FreeNAS (or hardware?) calling home

[charvey]

I got a used dell poweredge off kijiji and after upgrading all the firmware I put the box on an isolated VLAN behind a firewall that blocks all traffic. After installing FreeNAS and disabling automatic updates I see the following firewall logs:


Nov 4 20:23:20 ISOLATED 192.168.7.12:28358 45.32.219.241:443 TCP:S
Nov 4 20:23:20 ISOLATED 192.168.7.12:37012 64.71.187.3:80 TCP:S
Nov 4 20:23:20 ISOLATED 192.168.7.12:46315 184.105.131.183:80 TCP:S
Nov 4 20:22:28 ISOLATED 192.168.7.12:57402 45.32.219.241:443 TCP:S
Nov 4 20:22:28 ISOLATED 192.168.7.12:43178 64.71.187.3:80 TCP:S
Nov 4 20:22:28 ISOLATED 192.168.7.12:27713 65.49.51.221:80 TCP:S
Nov 4 06:02:27 ISOLATED 192.168.7.12:30874 104.20.0.85:443 TCP:S
Nov 4 06:02:27 ISOLATED 192.168.7.12:21810 104.20.1.85:443 TCP:S
Nov 4 05:51:01 ISOLATED 192.168.7.12:38493 64.71.187.3:80 TCP:S
Nov 4 05:51:00 ISOLATED 192.168.7.12:29125 46.21.151.38:80 TCP:S
Nov 4 02:00:01 ISOLATED 192.168.7.12:25754 216.105.38.17:443 TCP:S
Nov 3 23:14:32 ISOLATED 192.168.7.12:17560 45.32.219.241:443 TCP:S

192.168.7.12 is the poweredge
45.32.219.241 sentry.ixsystems.com
64.71.187.3 is update-master.freenas.org
184.105.131.183 http://www.bsdnow.tv/
65.49.51.221 http://www.bsdnow.tv/
104.20.0.85 www.ietf.org.cdn.cloudflare.net

Looks like a bunch of FreeNAS traffic, so no real worries. Is there some way I can turn it all off? I want this box to never communicate outside of the LAN.

I guess I could create an iptables rule, but that's a bit harsh and I don't want to break anything.

thanks.

 

[m0nkey_]

Under System > Advanced uncheck "Enable automatic upload of kernel crash dumps and daily telemetry".

http://doc.freenas.org/11/system.html#advanced

 

[DrKK]

@Allan Jude , check out that guys IP host resolves above. He's got two to bsdnow.tv. I assume this is normal and is somehow related to ScaleEngine's CDN?

 

[systemofapwne]

Can someone elaborate, why this option is not available on 11.2-U6 anymore? Did it just move to another location, has been completely removed or is it now a "core feature" (so to say), which can't be disabled? I also notice (similar to this), that the webinterface wants to contact sentry.ixsystems.com regularily (but somehow fails a lot, keeping the UI hanging). I would appretiate a way to disable this "feature".