The log format of what? The filter? Or something else? None of the log formats are customizable, though if you have enough C programming knowledge you might be able to change the filterlog daemon to output the format you want. But it's not simple nor possible on the firewall itself.

Look in the main system log, it should have an entry there as well. Something has to be generating the notice, and it's most likely from a package. The log entry from the main system log may at least show you the script that was running which generated the notice.

"Since bridging anything is just a bad idea" Hey there you go your getting it ;) So I am really confused with this statement EM2: VLAN 551 EM3: VLAN 552 Brg551552: Bridge of 551/552 So your 2 different vlans are on the same layer 3 network?  Makes Zero sense.. If your wanting to bridge 2 layer 2 networks.  This would become 1 vlan..  With 1 layer 3 network on it.  So why would you call it 2 different vlans with 2 different vlan tags?? "Once spanning-tree was disabled" That seems like a really bad idea if you ask me…

It was already covered in the book but I added it a couple places in the wiki just now.

It's not intended to be used that way, so there is no way to make that work easily. You'd have to keep XMLRPC disabled (remove the user/pass/URL) and then fill it in only when the backup is online. It would be better to keep backups of your running system and restore a full to the second box when needed, or always keep it online. The sync doesn't happen randomly, it happens any time there is a configuration change.

Thanks I'll try this.

I have never done that but I would think that would mean all rules on both the member interfaces and the bridge interface are ignored.

$44/yr is expensive?  Most people have paid that in Netflix fees in 4 months…

Problem solved. It turns out our ISP upgraded their equipment that interfaced with our static IPs to a Cisco Multihome chassis. They were able to queue a command to their systems that allow multiple IP's to a single MAC. I'll share some information I learnt along the way in case anyone else has this problem: a) you can try to lease the IP with CARP. This didn't work for me, but theoretically it should use a new MAC address for the connections. b) I was able to create a fake virtual adapter using ngctl and was about to create custom routes for this to work. I didn't complete this testing but ngctl looks pretty powerful, I'd like to play with it more.

Yeah there is definitely some confusion. I've been trying to clear that up in the book and hangouts, will eventually get to the wiki once the book updates are done.

tracked the problem its proxy problem, in pfsense & opensene even in cent…  behind squid  getting  wrong currency format  but in Debian Linux its working fine

can be anything. connect a monitor (or serial) and take pictures. it also can't hurt to copy/paste the system log. it might hardware or mbufs or …

Did you find a solution?

I see this is your first post, welcome to the forum! Have you followed the multi-wan setup guides at https://doc.pfsense.org/index.php/Multi-WAN ? That would be a good place to start. Your post is a little lacking in details.  Please post some screenshots of your "Routing > Groups" section as well as Firewall rules specifically the "LAN" tab.