So, that was just the beginning, it's actually better to not null-route it but make the following entries: files.pfsense.org - 192.168.1.100 files.pfsense.com - 192.168.1.100 www.pfsense.org - 192.168.1.100 www.pfsense.com - 192.168.1.100 If your package web server is 192.168.1.100. Next is the problem of not having the packages themselves. So wget -mk -np http://files.pfsense.org/packages/ gave me a directory that I plopped into my already existant packages directory (created from the git clone as described in the documentation) but the problem I ran into was the php files being rendered still (which made any packages that pulled php files get the rendered version instead of source). So you need to add a .htaccess file in the packages directory with the following: RemoveHandler .php .phtml .php3 RemoveType .php .phtml .php3 php_flag engine off Make sure that "AllowOverride all" is enabled if you are running Apache to host the package site, if not, you'll have to google how to allow .htaccess files for your particular server. (or if you server doesn't support htaccess files then how to enable source disclosure) After those alterations I seem to be off to the races for the most part. Some packages pull from other websites, but altering the package_8.xml or just rerouting the dns seems to solve most of those issues.

Resolved… added hw.usb.no_pf=1 to loader.conf file. The issue was with my interface being given two names by pfsense, and neither being configurable.

thank you so much

Oh, yeah I forgot to put the quotes in there, edited my post.

Like I said this is beyond my experience so don't thank me yet!  ;) Perhaps wait for other comments. That's what I'd try though. Steve

and where do you have questions on these instructons? http://doc.pfsense.org/index.php/Installing_pfSense

@wallabybob: @lexemmens: Removing the 10MB NIC showed no result. I presume you meant "no change in behaviour", otherwise I'm not sure what "no result" means. I suggest you try again and when it appears to hang leave it for up to 30 minutes. If the console shows exactly the same output then we need to look further. If I recall correctly,some months ago I replied to a similar post about install appearing to hang. It turned out the original poster just need to wait longer. If you search the forums you might find it and then have some some experiences to compare with your own. What is the file you are trying to install from? I presume you have unzipped the file, burnt the resultant CD image to a CD, successfully booted from the CD and the invoked option 99 to install to hard drive. I indeed meant no change in behaviour. What I tried today: boot from CD and leave the PC on for about 45 minutes. Got the same result when I hit CTRL-T. Also ran Memtest86: no errors. And I ran GParted from the Ultimate Boot CD. That showed me that my hard drive was messed up (no partition table). So I created a partition table and rebooted of the pfSense LiveCD. Still no result. @Your last sentence: I downloaded the corresponding .iso.gz and extracted the ISO. Burned it to a CD and boot my PC from CD. I can't enter option 99, because that's an option in the shell menu that only shows when pfSense is started. Update: I also tried downloading version 1.2.3. Burned it to a CD and voila. It works like a charm. Updating from the browser from version 1.2.3 to 2.0 or to 2.0.1 succeeds, but after a reboot it stops at: Starting device manager (devd)… CTRL+T gives me the following result: load: 0.05 cmd: php 265 [nanslp] 0.00r 0.09u 0.02s 0% 24084k EDIT 2 Thread marked as solved. Instelled version 1.2.3. Turned off APCI in BIOS and turned off OS/2 in BIOS. Then upgraded to 2.0. After that upgraded to 2.0.1. Thanks for your help.

There have been reports that some modems (cable modems if I recall correctly) will only talk to the one downstream MAC address. If you change the downstream device (e.g you home workstation to pfSense router) then it is necessary to power cycle the modem, with power off for at least 10 seconds, to get it to recognise there is a new downstream device. I have never seen this problem and I don't know the details of how such modems behave beyond what I have written.

Thanks a lot to both for your answers!! I will try soon to implement pfSense also at home with an Alix solution + Vigor 120… Thanks, Michele

404 is the correct response at that URL. There is no index page to view. Try instead: http://updates.pfsense.org/_updaters/version This should result in a small file with the current version name. Steve

I actually figured it out and it was just a missed step. I guess that's what 3 hours of sleep in two nights will get you. Thanks for the reply!

Hi, If I don't use VLAN, then how should the pfSense server be configured? One networkcard with two interfaces? So one for incoming network and the other one for filtered network?

