Glad you found it.. :)

Or maybe he thought he was helping things by hard setting the speed and duplex where not supported? Auto-neg is my friend...

@stephenw10 probably not, it's a matter of habit. I'll probably disable ARP altogether and see what happens.

Yes usually there is the public IP. I do have a DHCP for my LAN but i doubt that this is the issue here. Either way i entered the DHCP server ip, will see if this changes anything.

@stephenw10 thanks a lot...created and yes it does its job ....perfect

@jpvonhemel said in Cable modem reboot kills Webconfigurator: currently does not have any wan connected. This is a rather normal situation. The first time you powered up your SG-2440, right after assigning interfaces, there was no Internet connection. Console access wasn'teven needed at that moment, you could access right away http://192.168.1.1:80 and login using admin & password.. But now : @jpvonhemel said in Cable modem reboot kills Webconfigurator: When the 2440 boots, I see Starting Webconfigurator... failed. I presume you see this on the console logs. So nginx fails already during booting. When you restart the webConfigurator, you see multiple @jpvonhemel said in Cable modem reboot kills Webconfigurator: pfSense nginx: 2019/09/24 18:38:20 [emerg] 22897#100160: bind() to 0.0.0.0:443 failed (48: Address already in use) this means that the initial nginx process that started during boot can't be killed. It's like frozen in the system, and keeps port 443 (the https port) locked. In such a case, a new nginx instance can't be launched, because it can bind to the same port 443 port. That's not some WAN interface- or DNS bug. probably not even a Comcast thing. nginx should not fail at all like that. I advise you to save your config file - can can find it here : /conf/config.xml and save it. Now, reset (option 4) to factory default. Or even better re install pfSense from scratch. Such an operation will never hurt pfSense and guarantees good files and initial settings. Do the same tests. Does nginx launches correctly now ? With WAN hooked up, or not ? After importing your config, is everything still ok, or the problem comes back ? (and if so, throw your config file out of the window). During all this, the system logs could mention important info. Look here : [image: 1569387803519-a59a648a-41d9-4d5e-b824-335e090ba2c7-image.png] ( in Status > System Logs > Settings ) What do you think ? It's time to see some (nginx boot) errors. Set this option, and reboot your device. Show any suspicious boot - system log - messages.

@Raffi_ said in Infection happened - what now?: Find the client with the problem ASAP and remove it them from the network.

You can only use accounting by authenticating against Radius in pfSense. I've only ever tested that using the Freeradius package personally. Steve

Hmm, well glad you got connected. It certainly shouldn't take any time. The console output looks like it was just refusing the login for the mgr user. Perhaps the user had been edited and chnages not applied? They would then be applied when you made some other change which can look like this. Steve

@tman222 It sure does - helps a lot. Yes, I have a dedicated management PC with the Unifi Controller installed. I will be sure to set up Port 4 correctly. Cheers!

Do you see the laptop in the pfSense DHCP leases table in Status > DHCP leases? I expect you will otherwise you would have bigger problems than just not being able to access the printer. That traffic should go directly between your laptop and the printer if the Asus is acting purely as an access point. pfSense never sees that traffic and hence cannot block it. Steve

user admin in the gui is user root for ssh, it's the same account if you want to add a new user with ssh access you can do it from the gui System / User Manager add a new user, the privilege would be -> User - System: Shell account access

yeah the meme was a joke, the fried cpu was not

While you can't yet change which interfaces the GUI and SSH listens on, you could setup some floating rules to make this easier, something like Pass quick TCP from <your management subnets> to This firewall (self) ports <alias with 443, 22, etc> Reject quick TCP from any to This firewall (self) ports <alias with 443, 22, etc> The "This firewall (self)" target expands internally in pf to any address on the firewall.

ok thanks good info, I fixed the issue, after I connected the lan from the netgate to my pc I eas getting the full 230Mb, so the netgate router was not the issue. so next I removed all the other lan cables from my switch and moved the lan cable back to the switch and now im all good. Looks like I had a lan switch issue. :)

@NollipfSense said in pfSense crash after Blackout: @bmeeks Got to get me a UPS! I highly recommend it. Can save you from a mini disaster during a blackout or even temporary power blip.

@stephenw10 said in What IF's to enable TFTP Proxy on ?: You need to enable it on the entry interface of every firewall the initial request passes though passes through. Steve Thank you Stephen That clears it up :-) /Bingo

So internet in general was working, you had no issues resolving anything.. Just speed test was failing? And you had tried just changing the servers you were doing the test too? [image: 1568859670618-changeserver.png] That latency error you were getting seems to just point to one of there servers being down https://support.speedtest.net/hc/en-us/articles/203845540-What-does-Latency-Test-Error-mean- "Latency Test Error" typically occurs when the server has gone temporarily down. We have a server watchdog that will periodically contact servers to verify they're working properly, but there may be a slight delay before we automatically recognize the server is down. Please let us know by filing a support ticket specifically identifying which server caused the error, and try testing to a different server.

Yup, I remembered now I was showing a technician how to install a production version of our pfsense onto a generic build. He resetted to factory default first and changed the interfaces so WAN was on a usb port. At the time I didn't think too much about it but it turns out to be a big head for me. @johnpoz I would so buy you a case of beer if I can. Thanks everyone for the inputs, I believe this is now solved.

@stephenw10 i like overkill i will go for 3100 and 5100 for the main office. I am also considering upgrading our bandwidth. What do you suggest for a stable vpn connections, or is my current bandwidth are enough?