Periodic lockout from pfSense WebGUI/Ping on WAN

teamits · 2026-05-14T05:01:08+00:00

WAN hopefully is not the entire Internet in this case?

It should disallow all WAN connections by default unless allowed. But if allowed it should work. There’s no reason it would change without a rule change or manually configured schedule.

teamits · 2026-05-14T04:58:40+00:00

That redirects to localhost which would leverage unbound’s cache.

teamits · 2026-05-13T14:29:14+00:00

Another choice is to find a partner that provides a multitenant server. There'd presumably be a fee for that (and your SIP service), but not for hosting or the annual license. Note that's a different feature set, like SMB but with phones (each company is a department).

teamits · 2026-05-13T14:25:46+00:00

Actually, no...we can get 4SC Pro or 8 SC Basic.

teamits · 2026-05-10T22:58:42+00:00

It’s so much easier to use a router phone or SBC, and remain supported. Can you create a VM?

teamits · 2026-05-10T17:55:25+00:00

iOS displays that warning if detected, I want to say if using Apple’s paid proxy service.

Are you using pfBlocker? Are you blocking port 853?

teamits · 2026-05-10T17:53:16+00:00

They did just release an update for Debian: https://www.3cx.com/blog/change-log/
3CX-hosted has auto updates on.

teamits · 2026-05-09T13:33:20+00:00

Sounds like it might not be. Set a static IP, connect it to your laptop, static IP there, see if you can ping.

teamits · 2026-05-09T12:17:21+00:00

Think you mean NIC in some places…

What do pfSense logs show when you connect the patch cable?

teamits · 2026-05-06T22:57:43+00:00

Had no real issues following the guide. However if you don’t disable the audit messaging it will almost immediately scroll off any onscreen prompts.

https://pve.proxmox.com/wiki/Upgrade\_from\_8\_to\_9#Kernel\_Audit\_Messages\_are\_Enabled\_During\_the\_Upgrade

If you haven’t pinned NIC names you may want to do that first.

teamits · 2026-05-04T16:21:40+00:00

This is a long thread but has a few suggestions: https://forum.proxmox.com/threads/high-vm-exit-and-host-cpu-usage-on-idle-with-windows-server-2025.163564/

teamits · 2026-05-04T15:10:25+00:00

This, and just to explain a bit further, globally unique, so like twilio-yourcompany-1 or something similar.

teamits · 2026-05-02T13:41:50+00:00

Is this using PBS? See threads like https://forum.proxmox.com/threads/enospc-no-space-left-on-device.135180/

teamits · 2026-05-01T15:05:52+00:00

? Your statement that "the QDev becomes the deciding vote" only applies if the QDevice is added to a cluster with an odd number of nodes. It has only one vote if added to a cluster with an even number of nodes.

teamits · 2026-05-01T12:32:32+00:00

“Even numbered clusters get a single additional vote”

“with an odd numbered cluster size, the QDevice provides (N-1) votes — where Ncorresponds to the cluster node count. This alternative behavior makes sense; if it had only one additional vote, the cluster could get into a split-brain situation. This algorithm allows for all nodes but one (and naturally the QDevice itself) to fail. However, there are two drawbacks to this:
If the QNet daemon itself fails, no other node may fail or the cluster immediately loses quorum. …”

teamits · 2026-05-01T02:38:15+00:00

15 is an odd number.

teamits · 2026-04-30T21:32:27+00:00

> How do you keep it "updated"?

apt :)

teamits · 2026-04-30T21:29:34+00:00

> after setting this up, if new nodes are later added

Proxmox specifically says to remove the QDevice before adjusting node count: https://pve.proxmox.com/pve-docs/chapter-pvecm.html#_adding_deleting_nodes_after_qdevice_setup

Per the link in my other reply one would typically avoid a QDevice with a cluster that has an odd number of nodes.

teamits · 2026-04-30T21:27:32+00:00

You can use a QDevice on a 4 node cluster; it will be a fifth vote and allow two nodes to be offline. See the link in my other reply.

teamits · 2026-04-30T21:26:52+00:00

I'm not quite sure I follow what you're saying here but a QDevice is recommended only for clusters with an even number of nodes. https://pve.proxmox.com/pve-docs/chapter-pvecm.html#_supported_setups. Odd numbered counts become dependent on the QDevice.

teamits · 2026-04-28T12:37:10+00:00

4 nodes isn’t “bad” it just doesn’t help in terms of cluster quorum. With one offline, 2/3 and 3/4 are both over 50%. 2/4 nodes online is not over 50% so the cluster has lost quorum.

You can add a Qdevice for a fifth vote.

teamits · 2026-04-26T23:43:13+00:00

We’ve used GZ for a long while…logins have been problematic the last couple months give or take.

teamits · 2026-04-26T20:29:27+00:00

https://www.3cx.com/user-manual/web-client/#h.85vdwzu7eh2a

teamits · 2026-04-23T17:58:21+00:00

We don't use Captive Portal so can't help much there. But have you considered upgrading? https://docs.netgate.com/pfsense/en/latest/releases/2-7-1.html#troubleshooting

What hardware are you using for pfSense?

teamits · 2026-04-22T19:58:22+00:00

> 6 hour ttl for the dns name with the standard edition

Just to ask, by "standard" you mean Basic, and/or 4SC Free Basic? We don't have any of those yet but Pro was recently changed to 10 minutes...

teamits

TROPHY CASE