Can use something like /etc/rc.firmware pfSenseNanoBSDupgrade path_file

@wallabybob: @pozolero: it freezes in configurin WAN interface… Freezes for how long? There can be delays while pfSense is waiting for response to its DHCP request. What build of pfSense are you using? Hi there wallabybob, can be frozen for up to a day or more if I leave it in that state.  I'm using pfsense 2.0.1. But the funny thing is that at first it did not happen. That began to happen eventually. The dell server has two hard drives configured in RAID, could this be the problem, maybe one of the two is saving an image and is remaining in the system and this is happening? Regards

On physical hardware, that's usually caused by a buggy BIOS and upgrading it generally fixes. Though mucking with the timecounter sysctls may be a work around, as Steve noted.

for others, these are the links jimp was referencing to: http://snapshots.pfsense.org/FreeBSD_RELENG_8_1/i386/pfSense_RELENG_2_0/?C=M;O=D http://snapshots.pfsense.org/FreeBSD_RELENG_8_1/amd64/pfSense_RELENG_2_0/?C=M;O=D

1. has been fixed in the tree and will be corrected in 2.0.3, there are already several threads for it. 2. Harmless message, has always shown up with limiters and in some cases captive portal. Not sure about 3, haven't heard anything like that.

done, thanks

Make sure both master and slave have their GUIs on the same type/port, e.g. both https on 443, or whatever you want as long as they both match.

@jimp: Not the same issue. And that's been asked/answered a few times already in other 2.0.2 threads. OK. Thank you for setting me straight. I'll go look it up. Should I req the post be deleted?

@jimp: Looks like it was updated, but all indications from most people are that it improved. That thread you linked was for a much older version of FreeBSD so it isn't exactly relevant. Yes, I agree but seeing exactly the same messages over timeouts. Under 2.0.1 never a issue, put 2.0.2 on these two machines and now network card issues. I  have disabled msix on the nics and set the other tuning parameters indicated for e1000 (set the queue to 1, etc) in hopes it stabilizes this issue.

Did some more testing. If NAT sync is turned on in XMLRPC Sync config the outbound NAT's are synced and any extra rules on the backup, even if the "do not sync" checkbox is set on it, is removed.  If the "do not sync" is set on the master for a outbound rule that rule is not synced, but any additional rules not on the master are removed from the backup. If I turn off NAT sync in the XMLRPC Sync config we dont get the outbound rules being wiped out on the backup.  Obviously we loose the 1:1 and other NAT rules being synced as well. In 2.0.2 perhaps the NAT sync is not evaluating the "do not sync" explicit rule on the backup before removing rules?

@Nazarene: the mirrors i have found are for Compact Flashes, memory sticks and live cd's. can someone point me in the right direction with say a link to where i can get a mirror tht i can casually burn to dvd. The LiveCD is also the install CD so the version you want is almost certainly this: http://files.nyi.pfsense.org/mirror/downloads/pfSense-LiveCD-2.0.2-RELEASE-i386.iso.gz If you have more than 4GB of RAM you may want the 64bit ISO instead but you probably don't need that. Steve

That could be from NTOP I installed a few days ago, it looks like its the type of libraries it would install now that you mention it, the only other package I have on this firewall is open-vm-tools.

@extide: Depends on how the rules are created, if they are generic rules then they don't apply to any specific interface. If they are bound to an interface it would be the friendly name like LAN or WAN or OPT1, etc, not the freebsd name like em0. I would say just export your config, build the new box, import the config and then see where you stand. You should be pretty much ready to go, you will just need to reconfigure the interfaces themselves, but the rules should be fine. Awesome!  Thank you very much for clearing that up.  Knowing that it may not be a waste of time makes me a little more comfortable bringing down the network to attempt this.  I'm going to give it a go.

I think so

Well, it's a Roadrunner ethernet handoff..  I thought of that and rebooted the cable modem.  No change.  But, It's a question I just sent them to be safe.

Why not try using the Pre-Built OVA files for Virtual Machines? http://snapshots.pfsense.org/FreeBSD_RELENG_8_3/i386/pfSense_HEAD/virtualization/?C=M;O=D

Thats good to know, I will keep that in mind in the future.

@matguy: That appears to be a Optiplex 520 DT motherboard, as shown here: http://support.dell.com/support/edocs/systems/opgx520/en/ug/sdabout0.htm#wp1075336 As far as you're concerned, that's a pair of standard PCI slots.  That longer one is made to function also with a riser card, which in some cases may provide a single or a pair of PCI slots (maybe a PCI-Express x1, I didn't fully research that) at a right angle to the motherboard, but functions as a standard PCI slot without the riser card. Note, some PCI-X (not PCI-Express) cards may fit in the shorter, standard PCI slot, I would not try to fit a PCI-X card in the longer slot (nor PCI-Express, for that matter ;) ) Thanks very much for that info All i see on the SFF is GX520. I just bought an PCI 3Com 3C905CX-TX-M 10/100 and ill let you know how i go. Intel chipset seems to work better with pfsense

Had the same issue yesterday, seems the filesystem on the usb was incorrect, Ive always used unetbootin for other projects but did not work for this. Re-imaged with win32discimager and worked perfectly.