Categories

• TNSR

  Discussions about TNSR

  • TNSR Announcements
  • TNSR Feedback
  • Problems Installing or Upgrading TNSR Software
  380 Topics

  1k Posts

  M

  Following up on this.. EVPN at the control plane with a anycast gateway would help here....
• pfSense® Software

  Discussions about pfSense Software, click a category below

  • Messages from the pfSense Team
  • General pfSense Questions
  • Netgate Nexus
  • Problems Installing or Upgrading pfSense Software
  • Firewalling
  • NAT
  • HA/CARP/VIPs
  • L2/Switching/VLANs
  • Routing and Multi WAN
  • Traffic Shaping
  • DHCP and DNS
  • IPv6
  • IPsec
  • OpenVPN
  • Captive Portal
  • webGUI
  • Wireless
  • SNMP
  • Documentation
  • Development
  • Gaming
  • Virtualization
  • Hardware
  • Bounties
  • Retired
  122k Topics

  784k Posts

  T

  Modems don't issue IP addresses. It looks like it's just traffic 'bouncing around' the ISP's environment, outside OP's firewall. @larryjb When you screencap the firewall log and obfuscate your external IP, it'd be helpful for troubleshooting purposes to leave the destination port visible. This is at the bottom of the firewall log: [image: 1786649810354-7b34f973-ee45-4d76-a0bd-018a8dfa9c07-image.png] You might consider unchecking all those boxes like I've done to disable unnecessary WAN block logging like this. It will degrade the lifespan of your storage device and gum up your firewall log, as you're seeing here.
• pfSense Packages

  Discussions about pfSense software packages

  • Cache/Proxy
  • IDS/IPS
  • Traffic Monitoring
  • pfBlockerNG
  • UPS Tools
  • ACME
  • FRR
  • Tailscale
  • WireGuard
  21k Topics

  130k Posts

  D

  FYI, I've updated the pfSense package in the first post with an updated status page. It's still based on chronyc, but is better organized and more efficient. It also offers control over data refreshing. Source is viewable here for those interested. One handed Javascript coding is so much fun!
• pfSense International Support

  Discuss pfSense in other languages

  • Chinese
  • Deutsch
  • Español
  • Français
  • Indonesian
  • Italiano
  • Russian
  • Nederlands
  • Norwegian
  • Portuguese
  • Polish
  • Romanian
  • Swedish
  • Turkish
  43k Topics

  268k Posts

  J

  @slu said in HaGeZi DNS Listen (alt. Link): @JeGr danke ich bin überzeugt. Das bedeutet das DNS Setup wäre: Client -> pfSense -> Pi-hole -> Provider DNS anstatt: Client -> pfSense -> Provider DNS Nein, tatsächlich ist das Setup - wie es in meiner Welt auch am meisten Sinn macht: <Clients_aus_diversen_VLANs> --> <PiHole(s)> --> <pfSense> --> Upstream Grund sehr simpel: PiHole und AdGuard nutzen DNSmasq daher schnell und RAM freundlich. Aber DNSmasq braucht nen Forwarder. Der ist pfSense mit Unbound, der wiederum im Resolver Mode DNS via Root DNS Server macht und damit weniger anfällig gegen DNS Probleme an einem SPOF ist (1.1.1.1 down - egal) DNSSEC sauber machen/beantworten kann (bei Forwarding ist die Information oft wertlos, weil dem Forwarder vertraut werden muss) Du dann auf Unbound nach wie vor deine internen Überschreibungen und Hosts definieren kannst ohne das alles im Pihole zu managen Du damit die Sense selbst und ggf. ein zwei spezifische Geräte vom DNS Blocking ausnehmen kannst (bspw. pfSense, Hypervisor und NAS sprechen direkt weil wenig DNS notwendig aber wichtig dass es zu Updates läuft - alles andere spricht via internem DNS Pi). Und wenn man irgendwann total abfährt, kann man sich statt dem Unbound auch ein DoHoT Konstrukt dazwischen werfen und das dann nutzen
• Official Netgate® Hardware

  Information about hardware available from Netgate
  3k Topics

  21k Posts

  S

  Hmm, that's odd. I wouldn't expect anything to be running with it disabled. Perhaps something had failed to stop? Had it been rebooted?
• Netgate Announcements

  Information about hardware available from Netgate
  44 Topics

  211 Posts

  A

  It looks like unified web management could be coming soon. It would be great if it means easier control and management of all web services in one place. Let's see if any companies announce more details about it!
• Off-Topic & Non-Support Discussion

  Feel free to talk about anything and everything here

  • Forum Feedback
  • Community Job Board
  4k Topics

  19k Posts

  S

  You should just set the identifier to something specific but valid. So I'd use FQDN, it doesn't change with actual IP address used. It only needs to match at each end.