Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Upgrade 2.5.2 to 2.6.0, upgrade success, Limiters not passing

    Scheduled Pinned Locked Moved General pfSense Questions
    129 Posts 32 Posters 38.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      There are no known bugs for any of those things but I agree the Limiters are the most likely thing there.

      Steve

      B 1 Reply Last reply Reply Quote 0
      • N
        neothesdony @blikie
        last edited by

        This post is deleted!
        1 Reply Last reply Reply Quote 0
        • N
          neothesdony @blikie
          last edited by

          @blikie yes agree..
          it happened to me too

          1 Reply Last reply Reply Quote 0
          • B
            blikie @stephenw10
            last edited by

            @stephenw10 i have done some testing..
            A fresh install pfsense 2.6 everything works with limiters on floating rules.
            But when u have more than 1 LAN interface active, limiters block internet access.
            Captive portal may or may not play a role in that as well.

            T S 2 Replies Last reply Reply Quote 1
            • T
              tohil @blikie
              last edited by

              Same here in my environment. Updated from 2.5.2 to 22.1
              I have two networks with limiters on rules for these interfaces.

              all traffic which should pass these rules are not working until I remove the In / Out pipe limiters.

              A 1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                How exactly do you have the Limiters configured?

                1 Reply Last reply Reply Quote 0
                • P
                  pooperman
                  last edited by pooperman

                  I have the same error after upgrade to 2.6.0
                  All interfaces is UP and green, but no Internet connection at all!
                  This may be fixed at System/Routing/Gateways -> Save -> Apply, but for only next reboot.
                  This is looks a really bug.

                  stephenw10S 1 Reply Last reply Reply Quote 0
                  • T
                    tohil
                    last edited by

                    I'm using queues (which seems to work) to shape my traffic from internal traffic. Limitiers are used for guest access.
                    I have two zones for guests and a limiters for in and out bandwith per zone.

                    Limiters using settings for bandwidth limit, tail drop and fifo.

                    these limiters are used on packet filter rules allowing internet access.

                    regards

                    stephenw10S 1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator @pooperman
                      last edited by

                      @pooperman If you have multiple gateways make sure the default is set as WAN there.
                      If it's set as automatic and you have internal gateways that can become the default route which is obviously invalid.
                      Most people should not have internal gateways there. You would only have that if you have an internal router with other subnets behind it.

                      Steve

                      P 1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator @tohil
                        last edited by

                        @tohil Can we see that limiter config from the config file?

                        T 1 Reply Last reply Reply Quote 0
                        • P
                          pooperman @stephenw10
                          last edited by

                          @stephenw10
                          I have one WAN gateway from my provider, but its not default, its uses for only vpn connection. And second gateway is a VPN one, which is marked as default.
                          It works on 2.5.2, its works on 2.6.0, but only after reapply gateway settings by hand. But for reboot it has no internet at all.

                          stephenw10S 1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator @pooperman
                            last edited by

                            @pooperman Hmm, interesting. What is the default route after a reboot before you reapply the gateway? Does the VPN come up correctly?

                            Steve

                            P 1 Reply Last reply Reply Quote 0
                            • P
                              pooperman @stephenw10
                              last edited by

                              @stephenw10
                              How I can see default route?
                              VPN come up correctly after reboot. Its receive ip address and marks green on dashboard.
                              Another thing I noticed is that after rebooting the default gateway has no globe icon. After reapply gateways settings by hand it appears.
                              Also its possible to restart VPN connection instead of reapply gateways settings. After that internet is also has up.

                              bingo600B 1 Reply Last reply Reply Quote 0
                              • bingo600B
                                bingo600 @pooperman
                                last edited by

                                @pooperman

                                Diagnostic --> Routes

                                7caa9cfe-4854-49c3-8cd4-5447730edc96-image.png

                                If you find my answer useful - Please give the post a šŸ‘ - "thumbs up"

                                pfSense+ 23.05.1 (ZFS)

                                QOTOM-Q355G4 Quad Lan.
                                CPUĀ  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
                                LANĀ  : 4 x Intel 211, DiskĀ  : 240G SAMSUNG MZ7L3240HCHQ SSD

                                P 1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  It sounds like it might be trying to apply the default route before gateway is valid for some reason.

                                  Have you editing the OpenVPN gateway at all? To set a different monitoring IP for example.

                                  Steve

                                  1 Reply Last reply Reply Quote 0
                                  • P
                                    pooperman @bingo600
                                    last edited by

                                    @bingo600
                                    Interesting. It is no default route at all after reboot.

                                    @stephenw10
                                    No. I did not edit OpenVPN gateway.

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Try editing and saving the OpenVPN gateway without making any changes. It will create the gateway entry in the config which will mean it's present before it connects. Though the route will still be invalid.

                                      Steve

                                      P 1 Reply Last reply Reply Quote 0
                                      • P
                                        pooperman @stephenw10
                                        last edited by

                                        @stephenw10
                                        No. There is no effect. Still have not internet connection after reboot.

                                        stephenw10S 1 Reply Last reply Reply Quote 0
                                        • T
                                          TorqueWrench @SteveITS
                                          last edited by

                                          @steveits said in upgrade 2.5.2 to 2.6.0, upgrade success, no internet conection:

                                          That should just remove the rule on WAN to block inbound traffic from bogons.

                                          That's also not something I would want anyone else to do. Especially if you were behind a CGNAT...

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator @pooperman
                                            last edited by

                                            @pooperman Then I would check the boot and routing log for errors.

                                            You might also check the OpenVPN log since that can often try to set a new default route when it connects.

                                            Steve

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.