In case any #networking #nerds are interested, I have set up a #git #repository that hosts an automatically updated mirror of the list of #IP addresses that have been deemed a security threat by my network's #fail2ban configuration.

Why did I go through all this trouble setting up such a thing? ¯\_(ツ)_/¯

But here it is. Go ahead and create an alias in #pfSense and set up a block rule.

https://git.jordanwages.com/wagesj45/wagenet-ip-ban-list

Is anyone planing to attend #eurobsdcon who is managing 1k+ BSD Based firewalls (#opnsense / #pfsense / #GeNUGate) in production? Esp. if you are working at an MSP and/or have migrated away from stuff like #forticrap I'd love to have a chat with you.

New #Noctua fans installed in the #pfSense router, finally. They were too tall so I couldn't screw them in place, and I had to cram the lid shut, but they seem to work (time will tell if the lid is pressing on the actual spinning fan I guess ), and they're so silent I thought the thing didn't start when I powered it back on.

My ISP is probably sending the Men in Black after seeing today's stats

Rebuilding the media library = 1.39TB downloaded in ~35 hours. My pfSense dashboard looks like I'm running a small datacenter (which... technically... )

RIP bandwidth cap myths, at least for now...

Why I use OPNsense over pfSense, and why I don't trust Netgate at all • Adam Conway

｢ From domain disputes, licensing changes, security issues, and more, there's a lot that simply doesn't sit right with me. That's not to say that OPNsense is perfect, but the company's negatively perceived actions have not been anywhere near as controversial ｣

https://www.xda-developers.com/why-use-opnsense-over-pfsense-dont-trust-netgate/

Needed to downgrade my #Pfsense #Squid #Proxy from 2.8.0 to 2.7.2 because 2.8.0 is setting #Gateways to #Offline for unknown reason. This one has 3 gateways, 1 on WAN, 2 on LAN Interface. Only this VM has Gateway Problems. So no Hardware or Server Stuff.

Bug must be in 2.8.0, because 2.7.2 works without problems and all other VMs on this #proxmox node too.

I spent some time researching exporting JSON logs from various applications on my #pfSense router. I came across a lot of "just use syslog-ng" in forums. I decided to put together notes with the details on how to do that in case you don't want to think about it yourself:

https://divisionbyzero.net/pfsense-json-logs/

Is there a known #ospf #ipv6 #gif #tunnel problem in #pfsense 2.8.0?

Sin the update from 2.7.2 i have have the problem that my tunnel endpoint on the remote side, where the /48 is, get the packages for the /64 reachable through the tunnel on the WAN side (ha setup for IPv4, IPV2, each ahs a IP, pfs1 send, package is returned to pfs2), but packages are not sent into the tunnel. Only every 10th or 20th ping. Worked till the update since a longer time.

@mkj reasonable commercial support, plenty of community support and great videos make it easy to learn, support and install for others. A few tools exist to assist in #pfSense to #OPNsense move.

I specially like the frequent, transparent updates and 100% open source development for maximum transparency.

@qlp @Natanox @wyatt yeah, heard of those from folks who did very old #pfSense-based #DIY Routers back when it still supported #ix86 machines and old used thinkpads were still cheap af.

Anyone got a download link for the current pfsense 2.8.0 iso handy?

The official site shows me a shop when I want to download. Huh.

#pfSense 2.8.0 kills #squid setups with #error ld-elf.so: undefined symbol _ZTVNSt3__117bad_function_callE

not good. need to go back to 2.7.2 snapshot

Apparently Netgate fumbled coordinated disclosure about a pfSense vuln
https://blog.brillantit.com/exploiting-pfsense-xss-command-injection-cloud-hijack/
#pfsense

Wie bringt man die Mitmenschen nur dazu, den Mailverkehr zu verschlüsseln? Stöhn...

Fresh out of the Oven.

I was searching for the best replacement of my Lenovo X1 Carbon 8th Gen's Wirreless Card (...not found yet - anyone?), and found this instead, which may be my 2morrows read:

A #beginners Guide To #Firewalling with #pf #pfsense

https://srobb.net/pf.html

Maybe also interesting site for @vermaden s BSD-News? §8-)

Hi I'm 90s Script Kiddie, I grew up online. I do #devops and #automation code stuff for my job. My hobbies are #gamedev, #vintageelectronics, #gaming, #repair ing stuff to keep it out of the landfill, old #apple hardware, #linux admin (I run my own mail, web, media etc servers) #network admin especially #pfsense, I love #books, #anime, #manga - reading in general really. #music too! Jazz, alt-rock, pop, folk, chiptunes... I also enjoy #cooking and am trying to get better at it. Beliefs-wise I'm something of an anarchist, yearning for a #solarpunk future I'll probably never live in, but I do what I can to do #mutualaid for the people in my circle. If you're my friend, I will set up all your electronics for you, replace the battery in your phone, give you some free mail or web hosting... whatever! I try to limit my consumption of news media for my own sanity, but I love reading about what people are doing in their own words. That's why I love the Fediverse, and it's why I'm lurking around on #gopher

I don't have a lot of friends. I've always been kind of a loner, and a little awkward. Luckily, I love my own company and have no problem spending time alone. Those few in my circle are people who I think make the world better by being in it.

I'm a #queer #bi #enby and I don't really give a hoot about what pronouns you use for me. Actually, I sort of feel like however you labeled me I'd want to break out of that box somehow. I guess I'm pretty contrary.

New #introduction who dis.

Ich hab uebrigens meine beiden #pfSense CE Firewall im Datacenter auf pfSense+ geupgraded.

Neben dem #Proxmox Mail Gateway ist das das zweite Open Source Produkt, was ich mit einer Subscription supporte.

Mir waere es eigentlich fast lieber, in einen Topf/Fund einzuzahlen und da dann zu sagen, was ich gerne unterstuetzt haben sehen wollen wuerde und der Fund verteilt die Gelder dann halt anteilig weiter.
Aber vielleicht ist das ja auch das Business Modell von OpenCollective... wer weiss...