@mauzilla said in can't upgrade from 2.4.3 to 2.4.5 with error message "Update origin security/php56-mcrypt -> ... failed": Were you ever able to resolve this? I am hoping someone can still give an update on how to get this resolved? I am worried that if we restart the firewall No luck so far, I haven't tried again since I saw people have issues on 2.4.5, I'll probably wait again until it's stable, btw my firewall reboot just fine, I'm running pfSense under Hyper-V so if anything goes wrong, I can restore the checkpoint.

reboot and run fsck https://docs.netgate.com/pfsense/en/latest/hardware/troubleshooting-disk-check-errors-fsck.html option 5 and F ffrom the menu

Once again the pfSense GUI Packet Manager got stuck after the most recent pfSense upgrade 2.4.5_1. Yet again it was pkg-static process which was stuck. Executed: killall pkg-static pkg-static upgrade -f Saved the day.

@bradbunch37 said in New pfSense User: Hello, The key is to avoid dual-NAT (if your ISPallows it): F.E.: https://forums.att.com/conversations/att-internet-features/how-do-i-configure-att-bgw210-in-bridge-mode/5defca9bbad5f2f606709d08 Orbi Wifi 6 AC4200 theme (use in AP mode): F.E.: https://www.youtube.com/watch?v=3YwkjTXrlsA build or buy a pfSense box and use this as a router + firewall (https://www.pfsense.org/products/) so,: ISP modem (BGW210-700 in bridge mode) + pfSense box + VLAN capable switch (even this is NetGear GS108) + WiFi AP (Orbi Wifi 6 AC4200) segment your network into VLANs +++++++ if you have separate ONT + ISP router / modem devices from the service provider, in most cases they really can't be separated, but bridge mode works well in many cases, if you ask your provider and system allows (this is a case of installation topology), you can leave your ISP router / modem and go directly to ONT eth. port for public IP

"I know nothing!" about the specific issue, but instead of fixing something by manually patching the interfaces.inc file I would suggest that you add a ticket on https://redmine.pfsense.org/projects/pfsense/roadmap as to describe the reason for a fix / patch with a detail about how it used to work when you patched the file. (You will have to login or create a pfSense redmine account on that site.) Also it would probably be a good idea to link this forum thread to the ticket (and vice-versa). It will save you from the trouble in the future as updates are released. Have a good day. :-)

hi, ive upgraded to 2.4.5-p1 without issues. I then reinstalled the box from scratch with that release. just had issues with auto install of avahi and pfblockerng packages. the rest seems to work normaly.

Tried it a third time and this time didn't get the pesky warning message about packages not available for the version. It went directly to installing the packages. YAY! But it still hangs on darkstat and pfBlockerNG-devel. I can kill those processes and go into Backup/Restore to reinstall all packages and it goes though and reinstalls everything in under 3 minutes. Any way to figure out why it is stopping installing those packages?

@teamits I did that already for two days. That's why I posted first email. Googling for boot hangs was getting me nowhere. I'll figure out howto put debugging statements in and figure out why it stops. Now I know it's the menu.4th menu.rc script that does all the menu including the timeout. It's just a bunch of loader script commands. https://www.freebsd.org/cgi/man.cgi?loader(8)

@Gertjan said in Idea for quicker CVE patching: json-c-0.13.1_1 is vulnerable: json-c -- integer overflow and out-of-bounds write via a large JSON file CVE: CVE-2020-12762 This one made it : https://docs.netgate.com/pfsense/en/latest/releases/2-4-5-p1-new-features-and-changes.html

See also https://forum.netgate.com/topic/142004/dhcp-config-is-apparently-not-updated-in-a-safe-fashion

@bigdaddycainer Yes i agree ,regression is the answer,unfortunately and painfully,hope i kept the old gz or iso as pfsense arent in the habit ( like they previosuly did) of visually indexing the links to each version,like they previously did!!. I knew i shouldnt have done this as per past experience ,tis best to wait for the 2nd rev on a new release. Cheers

@trent6gol THX for your all help, but on my part off - topic (the above, shell "prtsc" were all I made via IPMI, It was made from a Supermicro + pfSense unit, which is about 3,400 Km from me edit: Advantech is a thousand-year-old company, I see you don't know has a huge reputation in industrial automation! by the way, icurrently all stuff is made in china, and we spoiled it and it’s a suck now

It worked. Nice job.

I'm already running 2.4.5. on that machine, which updated from 2.4.4. However, tried again with the 2.4.5. image and Etcher and still fails to boot. Tried Legacy and UEFI, although it's an old laptop that gives and warning that the UEFI mode is experimental and not fully supported. Yet, 2.4.4. still boots in either mode. Strange!

You should not use anything intended to write an ISO image, they can often add bootloaders etc which just break things here. You need an image writer that does a bit-for-bit copy. Etcher does this and can also decompress correctly so need to do that separately which can also break image. Use Etcher, be happy! Steve