I'm very sorry for resurrecting this thread - but this thread is mostly the first hit you find if you google for something like "pfsense slow login" or "slow dashboard" and for me it initially did not help, checking my DNS-settings. after hours looking for a solution I stumbled over this reddit post - https://www.reddit.com/r/PFSENSE/comments/lmubku/comment/gtj41yl/?utm_source=share&utm_medium=web2x&context=3 disabled "firewall logs" widget - and dashboard now loads fast and login is also fast. The strange thing is, that I have another machine with a virtual pfsense installed (pretty much same hardware - cpu, ram, disk) and had the dashboard equally configured (and mostly all other settings are equal too) where this long loading issue did not happen.

It may be possible at the OS level. It could be simply the GUI input validation preventing it as unexpected. You could try creating a custom conf file for it.

What's it actually sending? Do you see anything in the logs in pfSense?

@gertjan sorry for misunderstanding i was trying to say that currently its installed on dell r710 server machine device which have on board 4 nic

Problem resolved. It was a problem with the mini OS X. I checked the firewall log and nothing. I also temporarily disabled the pfblocker and no help. I did find a thread on the Apple Community board that said to go into "system preferences/internet accounts/iCloud and uncheck the mail service. Then wait a minute and re-check it. That fixed the problem so none of this was pfSense. It was all the MAC. Thanks for your suggestion and it helped point me in the correct direction.

Dev snapshots build nightly whether or not changes have gone in. There have not been any new 22.01-RC builds for a while. Steve

Our own guide is a little old at this point but still valid: https://www.youtube.com/watch?v=FJSHMyrd29E&t=78s https://docs.netgate.com/pfsense/en/latest/packages/haproxy.html Steve

No trailing slash? Standard port? Without seeing the actual file you're using we can only guess.

@murat-1 I found the solution. It is related with Internet Explorer Enhanced Security as below: Go to Start menu and click on the box that says Server Manager On the Server Manager’s dashboard, click on Local Server and then click on IE Enhanced Security Configuration option Turn it off for Administrator and User then enter the pfsense :)

I would not expect it to. Does it show it in /var/etc/mpd_wan.conf ? Assuming that's the WAN interface. Steve

@sand7000 In my case, I always test and try to exploit every 1 of the published vulnerabilities to confirm for myself that they are not applicable Until now, it has been shown to be very, very reliable.

OK...I'm stopping. Apparently the pfBlocker VIP and Web Server Interface ports were "sticking" and after several changes and Force Updates I got the DNSBL Webserver ports to change to 80 and 443 on localhost and set the VIP from 10.10.10.1 to 192.168.254.254. Everything seems to be working... NTP with localhost and not WAN selected syncs, Avahi is happy (that was a red herring), and pfBlocker is working. It all seems to come down to, for some reason that I don't know, on this firewall NTP binds to the VIP because it is lower, where as on the SG-5100 NTP ignores the VIP even though it is also lower. Thank you for your patience and all of the assistance. Edit: I figured out why the SG-5100 works... It has a VPN server at 10.3.x.x, BELOW the DNSBL VIP of 10.10.10.1. Whereas the VP2410 VPN is at 10.42.x.x, ABOVE the DNSBL IP. This was the difference all along and it is the VPN IP that NTP is now syncing to on both systems.

@stephenw10 Thanks for clarifying. I found no mention of the red blinking anywhere, probably not looking at the right place. It was easy enough to fix with excellent help from TAC Lite support. A few fsck did the trick. I will be more careful of how I use the reset button from now on, always initiating from within pfSense when at all possible... :)

@stephenw10 Maybe spoke to soon, another test or few now a 'D' or 'F' with nothing changed. As you mentioned I think it needs a bit of fine tuning especially with the bandwidth settings

@brundle said in Change SSH shell: OK. The admin account has the same UID and GID as root in /etc/passwd. Am I right to assume that it has the same privileges? Yes, they do, they are equivalent, but have some (necessary) differences in how they act at the OS level. The admin account is locked into the menu for its shell, root is not. The root account starts the menu at login but isn't locked to it in the same way. This is important for the console autologin process. I don't want to have to create public/private keys for the admin account to put on every system I have, instead I would like to use my regular user account and my regular private key. Once logged in I want the exact same behaviour and privileges as for the admin account. Is this possible? Only by using sudo as with any other *nix system. This isn't a special case, it works like any other BSD/Linux/whatever server. You could put your existing keys into the admin account in the GUI and just ssh into that if you like (it would work for root@ and admin@) though it is better to use your own account if you're already used to that. You still have to setup the account and keys in the GUI, though. I'm considering just copying the UID, GID and Shell fields from the admin line of /etc/passwd, but I worry that might break something. Any advise? That won't persist without editing the source to control how the accounts are generated, and is completely unnecessary.

That install has a file system issue but unless there is something on it you need I would just install 21.05.2 clean. Instructions for doing so are here: https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/reinstall-pfsense.html You need the specific 3100 image though so if you don't have that open a ticket to request it: https://www.netgate.com/tac-support-request Steve

Thanks for the reply Steven. Yes that is the hack I was referring to. Good to know it is not a concern in pfSense. Sorry for the newbie "BSD" reference.

@stephenw10 said in Footprint of Old Box in New Box?: I would also remove the MAC spoofing since that is doing nothing. Okay, will do that also, thanks.

i already was thinking of the SD card... but there was a little hope ;) the new msata ssd is already ordered. and now i'm hopping the SD give its best for the next 2 weeks. these pfsense is over 4h away from my home and i have no time to go there... thanks to all

I updated again without the traffic shaping and all is working ok! I really like the TS to manage my bandwidth! I don't see any improvement on the issues! Will this be solved? Tks