/etc/rc.d SHELLCMD TYPE: earlyshellcmd
Reboot PfSense
Hardware

Discussions about pfSense hardware support

Vendors

6672
Topics

58924
Posts

That is a link to 'Enable SR-IOV on KVM'. It seems completely unrelated.

I doubt they would ever put up an actual service manual.

Steve
Bounties

Discussions about collaboratively raising money for a feature. To start a thread you must offer a starting price and be very specific on the feature you would like to see.

Completed Bounties
Expired/Withdrawn Bounties

449
Topics

6145
Posts

@webdawg said in BETTER WAN GATEWAY MONITOR - JUST NEED HELP - FREE/DONATION:

I wish I could ban people from threads.

You want to ban the only dev who was willing to take up the conversation with you? Sigh.

I consider myself banned.
Retired

Categories that are no longer active, but are present for reference

2.4 Development Snapshots
2.3.3 Development Snapshots
2.3.2 Development Snapshots
2.3.1 Snapshots Testing and Feedback - ARCHIVED
2.3-RC Snapshot Feedback and Issues - ARCHIVED
2.2.5 Snapshot Feedback and Issues
2.2.3 Snapshots Problems and Feedback - ARCHIVED
2.2 Snapshot Feedback and Problems - RETIRED
2.1.1 Snapshot Feedback and Problems - RETIRED
2.1 Snapshot Feedback and Problems - RETIRED
2.0-RC Snapshot Feedback and Problems - RETIRED
1.2.3-PRERELEASE-TESTING snapshots - RETIRED
1.2.1-RC Snapshot Feedback and Problems-RETIRED

8644
Topics

54899
Posts

Set Debug in the DHCP6 Client Configuration on WAN as well, then check the logs (main system log, routing log, etc) to see what shows up.

Products

Services

Support

News

Resources

Company

Our Mission

We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

Subscribe to our Newsletter

Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

1 / 1