Currently the only way to get a copy of the updated book is via the Gold subscription.

And what IP is on your lan of pfsense? that 192.168.1.155 is that pfsense wan or lan address? You would need to put a vip on the wan interface connected to the device so that they are on the same network, and make sure there is an outbound nat.

Possibly if there's still some conflict. I don't see anything immediately so I'd guess at some openvpn problem. Steve

You can almost certainly do this in php, though I never have. If you look into how this is done in pfSense is uses a function something like: get_real_interface(LAN)# It's a function in /etc/inc/interfaces.inc Steve

Yep, a plain vanilla typo - pull request https://github.com/pfsense/pfsense/pull/1369

I've tried that to no avail.

@StefPar: Thanks Steve, because my network is an offline network i can't use auto backup package so if you can i need an example about backup from console.. thanks Try this: #/bin/cp /cf/conf/config.xml /mnt/backup/pfconfig/config-`hostname`-$myDate.xml This should make a copy of your configuration to /mnt/backup/pfconfig just adjust this to the location where you want to have it. In my case, this is an SDCARD.

It was an outbound NAT problem.  A while back while testing some diferent OpenVPN configs I had changed Outbound NAT over to manual.  I changed it back to Auto and everything's working perfectly now. I appreciate the suggestion!

That will only work to let you into a small number of pfSense devices until it trips the bug again. Also it would forget any other HTTPS certificates that were manually marked as trusted. That db can be managed from inside the settings on Firefox, though it's still a poor workaround for most of us. If you're on 2.1.5, apply this patch: http://files.pfsense.org/jimp/patches/cert-unique.patch Afterward, from the shell, run: pfSsh.php playback generateguicert Then the GUI will use a certificate that Firefox won't choke on. If you're on 2.2 already, run the command above from the shell. It's already present. Certs on fresh 2.2 installs are fine.

You don't  But that is not a normal configuration.. I would do it this way, since if your sending 22 to .3, that is not really www.foo.org now is it ;)  So ssh.foo.org would be better or ssh.www.foo.org if you wanted.  I have to assume your sending both http and https to .15 so www.foo.org points to .15 works for both of those.  And 10k.foo.org for port 10000 pointing to .19 you have 4 different IPs there they are not all www.foo.org  Other way you could do it other than NAT reflection is actual forward on your lan side that says if going to IP 10.0.1.15 (www.foo.org) on port 22, really send it to .3, same for your 10k port

thank you guys..and it works perfectly great

Thanks for the insight, I will remove the virtual CD drive and see what happens I was just caught off guard because these pfSense instances have been running fine for over a year now only to suddently start being unreliable like this.

It's apinger.  I think I restart it by turning gateway monitoring off then back on for the interface.

The external IP addresses using the most bandwidth are Akamai & Level3 caching servers.  Are you running Squid cache?  Is it possible that a Windows Update or some other large blob is being downloaded to your Squid cache?  That would explain high bandwidth into WAN that isn't being passed out to LAN.

You are right! I just tested using speedtest.net, and now I see the 800Mbps peaks without issue.

So curious are you actually using ipv6?  If not another option to remove the noise is remove it at the source by turning off ipv6.  Sure looks like ipv6 multicast for something to do with UPnP/SSDP with that destination. You can track down what is generating the noise..  And turn off ipv6 ;)  No noise, and less garbage on your network.

Thanks Bill for your reply. I was on holiday out at a remote location so could not response quickly. I will check the material and see if it would help me set this up quickly. Do you also have any literature on how to setup IDS and IPS with snort.

That's great, thanks guys  ;)