HN user

patjensen

30 karma

Distinguished Architect & Inventor @zoom, CCIE #53452

Posts0
Comments14
View on HN
No posts found.

This is easily solved in your source NAT configuration on pfSense. It's a single checkbox to not randomize ports on outbound flows. This will enable full cone NAT.

You can scope it to just your IPsec service, or whatever it is your hosting, or you can enable full cone for the whole subnet.

It is not DNAT, nor is it port forwarding. If you host a SIP proxy, SBC or peer to peer gaming, it will enable these use cases as well.

https://docs.netgate.com/pfsense/en/latest/nat/outbound.html

The bigger news is that this also fixes the QEMU compatibility bug that makes OpenBSD hang out of the box on arm64 when starting X.

It started in 7.3 with the frame buffer changes and the only workaround was to disable the kernel driver.

Maybe more people will get to try out OpenBSD successfully now.

Clockwork Pi experience with the CM4 is not good. 10 months to ship. Horrible Wifi performance, can't hold a link, and it only has around 50 minutes of battery life. I regret my purchase and it's sitting in my rack next to a bunch of old ham radios.

In the legal vertical, WordPerfect had a good strange hold with NetWare on the back end. It's interesting to see that the synergy of the Corel acquisition didn't really work out for Novell.

I caught that timeline discrepancy as well. I was surprised to see Active Directory mentioned so early in the NetWare timeline, NDS had quite a bit of time to gain the high ground in market share.