Can't go wrong with that.

Thanks everyone. I have successfully blocked the device using a MAC address filter on my wireless APs so that the phone can't even even to the wifi network. This keeps the network stable when the employee comes in the the office and forgets to turn off the wifi or tor orbot app on his phone. The only other options I can think of are to A.) change the IP configuration on the Orbot app or B.) Change my pfSense IP. I will continue looking on Android and Tor forums for more info.

If it has 100Mb ports, maybe it's running half-duplex. Old 100Mb port to to new 1Gb ports duplex mismatch is a common reason for errors.

Managed to test this already - with great success! Thanks for your help.

You had the update URL hard coded to the wrong thing in your config in that case. Yes that's also why your RRD data is gone. Reinstall and restore config is the best thing. It's no longer possible to switch architectures even if you force it, so that can't happen again in the future.

I checked and it is passing decrypted traffic. Has anyone tried to the perform SSL break and inspect with pfsense without using the native SSL MITM capability? Do I need to configure it with ICAP?

Well, there is syslog-ng package, at least in 2.3, so you can try to use it. "syslog-ng  1.1.2_3  Syslog-ng syslog server. This service is not intended to replace the default pfSense syslog server but rather acts as an independent syslog server. Package Dependencies:  logrotate-3.9.2    syslog-ng-3.7.3_1   "

Guessing that's probably while you have something continually loading the dashboard? The dashboard is significantly more CPU-intensive than it used to be especially if you have a lot of widgets, as more things dynamically update.

Some modern SSDs have the same or more writes than mechanical drives. The only difference is the SSD is faster which allows it to reach its limit faster. That said, don't get cheap crap. Look at reviews. If you're concerned about reliability, don't get the latest greatest, look at something that has been out for a year. Or use GEOM RAID1 and get two different types of SSDs, so they shouldn't fail at the same time for the same reason.

@xBlue: I'm having the same issue. How did you solve it? There is a privilege that prevents users from writing changes to the config file…make sure that isn't added. That's how I fixed mine...I guess CTRL+A is the work of the devil just like copy and paste. [image: priv.PNG] [image: priv.PNG_thumb]

NP - glad you got it sorted.  I would suggest you move to current 2.3 vesion.  2.1 is not really a supported version. You might want to look into maybe doing something with what I would guess is bufferbloat since looks like when your downloading something your pings are going through the roof..  A somewhat simple help for that is just turning on codel

ok guys I made ​​the change to the file , but the problem has not been solved  :( OK guys I have just restarted pfsense and now all works fine. thanks for all  ;D

Richard, it may helps you and others if you draw a small network schematic that can be watched by all other users.

Can please tell us what kind of storage connectors are on your mainboard or inside of your hardware? Something likes, SDCard slot, CFCard slot, IDE interface, SATA interface, SCSI interface, USB ports or perhaps something likes a miniPCIe slot for mSATA drives. Elsewhere in the forum some users where reporting a work around to get it working together with a 1 GB CFCard, but I don´t find it back now. Please do a search about it, it was during the last two month.

I would configure it in your situation likes that; WiFi as an WLAN AP (AP mode) create a separate VLAN for each SSID give all VLANs his each IP subnet or IP range create now rules for drop the playing around with your box activate the WiFI client isolation then on top for the guests VLAN