Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Update questions

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    18 Posts 5 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      you shouldn't have to put anything in the dropdown.

      Why did you not get a response from 127.0.0.1?

      To be honest that should really be the only dns in pfsense setup unless your not running resolver or forwarder on pfsense.  And if that is the case that entry should be removed.

      dnslookup.png_thumb
      dnslookup.png

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • B
        BlazeStar
        last edited by

        @johnpoz:

        you shouldn't have to put anything in the dropdown.

        Why did you not get a response from 127.0.0.1?

        To be honest that should really be the only dns in pfsense setup unless your not running resolver or forwarder on pfsense.  And if that is the case that entry should be removed.

        It happened when I set up a proxy server with pfSense.

        I was getting terrible speeds and so on this forum it was recommended to me to add the DNS servers from my connection to the "Use alternate DNS-servers for the proxy-server" box in the config for SQUID.

        I did that and since then it works perfect!

        Can this be a problem in regards to the update?

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          Yeah that suggestion makes no sense..  So your dns you were using sucked?  Again if your not running resolver or forwarder than pointing to loopback 127 is pointless.  Are you running forwarder or resolver - then why did it not answer?

          on pfsense shell query updates.pfsense.org

          [2.2.2-RELEASE][root@pfSense.local.lan]/root: drill updates.pfsense.org
          ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 43659
          ;; flags: qr rd ra ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
          ;; QUESTION SECTION:
          ;; updates.pfsense.org. IN      A

          ;; ANSWER SECTION:
          updates.pfsense.org.    600    IN      A      208.123.73.82
          updates.pfsense.org.    120    IN      A      162.208.119.39

          ;; AUTHORITY SECTION:

          ;; ADDITIONAL SECTION:

          ;; Query time: 115 msec
          ;; SERVER: 127.0.0.1
          ;; WHEN: Thu May 21 06:17:03 2015
          ;; MSG SIZE  rcvd: 69
          [2.2.2-RELEASE][root@pfSense.local.lan]/root:

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • D
            doktornotor Banned
            last edited by

            With proxy junk, every cryptic issue makes "sense".

            1 Reply Last reply Reply Quote 0
            • B
              BlazeStar
              last edited by

              @doktornotor:

              With proxy junk, every cryptic issue makes "sense".

              So what… I should use a proxy?

              I need to do content filtering and such... how can I do that then?

              @johnpoz:

              Yeah that suggestion makes no sense..  So your dns you were using sucked?  Again if your not running resolver or forwarder than pointing to loopback 127 is pointless.  Are you running forwarder or resolver - then why did it not answer?

              on pfsense shell query updates.pfsense.org

              [2.2.2-RELEASE][root@pfSense.local.lan]/root: drill updates.pfsense.org
              ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 43659
              ;; flags: qr rd ra ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
              ;; QUESTION SECTION:
              ;; updates.pfsense.org. IN      A

              ;; ANSWER SECTION:
              updates.pfsense.org.    600    IN      A      208.123.73.82
              updates.pfsense.org.    120    IN      A      162.208.119.39

              ;; AUTHORITY SECTION:

              ;; ADDITIONAL SECTION:

              ;; Query time: 115 msec
              ;; SERVER: 127.0.0.1
              ;; WHEN: Thu May 21 06:17:03 2015
              ;; MSG SIZE  rcvd: 69
              [2.2.2-RELEASE][root@pfSense.local.lan]/root:

              [2.1.5-RELEASE][root@pfSense.BlazeStar.lan]/root(3): drill updates.pfsense.org
              drill: Command not found.
              
              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                You need to use content filtering for pfSense itself? Really? What for?

                Regarding drill, this is present on 2.2.x. On 2.1.x, kindly use dig.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  drill is part of unbound I thought, I don't recall having to install that on psfsense.  Oh your only on 2.1.5

                  So you don't have the resolver, so your only forwarding, or seems your not since you got not answer from 127.0.0.1 in your previous.

                  Use the host command then..

                  [2.2.2-RELEASE][root@pfSense.local.lan]/root: host updates.pfsense.org 127.0.0.1
                  Using domain server:
                  Name: 127.0.0.1
                  Address: 127.0.0.1#53
                  Aliases:

                  updates.pfsense.org has address 208.123.73.82
                  updates.pfsense.org has address 162.208.119.39
                  updates.pfsense.org has IPv6 address 2610:160:11:11::82
                  updates.pfsense.org has IPv6 address 2610:1c1:3::109

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • D
                    doktornotor Banned
                    last edited by

                    Setting the proxy clearly does not work properly on 2.1.x, as an example: https://redmine.pfsense.org/issues/3789

                    Exclude your pfSense from any shitty proxying and you won't have issues.

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      so your setting a proxy in pfsense - here?

                      proxypf.png
                      proxypf.png_thumb

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • B
                        BlazeStar
                        last edited by

                        Okay so sorry for being such a n00b maybe I didn't express myself correctly.

                        First of all, i performed a manual firmware upgrade by downloading the update file from pfsense.org
                        So that's that.
                        Now I'm up to date.

                        However, after the reboot, I've been getting these errors :

                        Crash report begins.  Anonymous machine information:
                        
                        amd64
                        8.3-RELEASE-p16
                        FreeBSD 8.3-RELEASE-p16 #0: Mon Aug 25 08:27:11 EDT 2014     root@pf2_1_1_amd64.pfsense.org:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.8
                        
                        Crash report details:
                        
                        PHP Errors:
                        [21-May-2015 16:53:32 Canada/Eastern] PHP Fatal error:  Class 'SQLite3' not found in /etc/inc/captiveportal.inc on line 1334
                        [21-May-2015 16:53:50 Canada/Eastern] PHP Fatal error:  Class 'SQLite3' not found in /etc/inc/captiveportal.inc on line 1334
                        [21-May-2015 16:54:12 Canada/Eastern] PHP Fatal error:  Class 'SQLite3' not found in /etc/inc/captiveportal.inc on line 1334
                        [21-May-2015 16:54:52 Canada/Eastern] PHP Fatal error:  Class 'SQLite3' not found in /etc/inc/captiveportal.inc on line 1334
                        
                        Filename: /var/crash/minfree
                        2048
                        

                        Good news is I don't use the captive portal (yet) this was just a test which I could never get to work.

                        I'd still like to repair that.

                        I'm also getting those "notices" :

                        05-21-15 16:56:29	[ There were error(s) loading the rules: pfctl: DIOCADDRULE: Operation not supported by device - The line in question reads [0]: ]
                        

                        Finally, I am still unable to see potential upgrades from the dashboard:

                        Version	
                        2.2.2-RELEASE (amd64) 
                        built on Mon Apr 13 20:10:22 CDT 2015 
                        FreeBSD 8.3-RELEASE-p16
                        
                        Unable to check for updates.
                        

                        Second topic, what I was referring to when talking about a proxy was not that I use an external proxy to access the internet from pfSense.
                        I installed the Squid3 packages to create a proxy on pfSense.
                        The goal is that I want to do content filtering on my LAN.
                        To block sites like Facebook, YouTube and so on.

                        Now @doktornotor when you refer to "shitty proxying" are you saying I should NOT use SQUID3 on pfSense?
                        Why?

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          So does pfsense now show if there is updates or not?

                          updatepf.png
                          updatepf.png_thumb

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • B
                            BlazeStar
                            last edited by

                            @johnpoz:

                            So does pfsense now show if there is updates or not?

                            Nope!

                            Check out my message above : "Unable to check for updates."

                            1 Reply Last reply Reply Quote 0
                            • D
                              doktornotor Banned
                              last edited by

                              @BlazeStar:

                              Now @doktornotor when you refer to "shitty proxying" are you saying I should NOT use SQUID3 on pfSense?
                              Why?

                              Look at the Cache/Proxy subforum and see for yourself.

                              1 Reply Last reply Reply Quote 0
                              • B
                                BlazeStar
                                last edited by

                                @doktornotor:

                                Look at the Cache/Proxy subforum and see for yourself.

                                So is there a less "shitty" way to do content filtering??

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.