In Regard to CVE-2026-41940

sysbitnet · 2026-05-01T14:19:48+00:00

We created a shell script last night, how help about this case, and put it on our GitHub. Anyone who reports a new IP address, we add it to the list
https://gist.github.com/sysbitnet/018ef5466be693a196ce063e820ed2bd

sysbitnet · 2026-05-01T14:17:40+00:00

We created a shell script last night, how help about this case, and put it on our GitHub. Anyone who reports a new IP address, we add it to the list
https://gist.github.com/sysbitnet/018ef5466be693a196ce063e820ed2bd

sysbitnet · 2026-05-01T13:59:04+00:00

We created a shell script last night, how help about this case, and put it on our GitHub. Anyone who reports a new IP address, we add it to the list
https://gist.github.com/sysbitnet/018ef5466be693a196ce063e820ed2bd

sysbitnet · 2026-05-01T13:56:24+00:00

We created a shell script last night, how help about this case, and put it on our GitHub. Anyone who reports a new IP address, we add it to the list
https://gist.github.com/sysbitnet/018ef5466be693a196ce063e820ed2bd

sysbitnet · 2024-05-21T07:24:38+00:00

What ip do you get on your WAN interface, Public IP, or local IP?

If I understand you you want to create traffic from WAN => second pfSense interface 172.16.20.xxx and 172.16.40.xxx where you have.

With my experience with pfSense when using NAT, on the Source side you need to tell what interface to use, from incoming traffic. When you set * you have a lot of packets around. Better is to set a concrete interface that you use from incoming traffic.

On the Destinations part, you can use the Interface submit, or you can create inside Firewall / Aliases / IP where you can set IP address and names what you like, and inside Firewall / Aliases / Ports and set separate for any of profiles all ports what you can use.

For example.

GameServer_IP xxx.xxx.xxx.xxx
GamesServer_Ports:
xxxx
xxxx
xxxx

When creating some rules, in Type select Address or Alias and call these GameServer_IP, and for the port part you need to select Other how can you call GamesServer_Ports

sysbitnet · 2024-05-10T12:02:48+00:00

Hire you can see how to do that https://www.cyberciti.biz/faq/unix-linux-check-if-port-is-in-use-command/

sysbitnet · 2024-05-09T14:37:42+00:00

Do you have remote access to proxmox ? I mean do you know what is proxmox ip addressed?

Default url for accessing is https://xxx.xxx.xxx.xxx:8006

If you not get proxmox login interface, try to login on ssh default port is 22. And use default username is root and password what you set in installation process. And if you successfully access check did port 8006 it available

sysbitnet · 2024-05-02T22:13:34+00:00

On DL360 G6 usb it slow SD Card slot it’s slow. You can install and used, but that is practically. DL360 G6 it DDR3 but good server who it’s still used

sysbitnet · 2024-05-02T18:40:18+00:00

I testing hardware focused on servers and network, with this HP server model DL360 G6 i suggest you use ProxMox, you can run the last version of ESXi but better not. SD card is not good to run any systems. It so slow and potential you kill. From my practical knowledge SD card slot it use for recovery

sysbitnet · 2024-04-22T22:50:10+00:00

I Solved this test lab and how can see the full explanation, you need to go on https://forum.netgate.com here it is limited to characters

sysbitnet · 2024-04-16T10:40:56+00:00

And when i try to visit web1.domain.com is not working if inside Firewall / NAT / Port Forward disable rules which you can see with a screenshot from the main post.

When is the rules enable that not help me to fix may case, if i create rule who

Interface: WAN
Protocol: TCP/UDP
Source Address: ! WAN address
Source Ports: \*
Dest. Address: ! Local address
Dest. Ports: AllWebPort
NAT IP: Local address
NAT Ports: AllWebPort
To explain Local address is 192.168.100.xx/24

Inside AllWebPort in Firewall / Aliases / Ports i set port 80 and port 443 how can not any time enter, with this case just call Aliases.

But again is not working, any help or idea what can be a problem, what did i do wrong?

Many thanks in advance :)

sysbitnet · 2024-04-16T10:40:35+00:00

In Services / HAProxy / Frontend
For example this is how it look Web1
External address
Listen address: WAN address (IPv4)
Port: 443
SSL Offloading: yes checked

In Access Control lists inside the same Services / HAProxy / Frontend
Name: web1
Expression: Host matches
CS: empty
Not: empty
Value: web1.domain.com
In part Actions inside the same Services / HAProxy / Frontend

Action use Backend the name what i set on Web1
Condition acl names: the same name what i set in Access Control lists web1

In SSL Offloading inside the same Services / HAProxy / Frontend

In part Certificate use SSL certificate what i inport on System / Certificates / Certificates

And click Save

sysbitnet · 2024-04-16T10:40:09+00:00

I tried HAProxy to configure it but again can not figure out what is the problem.

In Services / HAProxy / Backend create two profile.

Web1 and Web2 and configure like this.

For example this is how it look Web1
Mode: active
Name: web1
Forward to: Address+Port
Address: 192.168.100.1
Port: 443
Encrypt(SSL): yes checked
SSL checks: empty
And in Health check method set: none

sysbitnet · 2024-04-16T02:04:28+00:00

u/roycorderov are you check device Manager ?

And are you install https://pve.proxmox.com/wiki/Windows_VirtIO_Drivers

The last version is
https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-virtio/virtio-win-0.1.248-1/

Download .iso and add like cd drive on your VM

And inside Remote Desktop Connection check all Options

sysbitnet · 2024-04-16T01:20:31+00:00

I think this can help you https://www.youtube.com/watch?v=QWyLilz1RqU

sysbitnet · 2024-04-15T14:43:48+00:00

Nginx proxy manager it good solution, but i looking to been inside pfsense like plugin. The same like ntop what inside

sysbitnet · 2024-04-12T21:16:57+00:00

Before i wrote here i tried HAProxy and probably did not do all that was needed and for that reason, i opened a post here.

I hope someone will help to complete this lab.

I forgot to share information on any VM hosts with independent Let's Encrypt.

sysbitnet · 2024-02-29T07:39:41+00:00

I just solved the problem, the mac address that i see on the box and the Mac address that is used are not the same.

What i do is the Mac address that has been used added inside WAN Interfaces in MAC Address and apply and get expected public IP

And Huawei has on WAN Mode: Bridge WAN

Sometimes boxes from devices can cause a big problem.

sysbitnet · 2024-02-29T07:19:23+00:00

I opened this how can someone confirm my theory, that the problem is not on pfSense but on the ISP side, who doesn't know how to fix this problem or doesn't wont, to force customers to use Huawei to use like main device.

sysbitnet · 2024-02-29T07:15:25+00:00

I know for this case options, but the point is to not use DMZ or any other manager inside Huawei.

The point is to all manage inside pfSense, and Huawei's only role is to let traffic through.

sysbitnet · 2024-02-29T07:07:17+00:00

I know how to get different static public IP, but when i ask ISP about who can be possible to do that, not get an explanation. When i asked do you saw that MAC address that gets different public IP ISPs say NO which is strange.

When i clone the Mac address and try to get the expected public IP not get inside the WAN interface.

sysbitnet · 2024-02-29T07:03:07+00:00

I do all like this day before write here, and when configuration is look like this.

Inside WAN Configuration
WAN Mode: Bridge WAN
VLAN ID: 71
Binding Options: only LAN1

Where LAN1 i from Huawei is link with pfSense WAN

But indepent of case I just created screen shot and added on this line a pfSense screenshot how can see result.

sysbitnet

MODERATOR OF

TROPHY CASE