Once again the pfSense GUI Packet Manager got stuck after the most recent pfSense upgrade 2.4.5_1. Yet again it was pkg-static process which was stuck.

Executed:
killall pkg-static
pkg-static upgrade -f

Saved the day.

@bradbunch37 said in New pfSense User:

Hello,

The key is to avoid dual-NAT (if your ISPallows it):
F.E.: https://forums.att.com/conversations/att-internet-features/how-do-i-configure-att-bgw210-in-bridge-mode/5defca9bbad5f2f606709d08

Orbi Wifi 6 AC4200 theme (use in AP mode):
F.E.: https://www.youtube.com/watch?v=3YwkjTXrlsA

build or buy a pfSense box and use this as a router + firewall
(https://www.pfsense.org/products/)

so,:

ISP modem (BGW210-700 in bridge mode) + pfSense box + VLAN capable switch (even this is NetGear GS108) + WiFi AP (Orbi Wifi 6 AC4200)

segment your network into VLANs

+++++++
if you have separate ONT + ISP router / modem devices from the service provider, in most cases they really can't be separated, but bridge mode works well

in many cases, if you ask your provider and system allows (this is a case of installation topology), you can leave your ISP router / modem and go directly to ONT eth. port for public IP

"I know nothing!" about the specific issue, but instead of fixing something by manually patching the interfaces.inc file I would suggest that you add a ticket on https://redmine.pfsense.org/projects/pfsense/roadmap as to describe the reason for a fix / patch with a detail about how it used to work when you patched the file. (You will have to login or create a pfSense redmine account on that site.) Also it would probably be a good idea to link this forum thread to the ticket (and vice-versa).
It will save you from the trouble in the future as updates are released.
Have a good day. :-)

hi,
ive upgraded to 2.4.5-p1 without issues. I then reinstalled the box from scratch with that release. just had issues with auto install of avahi and pfblockerng packages. the rest seems to work normaly.

Tried it a third time and this time didn't get the pesky warning message about packages not available for the version. It went directly to installing the packages. YAY! But it still hangs on darkstat and pfBlockerNG-devel. I can kill those processes and go into Backup/Restore to reinstall all packages and it goes though and reinstalls everything in under 3 minutes. Any way to figure out why it is stopping installing those packages?

@teamits I did that already for two days. That's why I posted first email. Googling for boot hangs was getting me nowhere. I'll figure out howto put debugging statements in and figure out why it stops. Now I know it's the menu.4th menu.rc script that does all the menu including the timeout. It's just a bunch of loader script commands. https://www.freebsd.org/cgi/man.cgi?loader(8)

@Gertjan said in Idea for quicker CVE patching:

json-c-0.13.1_1 is vulnerable:
json-c -- integer overflow and out-of-bounds write via a large JSON file
CVE: CVE-2020-12762

This one made it : https://docs.netgate.com/pfsense/en/latest/releases/2-4-5-p1-new-features-and-changes.html

👍

See also https://forum.netgate.com/topic/142004/dhcp-config-is-apparently-not-updated-in-a-safe-fashion

@bigdaddycainer

Yes i agree ,regression is the answer,unfortunately and painfully,hope i kept the old gz or iso
as pfsense arent in the habit ( like they previosuly did) of visually indexing the links to each version,like
they previously did!!.

I knew i shouldnt have done this as per past experience ,tis best to wait for the 2nd rev on a new release.

Cheers

@trent6gol

THX for your all help, but on my part off - topic
(the above, shell "prtsc" were all I made via IPMI, It was made from a Supermicro + pfSense unit, which is about 3,400 Km from me

edit: Advantech is a thousand-year-old company, I see you don't know
has a huge reputation in industrial automation!

by the way, icurrently all stuff is made in china, and we spoiled it and it’s a suck now ☹

It worked. Nice job.

I'm already running 2.4.5. on that machine, which updated from 2.4.4. However, tried again with the 2.4.5. image and Etcher and still fails to boot. Tried Legacy and UEFI, although it's an old laptop that gives and warning that the UEFI mode is experimental and not fully supported. Yet, 2.4.4. still boots in either mode. Strange!

You should not use anything intended to write an ISO image, they can often add bootloaders etc which just break things here.
You need an image writer that does a bit-for-bit copy. Etcher does this and can also decompress correctly so need to do that separately which can also break image.
Use Etcher, be happy! 😉

Steve

Download the pfsense software, backup the pfsense files, download the backup file. Use a usb to reinstall pfsense again, when done, load the backup you have.

Good Luck,
Mr. Waste

@MeCJay12 said in 2.4.5 RAM Issues:

I noticed that before it reboots that the command line shows "swap_pager_getswapspace(32): failed" over and over

I installed 2.4.5 several weeks ago and today I had the same swap space error and had to reboot. The reboot went unusually slow when starting the packages.