I figured it out. I created the appropriate entry at the config.xml for the group wheel too!

Thanks

Antonios

I had some really strange issues when I started playing with the MTU settings on the WAN port of my PFSense box. Check with comcast as to what your MTU settings should be.

I forgot the first thing to do to check the direct connection of ISP to my desktop.
my FA converter lights is up and that's why i forgot to check direct connection.

This should be the problem not with the PFSense.
Anyway thanks for the replies and it help me a lot.

Regards

Solved it by removing all packages from pfsense and removed pcre-8.33 and pcre-8.32. Installed snort first, then dansguardian

All good again

Steve thanks for reply,
yes, if i change any client to 192.168.3.x/24 the website browsing

no problem, regardless of subnet if changing the subnet will fix the problem, show me how can i do it
thanks.

Thanks stephenw10, turns out you were right, but not in any way I would have anticipated!

All my equipment was set-up right - but the Quest device would not allow auto-negotiation! Why, I don't know. I had to manually set 100 Mbps/Full Duplex to get inbound and outbound working.

Now pfSense is a dream!

Some places won't let you import without a password. In those cases, enter a space (" ") as the password and it usually will accept that.

What happens if you change it to 'logging' instead of 'parsing'? Or both?

If it's parsing the logs what is it parsing for? Maybe nothing bad enough for it to flag has happened yet.

Steve

I could not possibly say but, I'm happy to test in any way I can though.

@jimp:

You need to have the nmap package installed since it carries with it the vendor database.

Once you have that installed it will show them automatically in places like the DHCP leases and ARP table.

Thank you very much for the support.
I Appreciate it  ;)

Technically speaking they should be equivalent. Especially if you're only interested in the upstream traffic.

The pfflowd package, IIRC, uses data from pf, so it's possible there could be more data on the wire than is reported by pfflowd, in which case the switch would be more accurate.

Boot messages only are in /var/log/dmesg.boot

That one is actually in plain text format. No need for clog on that one.

Beyond that, clog /var/log/system.log

There is some console output that does not get logged anywhere, no way to capture that unless you're recording it over serial console.

I had a desktop once that did that when it had an overheat condition. I'd also lean toward hardware causes.

Use NanoBSD or the serial memstick. Assuming your system has a serial port to use for the console. If it doesn't, I'm not quite sure how that would react.

Could it be that your hardware is too slow?

I am asking since another member here who has the same ISP as I have experienced slow downs in his VDSL after using a rather 'light weight' hardware configuration. I have a relatively powerful configuration (brand new stuff, Intel Celeron G1610, Intel mobo/NICS, fast WD hard disk) and I don't notice any speed losses at all.

The package version is the same but I remember that I got a ipguard.sh in rc.d when I installed the package in pfSense 2.0.2.
I monitored the boot process. pfSense somehow has IPguard registred as a service (I know, as It tells me that it is going to start ipguard) but it fails to do so (most likely because it's missing some ipguard startup script). I'd rather like to understand how pfsense handles services in general, since it differs from freebsd's way (at least in the nanobsd version). That's why I posted here :)

Probably safe/harmless, since it may not use that part of the BIOS.

I see that on mine too.

@wallabybob:

@Hitman247m:

I wish some of my downloads were as "horribly slow" as yours :-)

The "sometimes" suggests to me you might be encountering congestion when you see slow downloads.

@Hitman247m:

I'm trying to download some very large files, and FTP is the only practical way I can do it at the moment.

I have had consistently poor results (Firefox marking incomplete transfers as "finished" with no obvious indication they were incomplete) using Firefox to download multi-media files or more than about 100MB so I resorted to using wget for that sort of download because it can often resume a download from when the connection broke rather than start again. wget can download files using ftp protocol. But I don't know have enough details about your environment to know if this is a helpful remark.

Ok, thanks for your help. It probably is network congestion.