A new version of the Snort package was merged today to the pfSense repository, but not all the mirrors seem to have the correct file for some reason. More info in this thread: https://forum.pfsense.org/index.php?topic=74486.0.

NYOB's post about impersonating the actiontec: https://forum.pfsense.org/index.php?topic=39963.0

Use the "add a new one" link on the WAN page under the IP address box. Make a new gateway (new name) and it will let you add it there.

Hmm, are you sure about that Phil? It could be that my 2.1.1 boxes are upgrades and I haven't noticed a change in behaviour but I thought the default setting was enabled for the negate rules. I have them disabled in Advanced: Firewall/NAT: because I prefer to set rules for everything I want to allow. Steve

Should really be as simple as gmirror status (note which drive failed) gmirror forget pfSenseMirror gmirror remove pfSenseMirror ad? shutdown -h <replace failed="" disk="">gmirror insert pfSenseMirror ad? gmirror status (check if rebuild started)</replace> (Replace ad? with the failed HDD node.)

Update. If I set: http://66.111.2.169/_updaters/ (one of the IPs resolved for the A-records updates.pfsense.org) as "Firmware Auto Update URL" it works… so, at 99% there is something wrong on the 208.123.73.82 mirror. Ciao, Michele

I am using it but I get a high number of MISSes and it doesn't appear to be caching much at all. I haven't looked into it further but I guess it probably has something to do with most websites serving dynamic content. ..or perhaps it has something to do with cache-control timings. http://wiki.squid-cache.org/ConfigExamples/DynamicContent

@razzfazz: Definitely looks like there's something funny going on with the NanoBSD file links at http://updates.pfsense.org/_updaters/amd64/. There are also two copies of all the NanoBSD-related hash files, one set with Sep-2013 time stamps and one with Apr-2014 ones… It looks like someone changed the filename format: latest-nanobsd-vga-1g.img.gz  <- 2.1  - 15-Sep-2013 13:46 latest-nanobsd_vga-1g.img.gz <- 2.1.1 - 04-Apr-2014 00:32

I have finally understand it and get it working up, thanks to you guys!!!!  ;D haha thanks a lot guys, wohoo…now time to  conduct some experiment, see you around guys.

Pls see attachment [image: pfSense.jpg] [image: pfSense.jpg_thumb]

So what was it? :P

@cirkit: As I went through the thread I understand it is easier and faster to reinstall and restore config.xml to the second harddrive but does this method automatically install all packages and rules associated to them. Say for eg I have squid + dandguardian + sarg + nut + cron. As I understand it yes, it does. I tried it twice, but it didn't work out for me; it kept on installing and deinstalling and installing. Which made me conclude it is sort of 'macro-wise' replaying all config changes done (or something like that, I am still a noob  ;D). I ended up doing fresh installs. What I could recommend is backup all sections of the config individually (see GUI); that did come in handy for me for restoring the static IP's in my LAN's. For the remainder, I just manually reinstalled everything.

@notgeorge: Just submitted a bug request + suggested workaround & fix that seems to address the issue with the wireless interface defaulting to OPEN instead of setting WPA2 properly. https://redmine.pfsense.org/issues/3562 Hasn't completely gotten 802.1x working, but it's probably a step in the right direction and at least I can get WPA2 with PSK to work properly. Thank you very much for your feedback. This issue was that serious for me that I have decided to open a new thread for it: https://forum.pfsense.org/index.php?topic=72483.0 Within this thread ermal has fixed the problem some 2.1.1-PRERELEASE snapshots ago. And 802.1x authentication is still working as expected with the latest 2.1.1 snapshot (i386 nanobsd) from 2014-03-26. Therefore I  am regarding this issue as solved  :) Regards, Peter EDIT: I have just done some quick search on github. I am not very experienced with github but I strongly suppose, this commit of ermal has solved the 802.1x issue: https://github.com/pfsense/pfsense/commit/315bdf65a12337f150bde11d95824528d90068be

Yep, sounds like both devices are using 192.18.1.1 for their LAN. Change the pfSense LAN address/subnet to something else. Perhaps 192.168.10.1/24. Steve

It looks like there is an issue in a number of places where static routes are processed - the various functionality gets implemented even if the static route is disabled. It does not look to be fixed in 2.1.1 or 2.2 current code, so I raised a bug report: https://redmine.pfsense.org/issues/3560

@cmb: For all I know, there are back doors built into those packages. The fact that person has refused for years to commit that work to our main package repo where we can build the ports from known-good source is telling I think. Not to mention anyone pointing there has had numerous problems with that repo in general, given it's on some free hosting somewhere and frequently goes down. In case someone still does not take the above warning seriously, here's a quick look at the domain from where the packages are distributed: [image: 34sikn6.png] Sure like hell I'd host a security project there or install something from there on my firewall… oh yeah, absolutely... [image: 30jqptg.jpg]

Information is very good information I do not know