Harder reset sg4680: I want to know consequences of dd if=/dev/zero of=/dev/ufsi
-
Hello,
What are the consequences on an sg4680, of
zeroing the ufs volume?
Your support contact is more $ than current price of box.
Is there a VPN connection for the update-from-console option? For extra $?
Can you bootp from the update box for a fee?
Sincerely,
JC Magras -
No you cannot bootp anything from pfSense servers. They could perhaps send you more tinfoil gratis.
-
Just get a USB drive, put pfSense on it, and install it.
-
Oh I see neither of you are paranoid….. so why are you here?
Doktormotor I assume IS the moderator or defacto hand puppet......Sincerely,
JC Madras
PS I see things on the horizon that I am fairly certain will bite both of Your folks badly -
-
I am a Soho user et tu?
You can ship me CD in Lago vista Texas 78645
Sincerely,
Jean-Claude Magras (ham:kf5zmi) -
https://www.pfsense.org/download/
-
@johnkeates:
https://www.pfsense.org/download/
Noooooooo, you need to send it over ham radio. Tora! Tora! Tora!
-
You can use dd to zero out the disk, but don't use the ufsid to do that as that only covers on slice not the entire disk. Use the actual disk name, such as /dev/da0 for the eMMC or /dev/ada0 for an mSATA disk. The probing may change if you boot from a USB memstick, it may shift the eMMC to da1. Check the output of dmesg to see which disk is which.
The hashes for the downloads are available to confirm you have the correct files and that they are legitimate. The hashes from the download page are on a web server not on the download mirrors, so they aren't stored together. Remember, the hashes are taken on the compressed archives, so don't decompress before checking. If you honestly believe both the download mirror page and the web server are compromised, you have no reason to trust updates from the same source, so VPN or not, it doesn't make sense to have an install or update service as you describe.
-
I know exactly what kind of HAM radio he needs.
-
What are the consequences on an sg4680, of zeroing the ufs volume?
Zeros or nothing else, you might be able to reinstall the pfSense OS if you want, should be or must do so!
Please be sure that you are taking the ADI image for an official pfSense SG-xx unit likes shown below,
(pfSense-CE-memstick-ADI-2.3.4-RELEASE-amd64.img.gz)Your support contact is more $ than current price of box.
Get the device ID an register that SG-4860 unit at netgate and you will get Gold membership and/or two email
support calls for free if I am informed correctly! How to find the Netgate device ID (NDI)Is there a VPN connection for the update-from-console option? For extra $?
There are many secure ways to get it, but mostly some vendors are submitting that over an encrypted tunnel
using an internal TMP module for that or doing it in software over SSH. pfSense is serving downloads over a
download server shown under https://www.pfsense.org/download/, please use for your SG-4860 the
following image (pfSense-CE-memstick-ADI-2.3.4-RELEASE-amd64.img.gz). You will need an
USB stick or pen drive to boot from and install then.Can you bootp from the update box for a fee?
A nice try, but no way at this time.
-
No, there is no VPN connection. You'd still get the same untrusted stuff over VPN or not, as noted. Sell the device on eBay and get yourself more tinfoil for upcoming winter.
-
@BlueKobold:
Is there a VPN connection for the update-from-console option? For extra $?
There are many secure ways to get it, but mostly some vendors are submitting that over an encrypted tunnel
using an internal TMP module for that or doing it in software. …Who are these vendors you speak of? Shoestring budget osdisc.com (its owner's sidejob), random & late linux format?
Sincerely,
JC Magras
