I think that ISPs can impact the reliability of resolver.  I don't really care what anyone thinks about that. I think some ISPs are living in the 80s and 90s and just havent dropped some bad practices, like blocking all dns other than their own.

I got this working. I didn't have the DHCP turned on on the WAN side. It has to be done on the command line interface and I didn't see where to do this until this morning because its buried a bit. Thanks for all the replies.

No. LiveCD has been discontinued. Install to a disk (or even to another USB thumb drive) and run it that way.

@gtoso: Hi, I have a similar problem but not with BRIDGE but LAGG (with LACP enabled). the problem started after the upgrade of one of two firewall in CARP from 2.3.4p1 to 2.4.2p1. Could it be related to this bug? ASAP I will try to better describe my problem. Sorry, I forgot a BRIDGE between an OpenVPN TAP and an interface. Now I'm trying after removing the bridge. Thanks. EDIT: I confirm more than 2 hours whitout problems. So even a bridge little used not assigned as interface, that include an interface with an IP CARP triggers the problem.

Use "Policy Routing" https://doc.pfsense.org/index.php/What_is_policy_routing (same answer to your other Topic/Post) https://forum.pfsense.org/index.php?topic=143742.0

Sure why don't we just re-write all the docs and forum posts right here in the thread for the ease of a 1 post wonder - sounds like a fantastic use of my time ;) https://doc.pfsense.org/index.php/Installing_pfSense https://doc.pfsense.org/index.php/Setup_Squid_as_a_Transparent_Proxy https://doc.pfsense.org/index.php/OpenVPN When you say natting do you mean port forwarding? https://doc.pfsense.org/index.php/How_can_I_forward_ports_with_pfSense etc. etc.. After you have gone through the docs - better yet, maybe buy the book ;)  If you have any specific questions come on back and be happy to help.

I would still consider it experimental on pfSense. We do not have any automated jobs setup for maintaining ZFS pools/volumes or any GUI controls for handling drive status/replacement. For most it will work fine without any issues, but there are cases where it needs work to improve its integration into pfSense

@kejianshi: Well, I was just wondering if this guy was using something free and simple like vmplayer, which can make reaching your LAN address a pain. hi yes, I am using VMPlayer. Will this caused any issue? Or limitations on what I can monitor? In that case, what would you recommend me to use?

Still broken: Fatal error: Call to undefined method altq_root_queue::GetParent() in /etc/inc/shaper.inc on line 230 PHP ERROR: Type: 1, File: /etc/inc/shaper.inc, Line: 230, Message: Call to undefined method altq_root_queue::GetParent()

Provide some details of your hardware and config, and a screenshot of the console.

If you have a windows hyper-v server that you can run pfsense on, you should do that rather than use a desktop. I'm using a hyper-v server with multiple guests and it has been a stable configuration. I have two pfsense guests. One is for my physical LAN and one is completely virtual.

Oh, oops. Yeah i did a clean install and restored config. Now running 2.4.2 and a new update seems to be available! Although for some reason pfsense still does not see that i have packages installed, like openvpn, pfblockerng and zabbix. They all do work still.

@Gertjan: Well, yes ! Do a clean install, and accept default LAN settings from console. When the system is up, connect to GUI, and do a minimal setup for your WAN. And WAN interface only. Do not import your saved config. Get back to console, option 8 - and ping Google. It's ok ? Get the list of the available packages in the GUI. it's ok ? I ended up getting impatient and just restoring the system section.  It looks like by restoring the system section by itself it after I restored everything else it didn't cause an issue.  The only thing that ended up not getting restored was my OpenVPN server setting.  Luckily that wasn't too big of an issue.

Didn't say fire the guy, he is prob qualified to change the toner in the printer and help the users when their mice stop working.. ;) But from a statement like that he shouldn't be in security that is for damn sure.. The other aspect, even if not worried about security issue because of no code, nothing open to the outside… How is he an admin of anything?  The code is not current and no longer supported.  The OS it based on freebsd is old and out dated 8.3 - and guess what no longer supported. So even if you had a question on how to do something, or something XYZ not working. Your out of luck..  First thing anyone is going to tell you is get current..  That your not even on the latest version of that branch is disconcerting... 2.1.5 was the last version on that branch.. Go through the release notes for the versions of all the stuff changed and fixed..  And keep in mind release notes are normally just the highlights of stuff fixed, corrected, added.. There normally many other things that do not get mentioned.  You would have to look in redmine for all the resolved issues that are fixed in a specific release, etc.