ENTERPRISE

Read Full Review HERE

Hey guys, I need some assistance from anyone who has configured a VPN on their PfSense firewall. To cut a long story short, I moved to a new ISP that deploys CGNAT. This makes port forwarding virtually impossible which affects my ability to broadcast Plex outside of my network. I have since signed up with PureVPN that offers a dedicated IP with Port forwarding. I have everything setup on PfSense and the VPN is connected, so that is all good. The issue I am having is that I want to configure firewall rules on PfSense to direct only my Plex server over the VPN WAN, but the rest of my networked devices over the standard WAN. I have followed various guides and I am 99% of the way there but with my current configuration, either all of my network ends up over the VPN, or none at all. Here is the current configs with respect to LAN Rules and Outbound Rules, I am fairly sure I have the rules in the correct order as well. LAN Rules As the above screenshot I have set a LAN rule for my device "Valak Server Apps" & "Valak Server" which is set to use the VPNWAN Gateway as these are the only devices on my LAN that should be using the VPN. The 3rd rule down as highlighted is the rule that is supposed to dictate that all other devices on my LAN subnet should go over standard WAN. The rules are put in the correct order on the list as the VPN rules for "Valak Server Apps" & "Valak Server" should take first precedence over the 3rd rule down as highlighted. Outbound Rules The outbound rules on the "VPNWAN" interface are duplicates of the "WAN" interface rules, other than the VPNWAN rules point to the VPN Gateway. These look to be set correctly and in the correct order, after checking a few different guides on the matter. .......................................................................................................................................... So far as I'm concerned the current configuration on LAN. My Plex server should go out over the VPNWAN, while anything else should go over the WAN and that is the order I have set the rules in. HOWEVER, note the rule I have highlighted on LAN screenshot. If I disable that rule, everything goes over the VPNWAN, if I enable it, everything goes over the WAN. I was expecting that rule to send all other traffic over WAN while Plex used the VPN WAN, but it is not behaving that way. Not sure what I am missing but hopefully someone can help. Thanks, E

This should now be resolved. Simple permissions issue, your usergroup was not part of the allowed users

This ^

Well done to everyone!

Ha , I still need to perfect my CO, Got close to working settings but life came up with some more important networking stuff. Will revisit this soon an then possibly ECLK.

Yes I see what you mean, they are not asking for you to subscribe or pay extra fees to get the firmware update, but they are sort of putting an artificial one in place by making the updates only available to a set tier of product. Granted monitor firmware updates are seldom...but they do exist. This is more of a principal thing over likelihood of needing a firmware update.

Doubt it, Nvidia would likely see that as giving users the ability to OC and hang onto their older GPU's for longer. I think Nvidia would prefer you bought their latest and greatest

Source Such a decision is anti-consumer. When you buy any product, regardless of it's tier, updates should be equally available. This is absurd behaviour frankly.

Glad to see this, it should have happened long ago, but better late than never.

Great to see all the participation!

Thanks for letting everyone know

Nice, thanks for sharing

I meant to say, if you wanted to, you can expand your network throughput using the additional M.2 slot with an M.2 to 10gbe, you might be able to pick on up that does 2.5gb For instance..... https://nl.aliexpress.com/item/1005006523024320.html?pdp_npi=4%40dis!GBP!103.09!77.31!!!126.34!94.75!%402102e91217078483640707162d13e5!12000037521116455!affd!!!&isdl=y&aff_fsk=_oBXVPn9&src=Connexity2023GBchannel&aff_platform=aff_feeds&aff_short_key=_oBXVPn9&dp=17079136469010256639012961105008005&cn=326576&cv=90dc9d53ad3a459934a2d8241df6ed58&gatewayAdapt=glo2nld Not saying you should get that one specifically, just more so letting you know that if increasing network throughput is something you wanted to look into, you can use your spare M.2 slot to achieve it

Nice build log, I love small systems fle multi purpose use. I completely get going SSD only for noise reduction. My setup has mechanical drives only due to the price per GB factor...that and its in my office and some HDD noise in there is fine. If it was in the living room or bedroom....it would be a problem. Still waiting for SSD storage price per GB to improve. Replacing my current storage pool with Solid State would be prohibitively expensive.

No problems.

To enter the competition, you have to fold for EHW. Check first post.

Welcome to EHW!

Yeah we are talking about Rig Creator I was commenting on the fact of putting all your laptops into one profile is IMO an odd way to do it as it looks jumbled lol.

Hello all, Apologies for the confusion but the above is now RETRACTED. It seems that IPS are not making the changes I thought they were. Unfortunately they poorly described the changes they were making. So there is NO need to alter anything with regards to your current recurring subscription. If you did make any changes, and need to revert these or would like to setup a recurring donation, please once again set that up from below. https://extremehw.net/store/category/2-ehw-donations-recurring-donation/ Sincere apologies for the back and fourth. Regards, E

I still don't understand that, multiple parts create the overall rig lol.

Our Rig Creator allows up to 15 rig profiles and you can show your top 3 in the signature , Such as what I have in my signature. Did you look at the how to videos ?

Double post..but I think I found the issue. It looks like a limitation of the current system that if you have 1 subscription, you cannot have any more. I am talking with IPS about this and will also see if there is another solution to allow members to have both a Premium subscription and another subscription type. Apologies to all for any inconvenience, once I have a solution I will let you know

Thanks for the reply. When you say it does not capture even a small part of your fleet, do you mean the amount of rigs profiles you can create ? I only ask as I am happy to have feedback on the feature

Hey, welcome to EHW Are you using Rig Creator to populate your rig ? Take a look at our site guide as there are pointers on how the Rig Builder works and how you choose which rigs show in your signature. Let me know of you are still struggling Cheers, E