Kitz ADSL Broadband Information
adsl spacer  
Support this site
Home Broadband ISPs Tech Routers Wiki Forum
 
     
   Compare ISP   Rate your ISP
   Glossary   Glossary
 
Please login or register.

Login with username, password and session length
Advanced search  

News:

Pages: 1 [2] 3 4

Author Topic: pfSense 2.5.0 RC now available  (Read 6107 times)

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5260
    • Thinkbroadband Quality Monitors
Re: pfSense 2.5.0 RC now available
« Reply #15 on: February 19, 2021, 09:04:58 PM »

NTP is fine here.

sudo ntpdate router.lan
19 Feb 18:29:57 ntpdate[5804]: adjust time server 192.168.1.254 offset +0.000004 sec

OpenVPN clients (specifically to AirVPN UK) seem less stable than before though, but I have gateway action off for those as didn't want the firewall bouncing if the VPN is having issues.  I thinks its some quirk with the AirVPN client configuration rather than a pfSense problem.
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5260
    • Thinkbroadband Quality Monitors
Re: pfSense 2.5.0 RC now available
« Reply #16 on: February 22, 2021, 07:56:06 PM »

I've been able to move my IoT WiFi over to pfSense directly as FreeBSD 12 supports 802.11n on the integrated WiFi card.  This was actually one of the improvements I was expecting from the new release so glad to see it works.

It still seems much slower than the nanoHD (but different channel so could be crosstalk related) but fine for IoT devices.

It means once I move to WiFi 6 I will be able to properly test how that functions on 2.4Ghz by ONLY having WiFi 6 clients on it.
« Last Edit: February 22, 2021, 10:57:30 PM by Alex Atkin UK »
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

Chrysalis

  • Content Team
  • Addicted Kitizen
  • *
  • Posts: 7382
  • VM Gig1 - AAISP L2TP
Re: pfSense 2.5.0 RC now available
« Reply #17 on: February 25, 2021, 02:42:45 PM »

If anyone has unbound instability on 2.5, a fast tracked update has been pushed in, can be updated with the following command.

'pkg upgrade -fy unbound; pfSsh.php playback svc restart unbound'
Logged

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5260
    • Thinkbroadband Quality Monitors
Re: pfSense 2.5.0 RC now available
« Reply #18 on: February 25, 2021, 03:19:07 PM »

Well I seem to have solved the Plusnet monitoring issue when I changed the default gateway to one where all gateways are tier 1.

For some reason when I had it set to the gateway group that has both DSL as tier 1 and LTE as tier 2, that wasn't working correctly.  It blocked anything specifically directed out of the Plusnet WAN from the pfSense box, plus never fell back to LTE even when both modems were switched off.  Discovered that yesterday when my drop wire was being replaced.

Its really bizarre as it makes no sense that setting it to the gateway group where everything is tier 1 would make a difference, especially as monitoring WAS working for LTE which is what you'd think "might" break when it was set to tier 2.  I wonder if just changing the default gateway has somehow fixed a configuration glitch.

Can't say I've noticed any problems with Unbound though.
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

Chrysalis

  • Content Team
  • Addicted Kitizen
  • *
  • Posts: 7382
  • VM Gig1 - AAISP L2TP
Re: pfSense 2.5.0 RC now available
« Reply #19 on: February 25, 2021, 04:28:30 PM »

Unbound has so far been ok for me as well, but since is a lot of noise about it on netgate, I thought I would post it just in case.
Logged

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5260
    • Thinkbroadband Quality Monitors
Re: pfSense 2.5.0 RC now available
« Reply #20 on: February 25, 2021, 08:27:38 PM »

Yeah its good to know, I'd expect a minor update to bring that patch into the main branch shortly.
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5260
    • Thinkbroadband Quality Monitors
Re: pfSense 2.5.0 RC now available
« Reply #21 on: March 11, 2021, 07:46:05 PM »

I have started to have problems which might be Unbound related as I think its DNS lookups failing on the LAN.

