The health feature would be a good idea. Although it's been over a month now and Snort has been stable with-out Service Watchdog, the problems we had with Snort in the earlier versions of pfSense no longer appear to be present. At this stage I suspect the crash may have been the result of a conflict between Snort and Service Watchdog possibly while Snort was updating.

@stephenw10 said in Use of hostname inside LAN: Yes, like that. You don't need static ARP just static DHCP mappings. Steve Got it. Thanks!

There may not be a GUI on that. pfSense its its own operating system that happens to be based on FreeBSD. You appear to have a FreeBSD system that someone manually configured to be a firewall. pfSense can't help you get any information from that. You might try posting on a FreeBSD forum for help in tracking down the information you need from that system.

Hi @stephenw10 Them is better to trust what 'top' show us insted of the GUI, right? Thanks.

Thanks Steve. I have opened a new topic here: link text

Ha, no problem.

The thought was more of a "defense in depth". If something gets through pfsense, the second firewall may catch it (or vice versa). I will take another crack at it tonight by shutting off NAT on the internal firewall. Thanks for the timely responses all.

Openappid in Snort is the only option for filtering at the application layer. If it does not detect the traffic as anything other than https there's not much you can do. There probably are blocklists available for most of that though. I would try installing pfBlockerng-dev and look at the feeds there. Steve

I mean just what configuration have you made to enforce Google safe-search. Redirects in Squid/Squidguard? Local DNS overrides? Configured in Google Chrome locally? Or something in Google remotely? Steve

Yes, setting the other router to whatever bridge mode it might have available would affect anything using it directly. Really you should look at using pfSense instead of that router and having a separate wireless access point behind it. You may be able to use the ISP router for that purpose: https://docs.netgate.com/pfsense/en/latest/wireless/use-an-existing-wireless-router-with-pfsense.html It depends what sort of connection you have and whether it has a separate modem. Steve

thanks, you are very helpful and sorry for me beeing so untalented

Thanks, it is working now.

It would be via the site A end of the site-to-site tunnel. If you add it as a remote network in the OpenVPN config that will be set for you. Steve

@stephenw10 Ok and that was exactly what i observed :) Thanks again!

Ok. Thank you :)

i just reinstalled it and everything is working great now. thank you!

Thanks everyone it worked....

@stephenw10 thank you, that was actually very helpful. Initially I've enabled the DNS Forwarder, but I selected the VIP in interfaces and checked Strict Binding. Now when I rethinked I chose LAN from interfaces with Strict Binding enabled and it works after reboot I can verify using dig that everything works as expected.

@stephenw10 said in Dashboard overuse cpu: Hmm, that does seem excessive, unless each of those cores is running at 100MHz or something! What widgets do you have on the dashboard? That looks like it's from the firewall logs widget. Are you logs files set to a huge size? Steve Thank you, finally after cleaning the system logs and those of pfblocker the use of the cpu is back to normal.

Most every time I've had a system shut itself down mysteriously it was due to a BIOS overheat event. Might be something that only happens under load, and happens very fast.