@georgeberz said in ISP oversold my bandwidth I need to shape VOIP:

@Mission-Ghost I live on an Island covered w trees I am surrounded by 80-100' trees no clear line of site. thank you though I have tried. :)

Frustrating. Maybe put up a tower? Given the difference in our lives between DSL and Starlink, I think it'd be TOTALLY worth it to put up a tower.

For added detail, I use PRIQ shaping. Works well.

@michmoor I have a pile of /32 routes I may try the xml file. Thnx.

@Gertjan No problem! I'll have another opportunity to look into this on Friday and will report back. For now, everything seems to be working fine since the reboot.

@mtarbox said in Email Reports WebGUI crashes February 2025:

https://github.com/pfsense/FreeBSD-ports/commit/c49098e2900a9211de44dc0b9937235ce9d638a2.diff

Ah, ok, the pfSense-pkg-mailreport package.

fe37f9ae-869e-4abe-ae82-918dfe2d5ac7-image.png

Package make less - or, AFAIK, not use of the patches system.
If a patch exists fro them, then package is rebuild and you are proposed to update it.

Yes, 1 Click. So we have a goog / perfect Solution. THX

@johnpoz "If this is a private IP then it’s a little harder. Can’t do a DHCP reservation? Perhaps a “domain” override for that hostname pointing to the remote DNS server?"

sadly not, there isn't a local DNS server on the other network. the network is in effect a black network with very limited and extremely controlled connectivity to other resources.

That did the trick. 🙂

Thank you again. Pleased to have it working.

@jimp Thanks for responding. StephenW10 sorted me out and Jan 31st backup restored today!

@marcosm understood. i was just adding unsolicited feedback :)

I think this is to allow access to single snapshots for the general internet rather than actually viewing the webcam directly. I had something like that setup at one time (a while ago!) and used a separate webserver with a script that periodically pulled a jpg.

@Gertjan said in OpenVPN Server dco:

so its really hidden ?

i checked this. only in my windows connect app:

433cb667-86dd-4934-aee9-06dfb0bed48f-image.png

@Gertjan Thanks. No high security requirements here either. But I have worked on PKI for much of my career, and I feel there should be a way to implement this cleanly with pfSense.

I have played with the third party pfSense API package. Wrote some code to export all the DHCP reservations to Smokeping. It's been read-only, so far. I have not figured out how to do something read-write. Being able to edit all the reservations in a spreadsheet, rather than through the GUI would be useful. Same for editing the host overrides for CNAMEs. A good script may be able to synchronize things, if additional metadata is included in the spreadsheet.

I have got a shit ton of IoT IP devices - over 300 of them. Most Wifi, some wired too. Went to a /22 for my LAN a couple weeks ago. It's on my to-do list to explore VLANs and block as many devices from Internet access as possible. About 250 of them can function with local API without Internet using Home Assistant. I don't believe any of them needs CNAMEs. They don't even need a hostname, but I still assigned hostnames to every single one in the DHCP server table. Can't remember all the names any more than I can the IP addresses, though. I'd love to be able to synchronize data between the pfSense DHCP table and Unifi controller device table. But Unifi has no official API. Only 3rd party, which I have not explored. Synchronizing with Home Assistant as well would be the holy grail. But I don't think their REST API is up to the job either.

@JC03 said in Pfsense abilitates automatically rules:

The real problem is ...

pfSense, when you installed it, does not have "pfBlockerng" installed.
It can be installed by the admin, and was installed ... by you ?!
When installed, it does ... nothing.
You had to activated IP lists and DNSBL lists.
One of them is "pfB_wind10updates auto rule".
Remember now ?
So, to get rid of this "rule", undo what you've done before ( ! ) and you'll be good.

@JC03 said in Pfsense abilitates automatically rules:

Sorry for the uncorrect utilize of english, but I'm from another country.

No problem ^^ I'm dutch, living in France.

edit : if you are not the admin, then ask the admin ?!
The rule must have been placed there for a reason.

@aGeekhere this question gets asked all the time - what your asking is problematic without a separate cache for the views or different clients, etc..

If client ask for something that would be blocked by filter dns, but they are set to ask non filtered dns - now that is cached. If client that should be filtered then asked they would get back what is in the cache.

Bind can run multiple caches - but not sure something you can configure from the gui.

You could prob get what your wanting out of running both unbound and dnsmasq (forwarder) with them listening on different ports, and then have your clients point to say 1.1.1.3 or whatever that gets redirected to the new port unbound or forwarder is listening on to resolve your local resources, and then just forwards on to 1.1.1.3

Simpler solution to be honest would just run say pihole or something that pointed your clients you want to filter to that.. Then setup a conditional forward on it to forward to pfsense to resolve your local domain.tld resources, and if not in that domain just forward to 1.1.1.3. Thats would I would do.

@stephenw10
Thanks... I have a few topics/questions to cover in a future post, so hopefully that will help with the rep score.

@Rafandium said in Acesso endereço link externo dentro da rede interna:

@mcury
Foi criado um registro A de redirecionamento no Servidor de Hospedagem.
Então estão acessando externamente via endereço que o servidor de hospedagem redireciona para o ip fixo secundário da empresa.

Se eu entendi corretamente, vocês então estão usando DNS para acessá-lo de fora da empresa.
Assumindo que seja isso, você pode criar uma entrada DNS no servidor DNS, se for o DNS do pfSense, vá em DNS Resolver (que é o default), e crie um host override e coloque o endereço DNS externo apontando para o servidor interno.
Dessa forma, as conexões para esse FQDN irão direto para o IP interno do servidor.

Caso esteja usando o DNS Forwarder ou qualquer outro servidor DNS ao invés do DNS resolver, o mesmo se aplica.

Só garanta que os clientes internos estejam usando esse servidor DNS e apenas ele.

Found the problem. I'd forgotten to enable the DHCP service on Office VLAN 61.

The below is the correct configuration for adding multiple VLAN tags to a discrete interface

Screenshot from 2025-03-12 10-22-04.png

Additional Information can be found on YouTube Link Here
Jim Pingle Configuring Netgate Appliances Integrated Switches on pfSense 2.4.4. July 2018 Hangout (thank you Jim and @patient0 )

Did you just upgrade?

Those errors are almost always because of mismatch between pfctl and the running kernel.

@fholzer
The OpenVPN IF is wide open; allows from any to any, any protocol.