Provide some details of your hardware and config, and a screenshot of the console.

If you have a windows hyper-v server that you can run pfsense on, you should do that rather than use a desktop. I'm using a hyper-v server with multiple guests and it has been a stable configuration. I have two pfsense guests. One is for my physical LAN and one is completely virtual.

Oh, oops.

Yeah i did a clean install and restored config. Now running 2.4.2 and a new update seems to be available!

Although for some reason pfsense still does not see that i have packages installed, like openvpn, pfblockerng and zabbix. They all do work still.

@Gertjan:

Well, yes !

Do a clean install, and accept default LAN settings from console.
When the system is up, connect to GUI, and do a minimal setup for your WAN. And WAN interface only.
Do not import your saved config.

Get back to console, option 8 - and ping Google.
It's ok ?

Get the list of the available packages in the GUI. it's ok ?

I ended up getting impatient and just restoring the system section.  It looks like by restoring the system section by itself it after I restored everything else it didn't cause an issue.  The only thing that ended up not getting restored was my OpenVPN server setting.  Luckily that wasn't too big of an issue.

Didn't say fire the guy, he is prob qualified to change the toner in the printer and help the users when their mice stop working.. ;) But from a statement like that he shouldn't be in security that is for damn sure..

The other aspect, even if not worried about security issue because of no code, nothing open to the outside… How is he an admin of anything?  The code is not current and no longer supported.  The OS it based on freebsd is old and out dated 8.3 - and guess what no longer supported.

So even if you had a question on how to do something, or something XYZ not working. Your out of luck..  First thing anyone is going to tell you is get current..  That your not even on the latest version of that branch is disconcerting... 2.1.5 was the last version on that branch..

Go through the release notes for the versions of all the stuff changed and fixed..  And keep in mind release notes are normally just the highlights of stuff fixed, corrected, added.. There normally many other things that do not get mentioned.  You would have to look in redmine for all the resolved issues that are fixed in a specific release, etc.

Yea i read that but i don't see any connection with my issue not being able to copy one slice to other ?

Your are connecting from where : LAN ? Somewhere on the Internet ?
Using your WAN IP ?
You have a pfSense firewall rule that open port 1194 (TCP and/or UDP - see image) ?
The special one for you (and me btw) : do you have another router in front of pfSense ? And if so, did you open and NAT port 1194 to pfSense on that router ?

vpnwan.PNG
vpnwan.PNG_thumb

on your usb memstick what is the contents of /boot/loader.conf

You may need to explicitily set a value there to:
vfs.root.mountfrom="ufs:/dev/da0a"

There isn't an easy or automatic way to do that. You'll have to make a backup of the new configuration and then use a text editor to replace the user and group sections with those from the old configuration.

thank you

Got it  :P

In the config.xml there is a switch for the repo and it had the value

<pkg_repo_conf_path>/usr/local/share/pfSense/pkg/repos/pfSense-repo.conf</pkg_repo_conf_path>

… but in the UI it is configured as "Legacy stable version (Security/Errata only 2.3.x)"

When I change it to the legacy repo manually

<pkg_repo_conf_path>/usr/local/share/pfSense/pkg/repos/pfSense-repo-legacy-23.conf</pkg_repo_conf_path>

The restore of all areas then selects the right repo…

So in my opinion there is a bug in the backup of the repo configuration to config.xml.

UEFI GPT vs old style bios partition?

Edited first post for PFSENSE 2.4.2

@johnpoz:

Neorouter is exactly that a P2P solution.. Why would you want/need to install this on pfsense?  You install neorouter on the actual client devices..  Not the router/firewall of your whole network..  Why would you not just install the neorouter "server" on one of your clients that is going to be in your network.  This is the way its designed to be done..

What if all clients are road warriors?  :P

@archenroot:

df -h

Filesystem          Size    Used  Avail Capacity  Mounted on
…
/dev/md0              38M    164K    35M    0%    /tmp
/dev/md1              58M    19M    34M    35%    /var
..

you need more space in /var.

Just go to System/Advanced/Miscellaneous: RAM Disk Settings (Reboot to Apply Changes), increase size of /var (I have set 800 MB), reboot the system and try to upgrade again. I have also increased size of /tmp to 60 MB.

P.S. I have two firewalls. One of them could finally upgrade, the second could not upgrade the kernel and I had to reinstall the system.

ANYTHING is possible in the software world.
You just need the knowledge, the tools and the time.

You can partition the hard drive, either in UFS or ZFS so you can install pfSense in the first partition and leave the other partition for data/space (I use it for Squid cache in my case).

Now, windows won't be able to read ZFS and you may be able to read UFS with some hacks, but it is not worth it due to the risk of corruption.

You can format the 2nd partition with exFat and FreeBSD can mount it, but again, looking for trouble.

If you need space, just get another hard drive…

@Ulysses_:

Already doing that with 2 physical drives, as it says in the title. Can't pfsense be installed to just the first 8 GB of its physical drive?

So the remaining 500 GB are available for a user data partition storing movies and photographs? Which pfsense does not ever read?

Perhaps in linux's ext3 format that windows can read (there is a driver for this) if fat32 is not allowed?

soo, I'm sorry for not giving any further information. Now I have time to add some:

After failures while trying to update from 2.4.2 to 2.4.2_1 I decided to do a new installation and restore the backup config from yesterday.
Therefore I did the "config on a seperate usb stick" trick. Installation looked fine, but after the normal reboot the machine suddenly reboots while configuring WAN interfaces (we have got three of them: WAN1, WAN2 an LTE). Second boot worked. At the moment internet connection works.

But there are strange things:
1. I can see outgoing traffic on LTE that should not go via this interface (but WAN1) [edit] This seems to be fixed after a reset of all states. [/edit]
2. Very spooky: When I sit at my Windows 7 machine and download something via Firefox, I get the expected download rate (about 23 MBit/s). But as soon as I log in into the pfSense WebGUI, download rate decreases to about 6 MBit/s.  :-\

Maybe there's something mixed up with the WAN interfaces, traffic shaper and firewall rules?
Or broken hardware? I tried it with two different disks, same result.
Or special german characters in the config?

I have no clue what's going on, so I hope that the crash dump gives answers.

Thanks a lot for your support and many greets
Stephan

Thanks Grimson
Your suggestion worked fine. System is up and running now with an Actiontec C1000A as modem, Dell T110 ii server as pfsense and an Asus RT-AC66U as wifi extender.
Brian