I managed to reproduce that problem late yesterday but left myself a note to revisit it this morning to see what was going on. Figured it had to be something like the ID issue here or similar to https://redmine.pfsense.org/issues/7394

I merged the PR so it'll be in the next round of snapshots. Hopefully there aren't any more of these lurking around.

could end up with my actual public ip blocked by snort as no way in that setup to whitelist automatically a changing ip

I fixed the shaper code that made the bad rule. If you edited/saved the rule you should be OK. Anyone else that upgrades and hits this can either edit/save or remove the wizard and re-run it, assuming they're on a snap which includes the fix.

https://redmine.pfsense.org/issues/7434

sorry didn't realize i had that info in other post got interrupted during all this

@doktornotor:

This package will NOT work properly with the ramdisks. It is also a rather horrible idea if you ask me.

# du -sh /var/db/ntopng/ 4.5G    /var/db/ntopng/

The above is data accumulated after some ~6 months of usage on a site with pretty moderate traffic (~100GB/month). Sure like hell you do not want that to be in your RAM, or be backing that up and restoring on reboot.

No I actually don't care about historical data but I find ntopng quite useful to have a glimpse on the traffic that is going through pfsense in a nicely presented interface. I am ok with the db being cleared on reboot. I dont know though what will happen if var runs out of space, i.e. will dhcpd be unable to write leases on disk etc.

@marjohn56:

Yes, a couple of us had the same issue. did the update from the console and it was fine.

Good call.  It worked from the console.  Serves me right trying to update via a GUI.  When in doubt, ssh.  ;)

I just tested it in a vm that i installed 32 bit chrome on and i do not get the error.

https://redmine.pfsense.org/issues/7413

Ok, I configured a phase 2 description and it works!

Thank you!

As a Charter customer also, I can tell you its charter.  I have the same problem (error) and have to change the MAC ID on the WAN address when this happens. (Spend several hours on phone with charter, THEY WONT HELP.)  After changing the MAC ID a cycle to the cable modem and immediately get an IP.  Had this same issue with other brands of routers also.  Nearest I can tell from a anonymous Charter tech is that they are secretly denying an IP based on data load they don't like on your network.

@brianc69:

What's the advantage of zfs? I have an apu4. Do I care?

Not really. :)

Do you use a ram drive?

Ok, I didn´t see that.

Thank You!

@Presbuteros:

Some, though very few, SSDs could even be TRIMmed in Linux by command```
fstrim -v /

TRIM is a filesystem level operation and whatever tool you're using has to know the filesystem used. There is no such thing as TRIMing a disk without knowing the filesystem level status of allocated and unallocated blocks.