TELEMETRY?

LilMonkey305

Firewall just caught pfsense calling this ip 192.207.126.6 (ns1.pfmechanics.com) which belongs to netgate. Can someone from the team elaborate on this? Even with this ip being actively blocked packages are accesible, meaning it has nothing to do with routine pfsense activity.

KOM

@lilmonkey305 That's one of several Netgate DNS servers. They've been around for years.

johnpoz

Which firewall caught this? an upstream from pfsense? Pfsense rules would not block its own traffic.. So I am curious what caught it, and what port - 53 dns?

I show that IP as one of the IPs for ns1.netgate.com as well..

DaddyGo

@johnpoz said in TELEMETRY?:

Which firewall caught this?

.....(?)

johnpoz

Yeah could be some client behind pfsense trying to go there? If he had some dns server behind pfsense? But pfsense doing a dns query would not block its own traffic no matter what rule you put in.. Its very difficult to shoot yourself in the foot here.

I have to assume the only traffic to that IP should be dns..

DaddyGo

@johnpoz said in TELEMETRY?:

I have to assume the only traffic to that IP should be dns..

my bet is this ...

so all is well with you John?
(I was here (pfs forum) a long time ago, and COVID is raging)

johnpoz

Yeah all good here - you?

Wife had covid - but no real symptoms, lost taste and smell for a while. I never tested positive - which seems impossible since its a small house. Sleeping in the same bed, etc.. I think bourbon is the cure they are looking for ;) heheh And I had 2 different tests days apart, etc.

We did loose her mother, they listed covid as the cause.. But she wasn't doing all that good before she got it. But that was prob the breaking point. She made it couple days paste her 92nd bday.. But overall my social circle and family has gotten off easy.

Family is all vaccinated now.. And things here in the Chicago area are starting to get back to normal, somewhat. I am one of the lucky ones no issues with job, working from home is just now a perm thing for me, etc. I do miss the office social interaction though..

But I am ready for the world to get back to normal.. Hope all is good with you and yours..

DaddyGo

@johnpoz said in TELEMETRY?:

Wife had covid - but no real symptoms,

Me too ...(same shitty place)
(the COVID stuff is not the selective)
I'm not saying it's bad, because that's our task - terminate this!

COVID took me a little bit in a different direction, my day to day stuff and my interests (like pfSense)

I am "pushing" these now:

https://www.virtualmin.com/
https://www.webmin.com/

do you have any comments on these?
(we've had web servers for a million years, but this now looks good as a management panel)

Always stay safe, you know the "small talk" says :).

+++edit:

that keeps me alive these:

https://www.youtube.com/watch?v=ndUMzZEiOZo
https://www.youtube.com/playlist?list=PLXprWO_G3HRptmUOIMHu6MIoINsL-MBps

AKEGEC

I also noticed some of my clients experienced the same from AS30312 Netgate and AS27325 zColo.

About Covid, it'll not end until mid or end 2023. My condolence for your lost.