~~2.1 or 2.2? Backup your config (!) What does gpart show say?~~ Nah.  You know what.  I'm not even going to get involved in this.  You should probably back up your config, reinstall fresh, and limit yourself to what's available partitioning wise in the pfSense installer else you'll end up with something unsupported and it'll end up blowing up.

I think OP is correct, creating a rule with the flag settings, if you set a rule and set FIN being set and blocked it without logging that should work If the packet matched a state then it wouldn't be logged.  If out of state it would be logged by the default rule.  So having rule that looks for traffic with FIN set and not logging it would prevent the default rule from seeing it to log. [image: finset.png] [image: finset.png_thumb]

Ok, I reply to myself also for the topic about limiters. Actually in 2.2 are not working and it seems it's a kernel problem: https://redmine.pfsense.org/issues/4326 I confirm Limiters are not working also using floating rules… ok, waiting for 2.2.1 ;)

Ah, I have never restored all data, only individual backups. I see now that the full backup backs up certificates and CAs. When transferring my pfSense installation to a new machine, I have preferred to only restore some parts of the config (i.e., not the interface config due to network adapter differences) but I guess the easiest way will be to restore the full config, and change the network config manually from the console. Sorry for the hassle.

I ended up uninstalled Squid and installing Squid3.  I am still having some odd issues with local authentication. Now, everything seems to work OK, except when I turn on local Auth.  I keep getting prompted for my password, even though I know its the correct password.  I have left a post in the Packages forums hoping someone will respond.  If I turn local auth off, it works great.  I have tried deleting the squid.passwd and re-creating my users through the web panel, but no luck.

This is the root cause of the problem here, with a fix that can be installed using the system patches package. https://redmine.pfsense.org/issues/4393

Thanks for replying. I'll get this setup a go and post the results. Much appreciated! Andy

It really does sound like management is doing this guy no favors and really doesn't care if it works or not.  It's asinine to not get a sample unit and do a proper survey first.

As posted by the doktor on the other thread: https://redmine.pfsense.org/issues/4437#note-2 Nothing to see here.  The perils of -current.

@Derelict: I wish Jim or Chris would chime in. https://redmine.pfsense.org/issues/4437#note-2 Move on…

enable SNMP in pfSense and have PRTG auto discover the services on the box.

I don't know what that output means but you might have better luck by posting this in the Traffic Shaping forum.

1.  Questions about the traffic shaper are best posted in the Traffic Shaping forum. 2.  I have no idea what you mean when you say "how many protocol or port that use on my traffic shaper such as (Skype, Hangout, SIP phone, Go to Meeting, Lync)"?

Limiters. You might want to post in the Traffic Shaping section with a descriptive title.

Just found the problem and made it work System>Advanced>Firewall/Nat uncheck "Disable reply-to on WAN rules" Now ping works and TCP and UDP.