Ah, thanks for the correction. Not sure why I thought that then. Steve

@stephenw10: Ah good stuff.  :) I have no idea about 802.1p, or no more than is revealed by a quick Google: http://en.wikipedia.org/wiki/IEEE_P802.1p You might think that setting it to a higher level would give you priority over other users. However it may also screw things completely or have engineers are your door in seconds! Since everyone else will be at 2 there would be no need to go higher than 3. Wait until a busy time when your connection speed has slowed and try it.  ;) Most likely it will do nothing at all and is just an option provided by Huawei that's unused by BT/Sky. I keep meaning to get a second modem to hack. This may be the final trigger. Steve yeah nice one. thanks for your help. your thread came in really handy

@stephenw10: Damn it! The info about "It's worth noting that there is no point in buying a card with a high transfer rate" came a little bit to late for me :D. Well, it's just ~35€ so everything is fine. It's this one: http://www.amazon.co.uk/gp/product/B00422IVLC/ref=noref?ie=UTF8&psc=1&s=computers I went for the 8GB CF card since I was afraid of the 4g limitations on some CF cards. Yes, I tried out the work around of JimP and it worked perfect, but something slowed down the firewall again and I'm kind of tired to remount it every time again. I'll just switch back to 2.0.1 and wait until a stable, hopefully properly working with my CF card, 2.1 version is out :). I was always wondering what the difference is between those 1g-4g versions, thanks for clearing this up. Thanks for your support and all replys, Szop

The pkg button is the proper way. Snort is odd in that it has (or maybe it's been fixed since) an option, on by default, to clear out the snort settings when it is upgraded or reinstalled. Find the relevant checkbox to disable that behavior and it should retain your settings.

jimp, I believe the issue he was having was that when using pfsense his WAN IP address changed too often, whereas using another router it didn't. He wrote: I've also tried a basic router (Asus something) which has been working fine without any address change, which should rule out the ISP as the problem? Without more info it's hard to say what could be going on (flaky modem, weird dhclient issue etc) The flushing of states via the old gateway on WAN IP change event would be another related issue.

you prob have dns not working on pfsense itself - where do you point pfsense for dns?

The really interesting thing is that earlier you said: @rjcrowder: Then, if I go into the console menu and reconfigure the WAN - telling it to use DHCP - it gets an IP address! Possibly the default state of the NIC, when the machine first boots, does not check for all 4 pairs connected. However when the driver is loaded this check is enabled in the hardware such that subsequent negotiations are able to fall back to 100Mbps. I guess.  ;) Anyway using the correctly wired cable is the right solution. Steve

So, that was just the beginning, it's actually better to not null-route it but make the following entries: files.pfsense.org - 192.168.1.100 files.pfsense.com - 192.168.1.100 www.pfsense.org - 192.168.1.100 www.pfsense.com - 192.168.1.100 If your package web server is 192.168.1.100. Next is the problem of not having the packages themselves. So wget -mk -np http://files.pfsense.org/packages/ gave me a directory that I plopped into my already existant packages directory (created from the git clone as described in the documentation) but the problem I ran into was the php files being rendered still (which made any packages that pulled php files get the rendered version instead of source). So you need to add a .htaccess file in the packages directory with the following: RemoveHandler .php .phtml .php3 RemoveType .php .phtml .php3 php_flag engine off Make sure that "AllowOverride all" is enabled if you are running Apache to host the package site, if not, you'll have to google how to allow .htaccess files for your particular server. (or if you server doesn't support htaccess files then how to enable source disclosure) After those alterations I seem to be off to the races for the most part. Some packages pull from other websites, but altering the package_8.xml or just rerouting the dns seems to solve most of those issues.

Resolved… added hw.usb.no_pf=1 to loader.conf file. The issue was with my interface being given two names by pfsense, and neither being configurable.

thank you so much

Oh, yeah I forgot to put the quotes in there, edited my post.

Like I said this is beyond my experience so don't thank me yet!  ;) Perhaps wait for other comments. That's what I'd try though. Steve

and where do you have questions on these instructons? http://doc.pfsense.org/index.php/Installing_pfSense

@wallabybob: @lexemmens: Removing the 10MB NIC showed no result. I presume you meant "no change in behaviour", otherwise I'm not sure what "no result" means. I suggest you try again and when it appears to hang leave it for up to 30 minutes. If the console shows exactly the same output then we need to look further. If I recall correctly,some months ago I replied to a similar post about install appearing to hang. It turned out the original poster just need to wait longer. If you search the forums you might find it and then have some some experiences to compare with your own. What is the file you are trying to install from? I presume you have unzipped the file, burnt the resultant CD image to a CD, successfully booted from the CD and the invoked option 99 to install to hard drive. I indeed meant no change in behaviour. What I tried today: boot from CD and leave the PC on for about 45 minutes. Got the same result when I hit CTRL-T. Also ran Memtest86: no errors. And I ran GParted from the Ultimate Boot CD. That showed me that my hard drive was messed up (no partition table). So I created a partition table and rebooted of the pfSense LiveCD. Still no result. @Your last sentence: I downloaded the corresponding .iso.gz and extracted the ISO. Burned it to a CD and boot my PC from CD. I can't enter option 99, because that's an option in the shell menu that only shows when pfSense is started. Update: I also tried downloading version 1.2.3. Burned it to a CD and voila. It works like a charm. Updating from the browser from version 1.2.3 to 2.0 or to 2.0.1 succeeds, but after a reboot it stops at: Starting device manager (devd)… CTRL+T gives me the following result: load: 0.05 cmd: php 265 [nanslp] 0.00r 0.09u 0.02s 0% 24084k EDIT 2 Thread marked as solved. Instelled version 1.2.3. Turned off APCI in BIOS and turned off OS/2 in BIOS. Then upgraded to 2.0. After that upgraded to 2.0.1. Thanks for your help.

There have been reports that some modems (cable modems if I recall correctly) will only talk to the one downstream MAC address. If you change the downstream device (e.g you home workstation to pfSense router) then it is necessary to power cycle the modem, with power off for at least 10 seconds, to get it to recognise there is a new downstream device. I have never seen this problem and I don't know the details of how such modems behave beyond what I have written.

Thanks a lot to both for your answers!! I will try soon to implement pfSense also at home with an Alix solution + Vigor 120… Thanks, Michele

404 is the correct response at that URL. There is no index page to view. Try instead: http://updates.pfsense.org/_updaters/version This should result in a small file with the current version name. Steve

I actually figured it out and it was just a missed step. I guess that's what 3 hours of sleep in two nights will get you. Thanks for the reply!