One of the suggestions here should work http://doc.pfsense.org/index.php/I_locked_myself_out_of_the_WebGUI,_help!

If you are stuck and can't access the GUI, check this doc wiki article: http://doc.pfsense.org/index.php/I_locked_myself_out_of_the_WebGUI,_help!

i figured it would be something along these lines ;) could i propose a feature request for pfsense 2.2 or 2.3 to have a migration "wizard" for this scenario ?

What is your Monitoring IP set to?  I had mine set up to monitor the router IP address, which for some reason wouldn't renew even if it said the link was down.  I chose something like 8.8.8.8, which for the time being has maintained my connection when the connection goes down.  My ISP was working on their infrastructure and I wouldn't get the same router address when their systems came back up.  This would force my IP address to completely change.  This for some reason would cause the WAN port to not renew it's IP address and I'd have to come in and manually release/renew it.  For now I haven't seen the problem occur again and changing the Monitoring IP may have helped.  System->Routing->Gateways.

Any time you go through the setup wizard, it pre-fills the values from the last time the setup wizard was run. That may or may not be the actual config that's in use now Well that answered a question I had on why my setup got all bollixed up. Maybe a warning note in the wizard letting you know "The settings suggested may not match your current ones, check carefully." would save others from grief. Thanks!

@cmb: scp is a "very slow" protocol, it's designed to be secure, not fast. Getting 70 Mbps may well be the best you can do. You're not going to max out any hardware resources when doing a scp transfer generally. Google "scp slow" and you could spend months reading the results. Windows is worse if it's your client, OS X, BSD and Linux clients will be faster, but still nowhere near as fast as the hardware resources can transfer. Thanks a lot. I was just wondering why. I even used jumbo frames at 9000.

@danielc: does anyone know if Pfsense has some software that will put the PC into a stand-by mode after like 30 minutes of no activity, and then wake itself up whenever it receives a request for internet access? You can't wake a system upon a request for Internet access, just not possible with anything. Besides, even a small home network is highly unlikely to have 30 minutes of inactivity unless you power off every single Internet-connected device. Best to get something low power and leave it running. Only alternative is to power it off and back on as needed manually, or via wake-on-LAN.

@joako: This has happened to be before… loading the embedded image and expecting output on the monitor. Make sure you use a VGA image! Don't think that's the case here, that should show a F1/F2 prompt. That boot prompt is from a full install.

I hope you paid for it.  ::) Steve

@cmb: Almost certainly because you need a lower value for MSS clamping. Yes! Setting Interfaces->WAN->MSS to 1492 (or lower) solves this. Now I can finally move on to more important configuration… Thank you so much!  ;D

@monowallboy: 2nd NIC is some older 100M Realtek chipset This could be an issue. 100Mb Realtek NICs have a bad reputation for misbehaving. What chipset/NIC is it? Steve

Note: If you directly edit /etc/crontab, then that will be overwritten next time you reboot. The crontab is generated from entries the pfSense config.xml To make it permanent, install the Cron package and edit the job from there - then both config.xml and /etc/crontab get updated.

Just uninstalling Snort doesn't clear the block offenders IIRC, that sounds like the symptoms of overblocking with Snort. There aren't any DNS-related changes or anything else that would cause that symptom on 2.0.2 when it didn't happen on 2.0.1, it's not version-related. The reinstall just did the same thing a reboot would have minus Snort.

I'll take the 3 ports! It's just 2 euros more and offers some cool options indeed - thanks for the hints! I like the idea of an open, seperate AP for example. Always wanted to do that - just to see what people are going to use it for. :)

@jonathanduane: justing a dell optiplex i will check now for errors, thanks Can you tell us what model of Optiplex?  They range all the way from first generation Pentiums through current i7's, some with 3Com, Broadcom, or Intel NICs onboard; the model will tell us a lot about what we're looking at.  It'll also be helpful to tell us about any secondary NICs you may have installed and are using.

Thank you sir….

@neteffectcafe: I am blocked because i am an Internet cafe. Bizarre. Do they give a reason for doing this? Steve