I changed out my PS last night to an 18V 2.2 amp supply.  It seems to have stopped the random freezing I was experiencing, but time will tell.

lagreca,
I'm getting the same messages as you on my vr0, even with the new power supply but I think my vr0 is my lan inteface (need to check tonight).  I'm not sure what is causing it either but now I'm thinking it cold be a switch plugged into the vr0 port.

Yes , that's it !

thanks a lot

-Stefan

All IPs on the same interface (the real ones for each firewall as well as the virtual IP) have to be in the same subnet, so you can't use private IPs on the LAN-Interfaces if that .1-IP is a public one. It's the same on WAN. You'll need 3 IPs from the same subnet on WAN and on LAN. LAN and WAN have to be different subnets of course.

Do you have the traffic shaper on?!

If yes can you please give the model of you network cards.
If you are using pppoe or pptp and are shaping on the pppoe interface?
What is the config of you shaper like bandwidth settings etc

It took me less time to get used to osx than to get used to vista. For home use I already replaced my workstation and my notebook with apple stuff. Much less pain, it simply works and is much faster than vista.

done, i will try in some hours do some windows networking… hope it works then.

It seems that yes, my switches were not VLAN capable.
Finally i totally replaced the WAN1 router with a switch - it had 3 PC-s connected to its switch board.
And windows networking is up and running.

As we had dual wan, the users didn't eaven feel a thing.
Thanks for the help.

It is working perfect. Thanks a lot… This is just what I want...

I haven't posted to the list - I was waiting to see what kind of responses I got here first.  For the time being I'm okay, I took down one of the firewalls.

What I think could be happening is, the dedicated carp link between the two machines may be a bad cable.  Originally I didn't have spanning tree enabled on the bridges, because I wanted an instant failover, and the bridge would be down on the backup firewall anyway, so STP was pointless.  So, if there was a bad cable, I could easily see the two servers fighting over who's master, and who's slave, since they would be talking over that dedicated link with a bad cable.

The ideal scenario is getting the hosting company to let me control .1, which I'm in the process of talking about with them.  That would allow me to completely get rid of the bridge, and just use carp to handle .1 - done deal.

Anyway, thanks for the URL, I may set up a test environment just to check it out anyway.

By the way, if you're curious why this is such a huge deal to me, read http://forum.pfsense.org/index.php/topic,7668.0.html.  We've doubled in size since then.

I have a static IP, therefore I can disregard that. 
It is not a new asterisk install, I have been using asterisk for well over a year now.  It is plain old asterisk that I downloaded and compiled on my Slackware server.  Version was 1.4.19, but I have downgraded to 1.4.18.1 and it seems better, still times out sometimes, but it has been good for the last couple days.

Provider is icall (carriers.icall.com)
Not using the SIP Proxy, never have and never had issues.

Features: http://www.pfsense.org/index.php?option=com_content&task=view&id=40&Itemid=43

The embedded version can do everything the full version can, except packages.

If you want to use packages: –> Fullinstall !

You're on the right track with a microdrive :)

Yeah speed is definitely not an issue with adequately sized hardware, two 100 Mb connections is nothing. The couple links posted are good resources, and there are many, many others on here who have pushed a lot more than 200 Mb. Yours truly included.

Thanks for the confirmation CMB  ;D

If you don't enter a keepalive IP it's on demand by default.

I think he might be refering to RouterOS that comes with RouterBOARDs from Mikrotik.

Here's a reference I found: http://www.mikrotik.com/software.html

Saw them at this supplier, http://www.xagyl.com/catalog/index.php?cPath=57_30 might be others too.

Anyway, it seems it is a linux based router/firewall. Seems somewhat similar to Vyatta, but there doesn't seem to be a free/community edition.

From what I can tell from a quick look at the demo, a lot of the functionality is only available from the telnet interface, with only a selected subset being available from the web interface.

I don't know how this would compare to pfSense, I'm sure someone around here might have a better idea though.

I had this issue when one of the CPUs in the Dell Powerline server would overheat, this was fixed by simply mounting a fan on top of the heatsink. Check to see if heat is becoming an issue. A ram check wouldnt do harm either so try that if you will.

Hope any of this helped,

Matt

pfSense doesn't support modemtype interfaces. Only ethernet. You could live with a single interface if you create vlans but that would require a vlan-capable switch to make sense for a firewall.

i am contacting our web admin that works with the softwarre to find out more how the software works and grabs the information.  I will post a reply with the new information in a day or so.

Ok, I applied the workaround, and so far so good. It works.

Change /conf/config.xml

<system>... .... <afterfilterchangeshellcmd>/usr/local/bin/reset_states.sh</afterfilterchangeshellcmd></system>

Create /usr/local/bin/reset_states.sh

#!/bin/sh sleep 60 /sbin/pfctl -F state sleep 40 /sbin/pfctl -F state

chmod 755 /usr/local/bin/reset_states.sh