@stephenw10 Yes, every time. I get an email notification every morning at 04:50, same error is OP.

That happens if the rule is no longer present in the ruleset when the log page is displayed. So commonly for old logs if it was something dynamically created like a UPnP rule or a scheduled rule.

Those look like reply traffic though so it could just be an expired state and the ruleset changed since.

If it's already registered and you have NDI you can just purchase a subscription against that NDI:
https://shop.netgate.com/products/pfsense-software-subscription-tac-lite-support

But if you applied one of the home or lab free subscriptions against it then you probably don't need to do that yet.

@stephenw10 Thanks!

@patient0 Thanks!

The client device will usually renew the lease at half the lease time but it doesn't have to. It could choose to renew it every 15mins. There are limits though. The server will refuse if clients try to renew too rapidly.

Check the client config. Or run a pcap for it and see if it's actually requesting it.

@stephenw10 It is static locked on mac address so I tried another android ping app and it works when the wan interface goes down so it must be a crappy ping app that I was using

What IP are you using to connect to pfSense over OpenVPN?

If you have firewall rules to allow it you should be able to use the pfSense LAN address to do so.

If that works then you must have the correct route in OpenVPN and probably have the correct firewall rules.
Most likely the host VMs in the LAN are blocking connections from outside their own subnet. In which case ypu can fix the hosts to allow it or use outbound NAT in pfSense to hide the source IP.

@stephenw10 said in Remote syslog using WAN interface.:

In the mean time that local gateway workaround should work if you can't switch to a route based tunnel.

VTI resolved the issue.

Thanks again.

https://redmine.pfsense.org/issues/16286

I included a code i made it in the github.

It was probably just pkg upgrade or some variation of it. That will offer to upgrade any remaining pkgs that didn't get upgraded during the normal pfSense upgrade.

@pfsjap glad you got it sorted.

@BennySoh Terrific, thanks

@andy58 said in 2100 running 24.11 low on disk space:

seeing high CPU usage for no apparent reason

If you're seeing that while viewing the dashboard there is a patch for that. Install the System Patches package and apply patches.

@Gertjan

Before using pfSense I used CentOS (iptables and squid) for yearssss.. But proxy is pain, no more that for me.. lol.

Im thinking to change the local host file of that machine. The user of that machine, barely knows how to send a email, so i think this should work. I was trying doing this on firewall, to learn if i need this in the future for more machines on my lan.

I can change the host file OR the unbound view method.

By having the casting server act as a separate router between the two subnets you are creating an asymmetric route at both ends. I would expect TCP traffic to fail and see blocks in the firewall log?

Unless you have added workaround rules to allow it.
https://docs.netgate.com/pfsense/en/latest/troubleshooting/asymmetric-routing.html

That would happen with any type of routing.

Thank you
Have a good evening / night

@provels I thought 512 should be plenty enough but who knew???

@stephenw10 ok.when using the pfSsh.php, it is working. Ok Thanks. let me try to update the script check_pf_services.

[2.8.0-RELEASE][santheerdas@XXX]/home/santheerdas: sudo pfSsh.php playback svc status openvpn server 1 Password: Service openvpn is running. [2.8.0-RELEASE][santheerdas@XXX]/home/santheerdas: sudo pfSsh.php playback svc status nrpe Service nrpe is running. [2.8.0-RELEASE][santheerdas@XXX]/home/santheerdas: