Thanks for the suggestions, always appreciated. I'll pass those to the people making those decisions.

Over the years everything has been considered. There's always a compromise to be made.

Steve

Yes that's just a note indicating these are free packages:

Add optional packages such as Snort or Suricata for IDS/IPS and network security monitoring, Squid for optimized content delivery and SquidGuard for anti-spam/anti-phishing and URL filtering.1

The 1 there should also be superscript.

Thanks for noting that.

Steve

What were you upgrading from?

And I assume it was to 21.02p1 at this point not 2.4.5?

Steve

It's not that. It looks like a missing uboot env in that case. On the SG-1100 that does not prevent it booting and running normally. However if you open a ticket with us we can get that fixed for you.

Steve

@alpharulez said in 21.02 Sudden lockup:

Blog post here for more details: https://www.netgate.com/blog/pfsense-obscure-bugs-and-code-wizards.html

How can I find out when the snort issue has been fixed?

Thanks for the fix.

You can track the Snort issue here: https://redmine.pfsense.org/issues/11466. This one may take several days to figure out and clear up.

@stephenw10 Again, thanks. Paighton sent everything over after I had called it a night. Downloaded what I needed this morning and have updated my restore docs with the info he sent. Over the years, I've found this the best way to get Murphy to look somewhere else to cause trouble.

Rick

@stephenw10 said in SG-3100 system activity displaying wrong info:

Yes, see the bug. That value is completely invalid for some reason.
If you run top from the command line (NOT in the gui) top -aSH you will see the first pass produces that bogus value but all subsequent passes are correct.
Because the page in the gui works by repeatedly running single passes it always appears incorrectly.

Steve

Thanks Steve, I'm not a programmer, so your words help me to understand what is happening under the hood. :)

@jimp 21_02_1 looks good as far as this issue is concerned. dnsbl is also syncing which wasn't occurring in the previous release 21.02

@lerriuqs Ha! It’s even easier on windows. Plug it in, set the com port in putty, and console is yours. Very glad your experience with netgate has been the same as I’ve experienced on multiple occasions. Happy bit pushing!

I see what you mean @stephenw10 and @pete35 .
I've just reduced the DHCP range from 10.x.5.1 to 10.x.15.255 for all the VLANs. That will give me plenty of addresses without bloating the file.
The dhcpd.leases file immediately reduced its size to a more manageable 900KB, I'll keep monitoring it in the next days to see if it stays the same or keeps growing.
I'll update the thread.

Thank you all for your precious support.
Gab

@jimp I only had what was configured OOTB for 21.02. However, I have now downgraded to 2.4.5p1 -- so will have to leave this topic for another day.

I use double the defaults, so 80 and 120MB, and have not seen any issues.

Steve

@lnguyen

I actually have two here from different vendors I tried.
One's coded for Cisco and the other's coded for Intel.

This directive was added to the boot loader config file:
hw.ix.unsupported_sfp="1"

After rebooting, when I slide either SFP module into the SFP+ cage, I get an unsupported module error from the kernel.

ix0: Unsupported SFP+ module type was detected.

I remember seeing on the Supermicro documentation that these SFP+ ports are not multimode and only support SFP+ modules.

@bigsy said in My SG-1100 is constantly restarting:

I'm not sure if this option was there previously

It wasn't, that's new in 21.02. Previously you had to escape to the loader prompt and manually boot into single user mode.

Steve

@akuma1x Thank you so much

@provels yes LOL

Not really I'm afraid. I use Three because it's literally free until I actually need to use it, which is hardly ever. They give you 200MB per month and with tuning that's enough for gateway monitoring and occasional testing.

I will say that if speed is a big consideration for you you should get an external 4G modem device like a Netgear LB2120. You can get actual LTE speeds from that where as the driver limitations in FreeBSD mean you won't ever see more than 42Mbps from the EM7305. I usually see something ~20Mbps here.

Steve

@bigsy

Thank you so much!

It's been a very busy day here, and I appreciate the link!

Finally got a support account set up and requested the firmware. Hopefully this will resolve the issue.

After this, I'm considering obtaining a backup device so I always have a spare, ready to go.

@stephenw10

Thanks for the check in.

I couldn’t find that issue about quick blue flashing lights as a specific boot issue when I had the incident. I googled away but I may have missed it in the documentation.

For starters something likes this guide https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk123865&t=1613789835245

To be able to clearly identify an issue from the lights in the front panel.

Being able to control whether the lights can show and of course their brightness (maybe a timer too) please.

👍