Sorry, my fault. It hat nothing to do with the php-changes from version 2.2 -> i checked my Firewall settings and found the mistake. Thanks

@johnkeates: I posted this in a different thread, I hope it's okay to semi-double post You're more than welcome to cross-post solutions across however many threads are relevant.  :) There are probably a dozen different threads around here on this same root issue. Feel free to post it in however many threads are relevant. Many people only follow specific threads and may miss a fix for the same problem posted in a different thread otherwise. pf does have a history of breaking checksums in certain areas, though I can't say I've seen any of that recently outside of this particular issue with Xen. It's probably a combination of pf+xn from the sound of your description. Can take our /tmp/rules.debug file, copy it over to stock FreeBSD, kldload pf && pfctl -f rules.debug (assuming stock system has same NICs) and see what happens. I'm definitely curious on the results.

thank you, the patch solves the problem.

Different versions of firefox switched between letting the user store the pfsense web cert and other times not. Whats the error message you get or do you mean the default error message saying this cert is not trusted when you first visit the pfsense web login page?

@Supermule: Something like this?? You need to set the interface to the one on which the DNS requests arrive. In most cases this is the LAN interface or whatever your clients are connected to. See attached image. [image: dns-override.png] [image: dns-override.png_thumb]

@switchman: Login with SSH and open the shell. Run “/usr/local/sbin/ufslabels.sh”  - It's required for older installs, or installs that have been upgraded to 2.2. It shouldn't be needed for a fresh 2.2 install /usr/local/sbin/ufslabels.sh This isn't required. ahci is compiled into the kernel. It's probably better to remove that entry (though it shouldn't hurt anything) Use the Diagnostics > Edit File command to create and add the line ahci_load="YES" to “/boot/loader.conf.local” Some notes changed/added inline.

Do you have VLANs? Is WANFFTC on a VLAN of re1? Post some example log entries so we can see what they are related to.

Uptime 10 Days 07 Hours 49 Minutes 23 Seconds Everything is working fine.  Thanks again everyone. -ram

You need two VLANs to the AP.  I will assume these are 10 for the LAN and 20 for the guest: Create VLAN 10 with a parent interface em1 Create VLAN 20 with a parent interface em1 Create a bridge with members em0 and em1_vlan10 Assign LAN to Bridge0 Set em1_vlan20 to be what you want for your guest wi-fi Tell the AP to tag your LAN ssid with VLAN 10 and your guest SSID with VLAN 20.

bump Is it true that the IGMP proxy can only handle proxying between different interfaces, not between VLANs sharing the same network port? Thanks.

what does your tracert / traceroute show ?

you want to block an iphone using an app? or you want to block an app on an iphone working? But you dont want to block the iphone itself ?

I agree that esxi is probably the best solution for it. But I had hoped for an all in one solution as I'd like to keep devices used and physical space consumed to a minimum. I'll try the method stephen has explained tomorrow when I've found some docs on it. Thank you for that :)

Still limited to 5 source IP addresses though  :(

Please don't double-post.  I answered your same question here: https://forum.pfsense.org/index.php?topic=87881.msg485252#msg485252

@Moses_2015: Is there any way to export those graphs to word or excel ? Which ones, built-in RRD graphs or bandwidthd graphs?  Images or spreadsheet data? If you just want some occasional images, just right-click and choose 'save image'. If you want to grab some bandwidthd images on a regular on-going basis, you can use the graph images that are already generated as .png files for the web gui, plus some scripting of your own.  Check /usr/pbi/bandwidthd-amd64/local/bandwidthd/htdocs for the bandwidthd image files; these are updated regularly as long as bandwidthd is running. rrd graphs on the other hand are normally updated only when required by the webgui; these live in /tmp.  You can look through /usr/local/www/status_rrd_graph_img.php to see how you can generate specialized rrd graphs on your own. Generating  a spreadsheet file from the rrd data should be possible, but 'this is left as an exercise for the reader' :)