@stephenw10 Ok so when you are not using the ISPs router you're using some other PoE injector to power the wireless hardware? Are you sure that is powerful enough? They gave me the POE power supply so unless its faulty then yes. The first thing shown in that log is the daemon starting the connection but it looks to have started before the previous connection had stopped. No timeouts or errors shown before that, something must have triggered that. Yeah I copied the log from the last time it had dropped out till the current time, but it all looked ok to me but I'm no expert in finding errors in logs. If the wireless device at the dish end is rebooting for some reason you would expect it to lose Ethernet link which pfSense would log in the main system log. You do not see that? I'll have a look through them then and see if anything sticks out. thanks

Still 'when it's ready' You can follow the open issues here though: https://redmine.pfsense.org/projects/pfsense/issues?query_id=106 Steve

@stephenw10 Thank you for the response. Setting the WAN as the default gateway seemed to have helped, it was set to auto. I'll continue to test.

Thanks all! I'll check and then I'll report back.

@bingo600 Thanks :-) Also noticed the Qotom in your signature block, I bought Qotom-Q515G6 late last year and very pleased with its performance so far!!

@stephenw10 can you please check this critical bug in 2.5.0: https://forum.netgate.com/topic/159354/pfsense-2-5-0-a-20201127-0650-nat-issues/1 ?

@bingo600 said in How to use regex in pfsense firewall logs (GUI): 192.168.20.2 You are spot on and worked like a charm Thanks a lot!!

Both units in: Diagnostics \ ARP Table show the same MAC (learned and expiring) for Gateway , I haven't change anything in terms of gateway. You see this setup "in general" works, but all of the sudden WAN communication stops, but as I learned it starts to work again after some time, by itself. Really strange ... Thanks for your help! Andrzej

Look at the state table (Diag > States) and filter but the destination IP. If it's matching traffic you will see NAT'd states on the LAN

Perfect - thank you. As I restarted each client you could see it moving through each one. Now ticked and it no longer happens. Thanks again

The client side can choose to reject everything the server sends including the timeout values. What are those remote routers? How are they configured? You should think about moving to a more rational setup with multiple clients connecting to a single (or few) server. Changes like this would be far easier. Steve

Yes, edit the WAN gateway in System > Routing > Gateways and set a public IP, like 8.8.8.8, as the monitoring target. Then check the Status > Monitoring : Quality graphs and you will see any packet loss or latency. Steve

Hi commander, your use case sounds like a no-brainer for pfSense. The hardware choice depends on your WAN bandwidth / VPN bandwidth needs. -Rico

@peter_apiit Run them either as VMs or in containers. I have both Grafana and Graylog in containers on Debian, but you can use any OS you like that supports docker or your chosen containerization system, if you're not comfortable with containers, use VMs, again choose the OS you like or use Turnkey prebuilt systems

Up and running now, thanks guys. It seems the complication were specific to my configurations so once a few settings were changed it all clicked into place and started working. Happy Holidays!

@jwj Can but hope that the home IOT/Router vendors up their game a bit so we don't need these "security" work arounds. "Work from Home" is going to be moving up the ladder as a security attack vector.

@sjp770 Found this via Google:- https://github.com/eihag/pfsense-stats

I agree that would/will be better. It was not possible to do that in pf when that code was added originally which is why it's like that. Steve

@heathy65 said in Unable to access pfsense via serial cable: MNHO-073 That device has an hdmi output, does that work as a console? It may have been installed without a serial console enabled, who installed it? What image was used? Steve