I solved using squid in a debian server  :P

@georgeman: Alright, it is confirmed to be the same issue then, thanks thanks it works ! :)

Were you able to get your problem resolved?

@Chti: In the MAC address I entered "XX:XX:XX:XX:50" the address of my modem That creates a conflicting MAC address, assuming your modem is staying as is, which will break any ability to talk to the modem. Clear the MAC address field on WAN and reboot the 4860 so it gets its native MAC back. Then reboot the modem. After that, I'm guessing it'll probably work.

you are right…its the memstick...amd64 rectified the issue,,,,thx

Install the x86 version.

Yes, if you have ssh access you can use SCP to get the files directly from a connected client. If you only have local console access you can view the boot files like: cat /var/log/dmesg.boot Or edit the loader.conf (or better loader.conf.local) like: ee /boot/loader.conf.local That will use the built in EasyEditor but you could use vi instead. Steve

So its not sending valid ftp commands then? Why don't you sniff and lets see the command its sending.  This way the package could be fixed to address clients sending extra info and such in their commands.

@secabeen: @BlazeStar: So what's the best fix then? Wipe out and re-install fresh? Not sure.  I force power-cycled the system and when it booted, it came up cleanly.  Rebooting through PFSense failed every time.  I had to pull the power/hit the reset button.  If you're still having problems after a true boot, then a wipe and re-install is probably your best choice. I did force the power cycling. On the dashboard I get: 2.2.2-RELEASE (amd64) built on Mon Apr 13 20:10:22 CDT 2015 FreeBSD 10.1-RELEASE-p9 Unable to check for updates. Everything seems fine… although I don't know why I'm unable to check for updates.

@heper: yes thats what the .local is for ;) @cmb: That's why you put it in loader.conf.local not loader.conf, .local will never be overwritten by an upgrade. Thanks guys.  Sometimes my Linux experience is a great help in the BSD's.  Sometimes it just helps me get in over my head faster. So many things are similar, but so many are also different. Appreciate it! –Matt

Figure out what it is about those sites that's much slower - is DNS slow/timing out? are you losing connectivity in general between those networks (does ping stay responsive)? What does a packet capture from an affected client show?

If you only have one NIC assigned, then management is open on that one NIC (which is WAN). Where you have >= 2 NICs assigned, then WAN has its usual behavior of allowing nothing. It works that way for appliance-type usage, where maybe it's just a VPN endpoint or DHCP server or reverse proxy or any number of other possible uses.

Is your WAN DHCP or static IP or? Guessing static since it's metro-E and you mentioned a /27. Can you ping the gateway IP when it stops working? My first guess is IP conflict on the IP you assigned to WAN, all of the actions you mentioned to temporarily fix it would temporarily work around an IP conflict. System log may show the source of the IP conflict with a log like "xx:xx:xx:xx:xx:xx is using my IP a.b.c.d".

Has to be 4 different DNS server IPs, can't repeat the same one multiple times.

It's no different from a typical installation. Just plug in that USB stick and the serial console, boot it up, and go through things as usual.

After researching for a few minutes, I found this: https://forum.pfsense.org/index.php?topic=93071.0 Submitting the reboot command via the diagnostics -> shell command prompt worked for me.

@signal7: I try various things and 'futz with it' as a means of learning.  Sometimes it really pays off - maybe not today, but the info will come in handy later at some point.  You've got to admit, restoring a backup should have done it and should have been much less painless than a complete reload. Me, too.  I was relating a similar tale of woe.  Same device.  Same problem.  I, however, DIDN'T have the luxury of futz time.  I had 25 people trying to sell motorcycles, that couldn't because the firewall was down. I think, when the backup was restored in both our cases, it set the com port configuration back to com1.  If you can get to the webConfigurator you can add the tweaks to /boot/loader.conf and get the console back.

I'm starting to feel positive now. Uptime 4 Days 00 Hour 10 Minutes 43 Seconds I'm quite confident though that the issue was with the motherboard.