As I said in PM you will need to define exactly what you are trying to do here. 'implement TLS' means nothing. I would guess you mean some sort of VPN tunnel? Steve

Here is a link to the source code for the latest version of Intel driver for what appears to be your card: https://downloadcenter.intel.com/download/15815/Intel-Network-Adapter-Driver-for-82575-6-and-82580-Based-Gigabit-Network-Connections-under-FreeBSD-?product=46827. This is only the C source code. To use this driver, you would need to create your own separate FreeBSD-11 virtual machine with the proper developer tools installed (compiler and linker) and then compile the source code into the binary driver module. Then copy that module over to your pfSense box and load it. That may be more effort than you wish to expend, though. The one thing I've noticed over the years with FreeBSD is that the support of newer hardware seems to lag behind Linux. The drivers within FreeBSD-11 and earlier are maintained by a team of Intel folks who then submit the updates to FreeBSD. For FreeBSD-12 and later, as I mentioned in a previous post, FreeBSD has moved to a new wrapper API called iflib. That move has muddied the waters a bit in terms of NIC driver development and support as now the FreeBSD team has the iflib API part while hardware manufacturers write the pieces that need to directly manipulate widgets on their particular NIC. It might be worth trying pfSense-2.5 DEVEL since it is based on FreeBSD-12.2/STABLE and will contain newer NIC driver versions.

You are right. I configure the bandwidth and then working. Thanks.

@kiokoman Thanks for the review of the logs, I have made some changes to the VM, I am hoping that it resolves the issue!

@yogeesh said in NET::ERR_CERT_AUTHORITY_INVALID: eel we have certificate error in pfsense firewall And to fix NET::ERR_CERT_AUTHORITY_INVALID error try the below given fixes one by one: • Reload the Pages • And clear the cache and cookies of Opera browser • Allocate the DNS settings • Try to clear the computer’s SSL state • You can use the free SSL check tool like Qualys SSL Labs, to run an SSL Server Test. • Check if you are running an antivirus then disable the third party antivirus. Hope the steps given works for you to fix NET::ERR_CERT_AUTHORITY_INVALID error.

A bit more info is needed. 1: Do you want 1.1.1.2 as router2 WAN IP ? 2: Or do you want to have a host with 1.1.1.2 behind router2 ? 3: Do use NAT/PAT on router2 (wan) If using 1 , 2 would not be possible , as you would have the same ip address on both "Lan & Wan" - The router would not know where (what Lan) to send a packet destined for 1.1.1.2 /Bingo /Bingo

@NollipfSense You don't even have to configure DNS, if you're using DHCP. That's one of the things that's typically handled.

@zyntec724 said in Random crashes on 2.4.5_1: Ahh yes, forgot to add the NIC. I've got a genuine Intel dual port NIC in it, not sure on the exact model, I will have to pull it out and look. I have ran this NIC in prior pfsense builds and earlier OS versions without any issues. That would suggest the NIC is not a likely suspect, then. If the other hardware ran fine previously, and this behavior just started, I would really lean even more toward a hardware issue.

@drlmatos maybe not monitor the switch port, but move it to another port if you can to just try to rule it out.

YMMV! But we have seen odd behaviour like inexplicable crashes and problems routing traffic etc. Usually with more complex setups like HA with nodes in separate hosts. See: https://www.vmware.com/resources/compatibility/search.php?deviceCategory=software&details=1&operatingSystems=232&productNames=15&osBits=64 Steve

Yup.

*I meant, I have no idea how to continue my troubleshooting with setup #2

@johnpoz said in pfSense WAN connection hangs after about a minute: I would check with your ISP - I personally would be livid and looking for another ISP if my isp was interfering in my dns traffic like that. I love when you speak from your heart. Usually that's the truth. In fact ISP use your DNS queries to make a profile of you, it can be use for you (adds) or against you (if you sue ISP). On top of that they reduced costs by participate on Google Global Cache or GGC program for Youtube, Netflix, and so on. Just block their GGC cache and you will get a faster speed.

I changed OpenVPN tunnel nework to another subnet, and this resolved the issue. Thank you for the help!

Put this in custom settings and see if you get what you are looking for in the log. server: log-queries: yes

thank you for the reply. this for example.. [image: 1603657318941-screen-shot-2020-10-25-at-4.22.27-pm.png] and then also, the pfblocker logs include a DNS name despite there being none in the system firewall logs (despite enabling the option including pbblocker statistics in the system firewall log). The latter is not a big deal since I could run a cron to port them. [image: 1603657457132-screen-shot-2020-10-25-at-4.23.38-pm.png]

@stephenw10 Yeah, the Roon client is uh, "interesting". I'm assuming they're calling setsockopt(SO_BROADCAST) and not checking the return code, but it also might be just some stupid .NET thing. Unfortunately, I get nothing. No logs, no crash report, no core dump, nothing on console. Just hangs and I have to reboot manually. When it comes back up, the UI doesn't indicate there is a crash report like the docs indicate it should notify me. Anyways, RAM shows up in a few days and until then I put in my old EdgeRouter firewall back into service.

Hmm, well if it clones a running VM to a powered off VM that sounds far more like it just clones the drive and, presumably, the VM config. Not like a snapshot. In which case shut it down before cloning it. I won't pretend to be a VMWare expert though! Steve