@stephenw10 Hey Stephen, Thank you very much for all your attempts at helping me out. I DO appreciate it. I resolved the issue by cancelling my subscription to the VPN service with the flaky client - I mean it won't even clean install ffs. Anyways, I didn't want to leave the thread hanging so thats it - it's done. Problem resolved. I won't disable frag3 for a flaky client that would be ridiculous. The other VPN service I have has a client that works flawlessly and I am tired of banging my head against the wall with level one help-desk agents that have a "upgrade to the latest client" mantra and when that doesn't work wait 3-4 days with nothing on the ticket. PIA is being overwhelmed with customer tickets right now it says so on their ticketing system "unusual wait times" and all that type of language on their site. And this came as a direct result of their latest client release so....they must've pulled a Microsoft and released little better than alpha software as a full version production release. Whatever not my problem anymore. Thanks once again for your efforts. They are appreciated.

@johnpoz Thanks for your help and sorry for the confusion. Have a good day.

hey buddy can you help me on how to set-up opt1 and opt2 and wan with the same gateway.

Yes. Logging to an external logging system is expected if you want more than basic debugging tools. I have used many "enterprise" firewalls and we never depended on them to store anything but the most cursory of logs on the devices themselves. We always logged to something external if anything historical was desired.

@akuma1x simply because you don't want to keep in memory what customers is using what addresses. It's a bit difficult when you get up to 400+ customers divided on 4 addresses, it's much easier installing some kind of load balancer dividing all traffic on several setups. but sure enough it would work, if you wouldn't mind a bit of hassle.

The SG-5100 is now at 699.00 vs 799.00: https://store.netgate.com/SG-5100.aspx

You mean this one : [image: 1551371058513-4a228a85-d762-41e8-8242-d5669f041918-image-resized.png] Did it showed available packages in the past ? It never showed any packages ? Have a look at your : [image: 1551371168695-896fba38-6eda-48cd-b35e-5eb9dbbbc225-image.png] You see the "Version information updated at Thu Feb 28 15:45:56 CET 2019" ? What is your date / time ? The question that takes care of 75 % of all "can't upgrade/update/install packages" cases : you broke the DNS, so pfSense itself can't reach out to the Internet anymore. Repair or undo your DNS settings - go back to the "always works" mode : the one that was present by default. If not, you are lined up for the conquest : "Asking a question without any useful information"

It's true and easiest disabling the DNS for DHCP clients. Thanks for all.

After contact with microsoft helpdesk I found the solution for me. For future reference: I had to turn on mss clamping and set it to 1350. This is also in the advanced IPSec settings Maybe this settings was defaulted after an update? I wasn't the one who configured it in the first place, so I wouldn't know for sure. I made sure to match my settings to this document https://docs.microsoft.com/nl-nl/azure/vpn-gateway/vpn-gateway-about-vpn-devices @stephenw10 Thanks for the reply, I had this disabled already, but the pointer was appreciated

I am having this issue as well, looks like there is a bug open: https://redmine.pfsense.org/issues/8987

@kennethw said in Pfsense 1: 1 to the outside with all_ports open.: I have entered externally with all ports open via a rule ip. What does that mean in English? Have you gone through the port-forward troubleshooting guide? https://doc.pfsense.org/index.php/Port_Forward_Troubleshooting Post some screencaps of your config if you want someone to help you.

@dayve said in No internet this morning.: Can I install Munin on 2.4.4-RELEASE-p2 That's a good question that I can't answer. I realized that I'm upgrading pfSense ever since .... somewhere in 2015, when I installed munin as a FreeBSD package, not a pfSense package - on pfSense. Among others, I used https://forum.netgate.com/topic/104705/munin-node-package-for-2-3 and some other posts on this forum (use the Serach function) to install and setup a munin slave on my pfSense. It works ever since. FreeBSD package maintenance changed somewhat but I'm pretty sure the concept is still valid.

I see, that's too bad. Since I am fresh out of unused, identically-configured servers - I guess I'll continue my search. :) Thanks for the info and for updating the website, that will help others.

I've been here for 5+ years and I've never heard of squish until today. Maybe start by showing what you did to install squish, what happened when you tried to run it, and any errors in the system log, squid's log etc.

@sugaredaxe said in Can't login to web configurator or ping the LAN ip: says that the lan port doesn't have internet access. Maybe you have a problem with dns? Windows determines if it has internet access via a dns query. Post the output of ipconfig all on your box your plugging into pfsense.. Did it get an IP from pfsense dhcp server. And again your LAN should NO gateway setup on it.

You don't My point is you can listen on lan or lan and opt or wan only, etc. etc. If you don't pick an interface it "listens" on all interfaces - but listening has zero to do with doing query from.. It would use the interface connected to that network if local, or if network where the ntp server is is not local then it would use its wan or normal default route interface.. If you had say a vpn service pulling all your default routes setup, etc.

Yeah you can't have two interfaces in the same subnet like that. You don't need two interfaces though you can just add two gateways on the one interface. That's a bit ugly though it would be better to use different internal subnets on each ADSL router and connect them separately. Or even better to set the ADSL routers in bridge mode and pass public IPs to each WAN interface on pfSense directly. Steve