This morning I've downloaded a new version of the image from a different mirror. Wiped the CF card and wrote the new downloaded image to the card. After plugging it into the pfsense box, this is the result: PC Engines ALIX.2 v0.99h 640 KB Base Memory 15360 31744 48128 64512 80896 97280 113664 130048 146432 162816 179200 195584 211968 228352 244736 261120 KB Extended Memory 01F0 Master 045A KINGSTON                                 Phys C/H/S 4029/16/63 Log C/H/S 1007/64/63 1  pfSense 2  pfSense F6 PXE Boot:  1 -.\.|./.-.\.|./.-.\./boot.config: -h |./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.Consoles: serial port   BIOS drive C: is disk0 |./.-.\.BIOS 640kB/261120kB available memory FreeBSD/i386 bootstrap loader, Revision 1.1 (root@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org, Mon Dec 12 18:43:24 EST 2011) |./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.Loading /boot/defaults/loader.conf \.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\./boot/kernel/kernel text=0x8a1d18 |./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.data=0x3c9e54+0x9b6a0 -.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.syms=[0x4+0x94100|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|.+0x4+0xcaf47/.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|.] /.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\.|./.-.\. Hit [Enter] to boot immediately, or any other key for command prompt. Booting [/boot/kernel/kernel] in 4 seconds... Booting [/boot/kernel/kernel] in 3 seconds... Booting [/boot/kernel/kernel] in 2 seconds... Booting [/boot/kernel/kernel] in 1 second... Booting [/boot/kernel/kernel]...               |./.-.\.|./.-.Copyright (c) 1992-2010 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 .The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 8.1-RELEASE-p6 #0: Mon Dec 12 18:59:41 EST 2011    root@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org:/usr/obj./usr/pfSensesrc/src/sys/pfSense_wrap.8.i386 i386 Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Geode(TM) Integrated Processor by AMD PCS (498.05-MHz 586-class CPU)  Origin = "AuthenticAMD"  Id = 0x5a2  Family = 5  Model = a  Stepping = 2  Features=0x88a93d <fpu,de,pse,tsc,msr,cx8,sep,pge,cmov,clflush,mmx>AMD Features=0xc0400000 <mmx+,3dnow!+,3dnow!>real memory  = 268435456 (256 MB) avail memory = 243433472 (232 MB) pnpbios: Bad PnP BIOS data checksum netisr_init: forcing maxthreads to 1 and bindthreads to 0 for device polling wlan: mac acl policy registered ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/. ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (ipw_bss_fw, 0xc0710010, 0) error 1 ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/. ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (ipw_ibss_fw, 0xc07100b0, 0) error 1 wpi: You need to read the LICENSE file in /usr/share/doc/legal/intel_wpi/. wpi: If you agree with the license, set legal.intel_wpi.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (wpi_fw, 0xc0883050, 0) error 1 ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/. ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (ipw_monitor_fw, 0xc0710150, 0) error 1 K6-family MTRR support enabled (2 registers) ACPI Error: A valid RSDP was not found (20100331/tbxfroot-309) ACPI: Table initialisation failed: AE_NOT_FOUND ACPI: Try disabling either ACPI or apic support. cryptosoft0: <software crypto="">on motherboard padlock0: No ACE support. pcib0: <host to="" pci="" bridge="">pcibus 0 on motherboard pci0: <pci bus="">on pcib0 Geode LX: PC Engines ALIX.2 v0.99h tinyBIOS V1.4a (C)1997-2007 pci0: <encrypt decrypt,="" entertainment="" crypto="">at device 1.2 (no driver attached) vr0: <via 10="" vt6105m="" rhine="" iii="" 100basetx="">port 0x1000-0x10ff mem 0xe0000000-0xe00000ff irq 10 at device 9.0 on pci0 vr0: Quirks: 0x2 vr0: Revision: 0x96 miibus0: <mii bus="">on vr0 ukphy0: <generic ieee="" 802.3u="" media="" interface="">PHY 1 on miibus0 ukphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto vr0: [ITHREAD] vr1: <via 10="" vt6105m="" rhine="" iii="" 100basetx="">port 0x1400-0x14ff mem 0xe0040000-0xe00400ff irq 15 at device 11.0 on pci0 vr1: Quirks: 0x2 vr1: Revision: 0x96 miibus1: <mii bus="">on vr1 ukphy1: <generic ieee="" 802.3u="" media="" interface="">PHY 1 on miibus1 ukphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto vr1: [ITHREAD] ath0: <atheros 5413="">mem 0xe0080000-0xe008ffff irq 9 at device 12.0 on pci0 ath0: [ITHREAD] ath0: AR5413 mac 10.4 RF5413 phy 6.1 isab0: <pci-isa bridge="">port 0x6000-0x6007,0x6100-0x61ff,0x6200-0x623f,0x9d00-0x9d7f,0x9c00-0x9c3f at device 15.0 on pci0 isa0: <isa bus="">on isab0 atapci0: <amd cs5536="" udma100="" controller="">port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xff00-0xff0f at device 15.2 on pci0 ata0: <ata 0="" channel="">on atapci0 ata0: [ITHREAD] ata1: <ata 1="" channel="">on atapci0 ata1: [ITHREAD] ohci0: <ohci (generic)="" usb="" controller="">mem 0xefffe000-0xefffefff