I found out that a lot of the older pfsense appliances including the FW-7535 / Netgate 7535 have an issue with the BIOS that makes the "dd-ed" nano images unbootable. The instructions to dd then fixup per: _https://doc.pfsense.org/index.php/Embedded_install_on_Netgate_Hamakua Plug the CF into a working pfSense or FreeBSD system and then run: boot0cfg -v -B da0 Where da0 is the CF device. Check the boot log to confirm that the device is correct. Alternatively, use mdconfig( 8 ) to mount a .img file to /dev/md* so it can be modified as above (except using md* rather than da0) before writing to boot media. After making that modification, place the CF back in the unit and boot as usual._ Are correct for the FW-7535. Only one more question - will future updates blow up ? Will 2.2.4->2.2.x have issues? Will 2.2.x-> 2.3.x have issues? If anyone knows for the pfsense / netgate appliances that have a BIOS with issues that require manual boot0cfg fixups what the upgrade path is can you let me know here?

Did a little reading on the FreeBSD boards and there appear to be potential issues with the install of the boot loader and some SATA implementations. Does the BIOS have any settings for the HD interface mode -> IDE/SATA/AHCI (etc.)? These are usually in the "Integrated Peripherals" section of the BIOS or some such. Was the 80GB drive running 2.2.4? If not you might want tor try an older (2.1.5?) install first and then try an in place upgrade. I'm sure there's a way to get this puppy up and running, but without seeing the actual system I'm stuck imagining my trial and error procedures.

I use local.lan ;)

TY for the reply and advice. I wasn't intending to install embedded and only full. Just wanted to know how to break up the installation.

Arguably the best solution is to retire FTP entirely and move to SFTP. The FileZilla client supports SFTP. I don't believe vsftpd supports SFTP (there are some sites claiming it does, but those I looked at are talking about FTPS - FTP over SSL, which is a different thing entirely). proftpd with mod_sftp installed does support SFTP. Don't forget SFTP defaults to using the SSH port, TCP port 22. If necessary, you can use an alternate TCP port of your choosing.

setup the wan use it as if it were a lan

Are the PDF and book formats updated alongside the HTML version? Last I looked, they appeared to be several months behind. @jimp: [We have HTML, PDF, ePub, and MOBI formats available for subscribers, they can pick whatever type they want to download. [/quote]

Got it, tried the wrong image. Tried the embedded image but it seems this won't install on a mSata SSD. Worked fine with the LIve CD installer for MemStick

I've had a few Dell weird issues over the years, you might try: Make sure the BIOS is updated with the latest versions. Try different install media, USB stick, external USB CD, internal CD Make sure the internal CD (if used) is using the same BIOS setting as the HD. I normally try to stay at IDE to keep things basic and simple. Worst case move the HD to a completely different system, install pfSense and move the HD back. Dell's are reasonably good units when you can get them to co-operate, but real  :P when they don't.

Ok.  I live in Acworth, and do this for a living. PM me, I'll give you my phone number.

i thought every intel nics are supported. oh well i just bought a tp link one which is running fine. thanks anyway.

Thanks for that link, I think I can handle that!

@KOM: Does the Clear Package Lock button only appear when a package is being installed Yes.

@muswellhillbilly: You could try, but you're asking for advice on an out-of-date release when a new release could theoretically solve the matter for you. I'm not sure why you have to continue running an old version, but the time you spend trying to get JSON installed on a defunct release would probably be more productively spent getting your scripts to work on a current version. You're probably right. My Pf is in a ​satisfactory ​state although I noticed more efficient coding in the new releases. It's just that I have made several custom features in this build. Some though are already in the latest release (ie. captive portal block/pass button in the passthrough mac tab, show hostname instead of host ip in the status_graph). But there are still several that is not yet in the new releases. And re-coding them for a new pf is too much task. Anyway I found a workaround to using json. Thanks for your reply and suggestion.

@Derelict: Hopefully your HSTS wasn't set to something like forever. Just 2 years… :P

I thank all of you for taking the time to help me out BUT when you just basically say F'  it just reinstall A lot of us maintain these firewalls in corporate settings, and you often don't have the luxury of drilling down to the _n_th level to find out the source of a problem.  Oftentimes it's pragmatism that drives everything, and Get 'Er Done is more important than Who? How? Why?

Hi, sorry for delay, but WAF was going down  ;D The 2g image works as it should. So I'm fine at this moment. Thank you for your assistent pfadmin

@johnpoz: If your talking about the mac client vicosity – its what 9$ https://www.sparklabs.com/viscosity/ +! for this client on the Mac.  I use it all the time with excellent results.  Connects quickly, has a menu icon to tell you when it's connected, very small footprint and imports OpenVPN client exports like a champ.  Very Mac-friendly. I recommend this client to all my Mac customers as well as my PC customers.  It just works.