Thanks, @stephenw10 Maximum Table Entries made no difference, as you expected. I will try pfBlocker right now.

Ok so you did mean 'update' not 'backup'. What version did you update from? What method are you using for the backup? Steve

If you are running an OpenVPN server in pfSense (VPN > OpenVPN > Servers) you do not need to change anything in pfSense. Traffic to it will be forwarded from the external router and it will accept it. What needs to change is how the remote side is connecting to it. If it's not using an FQDN that you can update via DNS it will need to have the new public IP entered directly. Steve

@stephenw10 yes when i keep 115200 its working now before it was on 9600 by default thank you very much..

If you need external clients to connect to the server you would need rules on the WAN to allow that. Rules on the VLAN would allow the server to connect out. That is assuming you have not assigned the bridge as WAN, for example, which is something you could do but probably just complicates things. Steve

@aryeduino said in Building a pFSense Hardware with Internal modem to replace current modem-router: Can I use the NIC 4 ports and the RJ45 connection that I have on the motherboard together? Yes. Since you already have a Proxmox host you should just use that for file sharing and keep the firewall separate. If you can it's better to have the PPPoE session on pfSense itself so that the public IP is on the interface. Steve

@stephenw10 Got the WAN port working, everything is great now. I had to disconnect the old router from the ONT (I had been doing that previously and I'm certain that was not part of my original problem, which you have helped me solve). Thank you!

@overlord If some PHP scripting is an option, see here for an example : Auto update check, checks for updates to base system + packages and sends email alerts .

Thanks. I believe the issues you are seeing are largely due to pfBlocker which updates the pfSense configuration system (and hence triggers a backup) on a very frequent basis. I have increased the capacity of the server to the highest reasonable value which may help a little. A couple of years ago a mechanism was introduced to allow pfBlocker to bypass the backup system, but so far it has not found much employment. I plan to contact the developer as well as a member of our own development team to see if we can can some movement there. In addition, some filtering has been added to pfSense to help alleviate the situation. You should see that in the next release.

@steveits good tips, thank you!

Just a quick note that I'm using 2.5.2-RELEASE which is FreeBSD 12.2 In order too get tux and mosh to work I had to copy both en_US.UTF-8 and C.UTF-8 from the 12.2 base into /usr/share/locale since LC_CTYPE is a link.

Nice. If you need to use the 2nd WAN change the subnet the upstream router is using. Steve

@johnpoz said in advice on physical layout plans for new PFSsense router setup: stephenw10 dude - bet you beer that is spammer.. Look at his other posts. Just his question made me wonder if he's serious. Physical layout? Really?

If you add the Nmap package it will show the MAC vendor ID if thats of any help. As per the above screenshot.

@stephenw10 Thank you, I did not know of this. It is back to reading on how to configure unbound (many things I do not know). Thank you for your thoughts. pfsense has many things that are not in the books, at least not that I understand what they do. elmo

@jimp thank you, I've reloaded the manually edited xml, now the errors are gone! BR