First thing I suggest you check is that the DNS is resolving from the firewall: diagnostics dns lookup enter 'system76.com' and press lookup and you should get a reply from all of them. [image: 1585876768453-b9bf19ae-2cd3-4919-b12b-20941884bf18-image.png]

Here's what I'm seeing. Custom view from 12PM - 5PM today. Processes has been removed from the graph. What I'm seeing here is not just barely 5% CPU? [image: 1585868481330-monitoring.png]

yes of course, but when you want to restore that section you need to select the same section on the drop down menu

@VirtuousMight I don't know that you can do anything to cause leases to renew. They'll renew when the clients are ready to renew. The server only responds to the requests. What you can do is disconnect/reconnect the Ethernet cable to a device. It will then do a renew.

@kevindd992002 said in pkg update -f and pkf upgrade -f: apt-get does, but not apt. Anyway, will doing a pkg update -f do any potential damage compared to just letting its thing do without the switch? No, so long as you have not manually monkeyed with the repo.conf file and say pointed it at some other remote repository that might contain different versions of stuff. But with a stock pfSense installation there is no harm in using the -f switch other than just downloading and rewriting data that strictly does not require such.

@araujovitorpaulo said in Help trying to get a new repo on my 2.4.4 p1: @NollipfSense that was an alternative at the beginning, but when I search for updates, it says that the server is up to date (http://prntscr.com/rrnrc0). The only way to recover it is making a brand new server with the 2.4.4p3 installation? 2.4.5 is the new current version. Unless you have an existing copy of the 2.4.4_p3 install media, it is no longer available from official sources. You may find unofficial copies out there someplace on the web, but I would be wary of such things. You can do a frresh install using 2.4.5 media and import your existing configuration. There are instructions for doing that in the Netgate docs.

Hi, I'm not using VLAN's (on pfSense) neither VLAN capable switches. But I have a private entreprise LAN 192.168.1.0/24 which contains several AirPrint printers. I also have a second LAN, a public network 192.168.2.0/24 that can't access my LAN at all - just the gateway to the Intyernet. It's a pfSense Captive portal, available for the companie'ss visitors and clients (a hotel). I created this rule on the captive portal's interface : [image: 1585813144489-d563e8e8-4ca9-4f37-9e9f-c7734afb1ffc-image.png] You - as a network admin should also ask yourself : how does AirPrint work ? This question isn't optional any more as soon as you have multiple LAN's, and you want devices on one LAN network use devices on the other network. You discover that the question is already known ^^ and you install the pfSense package Avahi. Test on your device with a software tool like Discovery on an iPhone or iPad and you'll see that Avahi works : devices that expose Airprint - and many other - services are listed, and you can print ... Btw : again : I'm not using VLAN (yet). Note : if your printer and devices that want to print are on the same (V)LAN, that your issue isn't a pfSense issue. Redo your VLAN settings which might include your printer. remember : VLAN are like LAN's, they just need more hardware and hassle.

@nevets No problem, given it's widespread it seems like it's a Comcast bug? Firmware? Expect it to recur in a month or two... :(

I do understand but ever since I installed the new version, I had to reboot the system once a day so that my web server and, mail server is accessible from the outside. When I access the GUI the widget for haproxy is showing the backend as down while the service is running, I can't even remote desktop connect to the server. I Had made no hardware changes and everything was working fine prior to installing 2.4.5

@ptt Thanks for your help! pfSense is awesome! But you can call me an idiot but I could not complete restore during USB install from another USB stick :(

As far as I could verify my internet provider is forcing the resolution of names in your DNS

@bcruze thanks - I'll look into this as well.

https://docs.netgate.com/pfsense/en/latest/book/firewall/time-based-rules.html

@teamits, thank you - firewall reboot helped!

@Gertjan said in Zero Day Exploits - How to Reset Everything: You saw the film / video @johnpoz mentioned ? I watched it many (40?) years ago. My girlfriend (later wife) almost jumped out of her seat, when the alien came out of the body!

Yep, i use suricata in inline mode(i have a few public game servers). Didnt noticed any dropouts or issues, and after a while those messages stopped so IDK. Maybe it was a temporary hickup or something.

Thanks. I wasn't sure. It rebooted fine and works, so...

Oh I think I see you're saying one NIC in for WAN and use two NIC out for like LAN, if that's the case this won't work, I bought a micro computer that came with two NIC's and no way to expand. that one of those little 12"x12" computers