The button on the front does not work im in the same bind

What he said…  ^

@yon: Iwant to use short /48ip address, before it was normal work in /48 Ok.  Good luck.

You probably corrupted the squid cache. I'd blow away the cache and reinstall squid after that. Stop squid service in gui Then from a command prompt cd /var/squid/cache rm -rf * squid -z Then reboot pfsense Might help  - Not sure

Put the x32 image on a stick and everything works with the same settings. It is a different stick. I will try putting the x64 on this one and testing again…

Enter "apinger" in the search box above.

The kingstons in the raid have been great so far - They have to go 5 years before I call them officially great. Right now, they are only at year one.  But TRIM is set up correctly - I think that is key.

Well, got this one sorted out.  :P I found a router which I had plugged back in and was using as a switch which was calling dyndns.org with updates. Because it was not going through the FW rules, it was picking up the w rong gateway and hence, IP address. Disabled it and all is well….

Yes - Snort will often just protect you to death… I often recommend it to people I really dislike.

Yep - Its pretty cool for what you need. There is another guy who is trying to get 3 or 4 separate sites communicating well - For him, this is probably also the best / easiest option. But easy is relative - Maybe he will see your post and ask your instruction.

OK. Gotcha. Thank you. I look into it

It's been answered plenty of times, the OP has done it correctly here. If you bridge the interfaces and move filtering from the bridge members to the bridge interface then the resulting interfaces will behave like switch. It will be much slower than even the cheapest switch (in most cases) but there are advantages. You can filter traffic between the ports for example. There are legitimate reasons to do this, buying a quad port nic just yo bridge them is not one of them. I have 3 interfaces bridged on my home box here. It has 10 NICs, they aren't removable and I don't need 10 subnets. The box cost me £40.  ;) Steve

Yep - Now you have to block every proxy service on earth by name or IP also….  Good luck.

Thanks jimp

Sorry - Mixed my apples and oranges. Did he try switching LAN and WAN?

I suppose that depends on how it's implemented. It looks like it can run over standard UDP just with its own payload format, in which case it would look no different to pfSense than normal UDP and wouldn't require any special handling.

There are parts of the system that write periodically. Logs, gateway status, graphs, and several other things could be getting written to the disk, though it shouldn't be completely constant. If you run "top -aSH", press 'm' to switch to i/o view which will show you which active processes are writing/reading at the time. The normal top view is CPU only and wouldn't tell you much about the disk.