Look in Services -> Snort -> Alerts. I've found its better to run snort on the internal interface as if you use it on the WAN it logs the WAN address not the client that is natted.

[2.4.2-RELEASE][root@ FQDN]/root: sysctl kern.geom.debugflags=0x10 kern.geom.debugflags: 0 -> 16 [2.4.2-RELEASE][root@FQDN]/root: gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 1 ada0 gpart: /dev/ada0p1: Operation not permitted Then I went rogue and tried my own: [2.4.2-RELEASE][root@FQDN]/root: gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 1 ada0p1 gpart: No such geom: ada0p1. As you may see, I have no clue how disk geometry works. I'm very happy I didn't for more than a few minutes offline though, now I have time to schedule a reinstall. Whoever came up with backup & restores on pfSense is a f*cking genius! They way packages reinstall themselves and everything is back as before it just amazing. Thanks for your help!

There are a few different possible issues that could lead to your situation, but without more information it's impossible to say what is happening with any certainty. First, go to the console or connect via ssh and run option 13 and see if it finds the upgrade that way. If not, capture the output and post it here so we can see what it says.

Accessing the GUI from WAN ? YES accessing GUI via WAN interface What about using the console access ? YES SSH via WAN interface is also OK, btw my instance is a VM (ESXi 5.1.0) What are your LAN setting ? I have few Sub interface under LAN (please see file Attachement…) Are you aware what your screen shot is showing (just the basic pfSEnse startup scenario !) - nothing useful in fact - wrong image ?. Its the correct images.  this part when my LAN connection lost.. [image: pfsense_interface.JPG] [image: pfsense_interface.JPG_thumb] [image: pfsense_LAN-interface.JPG] [image: pfsense_LAN-interface.JPG_thumb]

It'll be fine.

Just to be clear here the VK-T40E will run 2.4.X no problem. I have one here doing just that. You cannot upgrade to it directly from a NanoBSD image as Nano was discontinued in 2.3.X as others have pointed out. You can install 2.4.2 fresh and restore your config into it though it should be a simple process. You might choose to upgrade it to an mSATA SSD or do a full install to the SD card. If you do the latter be sure to install without a SWAP slice and to set /var and /tmp to RAM drives after first booting. Steve

The system has been restarted several times. I was hoping not to have to do a clean install as the device is in a somewhat inconvenient location. I have seen the threads but many of them reference development versions of 2.4 and it wasn’t clear how much was applicable to my situation. Thanks for responding.

I think this also killed 2.4.1 dev to 2.4.2 upgrade path as well.

@veldthui: ….. and LAN as 192.168.0.25/24...../ /..... Then set the WAN IP to 192.168.0.14/24. It complained ..... Compare this situation as a crossroad with heavy traffic, and all traffic lights go green at the same time. But, you're right. 2.4.2 won't work doing such things.

Just..  Wow. Thanks for the great f'n support.

Your safest bet is to reinstall. But I would test those drives, first. The upgrade wouldn't (and couldn't) touch the disk layout. Newer versions of FreeBSD are generally better at identifying and preventing disk problems from compounding themselves, so maybe there actually is some aspect of the label that is invalid. I don't know if it will work for that particular error, but you can try setting this in /boot/loader.conf.local: kern.geom.part.check_integrity=0

What errors does it show before dropping you to single user mode? To make sure it isn't something stuck from nextboot, try running this once you have it up and running: nextboot -D

That's the same as an APU. It is capable of running 2.4 so long as it's running an amd64 full install (not NanoBSD). The first thing to try is to run pfSense-upgrade from the console or ssh shell (not the GUI) and see what it says.

Nothing that significant changed in the package from 2.2.x to 2.4 that would cause problems as you describe. Maybe you have a browser cache issue or script blocker that is interfering.

I have just attached the amount of the errors. I get them for any config saving. This worries me a lot.  

@jimp: _[…]_The recover option will (very briefly) print a message of success or failure, it's easier to see with a serial console but it's there on VGA if you can catch it, it just doesn't pause after. Priceless feature! Though over KVM I bit the nails during install as I did not see this notification [yes or no], everything went flawless, from 2.3.4 > 2.4.2

The certs can be found as <cert>…</cert> pairs in the config. But, be careful, al these <caref>... <caref>inside them are used on other places (where the certs are used) should also be included, if not => bad things will happen. It's this aspect that makes certs difficult to import or export separately.</caref></caref>

Thanks for setting me straight!!! Roveer