@scratchydog the ECC ram is hard, if not nearly impossible, to find. I've seen posts from people saying they use non-ECC just fine. If you search this forum or Google you should get to those threads.

You could implement a UTM like Untangle in bridge mode and leverage the Bandwidth control app to severely limit the bandwidth available to the application. This would effectively stop the downloading.

@bergischweb I seem to be having the same issue. I haven't changed anything in Pfsense, but starting yesterday my M1 Macbook no longer can access internet. I can open other items on the network - but NOT 192.168.1.1 for Pfsense page. On my windows laptop everything works normally. I rebooted into recovery on the mac and have the same issue. Also restarted my Pfsense box. I haven't really setup anything in Pfsense yet - only 1 forwarding setup for plex and parsec. Did you find a solution?

Almost impossible to say without more info from the problem install. Switching from DHCP to PPPoE would not normally be an issue. It sounds like you may have had an old gateway still present though. If that was still set as default you would have seen connectivity issues. Steve

I wouldn't expect to see any difference in the IGMPproxy in pfSense simply changing the interface. However I also wouldn't expect it to work unless you are also proxying the IGMP in the downstream router. Steve

It might be possible, at least in part, by using Squid and Squidguard. You would need to do full ssl intercept if clients request https of course. Steve

Good news.. Thank you for the response. Netgate always comes through. Regards

@stephenw10 Yes, there was another gateway to another "internal" network. Everything there was virtualized, however I can see why that would cause a problem.

Hmm, well ntpd won't respond if it thinks it is not sync'd itself, which looks like the case here. What if you try to manually sync the Secondary from the command line? Against the Primary maybe? Or some external time source? Steve

@soupdiver wouldn't it be easier to just put all the IP's of AWS EAST in an alias & policy route it through the openvpn ? yea it seems so I had to lookup policy routing but this works nicely. I will write a lil script which formats the AWS API response in a way pfSense will understand it and then I should be done. Thanks!

Thanks, for the information, and all your help,

You are sending data to different graylog servers? Are you recombining it again somewhere to analyze it? Because there is too much data for one server to consume? Redundancy? I'm not sure there is any way to do this but we might be able to suggest something else. Steve

@stephenw10 Thank you very much for the hints. I'll take a look!

So pretty much "You don't" then.

@johnpoz Got it, thanks :)

As I mentioned on your ticket with us that will only work if the provider is routing the static IPs, or the full subnet, to you dynamic PPPoE address. Zen may do that but that last time I dealt with a BT Business connection they did not. It's easy to test though. Just send some traffic to one of your static IPs from some external source and run a packet capture on the PPPoE and/or it's parent to see if it arrives. You can then use VIPs as described there. For inbound/outbound NAT you can just use the IPs directly in rules. For services on the firewall, like OpenVPN, you need a VIP. https://forum.netgate.com/topic/80509/bt-infinity-with-block-of-5-static-ip-addresses-fibre-modem-pppoe-wan-dynamic Steve

@piba @stephenw10 Ok you convinced me. Updated the subnet. [image: 1610483957327-490d19f1-cfe7-49a4-87c7-0318f65f13ba-image.png] I'm still unsure if its related to the Virtual IP or not (I don't believe it is) but I have been running into a issue when I try to join a second K8S control-plane node to the cluster. It runs through its join process and then seems to lose a connection and ends up killing the cluster. You can see a post I made about it here on ServerFault if you want. Assuming the issue is not VIP related, then I would say this Netgate forum thread is closed. Thank you everyone again for your help in this matter!

@chpalmer that could be it (let it stay for a night and it started working) when I replaced my tplink with UDM it worked instantly (3 months ago or so) but you might be right next time I will just reboot the modem, see if it help (its in my garage) thanks