Strange thing is, Unbound is always running when I check the router.  Installed the update to see if it fixes it.
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

displaced

  • Reg Member
  • ***
  • Posts: 270
Re: pfSense 2.5.0 RC now available
« Reply #22 on: March 12, 2021, 12:39:15 AM »

Did this upgrade last night.

I’ve disabled unbound and use bind9 instead.  After the upgrade and reboot, bind had stopped and its config option was missing from the Services menu.

Package Manager still showed bind as being installed, but I clicked ‘reinstall’ and everything came back. No loss of configuration, luckily.
Logged
YouFibre 1Gbit, OPNsense on Intel N100.  Ubiquiti UAPs.

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5260
    • Thinkbroadband Quality Monitors
Re: pfSense 2.5.0 RC now available
« Reply #23 on: March 12, 2021, 01:25:45 AM »

You don't use pfBlockerNG?  That's a big reason people use pfSense rather than say OPNsense.
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

Chrysalis

  • Content Team
  • Addicted Kitizen
  • *
  • Posts: 7382
  • VM Gig1 - AAISP L2TP
Re: pfSense 2.5.0 RC now available
« Reply #24 on: March 17, 2021, 05:11:12 PM »

This doesnt make good reading for Netgate.

https://arstechnica.com/gadgets/2021/03/in-kernel-wireguard-is-on-its-way-to-freebsd-and-the-pfsense-router/

Not sure I would want to be using the wireguard implementation in 2.5.

Also seems 2.5.1 is on the horizon.

--

Looking into it all, I think I will be following Martin on to opnsense for home router, I already am using it on other devices anyway so the migration shouldnt be a big thing hopefully.
« Last Edit: March 17, 2021, 05:32:18 PM by Chrysalis »
Logged

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5260
    • Thinkbroadband Quality Monitors
Re: pfSense 2.5.0 RC now available
« Reply #25 on: March 17, 2021, 07:20:48 PM »

That's a depressing read, especially if you carry on down the comments.
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

underzone

  • Reg Member
  • ***
  • Posts: 442
Re: pfSense 2.5.0 RC now available
« Reply #26 on: March 17, 2021, 07:49:49 PM »

Netgate really are proving themselves SO wrong in their decision to go closed source in the future.

If it was closed source now, then Jason Donenfeld couldn't have looked and seen that the wireguard code was crap and fixed it for them.

I am also mulling OPNsense like you guys.

Logged

Chrysalis

  • Content Team
  • Addicted Kitizen
  • *
  • Posts: 7382
  • VM Gig1 - AAISP L2TP
Re: pfSense 2.5.0 RC now available
« Reply #27 on: March 17, 2021, 08:19:36 PM »

Also trying to talk sense into pfsense leaders on open unbound issue, they want to roll back to an old version instead of simply disabling dhcp registration by default.

I will update the forum on how my migration to opnsense goes.  I do remember Martin telling me you can still load ASN lists etc, into opnsense using its built in functions.
Logged

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5260
    • Thinkbroadband Quality Monitors
Re: pfSense 2.5.0 RC now available
« Reply #28 on: March 17, 2021, 10:53:23 PM »

To me, dynamic DHCP registration is just a bad idea to begin with.  What does it do if the hint from the client is the same name as an existing host?  The whole idea opens up any client on the LAN to being able to mess with the entire LAN infrastructure which just seems bad.

I understand how that is acceptable for home use, but then anyone using pfSense should be thinking outside the box to begin with and so having static DHCP entries to deal with the problem should be a none-issue.
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

Chrysalis

  • Content Team
  • Addicted Kitizen
  • *
  • Posts: 7382
  • VM Gig1 - AAISP L2TP
Re: pfSense 2.5.0 RC now available
« Reply #29 on: March 18, 2021, 09:14:48 AM »

Agreed, even before this issue I had it turned off, and its usually one of the first things I advise people to do, as the option has always been problematic and makes little sense.
Logged
Pages: 1 [2] 3 4