this clicking the link and again clicking is makin me sick: direct link: https://atxfiles.pfsense.org/mirror/downloads/old/

hi … can you post result of sth like this: Console /: du -h -d 1 cheers chris

So, Vivaldi, and thus implicated, Chrome, didn't fare any better. Same old soup, "Cannot get data about interface" on any interface graph we'd care to look at. Seems browser independent, now. That timeout in accessing fastcgi://unix:/var/run/php-fpm.socket (in the error log from Oct. 28) looks weird though, now doesn't it?

Is it normal for startup to hang waiting for the F1 key to be depressed? No. is there any documentation about the syscalls (system calls)? https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/index.html https://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/

Sounds like it was something transient then and only cosmetic anyway. That's the desired behaviour if for some reason it tries to start twice on the same interface. Keep an eye on the logs but if you don't see it again then you're all good. Steve

I agree that USB NICs aren't good to use with pfSense, I would never use it in anything important. But I'm currently checking my options for having a cheap pfSense router other than min IBM T43. And a old Acer Aspire One, with a USB NIC would be the cheapest way for me to get a OK pfSense router for home use :) I'll try tomorrow! Thanks! :)

[SOLVED] The system is new, but I checked via the System Update.  Showed 2.3.2_1 Up to Date. So used the GUI exec command interface to do the pkg update and that fixed it. The BSD command list popped up in the console window as intended. So, very accurate diagnosis! Thank You!

Yeah it does, the WAN is something like 192.168.1.146. But seems weird, because I think I remember that it has worked before? But hell, I might remember wrong.. Thanks I'll try it asap and report back! EDIT: works now!

^ agreed!!!  Wifi cards in pfsense never going to give you coverage or feature set or speed that just getting an AP would allow you do.  An AP that supports vlans and switching that allows for vlans you can create multiple wifi networks. Or could just go with different AP for your different wifi networks.  If you have some old wifi routers laying around they can be leveraged as just AP in a pinch.  But its going to be better to get true AP that support vlans in the long run.

You didn't understand me, I've just confirmed that DNS servers in System > General Setup are not XMLRPC synced by design. Of course we sync XMLRPC everything:) The issue is fixed. You were right when mentioning ISP. I've contacted them and it turned out it was their fault. They have had a route which routed all traffic to WAN VIP address, even though we are directly connected. So, all the replies for traffic sent from backup box WAN address, were sent to WAN VIP owned by primary box. The only weird thing is that ICMP traffic was passing (ping, traceroute -I), UDP was passing partially (DNS lookup, drill), and (I think) TCP wasn't passing at all (couldn't telnet to any site port 80 from backup box). Thank you, very much. You were of great help!

@sforsythe: Ok, I was able to set up a test network and rules and it does work if you manually type it. But still I believe it is a bug in the autocomplete functionality which I believe is giving me a list of all 'valid' aliases that I can enter (and the network one doesn't present) … that and the text in the type=host(s) should be changed if you in fact should not be able to enter a subnet. I am seeing the same issue, if I create a new alias with type Host, when I type an existing alias the autofill only shows Host aliases. If I were to choose alias type network the autofill will only show network aliases. If we want to create a group alias of both existing host and network aliases the autofill is not useful. I am trusting above that manually typing a mixture of host and network aliases into a new network alias will still consider IPs for the child aliases in question. Some clarification on this matter would be very much appreciated. I second this is a bug that should be fixed.

That's squidguard.  I'm asking about squid. [image: squid-local_cache.png] [image: squid-local_cache.png_thumb]

Hi - Thank you for your post - it was really helpful. I figured out how to update the BIOS to .99m.  It does in fact show .99m when booting the ALIX2d3. So, first issue sorted out. I was still getting the weird characters upon booting PFSense, but after fiddling with the serial port settings - putting both my terminal program and ALIX to 11500 (whatever it is) I got text. Last error message was about long mode. I downloaded the i386 2.3 dev version (latest) threw that on my cf card and everything works perfectly! Thank you! :P

pfsense doesn't support L2 firewalling, I think Also, when your vm's have the ISP as the default gateway, you're out of luck and need to redesign your routing to allow all traffic to flow through pfSense, but i can't tell you with any sofifistication how to do that without knowing your exact setup.

The physical layout is as you describe and it matches up with the labels etched on the case. The first two ports use a different network chipset which probes in a different order than the other four ports. Thus is goes 1, 0, 2, 3, 4, 5.

Yes, I'd also like to read some instructions on how to do that. How to clone the whole repo from pfSense's main website?

That self generated cert is going to throw errors at you.  If you want to use https I would also suggest you take the time to gen a new cert with valid fqdn and SAN so you can use name or IP and trust the pfsense CA so your browser doesn't throw errors at you or have you create exception, etc.