Using pfSense with a L3 core switch

[Christos]

I switched today from DNS forwarding to DNS resolver.

DNS resolver seems faster and more reliable. I've been using unbound in this mode for the past 3-4 months and don't plan to change it.

 

[coxhaus]

Yes, but there was a bug so I switched to DNS Forwarding which was patched in version 24.03. So now I switched back.

Unbound - CVE-2023-50387 and CVE-2023-50868

Was just reading about CVE-2023-50387 which seems to affect all DNS resolvers that support DNSSec. It seems NLnetlabs has released an Unbound patch today. ht...

forum.netgate.com

 

[ddaenen1]

I haven't made the upgrade yet. Waiting for a suitable slot at home.

 

[coxhaus]

Yes, my wife went on a trip with her best friend so I had plenty of time to test but it turns out I did not need it. I was up and running in under 10 minutes. It was probably faster but I forgot I had to log in again as it kept telling me it was not ready so I waited.
I tried my monitor but it would not sync as it has been turned off too long. It takes a reboot to sync the monitor and of course you cannot reboot during an upgrade. Next time I will have the monitor working before I upgrade. Just so I can watch the progress.