My issue seems to be related to this one: https://forum.pfsense.org/index.php?topic=76969.0 I also changed my interface names prior to restoring the config. Anyhow I did not replace any strings within any certificates (AFAIR).

Hey everyone, I too have been running slow Youtube Video recently. I searched and searched for a fix but could not find any solution to my setup. So I logged into Pf and went into the Snort settings. I turned up the "Detection Performance Settings" in WAN interface settings… And now I am back up and running full HD 4k and 1080P. Steps taken: Services ---> Snort ----> Snort Interfaces ----> Click on "e" or "Edit Snort Interface Settings" on the right WAN Settings  ------> Scroll Down to "Detection Performance Settings" Search method -----> changed from default AC-BNFA to AC-NQ ***Warning RAM utilization will spike using AC-NQ I have 4GB ram and it is running at 87% of 4GB currently. :o [image: 1_zpsaeb90d56.png] [image: 2_zps95ed0bf6.png] [image: 3_zps19103aef.png] [image: 4_zps0101dd19.png]

From the missing-the-forest-for-the-trees department, I hadn't even thought about dumping the serial console. I have a machine hooked up to it now, and will report back if/when I figure this one out. Thanks!

thanks for a direction to look, i will post back my reuslts

Hmm…looking at the rule category descriptions on the VRT websites they don't seem to give any indication of which categories are no longer active. Is there a specific page you were referring to? It seems rather strange to me that they would have all the rules neatly organized, only to completely change it without modifying the documentation. EDIT: I found the blog posts explaining the move. I guess this means I'll just have to figure out where the rules I need have gone. Thanks for the help!

Yep, you're right.  Thanks for pointing that out.

Ok, I figured out why pfctl was hanging up. One of the captive portal rules was too long. I'm working on a patch to break up CP rules into smaller chunks in /etc/inc/filter.inc. Just wanted to post this in case someone else runs into this thread with a similar problem.

No reply and I couldn't solve the problem so I went removing the package. Just stopping the service didn't help… web browsing was extremely slow, that's why I tried removing the package completely and things got back to normal. Then I reinstalled the package and it kept all my previous configuration, and it started doing the problem again. Is there any way to make a clean remove and clean install of a package (or more specifically the squid3 package) ? Thanks!

Did it like this. Now all three leds are green from the beginning of booting. Nothing comes to the serial console anymore.

For an explanation and solutions see: https://doc.pfsense.org/index.php/Why_can%27t_I_access_forwarded_ports_on_my_WAN_IP_from_my_LAN/OPTx_networks Steve

Diagnostics: Backup/restore Under backup configuration you have specified 'all'? If packages are not reinstalled have you then tried the Package Functions 'Reinstall packages'?

Go to System: Routing: Gateways tab. Edit your wan gateway and disable gateway monitoring. Steve

If check_reload_status is using high CPU, that is a symptom of another cause. Usually it's that a gateway is being flagged as down/up, or an interface is bouncing somehow. I've also seen that in one case where it as a dodgy DHCPv6 server at the ISP on their WAN, disabling DHCPv6 on WAN settled it down.

There is not currently any way to create users certificates from the shell. The actual commands are wrapped in functions. What you'd need to replicate is the user input that would be similar to fields entered in the user manager and then replicate what happens when the save/apply action is performed. The hard part isn't getting the data, it's the input validation to make sure what is entered is valid/makes sense and can be used to add a user/cert.

This document might help you with your filtering bridge setup: Transparent Firewall/Filtering Bridge Found with the search function of this forum.