@stephenw10: @mevans336: If I set hw.igb.enable_msix="0" in the loader.conf, will that persist across an upgrade? No but if you add it to loader.conf.local it will. Steve I have an identical server here at home minus one thing, a 2-port PCI-Express Intel NIC. I performed an upgrade on it and it went flawlessly. I think the Intel NIC in our co-lo firewalls are to blame. To test, I changed the server here at home from AHCI to IDE mode and it failed at the mountroot> prompt much later in the boot process, not as in my screenshot above, immediately after initializing the processors. I'm going to give the hw.igb.enable_msix="0" option a shot when I return to the datacenter in a few weeks. I'll report back.

Bump Wondering the same thing PF Sense 2.1 Keeps rebooting every hour or so.

Yes i do! But i can't see BL items that appeared in Target Rules List (click here) (in Common ACL or Gropus ACL). Thank you jimp!

^up multicast is going to be there, and lets not forget all the dhcp traffic, and arp traffic.. Think of your blinking light as – hey its connected and there is traffic.

Re-run the setup wizard and use the static IP instead of DHCP there. :-)

Please someone help me do this!! Thank you

thx yes trying to connect with another vbox linux running,  I have reached the point of getting to pfsense and setting it up now. Just stuck on few settings which ill hopefully get from my VPN provider :) Ill pop back once I get these openvpn settings since there is an awful lot of unknowns.  Getting there with yours and others help thx !

ok, thank you very much!! :)

If you can ping only local machines pfSense probably has no default route. The WAN interface and DSL modem have public IPs but they are still local to a pfSense interface so it will have a route to them. Have you set a gateway on WAN? If you go to System: Routing: Gateways: Is the WAN gateway set as default? Steve Edit: Just noticed you can ping 8.8.8.8 so forget that!  ::) It's probably a DNS problem if you can ping IPs but not URLs. Do you have those Google DNS servers set in System: General:? When you try to ping google.com what is the actual error message? Can you ping from the pfSense VM?

@georgeman: @Azoic: i change the Interface to LAN, and transfer files from my server to any other machine on my network and back again, and nothing comes up in graph form either. Watch out there, traffic between two machines within the same LAN will not go through your router, so won't be graphed. Anyway, usually you do select LAN as the interface, since you most likely are interested in the bandwidth usage per device. As the problem itself, actually I really don't know what could be wrong. I installed it and started working right away (I'm using 2.0.3). Are you running full or embeded installation? Funny, i thought most people would want WAN as the monitored interface, so one can track ALL usage…..that's what i was looking for anyway. I did check everything i did, after i did it, but like i said, no graph's ever come up. It is weird, like i said, i'm sure i had it working before, but now i get the title page and nothing more. I tried making the LAN interface the monitored one, to see it's throughput, but still nothing comes up. It's kinda odd, i was thinking it might be with the code, as , most of the post's i read about issue's say files need to point to AMD 64 folder's and such, i thought maybe i needed 64bit arch. to run it, but i can't see how if the program runs on 32bit arch. aswell. I am guessing the thing is running, both the sys logs and the GUI say it is...but still no graphs..... I just don't know where to go next....

You should be able to use the appropriately sized 32bit nanobsd image. There are plenty of people running 2.1 on Alix (though I'm not on of them). Steve

Replying to myself, I still may need more RAM, but I've definitely found the primary source of the problem: mod_evasive.c.  Whoever, whenever they're doing it, the captive portal is being bombarded, resulting in the famous error and driving one PHP daemon up to 100% cpu.  After blocking the luser with a firewall rule, everything goes back to normal.

Bump

I made some progress on this, and I think there is a spot that needs improvement in the source of the dyndns script. When the curl function is called, the URL is built with an IP address derived from the hostname of checkip.dyndns.org, instead of actually the name. Original Line 1226 of dyndns.class:``` $ip_ch = curl_init("http://{$checkip}"); Improvement:``` $ip_ch = curl_init("http://{$hosttocheck}"); I understand we could first check to see if the name resolves, but curl should be called with a hostname, not an IP, so that the web server that runs the service can respond to the called service correctly, even if it has virtual hosts or a similar configuration on it. I stumbled upon this because the checkip.dyndns server that was resolving at the time, was not working correctly, and it was replying a generic dyndns page. On noticing this unreliability with the checkip service, I built my checkip service on a web server that runs virtual hosts, thus when curl called with an IP, it would not reply to the checkip service. Anyway, that doesn't resolve the issue Im having, but I feel its a better way to call curl with hostname rather than IP. The problem I still haven't been able to resolve, is that I'm still getting "route: writing to routing socket: No such process" notifications. The dyndns update seems to run twice each time (this is not related to the multiple cron bug that was resolved recently), and checkip.dyndns.org does service throttling and does not seem to like more than one request quickly, thus it would sometimes not reply and generate errors. Now with my own checkip service, the script always receives the public IP even if it executes mutliple times and updates fine, even if it does it twice, but still generates the "route: writing to routing socket: No such process" notification…

Yes.  However now I'm having trouble getting btsync to work thru the firewall.  But I guess that's a post for another area of the forum…

It can take much longer than you think. At least much longer than I expected.  ;) 2.1 is using self contained pbi files that contain all the package dependencies and as such are much larger than in 2.0.3. If you have a slow connection or slow flash media this can take some time. If it really has become stuck you can use the 'Clear package lock' button in Diagnostics: Backup/Restore: You should check the logs if you do use that to make sure the packages installed correctly. Steve

please up.

I see, that that makes sense. I thought they were designed based on the available memory. I'm not sure what states are though. I was going to give it 512mb starting and let it expand as it needed.