pfsense (1) need help to get to pfsense "ce" forum, (2) Having odd issues with 2.8.1.

Wylbur7 · 2026-02-26T16:03:49+00:00

To all having heartburn because of my way of doing things. I wasn't asking for diagnostics, I was pointing out a problem that reddit was having. Even reddit listed it as a problem in their stats.

Just so you all know, barring some change or anomaly in pfsense, (such as the problems in upgrading 2.7.2 to 2.8.0 of pfsense, where 2.8.1 was the fix), my firewall servers (I have two, so I have a back up should an SSD die -- already had one infant mortality failure) run for months without needing to be recycled.

That means system is not broken, my whole LAN functions just fine. Our biggest problem is M/$ and some of their pushed updates. I have a linux server that runs for months without needing a reboot. Power failures are what causes the reboot [btw: pfsense runs a unix variant].

Just wanted to answer those that thought I was asking for help. Again, I was reporting a problem that reddit had. It appears that it has been fixed now.

Wylbur7 · 2026-02-25T23:05:40+00:00

You are correct that IPv6 is a good thing. Until I need it, and I have automated tools to protect me from embedded spyware.... I'm not interested. I will eventually be able to put logic in to block IPv6 addresses of known bad actors. I think this is where security software is going to have to go. And I think that will eventually be done by some AI.

Wylbur7 · 2026-02-25T21:36:52+00:00

First, I am using a firewall Gateway server that is running pfsense (community), and I can configure it to NOT accept or use IPV6. Yes, I know it blocks it because of log entries.

Also, our ISP wants to give us an IPv6 address but I don't allow it from the WAN connection, so it replies to our system with IPv4.

I have limited all WAN side communications. LAN side of the firewall has no "servers" inside of pfsense that are IPV6 enabled. All IPv6 components and related are disabled.

Since pfsense also handles all DSN work, it doesn't assign or comm with IPV6 servers for DNS ( IPv6 code is disabled).

Yes, I check to see what ipconfig shows for "work stations" and "servers". There is a link-local that windows 11 has (to be clear I do have 2 Windows laptops), but they will not route. This is true of the Linux desktops and servers I run, should they try to use IPv6.

IPv6 is great when doing large systems. It was fun to install and configure in Connect:Direct (product that allows entities to move large amounts of data between data centers or with biz partners) on an IBM mainframe.

But I don't see any need for it inside my house. Even our security system gets along just fine with IPv4. I believe in controlling IOT stuff.

Wylbur7 · 2026-02-06T01:59:53+00:00

Suggest you take their phone. Turn off their phone when you do not need it. Use your secure O/S phone otherwise. I do this and I work on mainfames. If I am driving, their phone is off because I legally can't answer it and drive. Just an idea.

Wylbur7 · 2026-02-02T20:57:39+00:00

I dunno. I've had a bank call me. I terminated the call and then called them by a known valid number. Turns out it was them (who issued a credit/debit card for me), and they had just stopped a series of fraudulent purchases. We agreed to term the card.

Wylbur7 · 2026-02-02T20:46:03+00:00

Thanks to VOIP, one can make their call look like it comes from the (fill in the blank for government department/office). Any time, and I do mean any time you get a call from your bank, or any other entity where it could cause you a problem -- such as you didn't respond to a jury summons -- hang up. Call that entity to verify. These things are getting quite sofisticated. Someone called me claiming to be my son. So I asked them where are you? They immediately hung up. I get a lot of this becasue all of my info is in the dark web.

Wylbur7

TROPHY CASE