irq 12 at device 15.4 on pci0 ohci0: [ITHREAD] usbus0: <ohci (generic)="" usb="" controller="">on ohci0 ehci0: <amd cs5536="" (geode)="" usb="" 2.0="" controller="">mem 0xefffd000-0xefffdfff irq 12 at device 15.5 on pci0 ehci0: [ITHREAD] usbus1: EHCI version 1.0 usbus1: <amd cs5536="" (geode)="" usb="" 2.0="" controller="">on ehci0 cpu0 on motherboard orm0: <isa option="" rom="">at iomem 0xe0000-0xea7ff pnpid ORM0000 on isa0 atrtc0: <at real="" time="" clock="">at port 0x70 irq 8 on isa0 ppc0: parallel port not found. uart0: <16550 or compatible> at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 uart0: [FILTER] uart0: console (9600,n,8,1) uart1: <16550 or compatible> at port 0x2f8-0x2ff irq 3 on isa0 uart1: [FILTER] RTC BIOS diagnostic error 80 <clock_battery>Timecounter "TSC" frequency 498053537 Hz quality 800 Timecounters tick every 10.000 msec IPsec: Initialized Security Association Processing. usbus0: 12Mbps Full Speed USB v1.0 usbus1: 480Mbps High Speed USB v2.0 ugen0.1: <amd>at usbus0 uhub0: <amd 1="" 9="" ohci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus0 ugen1.1: <amd>at usbus1 uhub1: <amd 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr="">on usbus1 ad0: 1983MB <kingston 20060713="">at ata0-master PIO4 Root mount waiting for: usbus1 usbus0 uhub0: 4 ports with 4 removable, self powered Root mount waiting for: usbus1 uhub1: 4 ports with 4 removable, self powered Trying to mount root from ufs:/dev/ufs/pfsense0 Configuring crash dumps... Mounting filesystems... Setting up embedded specific environment... done.     ___ ___/ f \ / p \___/ Sense \___/   \    \___/ Welcome to pfSense 2.0.1-RELEASE  ... Creating symlinks......done. External config loader 1.0 is now starting... ad0s3 Launching the init system... done. Initializing............................ done. Starting device manager (devd)...done. Loading configuration......done. Updating configuration...done. Cleaning backup cache...done. Setting up extended sysctls...done. Setting timezone...done. Starting Secure Shell Services...done. Setting up polling defaults...done. Setting up interfaces microcode...done. Configuring LAGG interfaces...done. Configuring VLAN interfaces...done. Configuring QinQ interfaces...done. Cvr1: link state changed to DOWN onfiguring WAN interface...done. Configuring LAN interface...vr0: link state changed to DOWN done. Syncing OpenVPN settings...done. Starting syslog...done. pflog0: promiscuous mode enabled Configuring firewall......done. Starting PFLOG...done. Setting up gateway monitors...done. Synchronizing user settings...done. Starting webConfigurator...done. Configuring CRON...done. Starting DHCP service...done. Starting DNS forwarder...done. Configuring firewall......done. Starting OpenNTP time client...done. Generating RRD graphs...done. Starting CRON... done. Bootup complete FreeBSD/i386 (pfSense.localdomain) (console) *** Welcome to pfSense 2.0.1-RELEASE-nanobsd (i386) on pfSense ***  WAN (wan)                 -> vr1        -> NONE (DHCP)  LAN (lan)                 -> vr0        -> 192.168.1.1 0) Logout (SSH only)                  8) Shell 1) Assign Interfaces                  9) pfTop 2) Set interface(s) IP address       10) Filter Logs 3) Reset webConfigurator password    11) Restart webConfigurator 4) Reset to factory defaults         12) pfSense Developer Shell 5) Reboot system                     13) Upgrade from console 6) Halt system                       14) Enable Secure Shell (sshd) 7) Ping host                         Enter an option:</kingston></amd></amd></amd></amd></clock_battery></at></isa></amd></amd></ohci></ohci></ata></ata></amd></isa></pci-isa></atheros></generic></mii></via></generic></mii></via></encrypt></pci></host></software></mmx+,3dnow!+,3dnow!></fpu,de,pse,tsc,msr,cx8,sep,pge,cmov,clflush,mmx> So it seems there was something wrong with the image, or the way it was written on the card, for now I'm happy and going to do some configuration :)

I don't think I'll need to all I am using this for is taking a wired connection and making it wireless, the only thing that is on that network is my iPod, the rest of the house is separate networks and my dad's got it all figured out, so security isn't a big deal for me, well not for the specific project, Thanks Nathan I'm glad I didn't kick the piece of **** lol

That's sounds like a plan!  I'll try it out later to see if I can get it working. Thanks for the reply :)

Yup, Bang on the money.  I had incorrectly entered the firewall rules for the network (Newbie error!).  Once I corrected them, woosh it all worked. Thanks Guys!

FixEd get new certificate with SAN FQDN and all is good again..

I'll try 1gb and see how things turn out. I wanted to use snort, maybe squid and dansguardian as well. Thanks for the info.

Yes, the screenshots are 2.1 - as you say, there are a few new fields there. The IPv4 stuff is all the same principle. (Hmmm - I have forgotten exactly what 2.0.n screens look like!)

Thanks Steve!