@gertjan

In the afternoon update started from GUI was ok!

@jpgpi250

Some patience then.

@gertjan It was indeed a DNS issue but it was caused by something else. Time was not in sync and therefore DNS was not working. NTP was configured with DNS names only. So a what came first situation was established? The chicken or the egg? :)

I configured an additional time source by IP. Had the time updated, restarted DNS and everything was fine.

I do experience some issues with the DNS resolver sometimes. It's a different issue so I should open a new topic for that. It does not always resolve my Active Directory zones defined in the DNS resolver. Restarting the DNS resolver service solves this issue and I find that very strange...

@teamits Agree.

@dominikhoffmann Virtual NICs under VMware Fusion.

Screenshot 2021-03-13 at 09.55.07.png

You could even have another virtual Mac sat the other side of a virtual pfSense install.

@mtsgsd said in Am I missing something here? Shuttle XPC no graphics, no serial port:

only two pcie slots in this I5 shuttle

So which Shuttle XPC computer do you actually have. My brief look suggested most have lots of connectivity options. http://global.shuttle.com/products/productsList?categoryId=105

@discarn8 Hey men, I had the same problem, exactly the same problem, my solution was reinstall pfsense usb via front.

This allowed everything to work perfectly.

@bainsley said in new user and not sure about these log entries?:

What is the firewall syncing with? the kernel? BSD? Which filter? The rules?

The kernel includes capabilities what I would call a "IP stack". And it can act as a firewall.
Both are needed so the FreeeBSD kernel can do it's firewall thing, and that's what pfSense is all about.

Firewall rules are dynamically reloaded after many possible sirconstances, like processses restarting, alaiase changed, or some user GUI intercation. many others exist.

So you will see this :

@bainsley said in new user and not sure about these log entries?:

check_reload_status 400 Reloading filter
check_reload_status 400 Syncing firewall

a lot.

If you are not using IPSEC, this :

@bainsley said in new user and not sure about these log entries?:

php 414 rc.bootup The command '/usr/local/sbin/strongswanrc stop' returned exit code '1', the output was strongswan not running? (check /var/run/daemon-charon.pid)

is just a message that pfSense stopped IPSEC - and it was already stopped.

@bainsley said in new user and not sure about these log entries?:

php 414 rc.bootup. Creating rrd update script

This happens when pfSense finds a 'new' interface or object to make graphs for.
The graph data is stored in a so called rrd file.
A scripts that runs every xx seconds, populates the rrd file with data .
So you can have, after a while :

9cc0b9bc-bbd5-43ca-a771-a05bffd2cf8f-image.png

https://forum.netgate.com/topic/161085/download-location-for-2-4-5-release-p1-amd64

-Rico

Ok I checked the upgrade log in /conf and there are a number of php errors.

But I can't get any of it off the device.

If I bring up cpsw1 with an IP I can ping things. But if I try and ssh off it it connect to the remote end and then hangs.

@adamw Yes, you always need to be on the correct version or else an install attempt will try to upgrade the package manager software, in this case to 21.02.
https://redmine.pfsense.org/issues/10464

@p32spaceblaster I just tried this again but via the console/serial cable and the upgrade was successful.

@jimp Cool, thank you very much for the clarification.

Cheers

@bigsy Thanks, I'll go over that guide. Upgrading sometimes can be like ds of that saying we jokingly used in the hospital "Well Mrs. So and So was doing OK until we started helping her."

I know this is old thread, but I wanted to provide information in case anyone runs into it also. Similar error to OP and similar resolution... (although this is with the latest release 2.5.0)

I am setting up a refreshed pfSense box and using a quite old but little used Samsung 830 series 128GB SSD. It is a dell version that was removed from a laptop a good 7 years ago but didn't see much use except for test installations of Windows 10.

During setup, I read the documentation which steered you towards ZFS, especially on UEFI modern gear, so I did that and left the default ZFS setup options selected. When executing the final Yes, it would attempt to do:

kern.geom.part.mbr.enforce_chs:

but then nothing, and eventually the screen would keep popping up with:

ahcich1 timeout on slot x port x, a bunch of "SEND_FPDMA_QUEUED DATA SET MANAGEMENT" and just repeating timeouts.

I then thought, let's try an old rusty spindle HDD and sure enough, that kern.geom command went right through and started copying files right away and no problems. Finger beginning to be pointed at the Samsung 830 (or its firmware) I then grabbed another SSD from my parts drawer, this time, an Intel X25-V 40GB (yeah.. old!), and tested another ZFS install and it too blew through without a drama.

so similar resolution to the guy above, a different SSD seems to work, which makes me think its a firmware issue with the SSD perhaps (and 830 is very old series, so I'm not surprised to be honest...but i was trying to re-purpose some old gear so as to not waste resources!)