Hmm Very odd - did a factory resetand then rebuilt it and all is now well - Not sure what was happening there have been messing around fairly heavily adding and deleting interfaces so I guess something got messed up. thanks

@stephenw10: That's what I thought you'd say.  :D You could look at the various sections on the status.php page. The information you want will be there but not necessarily how you want it. It's not linked to from anywhere in the GUI just enter it manually: <pfsense ip="">/status.php What are you wanting the report for? Steve</pfsense> Nice, was not aware of that page. I just want something to show all Vips, carps, Alias, rules.

The Nano variant uses md(4) rather than tmpfs as a ram drive. You could use that. [2.2-RC][root@xtm5.localdomain]/root: mount -p /dev/ufs/pfsense0 / ufs ro,sync,noatime 1 1 devfs /dev devfs rw 0 0 /dev/ufs/cf /cf ufs ro,sync,noatime 1 1 /dev/md0 /tmp ufs rw 2 2 /dev/md1 /var ufs rw 2 2 devfs /var/dhcpd/dev devfs rw 0 0 You can move /tmp onto a ram disk on a full install using the options in System: Advanced: Miscellaneous: Edit: Although..https://forums.freebsd.org/threads/tmpfs-dev-shm-md-questions.45210/#post-256239 Steve

I may question how the 8 hour graph can get results like 0.12% in a 1min average,  but when I ran a ping myself and upped the sampling rate, I would get similar numbers. I wonder if it does some kind of weighted sliding window for the average percentage. The main thing is the numbers seem trustworthy, so I'm happy. Maybe I just to look at the code. I've never done that before.

Leave it unchecked to kill the states. That's almost certainly the behaviour you want. Steve

Hi, Did you ever get an answer to this? FYI, I had the same question … all when green when you actually add the Pool to a Virtual Server (until then, no checks it seems -> stays red).

If all the internet traffic is going through one device I can't see it making much of a difference.  The only reason I'd run it at each branch is to protect them from each other.  I'd rather maintain just the one at the WAN if possible.

No official releases are affected. It would affect the 2.2-RC snapshots but the fix is already in current snapshots (note they report 10.1-RELEASE-p1 now).

Ah ha! That makes sense.  I always wondered why it sometimes seems to work as expected and other times not.  Thanks for that!

Thanks for the reply. A reboot of the box brought things back to normal. The polling option was already disabled in the UI after the reboot. Maybe the system locked up before the change was saved to the config file?

That is highly unlikely to work as they are compiled for very different versions of FreeBSD. In theory someone could compile apinger on a builder made to create pfSense 2.1.x images (FreeBSD 8.3 base) and then copy that over, but we have not tested that.

@phil.davis: Try this to generate the list of FaceBook IPs: https://forum.pfsense.org/index.php/topic,69860.msg383922.html#msg383922 Then use the Alias as destination in a pass rule on LAN and direct that traffic to the VPN gateway. That's … brilliant. I can use this for so many other sites it would be nice to anonymize too. Thanks!

Thanks for your help everybody. This was a compound issue, and it looks like everything has been explained now. I appreciate the help.

Sounds like something got botched on install.  Maybe you accidentally put in a bad setting.  I'd reinstall again and start from fresh. Much easier than trouble shooting a broken install. BTW - I'm also running similar CPU as you, also broadcom on the WAN with 4 gigabit intel PCIe NICs for LAN.  It should work no problem. This ugly pfsense for some reason is the most reliable one for me.  Seems to never glitch at all.  Its my personal use box in Maryland.

Because traffic is allowed out of an interface by default, without a firewall rule. Thus there is no rule capturing the traffic to log it. It requires a rule on LAN because it's going in on that interface and hence is logged (assuming you've enabled logging on whatever rule you have there). You should see that traffic arriving over the IPSec tunnel is logged on the IPSec interface and not the LAN. The only exception to this are the floating rules which can operate both in and out. Steve

@heper: this is a freebsd 8.x problem … working around it, is not hard. once installed you can turn your cores back on. imho, nobody will bother to fix ancient bsd releases. you could try the pf 2.2 beta on freebsd10.1, perhaps they've fixed it there. ;D

Hello, I find the problem. Other users ask me to change the GUI to Portuguese. And some settings don't work in Portuguese. I set GUI to English and it works again. Thanks.