Don't worry!

Unless you want to dive under the hood no OS knowledge is needed. All configuration stuff is done in the webGUI and shouldn't even be done in the file system.

If you have a spare machine to test pfSense on you can d/l a live CD. Boot it, configure the interface(s) and access it from a host on the same subnet. Unless you actually install pfSense on that machine (doable with the same Live CD) no changes to a previously installed OS will be made!

Thanks sullrich.

Add more ram to the machine

Thanks once more.
EC

I think all that's needed is a plugin to force a carp event should a specified host be unreachable, there used to be one IIRC, but it's been missing for a while…

Are you doing PPP authentication on the modem, or on the firewall?  You could try having the modem do your PPP auth, and then set pfsense to just use the same IP you seem to always be issued.  Or, if you're already doing auth on modem, try letting pfsense do it.

That's all I got for ya.

-M@

Added the line:

sysctl hw.syscons.kbd_reboot=0

at the end of the file /etc/sysctl.conf and it worked like a charm.

Thanks for the tip.

rm /tmp/config.cache if it exists before issuing reload_* commands.

dotdash, thank you very much for your promp reply.

Any thoughts on setting up a DHCP relay agent on your Checkpoint firewall?  You could then create a new DHCP scope and leveraging your existing DHCP infrastructure.  I like to see networks managed centrally - depending on how they are setup this is not possible sometimes (branch offices, etc…).  I don't think you can create/use different scopes with the PFSense box, I'm not sure what it uses behind the scenes I'm just starting to play with it to see how I can use it.

FreeBSD 6.3-STABLE and up has bether support for this:
http://www.freebsd.org/cgi/man.cgi?query=lagg&apropos=0&sektion=0&manpath=FreeBSD+6.3-stable&format=html

But as i know PFsense 1.2-RC4 and below are 6.2-RELEASE-P? based so i guess we have to wait a little..

I've been playing with ALIX 2c3s in my lab.  Without shaping turned on or anything I've managed to get north of 90 mbps through 'em with a single TCP stream.  Was getting over 42 Mbps through an IPSEC tunnel (had Soekris VPN1411s in them for crypto acceleration of course) between a pair of 2c3s.

It does shaping but I haven't played with it (much), so I can't speak to the cpu impact.  Shaping does in fact exist in the embedded images, and I'd guess that given the performance I've seen you'd probably be just peachy on a 30/5 connection.

-Rob

I just ran into this same problem… Not sure what's going on. I'm using an Alix board w/ the latest bios and RC4 embedded - Been running great until i noticed this. Crazy thing is it is still really responsive...

last pid: 36905;  load averages:  2.20,  2.19,  1.78                                         up 8+23:01:14  22:48:51 38 processes:  2 running, 34 sleeping, 2 zombie CPU states:  8.1% user,  0.4% nice, 91.5% system,  0.0% interrupt,  0.0% idle Mem: 42M Active, 10M Inact, 17M Wired, 40K Cache, 17M Buf, 173M Free Swap:   PID USERNAME  THR PRI NICE   SIZE    RES STATE    TIME   WCPU COMMAND 10032 root        1 132    0  1440K   584K RUN     26:57 95.31% syslogd 1809 root        1   4    0 15728K 11132K accept   0:08  0.05% php   406 root        1  96    0  2304K  1856K select   2:53  0.00% openvpn   739 root        1   8  -88  1408K   356K nanslp   1:45  0.00% watchdogd   699 root        1  96    0  5980K  5144K select   0:41  0.00% bsnmpd   551 root        1   4    0  3400K  1532K kqread   0:33  0.00% lighttpd 7582 root        1 -58    0  3848K  1316K bpf      0:10  0.00% tcpdump 7778 _ntp        1  96    0  1340K   640K select   0:06  0.00% ntpd   753 root        1   8    0  1384K   540K nanslp   0:05  0.00% cron   606 root        1   4    0 23340K 19088K accept   0:04  0.00% php 7583 root        1  -8    0  1276K   416K piperd   0:03  0.00% logger 11520 proxy       1   4   20   704K   244K kqread   0:02  0.00% pftpx 10455 proxy       1   4   20   704K   244K kqread   0:02  0.00% pftpx 7723 nobody      1  96    0  1472K   700K select   0:02  0.00% dnsmasq   794 root        1   8    0  1268K   364K nanslp   0:01  0.00% minicron 33466 root        1   8   20  1272K   700K nanslp   0:01  0.00% check_reload_status 7779 root        1  96    0  1376K   596K select   0:01  0.00% ntpd   331 _dhcp       1  96    0  1468K   560K select   0:00  0.00% dhclient 36478 root        1 116   20  5744K  2772K select   0:00  0.00% sshd 36851 root        1  96    0  2356K  1576K RUN      0:00  0.00% top   572 root        1   8    0 14924K   864K wait     0:00  0.00% php   569 root        1   8    0 14924K   864K wait     0:00  0.00% php   553 root        1   8    0 14924K   864K wait     0:00  0.00% php 36493 root        1   8    0  1712K  1324K wait     0:00  0.00% login 36622 root        1  20    0  3620K  2612K pause    0:00  0.00% tcsh 10252 root        1  -8    0  1268K   280K piperd   0:00  0.00% sshlockout_pf 36528 root        1   8    0  1720K  1196K wait     0:00  0.00% sh   265 root        1  96    0  1468K   272K select   0:00  0.00% dhclient 36529 root        1   8    0  1728K  1204K wait     0:00  0.00% sh 36495 root        1   5    0  1724K  1200K ttyin    0:00  0.00% sh 36494 root        1   8    0  1720K  1196K wait     0:00  0.00% sh 35757 dhcpd       1  96    0  2188K  1812K select   0:00  0.00% dhcpd 36367 root        1 116   20  3064K  2496K select   0:00  0.00% sshd   127 root        1  96    0   504K   112K select   0:00  0.00% devd 33453 root        1  -8    0  1400K   956K piperd   0:00  0.00% cron   605 root        1   4    0 14924K   864K accept   0:00  0.00% php

Only if you want it to function as a firewall or router ;)

@zz_tops:

Not sure if this applies but I've seen the gui in firefox not display all the columns if the font size is changed.

When you increase the font size in firefox (don't know explorer) the column headers start to disappear.

Try reducing your font size?

If this doesn't apply sorry

I use both mozilla and IE. It seems the problem continues:S i have reboot the system and also nothing! probaly the webinterface reads the file logs and print it in the Http format. i dont why this cant be done now:S

I'm using 1.2RC4.
Maybe i didn't wait long enough…

Wait a week or so.
http://blog.pfsense.org/?p=164
Read from here and on to know what has been changed.
http://blog.pfsense.org/?p=106