@bingo600 said in How to use regex in pfsense firewall logs (GUI): 192.168.20.2 You are spot on and worked like a charm Thanks a lot!!

Both units in: Diagnostics \ ARP Table show the same MAC (learned and expiring) for Gateway , I haven't change anything in terms of gateway. You see this setup "in general" works, but all of the sudden WAN communication stops, but as I learned it starts to work again after some time, by itself. Really strange ... Thanks for your help! Andrzej

Look at the state table (Diag > States) and filter but the destination IP. If it's matching traffic you will see NAT'd states on the LAN

Perfect - thank you. As I restarted each client you could see it moving through each one. Now ticked and it no longer happens. Thanks again

The client side can choose to reject everything the server sends including the timeout values. What are those remote routers? How are they configured? You should think about moving to a more rational setup with multiple clients connecting to a single (or few) server. Changes like this would be far easier. Steve

Yes, edit the WAN gateway in System > Routing > Gateways and set a public IP, like 8.8.8.8, as the monitoring target. Then check the Status > Monitoring : Quality graphs and you will see any packet loss or latency. Steve

Hi commander, your use case sounds like a no-brainer for pfSense. The hardware choice depends on your WAN bandwidth / VPN bandwidth needs. -Rico

@peter_apiit Run them either as VMs or in containers. I have both Grafana and Graylog in containers on Debian, but you can use any OS you like that supports docker or your chosen containerization system, if you're not comfortable with containers, use VMs, again choose the OS you like or use Turnkey prebuilt systems

Up and running now, thanks guys. It seems the complication were specific to my configurations so once a few settings were changed it all clicked into place and started working. Happy Holidays!

@jwj Can but hope that the home IOT/Router vendors up their game a bit so we don't need these "security" work arounds. "Work from Home" is going to be moving up the ladder as a security attack vector.

@sjp770 Found this via Google:- https://github.com/eihag/pfsense-stats

I agree that would/will be better. It was not possible to do that in pf when that code was added originally which is why it's like that. Steve

@heathy65 said in Unable to access pfsense via serial cable: MNHO-073 That device has an hdmi output, does that work as a console? It may have been installed without a serial console enabled, who installed it? What image was used? Steve

Can you explain that differently? You are trying to bypass a 100Mb connection to the facebook CDN? You have two WANs? You are trying to limit the speed of connections to facebook? Steve

It's hard to imagine anything in pfSense causing this, it looks like some upstream issue to me. Have you tried using a vpn and connecting over that? Does that also fail? Steve

You need to open a feature request here: https://redmine.pfsense.org/projects/pfsense Unless you find something there already of course in which case add your comments to it. Steve

@pppd hello, No process are currently there agains bruteforce... You could possibly submit a feature request?

@nogbadthebad said in Is this a good network architecture/configuration that makes good/secure sense?: Also if you need to extend your coverage you can just add another AP. Hoping to avoid buying another AP. I will try it with all 3 SSIDs on my Unifi.

Doesn't matter if the time is correct with the correct timezone... But if your time is OFF based on the timezone it thinks its in - then yeah that is going to be problematic.. As long as the time is correct for what timezone your in, or the OS thinks its in that would not be a problem.. But if your in say central timezone, and time should be 10:03 in that tz.. but your system thinks its 1403 then yeah that is going to be problem.