Same here, I noticed a "clear package lock" button in that area: Diagnostics -> Backup/Restore -> Reinstall packages Then I noticed on the installed packages list that there were several packages that had available updates.  So one of the packages isn't re-installing well.  I just manually updated / reinstalled the packages that had updates in the pkg button.

Ended up starting over after a system factory default. Now two weeks later there are problems again!!  >:( Read here > https://forum.pfsense.org/index.php?topic=100549.0

@icemanncsu: … spoofing the MAC address ... and I statically assign the originally assigned DHCP address as a static to the WAN interface. Why that? If you already spoof the MAC then it should pull the same IP from DHCP server. Remember to K.I.S.S.!

@muswellhillbilly: A thought: Every one of the packages you've installed generates log files - quite big ones depending on traffic volume. Have you checked to see whether your filesystem is getting used up with log data? all seems to be logging normal messages. nothing in the logs seems to be a clue.

yeah, the system on that segment (PBX) has its own DHCP server, the person who set it up set it up with DHCP giving out addresses from 192.168.2.1-99, well of course the router interface is 192.168.2.1, so that was the failure.

This is an example directly in Squid. Almost similar behaviour can be achieved using Squidguard that is also able to handle ACL, users and groups. It should perhaps be feasible using pfSense GUI, this I don't know as I'm not Squid user on pfSense  8) logic is always pretty much the same: define white list covering what is allowed to all allow white list access deny group of restricted users authorize all others

Well, I've managed to answer and fix this myself, I had to set the gateway group on the firewall rule, I also had to change the ESXi vswitch configuration and instead of using vlans on pfsense I created seperate vlans on the port group and added a vnic for each vlan…working like a dream. Just thought I'd write back for anyone who may come to face the same/similar issues.

@ivor: Sure, it backs up everything. So when you restore the config upon reboot it will install the package. Thank you, i already install fresh pfsense on 2 new hard drive for backup pusrpose. :) @doktornotor: You should have rather backed up your computer before installing the Acronis POS. Dead serious about it. I don't know about that, thank you i really appreciate it.

I've fixed it. I don't think, that installing newer version helped, since my old one 2.1.2 was working like a charm. More likely it was hardware problem. Network card, that was designated as LAN was prioritised on hardware level, so all traffic tried to go through LAN. I've just switched IP's on network cards and everything working just fine. To whoever might be looking for similar problem - check if your network adapters assigned right and their priority. Thanks to everyone for help.

@newbie2015: can u tell me how? https://doc.pfsense.org/index.php/Outbound_NAT

@garethsnaim: I have ordered an ultra sff dell 745 from ebay for £29 which I think is a good 'size' for the task. I will probably get a SSD in the near future as well. I am hopeful there is a methodology to export settings and import to the new PC. Yes, it's as simple as exporting from the old and importing to the new.  I did that while swapping out completely different hardware.  It's fairly painless.

Cool.  I may have to pick one of those up and muck around.

@KOM: Sorry, I think I had it backwards.  If you have high interrupts, try enabling polling to see if it calms down somewhat. I enabled it and the load didn't move too much in either direction. Thank you for the suggestion. @heper: i personally haven't had much luck by enabling polling. it just slowed things down in my case. have you tried some of the tuning tips here? http://bsdrp.net/documentation/examples/forwarding_performance_lab_of_a_hp_proliant_dl360p_gen8_with_10-gigabit_with_10-gigabit_chelsio_t540-cr i don't own 10gbe equipment, but i don't think it can hurt to try. I will have to take a look at this. Thanks for providing it. On another note, the load appears to be around 5-6 now. I believe this is related to lower usage. Towards the end of the business day our usage tapers off significantly, but we only do ~300 Mbs at peak anyways.

that could be it too. captiveportal redirects tend to mess with dns … dnssec tries to prevent messing with dns ;)

note the element you need for configuration 1.vlan 500 2,pppoe thanks

If all you want is an URL filter, Squidguard is a lot easier than Dans.  If you need more robust content filtering, then Dans is what you would use.  The Squid situation is a little unclear at the moment.  The packages are in a state of flux as they are being cleaned up to some degree.  Check the Cache/Proxy forum for more information.

Thank you for the answers, About the firewall, I may have expressed myself poorly. I meant that I'm to clear the rules that prevent access to certain websites which isn't being properly blocked by squid (like facebook). I'm probably going to try the WAPD package (in 2 weeks, when the proxy tests are scheduled).  Since, as KOM said, Outbound NAT rule may give me some false-positives of MitM attacks. The company specified that no branch office is supposed to have a proxy anymore. According to them it may interfere with the Net balancing, since we have two links, from the same provider, one for the internet and the other for the corporate net). And I'm definitely not going to manually configure the browser of 300 hosts. ;D Once again, thank you all. I would appreciate if this topic could remain open for 2 weeks, I may get in some trouble with WAPD.

Because it's disabled? Fix your client. Or, if it's not you, then stop logging the useless noise. There's a checkbox for this so that lighttpd junk doesn't flood logs.

enabling ssh from console(option 14) or webgui (system:advanced:Enable Secure Shell)