I don't believe it is something anyone has put much thought into. In some places our hands are tied depending on what certain utilities support, but it may be possible to have a format option in general. If someone were to code it up and submit it as a pull request it would likely be approved if it is coded well.
@jimp:
Any command run via Diag > Command does a switch to rw first and then back to ro before returning.
Thanks, that solves the mystery of why Diagnostics->Command Prompt could be a lot slower than ssh shell running the same command.
What I still don't understand is why switches from rw to ro can be fast (~5s) for a number of hours after booting and then get slow (52s) and stay slow until the next boot.
Thanks. I'm going to remove it. I understand all that. I am just a bit confused as to why the password isn't just left blank. At least it's an easy fix :)
Thanks again.
I found this on the web, Nitro Key
User authentication on local computers (e.g. Windows, Linux) and networks (e.g. Firefox, OpenSSH,
OpenVPN, IPSec, OpenID).
@phil.davis:
Status->System Logs, Settings - Reset Log Files - that will make sure those are in current format to be interpreted correctly by current code.
This seems to have resolved the issue. Thank you both for your help!
The best solution is this:
@Derelict:
Install a certificate signed by a trusted root or tell your browser to trust the certificate.
Big problem ;) : it's won't be 'free'.
I bought a domain name, like 'my-domain.tld' (give or take a few $ a year). Then, visit startssl.com to obtain a free valid signed certificate for 'my-domain.tld' and "portal.my-domain.tld" (I did not take the included 'www.my-domaine.tld').
You get all the files needed to install into pfSense.
Switch portal authentication to https - no errors for all browsers. Works for me for years now.
"Rough design"
If a hostname is available for a connected IP/MAC combination, it will be shown instead of the MAC:
[image: Capture-hostname.PNG]
[image: Capture-hostname.PNG_thumb]
@doktornotor:
@TDJ211:
I searched the forums and it appears some users have mentioned BandwidthD being a potential culprit (I had the package installed but have never used it). So I attempted to uninstall package from the Web GUI on my phone and BAMM, now im getting a 503 error from my phone!!
I'd remove the evil package first:
https://forum.pfsense.org/index.php?topic=90830.msg502489#msg502489
Thanks, yea I eventually did after I was able to get web GUI access back but it didnt do anything for the System Logs prob.
So how is gui slow when broken dns related to that bug link that is about "read-only to read-write mount very slow on nanobsd" I would think these are too completely unrelated issues.. If gui is slow because the media its installed on, how does that relate to being slow when dns doesn't work??
Sorry for the necro but I wanted to add this for anyone else who arrives here via Google.
We've ran into the same scenario with a company we deal with trying to do the Trustwave Scans.
The stuff they test for changes every month and it seems like we fail for something different each time.
I tried the above posted line but we still failed. After looking around, this is what I came up with:
$lighty_config .= "ssl.cipher-list = \"TLSv1.2:!aNULL:!eNULL:!DSS\"\n";
SSLscan now shows protected on everything. BTW, you can add sslscan to pfSense via 'pkg install sslscan'
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.