@bmeeks Does tracert (windows) use ports? Anyway, I did two test with pfSense and two with Windows to an AWS IP... I can't see nothing. Spoiler [image: 1592837803123-capture.png]

@Gertjan thanks

@Gertjan So an update, after a week of issues I've narrowed this down to pfBlockerNG-devel/DNS issues. I've removed pfBlockerNG-devel and reverted to AdGuard Home and I've had a stable WAN connection and box for 3 days. I did notice this and wasn't sure if that was a contributing factor: https://www.reddit.com/r/PFSENSE/comments/88wg6g/issue_with_pfblockerng_dnsbl_and_cloudflares_1111/ @Rico - I made these changes and it made no difference when DNS was down or been blocked by pfBlockerNG-devel So thanks all for the help and pointers, all really useful and I defiantly improved my knowledge of PFSense and DNS over the last week!

@awebster i've seen you help https://forum.netgate.com/topic/145578/ldaps-ad-bind/19. Can you please point me in direction where i need to troubleshoot this issue?

@Derelict We actually have 2 phone systems from a merger. A on premise phone system (that works great) and AT&T hosted voice. Calls on the AT&T drop randomly. AT&T refuses to be of any help because it's a network problem and to be fair if i put the phones on a router with the udp timeout changed it does work. The reason I am trying to move it off the current router is QOS. Which has been a problem before because we were running 3 routers for different network segments off the same internet connections and 1 router could use all the bandwidth and starve the other routers.

Ok, just found out pfSense is indeed truncating: https://forum.netgate.com/topic/152220/suricata-eve-json-cutting-off-in-remote-logging/9

@cajunzman Okay.

@elduder You might want this: https://github.com/homebridge/homebridge May find valuable info here too: https://forum.netgate.com/topic/154163/can-i-use-ips-to-trigger-a-custom-action

You can not put the wan and lan on the same network.. Sure looks like your going to connect the wan and lan to the same network.

UFS keeps extra space that is not available to regular users so when the filesystem is completely filled for user and non-user data, it shows 108%. : tunefs -p / tunefs: POSIX.1e ACLs: (-a) disabled tunefs: NFSv4 ACLs: (-N) disabled tunefs: MAC multilabel: (-l) disabled tunefs: soft updates: (-n) enabled tunefs: soft update journaling: (-j) enabled tunefs: gjournal: (-J) disabled tunefs: trim: (-t) disabled tunefs: maximum blocks per file in a cylinder group: (-e) 4096 tunefs: average file size: (-f) 16384 tunefs: average number of files in a directory: (-s) 64 tunefs: minimum percentage of free space: (-m) 8% tunefs: space to hold for metadata blocks: (-k) 6408 tunefs: optimization preference: (-o) time tunefs: volume label: (-L) Note the value for -m

Using something like IPMI? With that I can attach an ISO image on my PC and boot the data center server off of it. Takes a while to boot of course as it has to upload but it can be done. pfSense isn't involved in that scenario.

Update: Looks like the NIC is buggered. Threw PFsense onto another PC and a different second NIC and getting full 1Gb transfers as expected. Put the quad-card into the PC and it refused to boot with it in. RMA time!!

@Gertjan Very educating... thank you!

ck42, it looks like it is single-queued

Update/reboot when there's a remote vuln that can affect my box. All ports blocked by default, so pretty much has to be a FreeBSD kernel issue. Had 400+ days at some point the past year. Been hanging out on 2.4.4-p3 for a bit now.

@Gertjan This is interesting. The reason I have alias called pfSense because it lists LAN addresses like 192.168.90.1 etc as well as DDNS addresses. I did not see "This Firewall" blocking external DDNS IPs. Did you? PS: Thinking about it I'd say it should block ANY IPs, maybe a good feature request ? Thx