Which domains for pfSense update only?

slu

Hi,

we have a pfSense behind another pfSense and like to allow only firmware and package updates for this system.

Which domains are required for this?

Thanks.

stephenw10

Should only need pfsense.org and netgate.com.

slu

@stephenw10 thanks, I will try this in an alias.

stephenw10

That's only going to work if you're filtering DNS domains. Those domains won't resolve to the all IP addresses required for upgrade directly.

Is this Plus or CE?

slu

That's only going to work if you're filtering DNS domains.

Mhm, alias don't work...
So I need to enable and disable the internet access rules for update manual.

Is this Plus or CE?

In this case it's a CE, our Plus have full internet connection.

stephenw10

Then, currently at least, you would need to reach:
ews.netgate.com
pkg.pfsense.org
pkg00-atx.netgate.com
pkg01-atx.netgate.com

For release versions that should cover it.

slu

Thanks @stephenw10 I give feedback a soon I can test it.