OK, thanks jimp. I'll have to change path for these logs.

you should be able to replicate a outage by unplugging the cable from your modem, The one that comes from the wall socket. I wouldnt pull out the cable between the modem and PFsense as it could be a miss match in communication from the modem and router. As I say mine works fine on the default autoselect (one at the very top) but not when its just plain autoselect. But if you know what it always uses then setting it manually like you have should work. Just run some test to make sure it is not affecting performance.

Increase mbufs. See nic tuning on the wiki

Ping doesn't actually measure network latency, it measure's network latency plus the network stack of the host OS. It's very possible you're just seeing network scheduling fluctuations.

@lovene: I need to audit all firewall activity but cannot achieve this. I need to print audit reports of all changes. Exactly what do you mean by "all firewall activity"?  All packets in and out, blocked packets, passed packets?  Logins?  File changes? "All" has the potential to cover a lot of ground, specific help requires specificity of what you are trying to accomplish.

whats the output of ifconfig -a?  Is your WAN interface at the correct speed and duplex?  What did you do with "traffic shaping"?

I see squid running. I bet you had a memory spike once or more that caused some pages to get swapped out, but those pages have yet to be referenced again and just stay in limbo until the next time they are needed. Also, you don't need to reach 100% memory usage to get paging. Memory gets fragmented and if there are no large enough contiguous segments, the kernel may need to swap out pages to effectively defrag the memory.

@Derelict: pfSense will do multiple scopes just fine. It just can't be configured to accept helper requests from multiple subnets on one interface. Well that's just silly.

your typical off the shelf router is a firewall as well, it just has limited features in allowing configuration of the rules.  Many of them have very limited outbound controls, and inbound are all pretty much just port forwards with varying degrees of features depending on the make and model. But in a nutshell out of the box pfsense is same as any off the shelf home router in what it does.  It nats, all inbound traffic that is not direct answer to a request is blocked, while the default outbound rules from lan are any any.  This is pretty much what every off the shelf router does. Where pfsense allows you to go way beyond what any off the shelf router would allow you to do when you want to get fancier than that.  But if you want to use it like that - that is pretty much how it is out of the box. And yes you could even enable UPnP if you want it..  Where your off the self router is normally just an on and off checkbox, pfsense allows you to get fancier with allows and deny specific ports or deny from all except a specific IP to request, etc..

BTW, there is a dedicated IPv6 forum.

Please can someone give me a hand on this one?????

Looks to be a "bug" or at least a deficiency in the system? https://redmine.pfsense.org/issues/4474

All you need to backup is the config.xml (Diag > Backup/Restore). You can reinstall + restore faster than you could image the disk back.

Normally when you put a wifi router into bridge mode the wifi would be disabled, if yours is still on - I would connect to it and disable it.  If you can not connect to it while in bridge mode then put it back in router mode, disable the wifi and then back to bridge. As stated if you want to use vlans with your wireless network - get a AP that supports them, and make sure your switch supports them as well.  Unifi makes reasonable priced AP that do vlans, the latest gen AC lite model is under $100 - I have multiples SSIDs running on different vlans.

Hello marvosa, thank you for your reply. Yesterday I figured it out. I didn't use Outbound NAT which solved my problem  :D Markus

We have had a couple reports of crashes in dnsmasq on 2.2.6, there is a thread with a fix you can try. Alternately, install the service watchdog package and have it monitor dnsmasq to restart it when needed.