Hi Christian
Interesting, looking at 8.3-RELEASE source, a commit in February 2012 MFC'ed new Smart Array Gen8 support into 8.3:

Date:   Sun Feb 5 19:10:48 2012 +0000    MFC r230313, r230316, r230323, r230588    Support new raid controllers

Interestingly sys/dev/ciss.c contains the PCI ID for this controller (added in this exact commit):

ciss_vendor_data[] = { [...]    { 0x103C, 0x3354, CISS_BOARD_SA5,   "HP Smart Array P420i" }, [...]

Depending on the modular network cards these servers have, the problem may be the Broadcom NIC yet.
I guess you'll stay on ESX for now, but would you be willing to boot some vanilla FreeBSD 8.3 and 9.1 to see if
Smart Array and (likely) NICs behave differently and what exact models they are?
(pciconf -lvb and some grep might be of help)

We move that file to /var/log/dmesg.boot so it is there, just not where it expects.

Nothing special to make a PBI, just needs the right build tags in the pkg xml, there are examples on there already to follow. We make the PBIs on our server based on the build tags, there's really no process for a user to make/submit their own PBI - we want them all to be as automated as possible, so we need the know the options made to build them.

If you just installed it with pkg_add, it's probably as simple as telling the PBI build to just make that one port and that's all. Some paths may need adjusted since the files will land in different places.

@mdmogren:

Updated. I cannot very practically clean install at 10 different physical locations… is this really necessary?

Almost never. Only possibly if you were messing with packages marked as unstable, which may leave things behind that could cause problems.

I just rebuilt dnsmasq so the snapshots won't have the new version until later today. There is a set building now that still doesn't have it in there.

Captive Portal for IPv6 isn't going to work until 2.2

Keep an eye on this ticket:
http://redmine.pfsense.org/issues/1831

Updated (re-installed) the squid package, it is working :) jippeee no more manual editing.

I can ack to jimp - the export utility continued working over a dozen of daily build updates so far.

So much about "Have tried reinstalling it once again" ? :-)

That is not called binding an IP, that is simply called static ARP. You do not assign or bind such IPs to NICs on the firewall. Static ARP creates, as the name implies, a static ARP entry that associates a specific MAC address with a specific IP address on a client system.

If you try to bind a client IP on the firewall, you'll create an IP conflict.

Please create a new topic if you want to discuss static ARP.

Thanks.

It is now working Jimp.

This is the relevant output from the log:

Dec 21 22:46:46 dhclient: XMT: Solicit on em0, interval 8640ms.
Dec 21 22:46:46 check_reload_status: Updating all dyndns
Dec 21 22:46:47 php: : SQUID is installed but not started. Not installing "nat" rules.
Dec 21 22:46:47 php: : SQUID is installed but not started. Not installing "pfearly" rules.
Dec 21 22:46:47 php: : SQUID is installed but not started. Not installing "filter" rules.
Dec 21 22:46:49 check_reload_status: Restarting ipsec tunnels
Dec 21 22:46:51 php: : Creating rrd update script
Dec 21 22:46:51 php: : Restarting/Starting all packages.
Dec 21 22:46:52 php: : Starting Squid
Dec 21 22:46:52 squid[71348]: Squid Parent: child process 71752 started
Dec 21 22:46:52 check_reload_status: Reloading filter
Dec 21 22:46:52 php: : Not calling package sync code for dependency squidreverse of squid3 because some include files are missing.
Dec 21 22:46:55 dhclient: XMT: Solicit on em0, interval 17460ms.
Dec 21 22:46:56 login: login on ttyv0 as root
Dec 21 22:46:56 sshlockout[89176]: sshlockout/webConfigurator v3.0 starting up
Dec 21 22:47:13 dhclient: XMT: Solicit on em0, interval 35540ms.

What exactly are you putting in the PHP Execute, Command box?
For example, if you just type in:

crud

You get exactly the error message you quote, it is telling you that the PHP it attempted to eval (evaluate - execute) for you ended unexpectedly. Most likely you just need to end the line of code with a semicolon. (or put in the terminating bracket of a function, or…

I found the setting for disabling state killing and that took care of it.

Thanks!
-Ben

I've got a problem with one of our two WAN RRD graph's too. The first WAN RRD graph is working as expected, but the second WAN doesn't.

Cheers,
Szop

No one having the same problem with 6rd in conjunction with NPt?

http://redmine.pfsense.org/activity/ is a more comprehensive source.

@cmb:

Using wildcard certs doesn't help with the main problem, you can't get a wildcard cert on any domain. eg the interception of say https://google.com can't not produce a cert error.

Absolutely, it only makes sense if you've somehow first imported your own root CA cert into all the clients' certificate store. Given that, in the previous example the ZS CP will create the "correct" SSL cert on the fly, based on what the client asked for.

@dhatz:

There are several features of commercial CP implementations that could be added to enhance pfsense, such as auto-adding OCSP URLs of the CP's SSL cert to a whitelist ("walled garden")

which we already have in private versions, amongst many other features. May or may not get open sourced at some point.

Perhaps you should hint at these private versions, or people will go look elsewhere …

Anyway, wrt the CP, probably the most useful feature (in a commercial context) would be PMS integration.

Also on 2.1, pkg_add won't show much that should be there. Since the packages are installed from PBIs, you'd want to check "pbi_info" also.