Solved the issue needed to update the kernel.

No. They are enumerated by the operating system. Why do you care what the physical name is? If you have, for example, LAN on re0 and want it on re2, you can make that change in Interfaces > Assignments as long as re2 is not assigned to anything else.

Figured it out! Under DHCP, I had ARP Table Static Entry ticket when assigning a static IP. I disabled that and now it works. Thanks for the help

Well we need to see what it's actually failing to do. The output you posted above looks like there is no problem. Steve

What sort of connection is it? Restarting packages is expected is the WAN goes down. You can limit some unnecessary actions if you only have one WAN by setting Disable Gateway Monitoring Action on the WAN gateway in System > Routing > Gateways, edit the WAN gateway. Steve

If you have removed the gateway from the LAN you should switch outbound NAT rules back to automatic. The rule you have there currently has source 'any' which is almost always wrong. It will NAT even traffic from the firewall itself which can cause all sorts of odd issues. Steve

What WAN IP is pfSense getting (if it is getting one)? It must be in a different subnet to the LAN or routing will break. If it does have an IP and it's in a different subnet try to ping out from the pfSense console. Try to ping an IP like 8.8.8.8. Try to ping an named host like google.com. What errors do you see if those fail? Steve

Stealth means the packet is being dropped and their crap scan isn’t getting a rejected packet notifying them that it’s blocked. Steal or blocked, it’s working properly.

I log the interesting traffic... So for starters I want to know what my IOT stuff is doing.. So I log their vlans for outbound traffic. On the wan - yeah it can be noisy.. But I do like to see directed unsolicited traffic, so I log just that SYN's to my wan IP.. Its more just curiosity sort of thing... Like for example when all those routers got taken offline like a million of them in DE alone shitton of noise being seen on 7547.. Yeah I was seeing that as well ;) Your typical noise ports are the common 22, 23, 3389, 1433, etc.. All well known script/bot traffic looking for shit to exploit.. Its noise - but it is interesting to see how much of it gets dropped..

yeah were are using the little ones with no fans that work really actually well.(j1900) started out with some pc that had pfsense on them but they just offered more for less for as having a appliance firewall, i cant have any complaint they have been great and have worked for years without problems. I am guessing i now have to learn kubernetes. It seems like a solution to the problem.

Local is the host (source or destination) in the same subnet as the firewall on that interface. Remote is the host that it is talking to. If you access a web site, the IP address of that web site would show when in that mode.

See this recent thread for additional detail. https://forum.netgate.com/topic/137939/bypass-su-sorry-on-pfsense

Thank you for your input Grimson and mhertzfeld. The reason for removing the switch was twofold. I am trying to minimise energy consumption and I was curious to see what could be achieved using just the pfSense box without a switch. I tend to always try to find ways of improving things, sometimes more successfully than others. I might just use the switch again. I actually didn't want to implement vlans at all, but the switch is a layer 3 3com/HP switch and perfectly capable of doing that. Kind regards

Thx! Yea, did what you suggested and you're exactly right. It's the card.

Never mind. Found the problem. I'm trying to NAT to a host that's also used in HAProxy. Under HAProxy/Backend/advanced setting, I have turned on Transparent Proxy (So that my logs shows the correct incoming IP). This messed up NAT. Turn Transparent Client IP off and NAT works again.

@stephenw10 says I can't start a chat with you unless you initiate it.

OpenNMS is easy to install and set up on a CentOS image. I use it all the time. If you set up SNMP on all of your devices, you'll get a lot of good data from it. Any open source NMS package will do this, a few have been mentioned already on this thread. OpenNMS will also pull some fantastic metrics from pfSense once you set up SNMP on it.

Thanks guys for your valuable input. Regards Scorpoin

So you stopped using the driver from Realtek you linked in your first post? If so you're hitting the watchdog error that is known to help with. Steve