DNS and ISP provider
-
@The-Party-of-Hell-No said in DNS and ISP provider:
There are ways to make multiple openvpn interfaces
What the reason? Like a back up server in case main is felt down? But in this case you need all time to make new route to this gateway again?
-
@Antibiotic yeah you can create failover, vpn is just another wan interface as far as pfsense is concerned. So yeah if you loose connectivity to a specific pop you could use another one you have setup.
https://docs.netgate.com/pfsense/en/latest/multiwan/load-balance-and-failover.html
-
@The-Party-of-Hell-No said in DNS and ISP provider:
Another thing if you want to use both mullvad DNS servers - in case one goes down - just add it as another DNS server
They are use anycast, only one is ok. If he is going down the next one close to your location will use!
-
@johnpoz So, I have 3 Nic's and two of them use VPN interface and one use WAN interface. This setting will correct?
or How to setup only failover for VPN only inetfaces?
adjust WAN to never? But in this case will WAN interface even use for non VPN nic? -
@Antibiotic of the top of my head no that wouldn't be right.. If your going to policy route out some vpn connection(s) those would be your gateway group you setup.. Your normal wan would not be in that group.
-
@johnpoz Misunderstanding, WAN should not appear in group or should set to never?In case set up failover for OpenVPN and second question this spare VPN gateway will route auto, because me set NAT gateway and LAN gateway to first VPN gateway?
-
@Antibiotic
The Wan can be used, however the purpose of the VPN Gateways is to see all traffic is routed out the vpn tunnels. So if this is your intent the WAN_DHCP should be never. Adjust the two VPN's to Tier 1 and Tier 2.When the Gateway Group is created, return to the LAN rules page, go to the bottom to the default allow to any rule. Using the edit button open it up, scroll down and click on the advanced options and scroll down to Gateway, it probably says WAN_DHCP click on the down arrow and select the Gateways Group you created and save. This routes the LAN out the Gateways Group rather than the WAN.
-
@Antibiotic said in DNS and ISP provider:
to be in Europe
Can you be more precise ?
In Europe, there are places where 'entities' intercept DNS. I think about schools, prisons, and some hotel owners using pfSense
All the other can not exist, as no one would chose them as an ISP.
And a VPN ISP is yet another ISP like supplier. -
@Gertjan In Europe. it mean me like a simple user at home whom censuring simple city ISP according simple stupid goverment
-
If your ISP is intercepting / doing things with your DNS traffic, then you have a good reason to use a VPN, or DNS Forward over TLS.
But, because it's Europe, I wouldn't be a client of this ISP in the first place.
-
@Gertjan MullvadVPN fine for privacy, I do not like VPN whom belong to KAPE alienses, like ExpressVPN for example
-
@Antibiotic
Ignorant American - what is "KAPE alienses?" -
@The-Party-of-Hell-No
Formerly know as Crossriderthe notorious creator of some pernicious data-huffing ad-ware, Crossrider. The UK-based company was cofounded by an ex-Israeli surveillance agent and a billionaire previously convicted of insider trading who was later named in the Panama Papers. It produced software which previously allowed third-party developers to hijack users' browsers via malware injection, redirect traffic to advertisers and slurp up private data.
You can check : https://www.kape.com/
What vpn belong to thisNow, they are promote yourself as Privacy Is Our Priority)))) Funny
Ex company which developed malware now doing VPN services))) -
@Antibiotic thank you for the information. Better than Google and private.
Wow, very interesting, multiple vpn providers besides expressvpn. Hokey web site.
-
@The-Party-of-Hell-No
Yep))) The world is crazy
