I just tried some PHP in a page on 2.0.3 and 2.1 and it worked in both places.

The ARP data shows at the time a MAC address for 192.168.4.6 was known. Is that MAC address correct? Is that system enabled to respond to pings? The following ARP entry has me curious: @nathan715: ? (8.8.4.4) at (incomplete) on xl0 expired [ethernet] That suggests that at some time in recent past your pfsense thought 8.8.4.4 was on the same subnet as xl0! What netmask do you have on your interfaces? Perhaps you have been tweaking various things and the system has some memory of various tweaks that have not been completely undone. I suggest you reboot your pfSense box and attempt to ping 192.168.4.6 again. If you don't get a ping response then check the PC is configured to respond to pings and try pinging the pfSense box from the PC.

The WAN interface would fail to get an address often as well, with the Intel cards it's been smooth straight away.  Thanks again for the help all!

Thank you jimp!

Hi, your right a dont have to expect any reply from anyone, but normaly there are some guyes who will answer in 24h ;). need commercial support? And thats why the pros didnt answer and only the good guys do so ;). BUT, folks i have to apologize - sorry for my bad words, but time is one i never have enough. I read the howto exactlier and find the point of geom, which i overread while i thinking it has something to do with geo-redundancy, but i found out that this is the option for raid…. ok sorry for that and ashes on my head...

Hi ALL, I re-downloaded the ISO image and burnt it a new CD and tried to install. VIOLA … it worked. I am marking th thread as SOLVED :)

It works. Thanks!!! :)

I had the same problem (ROOT MOUNT ERROR) with USB mem stick. Also tried external usb CD. Choosing boot psSense with ACPI disabled, I finally installed pfSense

The RRD graphs work using pf's counters, so they will not work with pf disabled. pfTop works using pf states, which do not exist if pf is disabled. For a console program like that, I prefer iftop. For graphing you'll need to graph from a different machine via SNMP if you want graphs.

As always - thanks Steve. Not sure why but I have a problem finding stuff using the search function - pity there isn't a sort-by-date. OK - now I start my next project - just waiting for the right 2.5" HDD on Ebay :)

@jonallport: I'll apologise on behalf of everyone else for keeping you waiting. As far as I know there is no issue using spamd in front of Exchange; it's a largely standards-compliant SMTP server so you shouldn't have anything to panic about with spamd unless you have a large number of contacts in China or Korea. Thanks for the reply, but no apology is necessary.  I remember this place being way more active about 2 years ago when I was heavy into using pfSense…  Thanks in advance.  I already have the setup going in my lab and feel that I can make the switch tomorrow evening. Thanks, -Morgen

So apparently my additional nics just got incremental em names.  All of my existing rules, etc stayed the same.

@phil.davis: There is not a way to easily "guess" the bandwidth of an interface at present - many people will have a 100Mbps ethernet cable between their WAN port and frojnt-end modem device. The front end connection to the internet will usually be much slower than this (depending what their hardware does and what they have paid for from the ISP). It would be easy enough to add an attribute to the Interface configuration page that lets you define the expected real throughput speed for the interface. Then, if something was set in there, things like Traffic Graph could start scaling at that rate. If things like this are done, then it would also be good to have a "Save" button on the Traffic Graph page so users can decide what graph settings they want as default. Exactly. I would enter, for example, that opt2 (or wan2) should be maximum with 16.000 kbit/s. If the real Bandwith never reaches this limit, its totally ok. I just want to see, what percentage of the technical-maximum is reached at the moment. For a LAN-Interface this would be 100 Mbit/s or 1 Gbit/s. I may be ablt to code that into the pfsense-GUI, but for saving this setting to the pfsense-harddrive, i may neet to look into it more deeply. PHP is one thing, but the saving-functions and the config-db…. well, i would love to have this coded into pfsense by one of the pfsense-programmers themself. So i dont need to learn, what they already know and so everyone can have this option in the next update. What about it, PFsense-team? :)

@necron: First of all, thanks for the clear tutorial! Question though, how do you guys handle admin accounts when authenticating with AD? For instance: I have the default admin and another two admin accounts created. I then made the AD link which works fine, but when I log on with one of the two custom admin accounts the 'no page assigned' error appears. Default account keeps working though, but that one has a huge random password :) Add a group. Click the group and add privileges :)

pfsense console option 8 allows you to drop to a standard unix shell and run all sorts of diagnostics. You can run from the basic ifconfig to check if the interfaces are correctly configured, to ping to check for connectivity, up to tcpdump (which however requires some technical background)

Yes, you manage pfSense from the LAN interface by default. You can of course change that.

@tim.mcmanus: Are you power cycling the cable modem each time you connect it to a new device?  Some of those cable modems have a habit of grabbing the first MAC address they are connected to and refuse to talk to anything else until you power cycle them.  That's the first thing I'd try to do.  If it still doesn't work, reply back. Right after I posted this I tried that and it worked! Before I just unplugged the modem for 30 seconds but, I needed to unplug the modem and take out the battery and unplug the server and take out its power supplies. After about 5 minutes with them off, I turned it back on and It got an IP right away and it works great!

did you edit the default lan rules on pfsense?  By default there should be a rule that allows anything on the lan subnet to go ANYwhere.