Thanks all for the help. Manually clearing the logs and then restarting suricata seems to have helped; I now see the logs rotating as they should.

@jimp My CPU is soldered on a mini ITX MB but the heat sink may be removable. However I have never seen CPU temp above 40 deg C so I don't think its an issue. I read somewhere in these forums that there was a BIOS setting that fixed a users errors. I found a "Turbo Mode" in BIOS that I disabled so maybe that will help. I haven't seen any more errors since my first post.

@natanaelmm29 said in Cannot access DMZ server from LAN: specific file and put 255.255.0.0 mask instead of /24 Yup that would do it ;) Glad you got it sorted.

Hello again and again, thanx for your reply! I am with you at the points of failure of new hardware... :) So far, I am glad (and thankful) for you looking at the reports. Glad, because there seems to be no "obvious" config problem. I guess I will sit it out, since I am playing with the thought of purchasing a new device to run pfs on. I am bugged by this ever since upgrading, but so far (luck?) nothing "happened" with the system (aka break down, not working, nuclear explosions). So I will save my money, not buying yet another mSSD but saving it for the new device (either 4100 or 6100). Maybe someone has another idea about it (but since a pro like you cannot come up with the ONE solution or explanation, I doubt it -no offense, guys and girls)...

Be aware that most of those functions won't work for non-root users even if they are in the admin group. You should install the sudo package, grant access to the admin group users to run things as root, and then run the menu with sudo /etc/rc.initial. They will be prompted to input their password again unless you configure sudo to allow access without a password.

@jimp Thankyou so much, its very helpfull

@stephenw10 AWESOME. Worked great SO: Bug: zfs + ram disk for tmp and var Result: wipes /var/db/pkg and replaces with links (and /root/var/db/pkg, and /var/db/cache) Easy workaround for now: Do a full backup including extra info. It will contain all of your packages AND settings delete the link folders recreate a base pkg database # mkdir -p /var/db/pkg /root/var/db/pkg /root/var/cache # pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade # pkg-static upgrade -f (from https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#forced-pkg-reinstall ) Edit the backup XML file as @stephenw10 described. One line to delete: <use_mfs_tmpvar></use_mfs_tmpvar> Restore the backup. All packages will be restored including their configuration.

@johnpoz @stephenw10 I see. pfBlocker is on my list to learn next. Will start looking into it and explore. Will come back to you guys and the forum if there're questions in the future thanks for the input

Open a ticket with us: https://www.netgate.com/tac-support-request There isn't yet an automated way to do that. Steve

@stephenw10 said in historical log for WAN latency and performance: Have you tried using Easy Editor? It's about as easy as it gets for editing a txt file. Nano are much better! In combination with zsh+ohmyzsh (+ Fish-like color code highlighting, code suggestions and multi-word search) - are perfect toolset. (7min step-by-step instruction how to quickly installing zsh, ohmyzsh + zsh-highlighting You may see here). Strongly recommend to try! If a You spend such amount of time in CLI, zsh make a You happy. Like ping comparing with Smokeping ;)

@stephenw10 said in [WORKAROUND] Unable to update and package install (ERROR: It was not possible to identify which pfSense kernel is installed): This? SSH KeyGen pfSense has started creating missing SSH keys. SSH Startup will be delayed. Please note that reloading the filter rules and changes will be delayed until this operation is completed. @ 2022-05-01 12:55:10 That's normal whenever new keys are created. Which until 22.01/2.6 was every install or config reset. Steve Thank You, Steve!

this fixed it seems to be working fine now. no problems so far. @fireodo said in router randomly freezes: @elliopitas Hi, maybe thats a Realtek driver problem. Read this: https://forum.netgate.com/topic/166746/realtek-re-kmod-missing-in-pfsense-2-6-repository Could be a possible solution ...

@jonthemusse said in Filtering out multiple colums in DHCP leases: Hi, I'd like to figure out regexp on dhcp leases to filter several columns. Like online and static for starters. Basic regexp doesn't seem to work. I suck at it though. Jon Try:- https://regex101.com/

Are you sure hyper-v is passing the tagged traffic? Can you test running baremetal on something? Steve

When you set outbound NAT mode to manual all the auto-added rules are created as manual rules to start with so you still have connectivity. When you go to Hybrid mode those manual rules are not removed but the auto rules are also applied. You will see most are duplicated. You can remove all the manual rules except the VoIP rule you added as the auto rules now cover that. Steve

I just found this being discussed here

fe80 are link-local addresses. I wouldn't expect to see host names against them. Do you see host names in the dhcpv6 leases table? Steve

Thanks to Netgate support. To close this loop, it was this bug: https://redmine.pfsense.org/issues/11626 For now, an stunnel is required. It should be fixed in 22.09. Thanks again!

@stephenw10 I have dropped out of many groups because members reply with a redirection in effort instead of working a problem. One fellow asked why I wasn't using a VPN to access my web content. I explained that the purpose of the website was for public use, not private. Or one fellow suggested I change from ESXi to ProxMox... Naw... too complicated for my purposes, and it means starting over from ground up. I have enjoyed pfSense and need to be sure I've got it set up to give me maximum protection. One fella said Port Forwarding was risky as it opens you up to hackers. Well yeah, I knew the apps would be at risk. That's why I use ESXi, and backup my VM's. Get hacked... dump and replace... My next job is to configure the email blocking that is provided under "feeds". Thank you Steve