<![CDATA[Issues after upgrading to 23.01]]>Upgraded my Netgate 3100 to 23.01. Everything seems okay, except we’re having trouble loading certain websites, Netgate.com does not load, and Speedtest.net has been sketchy, either won’t load or perform or full test. Have tried looking at DNS settings but can’t seem to resolve the issues? Weirdly, can get to Apple.com and BBC.com (although they are slow to load)?

Any pointers? Have tried adding relevant Patches in System Patches (and rebooting).

]]>https://forum.netgate.com/topic/179228/issues-after-upgrading-to-23-01RSS for NodeSun, 10 May 2026 20:51:42 GMTMon, 03 Apr 2023 13:09:25 GMT60<![CDATA[Reply to Issues after upgrading to 23.01 on Mon, 03 Apr 2023 20:31:25 GMT]]>@stephenw10
@SteveITS

It seemed a weird issue, I could navigate to the bbc.com, apple.com but netgate.com and this forum I could not resolve. I could ping those addresses.

I unticked the DNSSEC support, which gave me the above results.

So, just for laughs and giggles, I Factory Reset pFsense and manually inputted the barest setups and went and unticked the DNSSEC support button and ALL was GOOD. Could get everywhere.

Am assuming that since this has been an old setup that I have added and added (for over 10 years), that along the way there is something not quite right, an issue buried long ago that has now bitten me on the bum.

So, am going to take this opportunity to (almost) start again, I've been able to re-import restore areas, such as OpenVPN (although I need to add new user certificates ).

Oh well. Thanks all for your kind help!

Ian

]]>https://forum.netgate.com/post/1097842https://forum.netgate.com/post/1097842Mon, 03 Apr 2023 20:31:25 GMT<![CDATA[Reply to Issues after upgrading to 23.01 on Mon, 03 Apr 2023 17:37:27 GMT]]>I would expect to see 'site cannot be resolved' or similar if it's a DNS issue. Easy to test though, just try to ping one of the sites that's failing and see what the error is. If there is one.

]]>https://forum.netgate.com/post/1097815https://forum.netgate.com/post/1097815Mon, 03 Apr 2023 17:37:27 GMT<![CDATA[Reply to Issues after upgrading to 23.01 on Mon, 03 Apr 2023 17:01:05 GMT]]>@digitalvt I meant, forwarding from the DNS Resolver settings. DNSSEC is apparently problematic while forwarding, and while it seemingly worked fine in previous versions several people report failures in 23.01.

199.60.103.4 is the IP I get. Did you try a DNS lookup from your PC? nslookup will also show what DNS server that PC is using...

]]>https://forum.netgate.com/post/1097804https://forum.netgate.com/post/1097804Mon, 03 Apr 2023 17:01:05 GMT<![CDATA[Reply to Issues after upgrading to 23.01 on Mon, 03 Apr 2023 16:56:06 GMT]]>@steveits
Thanks Steve.
I don’t have DNS forwarder enabled. Have unticked Enable DNSSEC Support in DNS Resolver.

Performed a DNS Lookup (within pfsense) of Newgate.com and I get 199.60.103.4, of which I can ping. But I cannot ping netgate.com, it cannot be resolved?

]]>https://forum.netgate.com/post/1097802https://forum.netgate.com/post/1097802Mon, 03 Apr 2023 16:56:06 GMT<![CDATA[Reply to Issues after upgrading to 23.01 on Mon, 03 Apr 2023 16:01:11 GMT]]>@digitalvt Browser errors can be multiple things. For example I've seen reports of Comcast outages this morning.

Verify it's a DNS issue by running "nslookup netgate.com" (and other hostnames) on your PC.

Did you look at my suggested settings?

]]>https://forum.netgate.com/post/1097790https://forum.netgate.com/post/1097790Mon, 03 Apr 2023 16:01:11 GMT<![CDATA[Reply to Issues after upgrading to 23.01 on Mon, 03 Apr 2023 15:56:10 GMT]]>@stephenw10

I’ve just performed a Factory Reset and then Restored from the previous backup from this morning. And still get issues.

I’m getting “The site can’t be reached”, netgate.com took too long to respond.
Err_Timed_Out.

Same for forum.netgate.com.

But oddly, BBC.com and Apple.com are reached okay and load okay!?

]]>https://forum.netgate.com/post/1097788https://forum.netgate.com/post/1097788Mon, 03 Apr 2023 15:56:10 GMT<![CDATA[Reply to Issues after upgrading to 23.01 on Mon, 03 Apr 2023 14:29:33 GMT]]>But what's the actual error shown? It just isn't repsonding? It cannot be resolved?

Can you ping the same FQDN?

]]>https://forum.netgate.com/post/1097773https://forum.netgate.com/post/1097773Mon, 03 Apr 2023 14:29:33 GMT<![CDATA[Reply to Issues after upgrading to 23.01 on Mon, 03 Apr 2023 14:21:41 GMT]]>@stephenw10

For instance, forum.netgate.com, I’m getting This site can’t be reached

]]>https://forum.netgate.com/post/1097771https://forum.netgate.com/post/1097771Mon, 03 Apr 2023 14:21:41 GMT<![CDATA[Reply to Issues after upgrading to 23.01 on Mon, 03 Apr 2023 13:31:45 GMT]]>Mmm, how does it fail, what error is shown?

]]>https://forum.netgate.com/post/1097762https://forum.netgate.com/post/1097762Mon, 03 Apr 2023 13:31:45 GMT<![CDATA[Reply to Issues after upgrading to 23.01 on Mon, 03 Apr 2023 13:18:38 GMT]]>@digitalvt There are several threads about DNS issues. If you are forwarding, disable DNSSEC and if that doesn’t work disable DNS over TLS.

]]>https://forum.netgate.com/post/1097758https://forum.netgate.com/post/1097758Mon, 03 Apr 2023 13:18:38 GMT