Of course I can do cu command when LTE isn't connected or pfsense is trying to reconnect (moment when log screaming 'the modem is not responding to AT commands' then I can do cu on cuaU0.0). Edit or resave the ppp setup do nothing. Only solution is reboot pfsense… Very strange because a lot of people posts this config as working. Tommorow I will try downgrade pfsense to 3.5 version. Martin

Use of syslog has been long standing best practice when you need long term storage of logs from pretty much any sort of device.. What good is the logs in your SSD, that is in the device when the device shits the bed or the disk shits the bed and you loose your logs..  If the logs are so important that you want them and lots of them then send them to your syslog server, or multiples of them.  All of which are more likely to have redundancy and backup of the logs, etc. So yes the correct solution to the question - I need lots of LOGS.. Well then send them to your syslog server(s) that have lots of space ;)

Sounds good. I'll forget about them and disable them in the bios. I just figured it would be nice to utilize the onboard ones and then have the pcie slot open for future expansion of who knows what or to use pcie NIC as a backup when/if the realtek ones died.

Hi Stephenw10, Sure thing. Will do it for sure! Appreciate the message. Fabricio.

Thank you for sharing. Had the same problem with a very slow dns and changing the default. But in the dns custom config I put: server: include: /var/unbound/pfb_dnsbl.*conf server: private-domain: "plex.direct" and I don't get the plex server running out of the network like before without dnsbl… any advice?

I'm on Virgin in the UK and can confirm, with the SuperHub in modem mode, you'll get a Public IP address on the WAN interface on PfSense. The 192.168.100.1 address can also be used to look at the modem stats and to toggle modem mode back off again should you wish.

Thanks! It looks like "Request only an ipv6 prefix" solved the problem.

I see that OpenVPN performance issues have been discussed a lot here (and elsewhere on the internet). From what I've read: OpenVPN is still single threaded, so single core CPU performance only.  Netgate home/business equipment is not up to the task for gigabit speeds.  One workaround is to create multiple VPN tunnels and somehow combine them, but this apparently comes with its own problems. OpenVPN is partway userland and partway kernel.  This is why context switching is a thing.  One question about this – as I watched top, I could see the OpenVPN process jumping back and forth between CPU0 to CPU1.  Is this required for userland<->kernel switching?  Wouldn't there be a performance boost setting the affinity to a single core? IPSec seems to be recommended as an alternative… has anyone done this with pfsense?

Thanks Stephenw10. I checked the packages and indeed all of those were not installed, except for AutoConfigBackup.

https://forum.pfsense.org/index.php?topic=146036.0

U listed lots of stuff except the most important piece of information, what is the CPU LOAD? For no compromise, full gigabit, an i3-class CPU is typically recommended

What is your WAN interface? How is it connected? Does it have a private IP that is conflicting with the internal subnets perhaps? Can we see some screenshots of you rules? The routing table from Diag > Routes might also be revealing here. Steve

Are you sure it's not just blocking some of the connections that it can detect and not blocking the connections it can't detect?

VKAD, u are making yourself crazy doing something unusual, do u REALLY need 4096 hosts?

Works for me.

When you run that command from single user mode you need to run it at least three times. More times doesn't hurt. The issue there is that it reports the filesystem as clean even when there are still problems so it needs to be forced to run multiple passes. If it still doesn't boot after than the quickest thing to do is re-install. The recovery install procedure should get your existing config if you don't have a backup. Steve