Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Iphone looses conection to wi-fi pfesense 2.4.4-RELEASE-p3 (amd64)

    Scheduled Pinned Locked Moved Wireless
    30 Posts 5 Posters 3.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by johnpoz

      which could cause all kinds of problems with devices that try its local dns first for checking if internet, and then later check say hard coded 8.8.8.8 or some other public dns..

      your rule states hey if trying to go to local IP for dns - shove it out your gateway.. So how would it actually get to your lan IP?

      To be honest your rules as listed would break dns completely.. I don't see how anything would work for dns with those rules. You would have to be using explict proxy for internet to work.. or maybe you have floating rules that override those rules?

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      hugoeyngH 1 Reply Last reply Reply Quote 1
      • hugoeyngH
        hugoeyng @johnpoz
        last edited by

        @johnpoz I disabled the rules during some days and nothing changed.

        The rules:

        2e3b7289-47dc-4fc6-843e-ce8eccebe16e-image.png

        The first "pass" port 53 (DNS) only to pfSense DNS
        f84632cd-8f38-4121-919d-43cdadea039f-image.png

        The second "block" any external DNS
        c96601ed-c554-47d9-bd59-d33e4c8f1edb-image.png

        I copied that from the forum.

        I will try to change the Wireless "channel" to "11" instead of "13"

        12d84d10-2d9f-405d-9b3a-f8e26a8e0390-image.png

        I love pfSense!

        Hugo Eyng
        Datamais Sistemas

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          That can definitely be a problem. Some devices cannot 'see' 12 and 13 even if they should be set to allow that in your region.
          That usually just stops things connecting at all but I guess I could imagine some code doing something odd there.

          Steve

          JKnottJ 1 Reply Last reply Reply Quote 1
          • JKnottJ
            JKnott @stephenw10
            last edited by JKnott

            @stephenw10 said in Iphone looses conection to wi-fi pfesense 2.4.4-RELEASE-p3 (amd64):

            That can definitely be a problem. Some devices cannot 'see' 12 and 13 even if they should be set to allow that in your region.
            That usually just stops things connecting at all but I guess I could imagine some code doing something odd there.

            Set it even lower than that. Those double wide 40 MHz channels take up so much bandwidth they're way out of band on the upper channels. The channel numbers are normally for the lower of the 2 channels, with the other 5 higher. So, if you pick 11, the upper channel will try to be on 16, which doesn't exist. On the other hand, if you pick 1, then the 2nd channel will be on 6.

            Regardless, using 40 MHz channels on 2.4 GHz is a bad idea, if you have neighbours, as it takes up so much of the spectrum.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 1
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by johnpoz

              40 on 2.4 is not standard - and no you shouldn't have it enabled to be honest.

              It going to cause you nothing be grief.. .Turn it off..

              All you have is 2.4? You don't have 5 or AC even? Your iphone is AC - unless its really really freaking old..

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              JKnottJ 1 Reply Last reply Reply Quote 1
              • JKnottJ
                JKnott @johnpoz
                last edited by JKnott

                @johnpoz said in Iphone looses conection to wi-fi pfesense 2.4.4-RELEASE-p3 (amd64):

                40 on 2.4 is not standard - and no you shouldn't have it enabled to be honest.

                It's part of the spec but, as I mentioned, shouldn't be used if you have neighbours within range.

                Check the O'Reilly book 802.11n: A Survival Guide, pg 32 for details. The author of the book, Matthew Gast, is one of the IEEE 802.11 engineers.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                1 Reply Last reply Reply Quote 1
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by johnpoz

                  It is not a standard setting... everything you read every says on 2.4 to only use 20.. Apple clearly calls out to use 20.

                  https://support.apple.com/bg-bg/HT202068
                  Recommended settings for Wi-Fi routers and access points

                  These Wi-Fi router (or Wi-Fi base station) settings are for all Mac computers and iOS devices. They provide the best performance, security, and reliability when using Wi-Fi.

                  Use 20MHz channels in the 2.4GHz band. Using 40MHz channels in the 2.4GHz band can cause performance and reliability issues with your network, especially in the presence of other Wi-Fi networks and other 2.4GHz devices. A 40MHz channel might also cause interference and issues with other devices that use this band, such as Bluetooth devices, cordless phones, and neighboring Wi-Fi networks.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 1
                  • JKnottJ
                    JKnott
                    last edited by JKnott

                    @johnpoz said in Iphone looses conection to wi-fi pfesense 2.4.4-RELEASE-p3 (amd64):

                    se 20MHz channels in the 2.4GHz band. Using 40MHz channels in the 2.4GHz band can cause performance and reliability issues with your network, especially in the presence of other Wi-Fi networks and other 2.4GHz devices.

                    As I said, it's in the spec and I also said not to use it if you have neighbours, as it takes up 2 of the 3 "clear" channels. The other issues can occur with either 20 or 40 MHz channels. Perhaps you'd like to tell Matthew Gast he's wrong.

                    I'd also take the IEEE's word over Apple's, as they're the ones who write the specs.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    1 Reply Last reply Reply Quote 1
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by johnpoz

                      Not saying its not in the spec, I am saying it not standard to Fing use it without issues... JFC dude!!!

                      I don't need to tell anyone anything - you should freaking know that i has issue just read anything you google about 2.4 and 40 mhz - google it if you don't believe me!!

                      here 2 second google
                      https://www.smallnetbuilder.com/wireless/wireless-features/31743-bye-bye-40-mhz-mode-in-24-ghz-part-1

                      Using 40 on 2.4 might be fine if you Live out on a freaking farm, and nobody is around.. And your device clearly supports it - but I have to ask if you want more speed WTF you using 2.4 in the first place.. You should be on AC if what you want is speed, and if he has an iphone I have to believe it supports AC - unless its freaking ancient!

                      My point to bringing what apple says - is he clearly states in his subject that he has iphone, and that is what he is having issues with..

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      JKnottJ 1 Reply Last reply Reply Quote 1
                      • JKnottJ
                        JKnott @johnpoz
                        last edited by JKnott

                        @johnpoz said in Iphone looses conection to wi-fi pfesense 2.4.4-RELEASE-p3 (amd64):

                        Not saying its not in the spec, I am saying it not standard to Fing use it without issues... JFC dude!!!

                        Did you an any point see me recommend using 40 MHz channels? I merely pointed out that the OP shouldn't be using the upper channels, as it would place part of the signal well out of band and also he shouldn't even be using 40 MHz channels.

                        From my first post: "Regardless, using 40 MHz channels on 2.4 GHz is a bad idea, if you have neighbours, as it takes up so much of the spectrum."

                        If you read that book I referred to, you will find the IEEE 802.11 committee, which Matthew Gast is a member of, discussed this issue and decided to allow 40 MHz channels on 2.4 GHz, for those situations where interference was not an issue, hence my comments about neighbours. The book does not recommend using 40 MHz channels, only states that it's allowed.

                        BTW, re Googling, as a member of the 802.11 committee, Matthew Gast is a primary source. Google is not. Please read his 802.11 books. I have read all of them.

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        1 Reply Last reply Reply Quote 1
                        • hugoeyngH
                          hugoeyng
                          last edited by

                          Hello men!

                          Thank you all for the heated discussion. It was very fruitful for me.

                          I changed channel to "2" and 20MHz. I am using iPhone (6s) for hours without loosing connection.

                          The only thing I noticed is that the "max tx rate" in this situation can not be set above 130Mbps. At least in this AP.

                          dd9cc82d-faa5-4f04-acf6-6b08096210ab-image.png

                          I love pfSense!

                          Hugo Eyng
                          Datamais Sistemas

                          JKnottJ 1 Reply Last reply Reply Quote 0
                          • JKnottJ
                            JKnott @hugoeyng
                            last edited by

                            @hugoeyng

                            At the very least, turn off b and you probably don't need g. All the modes, other than b, use something called orthogonal frequency division multiplexing, while b, and nothing else, uses direct sequence spread spectrum. Because these are incompatible, whenever b is detected, all other devices have to transmit a frame in b, reserving time for the transmission in g or n, and then transmit the desired frame. This causes a significant performance hit. On the other hand, if an n device hears a g device, it only has to transmit the header at the lower speed and then send the rest of the frame at full speed. This results in a much smaller performance hit. So, it's best to only allow the modes you need and these days there's not much that doesn't support n. With my TP-Link access point, I couldn't disable b, without also killing g. However, since everything I have supports n, that's not an issue, so my AP is configured for n only. BTW, that performance hit affects every device within range on the channel, including your neighbours.

                            PfSense running on Qotom mini PC
                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                            UniFi AC-Lite access point

                            I haven't lost my mind. It's around here...somewhere...

                            hugoeyngH 1 Reply Last reply Reply Quote 1
                            • hugoeyngH
                              hugoeyng @JKnott
                              last edited by

                              @JKnott Thank you for the answer. As I said earlier, I changed the channel to "2" as you suggested (lower). The problem seems to be solved.

                              Now (today) I changed "bgn" to "n only". I will pay attention if there will be a better performance.

                              I love pfSense!

                              Hugo Eyng
                              Datamais Sistemas

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.