Just wanted to add that I have the exact same problem both upgrading from 2.1 and also with a fresh 2.1.1 install. I have had a lot of trouble with 2.1.1 and this is one of them, so I was forced to revert back to 2.1 again.

If your system works fine after upgrade and you are sure that all packages have been installed properly, then this is just a package lock. Go to Diagnostics: Backup/restore and click Clear Package Lock button.

Thanks,  downloading new black lists fixed the problem! :)

After upgrading to 2.1.1 I tried to restore the backup I did just before the upgrade because the installed packages didn't survive the upgrade. When attempting to restore I get an error message about the SHA256 values not agreeing although the two values shown are identical. The first value is followed by a <> however. The encrypted, and correctly decrypted, config file is shown.

Snort is back.  I was able to successfully install the package today and it picked up previous settings and is working correctly. Please mark as Solved. :)

Thanks guys, appreciate the info. Just to add, I reduced the available cores in the BIOS from 8 to 4 and the MBUF utilization went from 100% to 50%.

All done - just needed to change interfaces using serial and now all working well - and MUCH faster than the old Alix.  No actual measurement of speed - but seems much more responsive. Only strange thing - 9600 gave garbage, 38400 gave garbage, 115200 worked perfectly - watched all boios boot, then pfs starting, changed interface - loaded into pfs opening menu - all working fine.  Can't understand why 115200 - the backup config loaded from old Alix was 9600. Presume (?) that APU-1C must run at 115200 by default? In any case this might help someone with similar problem - although I still think it should have been 9600! Thanks for suggestions.

Hi, I had this exact issue recently. My fix was removing the HDD and placing it in another box and then installing. Once installed I moved the HDD back. It's an issue with the installer and certain motherboards I think. Regards,

Those logs are normal when using anything with dummynet (limiters, captive portal), so that's unrelated. Any other logs might be telling.

My understanding from quickly glancing over the forums is there are multiple OpenSSL binaries in pfSense and the main OS OpenSSL wasn't vulnerable to begin with, but the one that pfSense bundles (used by webgui, vpn, etc)  is. And to make matters more confusing packages themsevles may bundle their own versions of OpenSSL. So I think at best your process won't fix anything and at worse could require a reinstall.

I find but to bad  >:( Regards

A new version of the Snort package was merged today to the pfSense repository, but not all the mirrors seem to have the correct file for some reason. More info in this thread: https://forum.pfsense.org/index.php?topic=74486.0.

NYOB's post about impersonating the actiontec: https://forum.pfsense.org/index.php?topic=39963.0

Use the "add a new one" link on the WAN page under the IP address box. Make a new gateway (new name) and it will let you add it there.

Hmm, are you sure about that Phil? It could be that my 2.1.1 boxes are upgrades and I haven't noticed a change in behaviour but I thought the default setting was enabled for the negate rules. I have them disabled in Advanced: Firewall/NAT: because I prefer to set rules for everything I want to allow. Steve

Should really be as simple as gmirror status (note which drive failed) gmirror forget pfSenseMirror gmirror remove pfSenseMirror ad? shutdown -h <replace failed="" disk="">gmirror insert pfSenseMirror ad? gmirror status (check if rebuild started)</replace> (Replace ad? with the failed HDD node.)