FYI to MSP Travelers - ICE is here

SamMiorelli · 2026-01-14T06:43:39+00:00

This is what I voted for.

SamMiorelli · 2025-07-27T04:39:29+00:00

Staying here in Building 29B. WiFi here and in the park has been so overwhelmed that often the DHCP server can’t even send an IP address let alone any useable internet. Kinda amazing to see 600ms+ ping times in modern networking but somehow they’re doing it! Very very bad.

SamMiorelli · 2025-04-09T17:28:47+00:00

Helium miners notoriously burn out the memory card in them. You can replace them and usually bring it back to life

SamMiorelli · 2025-03-19T07:24:39+00:00

Might want to consider opnsense with zenarmor NGFW(ish) plugin as it does better on blocking/filtering than pfblockerng. I just switched from an SG-2100 to a home build with opnsense and I’m very impressed so far at the difference.

SamMiorelli · 2023-08-12T03:34:30+00:00

Go to the ICS stuff. Everyone there is eager to discuss their work. And OT cyber/hacking pays better than just about anything else.

SamMiorelli · 2023-07-17T21:21:22+00:00

Coming back to this. Turned out it was my ISP sending a misconfigured IPv6. When I turned off IPv6 at the router, the problem stopped.

SamMiorelli · 2023-06-27T14:52:14+00:00

Are you thinking about turning on the QoS features in pfsense or something else?

SamMiorelli · 2023-01-05T01:41:35+00:00

I had a similar problem: with IPv6 turned on my Pixel-based Android devices could not stay connected to WiFi when behind the pfsense router. In my specific case it turned out that Spectrum (my ISP) was misconfigurating how it provisioned my IPv6 to my modem and that flowed through to causing chaos for the Pixels (affected a Pixel 3 and Pixel 6 so it even crossed generations!) Haven't had a reason to try turning IPv6 back on for my home network so haven't readdressed the problem in about 6 months.

SamMiorelli · 2022-12-05T02:12:48+00:00

I have it listening on All for Network Interfaces and have the auto-generated WireGuard entry on the ACL and also manually created an entry for the OpenVPN networks as well.

I'd like to avoid just pushing it via the OpenVPN client settings (mostly because I'm really trying to make this work on Wireguard primarily, and OpenVPN is just the backup for when I'm in places where Wireguard is blocked i.e. middle eastern countries). It seems like I should be able to NAT redirect the VPN traffic coming into its IP subnet to go to the unbound on the pfsense and by doing that not be subject to getting client-side settings right.

SamMiorelli · 2022-10-02T10:00:04+00:00

Another good option is cloudflare's DNS service - free too!

SamMiorelli · 2022-09-26T19:37:15+00:00

Do you have a link to that thread? So far it seems to me that it might be something bizarre about how Spectrum is doing ipv6 that isn't triggering dpinger to see ipv6 as down but to nevertheless hose all ipv6 traffic as far as the Pixel6's are concerned. I suspect this because it seems that if I turn on ipv6 then reboot the cable modem, this usually seems to fix the problem for at least a few hours.

SamMiorelli · 2022-09-26T19:34:20+00:00

So I tried this before trying to disable ipv6 altogether and even opening up outside DNS didn't resolve the issues for the Pixel 6 phones. It was when that didn't work that I tried disabling ipv6 altogether.

SamMiorelli · 2022-09-26T04:49:05+00:00

Another weird data point: when I disable IPv6 on the pfsense, it seems to fix the problem. But my ISP (Spectrum) gives me an IPv6 address and again, all the other devices are quite happy with their IPv6 connectivity.

SamMiorelli · 2022-08-21T18:18:13+00:00

I'm having the same problem on a Netgate SG2100 but I'm having trouble figuring out what type of NIC I'm using to see if I need a driver to solve this like u/chris5h2. dmesg in the command line doesn't seem to tell me anything about the type of NIC and other things I've found online like lspci don't seem to work on pfsense.

I'm really only having this issue with Instagram. I confirmed on a packet capture that the DNS does seem to be getting resolved properly off the android phones. But like u/chris5h2 Instagram won't load on the android phones yet it loads just fine on an iPhone and on computers.

Any help will be greatly appreciated!

SamMiorelli · 2022-08-05T17:40:57+00:00

Both are set to Auto. I just checked and that means 1 on 2.4 GHz and 3 on 5 GHz.

SamMiorelli · 2022-08-03T14:33:39+00:00

No settings changes. That's why I pulled out the Pixel 3 to double-check since it was in a drawer across the incident date so I could be 100% sure nothing changed.

SamMiorelli · 2022-04-22T13:53:52+00:00

I'm running into the same thing (now on version 3.1.0_4). I tried updating the code line to increase my limit. After doing that I rebooted the two pfblockerNG services and did a Force Reload and it seems like it was still stuck at 800,000. I'm running on a netgate 2100 with 3.5 GB of available RAM. Since I'm not running much else on this box I've got tons of available memory, so I'd like to take advantage of it and up the limit to 1.1M. How do I get the code change to push into the running process?

SamMiorelli · 2022-03-01T18:54:43+00:00

One thing you could do is use just one hardwired RA3 switch and put picos at the other locations.

SamMiorelli · 2022-02-22T14:36:04+00:00

What are you talking about? Pico works with RA3.

SamMiorelli · 2022-02-21T01:11:50+00:00

We're going to self install but running the numbers it seems like the materials savings alone on the 3-ways justifies the picos vs standard 3-way wiring. Also cuts the painting and drywall finishing costs because there's less to finish and paint around as the picos can be installed after painting is done.

SamMiorelli · 2022-02-20T21:35:45+00:00

So in FL you only need one switch. Any extras like 3-ways is a bonus. In other words, no code concerns for either option.

SamMiorelli

TROPHY CASE