@rico said in Every new device has "An HTTP_REFERER was detected" when using for the first time, is this never going to be fixed?: Before you change the LAN IP go to System -> Advanced -> Disable HTTP_REFERER enforcement check -Rico done. fixed. thanks!

Can I ask- how hot do these 5100's really get? Mine's going in a closet that sometimes has its door closed. Reading this makes me a little worried. Have a 4860 in there now that gets pretty warm but not HOT and it's been fine.

You purchased an appliance from us, of course you can contact our support. pfSense Gold and community support are two separate parts: pfSense Gold - access to HTML version of pfSense book, pfSense Hangouts (videos) etc. However, pfSense Gold is now free to all. See this blog post. Community support - that's this forum, where together with our community we can help out with software issues you may have. However, in case we notice a customer with a technical issue our support can handle faster and better, we usually just point customers directly to our support. I hope this clears it up. So please contact our support and reference this thread. They will be able to assist. Thanks!

Thank you for the follow-up!

Ok I think you should open a ticket with us here so we can investigate further: https://go.netgate.com/ Steve

Just created ticket - #INC-11794

SG = Security Gateway XG is representative of 10Gbps NIC(s) on the system Thanks for asking.

Thanks Gertjan, problem solved. Tomorrow, I will change this IP and do subsequent changes afterwards. I will also inquire on mac forums how to set-up SSH access to the console of a pfSense microfirewall on a mac.

Will do. Thanks

Nothing new, contact support: https://forum.netgate.com/topic/134124/sg-2440-stopped-working https://forum.netgate.com/topic/134265/sg-4860-died-abruptly

I have not seen the errors increasing over time, so everything should be fine. Thanks for the explanation @jimp -Rico

I asked you three specific questions and you didn't bother to answer any of them. Sorry, there's not much else I can do for you. Good luck!

@ramosel Sorry you are experiencing these issues. It appears you have hit the same processor issue with both. When Bob posted your warranty info into the ticket, the conversation was not over. He was in the process of setting up the RMA for you. Please allow him to follow up with additional info. A support person may also jump in. Thanks for your patience.

@virgiliomi , i'll contact them. @ivor , thanks for the link.

@dgall Adding a swap file for any Linux or FreeBSD host is easy. add this line to the file /etc/fstab md99 none swap sw,file=/pagefile.bin 0 0 create a blank file of size 1 GB dd if=/dev/zero of=/pagefile.bin bs=4096 count=262144 enable swap (or just reboot as a test): /sbin/swapon -a verify swap is enabled /usr/sbin/swapinfo

ah! I was just asking about the same over here https://forum.netgate.com/topic/133949/sg-3100-lagg-lacp-with-switch/7 By the way, can anyone point to documentation, or clearly explain how the L2 "Loadbalancing" option works? Say I connect my SG3100 via such bond to a switch .. both SG3100 and Switch then have two hosts each connected via 1GBe: A and B to router and C and D to switch. If host A talks to C and D talks to B .. will I be using the full 2GBe bandwidth? Morever, do you think it makes sense to create a 2 port LB or 3 ports? given that the Marvel switch on the SG3100 is 2.5Gb ? Or since the switch can only talk to other 2 GBe (WAN and OPT1), then 2 GBe ports will be enough? Thanks!

After a short sleep in the night i solved the problem myself. Forget to add the members 9T and 10T. :) Thanks all.

The problem causing wan interface to go down is suricata crashing. If I have it in inline mode on either the lan or the wan interface, then any stream that maxes my wan bandwidth for ~30MB or more crashes suricata. Stopping and restarting the process manually restores the WAN gateway. Do others have any experience with the 7100 and running Suricata in inline mode. I know there are warnings about inline mode, and do not know what to expect with Denverton hardware.