Thanks for the reply. Mainly to separate the traffic on the first pfSense. That one currently runs at about 35% to 55% cpu. Eventually that server will be upgraded. The thought is the 2nd pfSense at that location will be used exclusively for the VPN access. If the VPN access begins to affect the traffic through the main pfSense server, I'll just cut the site2site access out of the picture. I have limited bandwidth available (400/25) so the site2site is a nice to have to eliminate running to the building when something goes bonkers there. I may try enabling the site2site on the 1st server and see what happens. Is it possible to run site2site and road-warrior on the same pFsense server. Needless to say, because I had been relying on RDS for the past few years, I'm a noob on the VPN side of things.

It doesn't matter how many you have, one should be set to default. Either directly or by using a gateway group as the default. There is an open bug report about a gateway group as default not working for everyone, though, perhaps your setup is one of the affected ones.

As long as you have a default route showing under Diagnostics > Routes you should be fine.

The advice you were given was pragmatic and meant to get you back up & running quickly, which is usually desirable when your net access is downor your config seems irreparably broken..

If you're really that upset then simply ask for a refund and move on, but I've worked with other firewalls in the past and I've had upgrade problems with ALL of them at one time or another. At least pfSense isn't a black box and you can poke around and make changes that might fix whatever issue you have. Try doing that on most other firewall appliances. I upgraded a Mikrotik 6 months ago and it blew away ALL of my configuration, including a complex QoS config. That's not to say that the 2.4.4 upgrade could have gone a little smoother, but that nothing is perfect.

If you have a problem that can be reproduced then log it to redmine and they will fix it.

New location/client, I'm gathering information and assessing here.
I'm sorry you are being a jerk here about this.
You really are haha.
I'm expressing my opinion on the interface saying all is fine and up to date.
If it were under my management it wouldn't be this long before it was checked into.
Again thanks for leading me to the information I needed.

Ah, looks like this was discussed a few months back:
https://forum.netgate.com/topic/135395/where-to-download-old-versions/7

Intentionally removed because they are insecure, and we should maintain downloaded copies if we want them.

Check this :
What ? Google doesn't accept MITM anymore ?

Thanks, yes I know it will be double NAT'ed but it should only be for a short time.
I was going to set it up before hand and just swap it out but need internet to download packages and I think the setup to the WAN is not going to be easy as it needs a PPoE connection and also a VLAN10 so want to have the rest of the setup done before I need to sort out this part. I may be surprised and the WAN connection goes great but if it doesn't and takes a while then the rest of the house/servers is without internet connection for longer.

@kendalja tried your way but unable to install ssme error efi framebuffer

@zander7990 said in Can't reach internet:

but my laptop can't reach the internet or ping my Nas.

Where is your NAS?

You have given us nothing to work with here.. Other than its broke..

Is your wan public or private IP on pfsense... What is your lan network.. Assume you left it default - does it overlap with your wan network?

How are you managing pfsense - through your VM console?

Lets start with basics... Install to bare metal.. Can you get to the pfsense webgui? Lets get that far and then see where your going wrong... I can tell you for sure removing rules off your lan isn't going to fix anything..

Great to hear. Thank you for the feedback.

And the power bill for such a server is not exactly negligible

@jimp said in Pfsense installer can't find hard drive or raid virtual disk:

When you had it running on FreeBSD, which disk controller driver was it using?

I don't check it further, but I know It's missing some driver that I don't know. I just know my device name not the controller. I'm on the way to my Datacenter and find some clue to answer ☹

Sounds like the internal drive might have failed. Are you able to get an image and install again?

@jimp said in Upgrade problem 2.4.3-RELEASE-p1 to 2.4.4_p1 - Lost VGA Console:

https://www.netgate.com/docs/pfsense/install/upgrade-guide.html#upgrading-from-versions-older-than-pfsense-2-4-4

Read the part about console problems near the end of that section, you might need to add kern.vty=sc into your /boot/loader.conf.local and then reboot.

Thanks @jimp... That got it!

I read that, but a J1900 is a Celeron not an Atom, so I didn't think this applied.
So for anyone else in the same boat, this issue applies to J1900 (and maybe other Celerons as well.)

@grimson
Thank you! Case closed ☺ . So it seems like it was a bug in pre 2.4.4 versions, that my previous configuration was working well, not a feature.

Thanks ! Seems to have done the trick quite nicely.

All that is left are a few 10's of mtree deltas on lockdown flags on things like passwd: flags ("schg" is not "schg,uarch").

Thanks a lot !

Thanks for your big help