What version of pfSense are you running? libssh2 is not in the default install on 2.4.3_1 or 2.4.4 as far as I can see though so it was probably installed as a dependency of mc or someother package. If you upgraded since it may have been removed. Or if another package was removed that originally installed it. It is in our repo though so you should be able to install it using: pkg install libssh2 Steve

Try going to System > Updates/Firmware and selecting the 2.3.X security/errata branch. No go back to the Dashboard and to force an update refresh. Check branch is still set to 2.3.X, set it again if it updated back to 2.4.X. If it offers you 2.3.5_2 as an update go to that first then update to 2.4.3. Steve

Hi jimp, some good news here. Your statement that "pkg can't reach the pfsense servers" pointed me to the right direction; I haven't understood it fully, but I found a way at least to unlock the pkg issue. In my case, it was due to a double stack IPv4/IPv6 issue: to solve it, I had to temporaly disable the network interface linked to the GIF port; removing IPv6 name resolution plus removing the IPv6 default gateway and firewall rules to route IPv6 traffic didn't suffice. I don't like to be so inaccurate in test results, but as IPv6 connectivity was actually working, defining this problem will require some more tests and I meant to find a quick workaround for everybody experiencing this kind of issue. Let me know if this rings a bell.

@chris1bass said in pfsense not receiving a WAN address: it did do a DHCP discover. But looks like it never got a response from the modem. Well there you go explains why pfsense doesn't have a WAN IP, if it asks dhcp server for IP and doesn't get an answer - then no its not going to have an IP ;) Work upstream to why offer is not being sent.

Thank you for your time Derelic. I looked at the interfce settings and found out, that I had left the subnet-setting for the interface at /32 instead of changing it to /24. Maybe this setting is bit confusing, because if I should set a single IP-address for the router interface and not a subnet. I suggest giving this setting a separate line or at least a caption "subnet size" or something similar. Anyway - excuse my dumbness. Best, Karl

Okay, there really wasn't any way I could figure out how to deal with this through the GUI. I plugged in a keyboard and monitor, and reset the LAN's IP address after the machine went through startup. That's the only way that made sense and was straightforward.

Since there is no internal connection between the host and pfSense, that's an expected behavior. You may configure the eht2 as a virtual bridge instead of passthrough and give the host an IP on it, or add an additional virtual network and interfaces to both the host and pfSense for management access.

@luckman212 seems like you have a solid background with WAN IP issues on devices. My FiOS connection keeps dropping on the WAN interface and comes back when I reset the interface. Is there any way to solve this ? I posted in detail here what is happening: https://forum.netgate.com/topic/133896/wan-drops-connection-3-4-times-a-day-to-r210-ii-verizon-fios Thank you!

Sorry for necroposting, but to resolve the installer looking all funky, in putty: Window -> Translation. Set "Remote Character Set" to "Use Font Encoding" (it's at the bottom of the list). Leave "Handling of line drawing characters" set to "Use Unicode line drawing code points." [image: 1534523863564-2018-08-17-10_15_38-putty-reconfiguration.png]

I'm understand complexity of task, and because of it I ask this at forum before destroy my pfSense . Obviously use pfSense for build bins is really not good idea. About simply use NAT: I really like how in pfSense work Squid (for proxy) and HAproxy (for reverse proxy) and how I can combine HAproxy with pfBlocker aliases and GeoIP, and it will be awesome if them will support at least mainline OpenSSL version like optional plugin, and LTS line 1.0.2 by default that goes in FreeBSD. Or maybe some paranoiac guys do this already and have how-to in home wiki

@nogbadthebad said in Restore from AutoConfigBackup without user information: Guess you need to do a fresh install, then recover everything from a backup except System as that contains the users & groups. Try it on a different PC first. What is the device pfSense is running on? it is an older Dell server with complete oversized hardware. 3 network cards. I already started with the reinstall. Copied the config.xml down from AutoConfigBackup services and started to restore one by one service through the "standard" backup/restore function. Looks good so far! Services and all rules etc. are restored including the snort stuff and so on. Found there a problem or may a bug during restore: after restoring the config of the package manager the list of the manager shows the services which where installed what is good. But just once! Will say everytime you choose to reinstall of a not yet complete restored package the list disappears again and you have to restore the package manager config again. This is taking time if you need to reinstall a lot of services. So I guess the list is updated everytime a package has been installed too with the packages which are completely installed already. Better would be if the package manager just updates/modify the list of installed packages instead overwriting it with just complete installed packages.

Correct. radius 2 was declared dead some time ago, and shouldn't be used anymore anyway. FreeRadius 3 has some new, mandatory settings.

found it - https://store.netgate.com/Chelsio/T520-SO-CR.aspx what would you recommend for CPU and RAM ? I mean cpu and memory support for the 10gig card so there will be no bottlenecks in system so it can run at 10 gig 24/7 with no hiccups

Also found this link https://www.newshosting.com/usenet/usenet-connections/. This explains how connections works. Just didn't figure out how to test the ideal amount of connection in combination with a speed test... Just wanted to share this aswell. Herman

Yes, try a 2.4.4 snapshot. Whatever issue you're hitting there may well have been resolved in FreeBSD 11.2. Steve

Got my hints right here, all set! https://forum.netgate.com/topic/7246/command-line-config-restore

Okay, thanks for your help!

I imagine you will fine routing at the firewall between the internal subnets. That hardware is probably far in excess of what you need. Steve