@Cyberben: I can use my browser to get to the machine through WAN/dhcp. When you setup a router / firewall device, you hook yourself up for initial setup using a local serial port (could be a serial over USB), or a dedicated NIC, or, by default, the future LAN NIC. Never ever the future WAN port. That goes for pfSense and any other device on this planet. Knowing this, you will find this : @Cyberben: I simply tell the machine there is a LAN NIC I loose connectivity to WebGUI. … normal.

"ftp server is IBM mainframe and that's location is in our main office. " Then why would you be natting inside your own company?  So you running what OS z/OS?  sftp (ssh) is available on pretty much every OS on the planet.. "those force us to use cmd ftp to get some files" Not really no..  there are many ftp clients you could run on windows that allow for scripting that support way more features than the built in cmd.. If your using active then install ftp active package for pfsense for your clients behind pfsense.. https://forum.pfsense.org/index.php?topic=89841.0 [image: ftpclientproxy.png] [image: ftpclientproxy.png_thumb]

Did you solve this? just got the tg-789 (fttn) trying to bridge it. UPDATE By using IPv4 Configuration Type DHCP it now connects however the gateway shows offline WAN_PPPOE IPADDRESS 0.0ms 0.0ms 100% Offline

@xenu: I have a UPS connected to my NAS box, and it runs nut. I have pfsense UPS configuration set to : "Remote NUT server". The problem is if I have a quick blip where the power goes out for a few seconds and returns, the pfsense box shuts itself down. The shutdown timing is controlled by the NUT master server. Some UPSs have an issue where they send a low battery notification almost immediately after going on battery which will trigger slaves to shutdown. To change this, you need to set ignorelb on the master server. See 'ignorelb' in the ups.conf man page.

Thanks. That did the trick.

SSH is useful for troubleshooting, transferring files, and restarting the webgui if for some reason it stops responding. You can block both (webgui/ssh) to only be accessible from a management network, that would prevent all possible exploits in those services as to exploit either someone would need to be able to send it at least some 'malicious' packet..

@DeLorean full version on USB should work fine, just make sure to enable memory disk for /tmp and /var.. Anyhow its the only choice going forward with 2.4..  https://forum.pfsense.org/index.php?topic=121255.0

The SYN retransmit looks like there is nothing accepting the connection.. Would think nginx aint running then.. Can you try when the problem occurs?: sockstat -4L | grep nginx Then while trying to access the webgui: pfctl -ss | grep 443 Anything special configured/installed? bridge/HA/squid/snort/suricata/other? Any portforwards that might be preventing traffic reaching the webgui?

@a_thiha: …. I reinstalled pfsense. Version 2.2 ???????????

Thanks guys. When I get home I'm breaking out the coffee & starting the process of chasing where the config is broken –- Edit: I got home & you were correct it was a configuration issue. Embarrassingly I setup my static IP  incorrectly on the WAN side. I've corrected the configuration & everything is working now. Kicking myself for looking at that 4 times & missing that the subnet was incorrectly configured. Appreciate your help & patience

Is this Sierra? My first idea - don't use PPP. Not sure that the drivers for other modes (qmi, mbim) are available on FreeBSD though. I'm currently using Sierra's EM7455 on Openwrt based router.

@barbatrukko: @Gertjan: You checked this : https://doc.pfsense.org/index.php/Executing_commands_at_boot_time ? Or this : the Cron package ? Hi, the first link is about "boot time" and is not what I want: i want that all days at some time system execute a command. The /etc/crontab file is constructed at boot time. Use the info found here https://doc.pfsense.org/index.php/Executing_commands_at_boot_time to "add" your own lines. The will last because the file only gets created ay boot time.

why would something that is local to 1.2.3 even talk to pfsense to talk to something else on 1.2.3.. "Now we have lots of App and Links with us from long ago configured with IP 1.2.3.5" You configured stuff to use an IP and not a FQDN??  Yeah fail for sure.. You do understand that a machine especially a webserver for example can have more than 1 IP on the same network right.. So your new server can have 1.2.3.4 and 1.2.3.5 and serve up stuff on port 80 for either of them..  Your server could serve up http (80) on hundreds of different ips if you wanted too, etc.. What you should be doing is redoing all your stuff that have a hard coded IP in them..  This is just bad bad bad idea all the way around!!

Well… Something booted from something. FreeBSD is present on a drive ..... Btw : before the BIOS even knows it HAS drives in the system, it menu is accessible. The method of accessing has nothing to do with FreeBSD or pfSense. See the bios manual for the procedure. When the USB booted (the pfSense pre installer) , AND it recognizes a disk where it can install TO, then the install menu will be shown. This menu will offer you to empty your SSD drive . Of course, if these conditions aren't met, nothing will ne shown ... because nothing can be done.

Would seem this is a known FreeBSD bug, and has been fixed in pFsense 2.4 beta release available now. https://forum.pfsense.org/index.php?topic=119497.0 https://redmine.pfsense.org/issues/6949

Hi NogBadTheBad, Thanks for your information. I forgot to inform you for my pf. My pf is running on vmware and now I was fixed this issue. For my setting on my vm host I have cofigure vlans to an interface and enable "route based on the originating virtual port ID" also setting lan to vlan id to 4095 finally setting port switch to tagged. Thanks.