I have turned off the "forwarder," in "services -> DNS resolver," and that seems to have completely stabilized my firewall. No more notifications, no more errors, no more crashes (so far).

I recently bulk added 256 VLANs / Interfaces to an existing pfSense box with some python script and had this exact same issue, web panel slows to a crawl on certain pages and delivers 504 on interface_assign.php Figured it was my own dumb fault and tbh it's taken me far longer than it should have to find this thread and that bug report!  ::) Thanks for posting, saved me half a day of bother. :)

That is exactly what I am afraid of.  Maybe I will see if I can lock the router in a cabinet.  Not perfect, but probably better than nothing.

Thanks for a speedy hint  ;D Hmm not sure about whether it is changing, I left the mac adress boxes blank on my lan and lan_port interfaces. Maybe I could generate random macs to put in the spoof boxes and that would stop it?

Installing FreeBSD packages not included in the Package Manager is doable but not recommended. By doing so you introduce security vulnerabilities to your firewall, not a good place to add unnecessary vulnerabilities. Especially when you are adding it for a nice to have feature that you don't need at all. If you must, then search for the forums for how to do it, it can be done.

Hense my apology.

NC360T is Intel  82571EB  based card that is supported by FreeBSD. I currently have one box running  with same chipset and have no problems with cable detection. Does it work on gigabit link? Do you have problem with both ports? Card have LEDs on the both ports, do the LEDs ON/blink when the cable is connected?

I also have a similar problem (Vlan 40 Mnet) .

Are you experiencing across the across the board packet loss (the internet doesn't work at all), or is it particular to your monitor target address? If you are not experiencing across the board packet loss, the easiest guess is that the problem is to particular your monitor address. Try using a different address, such as a google public address such as 8.8.8.8 for monitoring and see if the issue goes away. If it does, you can use traceroute to help you choose an appropriate monitor address.

I'm checking this out more. As we have the export option in the certmanager but it seems that pfsense shows all certificates when you bound the Certificates Page as provilege to the user. It would be nice if you can add the certs to the user and show only these in the certmanager. Anyone some extra information ?

@cluelessvictory: I have ipv6 disabled on pfsense. It doesn't disable anything. Read the checkbox description. The only thing is does is blocking IPv6. If you don''t want the logs spammed, then either allow it, or create a rule to block it without logging.

@malcmail: I presume that still allows the LAN clients to access anything on OPT1? Sure, you always filter what is coming IN on a specific interface. What's coming from your LAN is OUT on Opt1 interface. If you wanted to filter that it would be on the LAN rules tab. @malcmail: If I want to open one item (a printer) to OPT1 users I presume I canset up an allow rule before the deny rule to allow OPT1 net to access 192.168.1.{printer] (clearly with a number instead). Exactly.