Our core mission is driving the future of distributed cloud computing. The infrastructure of the internet is siloed and byzantine. We can do better.

GRAVITL

pfsense appears to be swatting incoming packets like flies

For netclient: outgoing TCP 443 and all udp.  incoming allow all established connections (udp and TCP)

i think i'm just having an emotional time with that rule because we had a major intrusion a few days ago

fresh WAN facing pfsense is my fort knox moment

Maybe better to turn off UDP hole punching in that machine and use a static port?

only thing listening on that port will be wireguard anyway

is there a way to disable hole punching per node, or is the setting for the entire network?

just click on node, edit, and turn the switch

for anyone searching for netmaker and pfsense issues, i suspect port randomization (default?) in pfsense is causing issues