@la6er
It seems when making changes to an IP in a group. I need to stop E2G and restart under Status\Services. I have very little trouble with E2G stopping on me. In fact I do not even enable the watchdog feature. It just runs. It does take some tweeking when first setting up E2G. Make sure to go through the various lists and turn off or delete entries that reference any file that does not exist. I found it very helpful to SSH into router with WinSCP and modify some config files directly.

When I try to use flent rrul with netperf-eu.bufferbloat.net through my GRE Tunnel Bonding (VVDSL + LTE) I sometimes get the following error message:

WARNING: Program exited non-zero. Runner class: NetperfDemoRunner Command: /usr/bin/netperf -P 0 -v 0 -D -0.20 -4 -Y 0xb8,0xb8 -H netperf-eu.bufferbloat.net -p 12865 -t TCP_STREAM -l 300 -F /dev/urandom -f m -- -H netperf-eu.bufferbloat.net -k THROUGHPUT,LOCAL_CONG_CONTROL,REMOTE_CONG_CONTROL,TRANSPORT_MSS,LOCAL_TRANSPORT_RETRANS,REMOTE_TRANSPORT_RETRANS,LOCAL_SOCKET_TOS,REMOTE_SOCKET_TOS,DIRECTION,ELAPSED_TIME,PROTOCOL,LOCAL_SEND_SIZE,LOCAL_RECV_SIZE,REMOTE_SEND_SIZE,REMOTE_RECV_SIZE,LOCAL_BYTES_SENT,LOCAL_BYTES_RECVD,REMOTE_BYTES_SENT,REMOTE_BYTES_RECVD Return code: 1 Stdout: Stderr: netperf: send_omni: connect_data_socket failed: Connection refused

This never happens when I either use flent-london.bufferbloat.net instead of netperf-eu.bufferbloat.net or avoid the GRE Tunnel Bonding. Any idea what I might be doing wrong?

Ah, well running unifi on there is probably completely untested. However you have installed that would need to be updated for FreeBSD 12. Really it's much better not to do that anyway.

Steve

@william-martins Tem certeza que é o e2guardian? já tentou desabilitar ele pra ver se não é outra coisa?

@winsonfa

It should still work?

Those errors are just cosmetic, you can ignore.

On my machine, it gives that error but still works.

@teken
Same here. Nut was no longer installed. I had to re-install the package from package manager and reboot. Luckily all the settings were still there. All working good now.

Hi guys, I know this is a super old thread - but just wondering if anyone in here could share me the a copy of the last x32 bit via DD configured for the x700 - Please see here for the actual thread with the background as to why: https://forum.netgate.com/topic/133044/pfsense-image-for-firebox-x700

@flok No, so far not.

If you change pFSense / Services / Squid Proxy Server / GEneral tab Then check the SSL Man In The Middle Filtering area and change the SSL/MITM Mode from Splice WhiteList, Bumb OtherWise to the Splice ALL

the problem can be solve with a this shape.

OR

With a default value of the SSL/MITM Mode with Splice WhiteList, Bumb OtherWise you can goto ACLs atb and add desıred web site url to the WhiteList area ie: online.kktcmaliye.com

Hello Stephenw10

Thanks much for the message. I will check it, although the service can't start, not with that config.
Anyway, I am also trying to use parallel port configuration since it doesnt' need any interface in between. (I have another display hd44780 compatible with no USB interface)
Will post the results here after all.

Thanks
Fabricio.

@shred yup, I've been there, I also got confuse about that. but that rule is to block other interface to access management port. some of the link or pictures of this guide did not retrieve when netgate upgrade their forum.

02268e4d-4c47-4b6c-b5ed-0cdbe7ee2a20-image.png

if you really need ClamAV, use Squid 3-Dev. Works for me using i386 firmware..

I've read the link you sent but still dont get this statement: The "core team" now compile the packages.

try https://lists.pfsense.org/mailman/listinfo/dev if you want to send an email to the pfsense developers or post a bug on redmine.pfsense.org

@marcelloc

Hello, Marcelo:

Do you know how to install SARG in
Hello, Marcelo:

Do you know how to install SARG in pfsense 2.4.4, FreeBSD 11.2-RELEASE-p3 ?

Thanks,
Yosvany

Ok, clear and understood.  8)

@stephenw10 yea, very strange. It seems to me that the lcdproc service window where you set that information isn't copying and saving that information.
Thanks again

@Oleg2017:

Не подскажите как у вас настроено на одном сервере два микротика. У меня при этом пингуется только один (пингуется из сети за  pfsense-ом) . Тот чья сеть указана  в  IPv4 Remote network(s) на сервере.

Так сервер на то и сервер, чтоб обслуживать множество клиентов, не создавать же сервер для каждого.
То, что за клиентом - сеть, значения не имеет.

Сервер
В IPv4 Remote network(s) - обе сети за Микротиками через запятую -  a.a.a.a/24, b.b.b.b/24 (хотя я исторически использую вместо Pv4 Remote network(s) директиву route в advanced).

Сlient Specific Overrides
Обязательно для каждого клиента Микротика в IPv4 Remote Network/s - сеть за этим Микротиком в виде a.a.a.a/24, а в Advanced
push route "b.b.b.b 255.255.255.0 x.x.x.1"
где
b.b.b.b 255.255.255.0 - сеть за другим Микротиком
x.x.x.1 - IP "серверного конца" OVPN туннеля. Это - ключевой момент, без него маршрут в сеть за другим Микротиком не будет воспринят.

В IPv4 Local Network/s сети b.b.b.b быть не должно.

Для второго Микротика - по аналогии

@marcelloc Boa noite Marcelloc... Eu instalei recentemente um Servidor Pfsense na versão 2.5 e fiz a instalação dos pacotes do git, porém eu fiz tudo o que o @lotus disse sobre o arquivo "#syslogsys = on" e continua indo para "off", já apliquei chmod -Rf 777 na pasta /var/log/e2guardian e por fim editei pelo "vi"/usr/local/etc/e2guardian/e2guardian.conf em syslogsys = on .... mas mesmo assim o serviço do e2guardian não inicia... sabe me dizer o que posso fazer para iniciar e2guardian? é permissão mesmo?

OBS: ele não cria access.log na pasta /var/log/e2guardian

Eu desconfio que deva ser um chown:

ef4c4040-0a72-4200-9bb6-d59fdf182693-image.png

Poderia me ajudar?

@pigbrother said in Вопросы новичка по pfsense:

Каналы имеют разную скорость? Если да, и каналы в балансировке с одинаковыми Tier, то нужно указать для каждого шлюза Weight.
https://docs.netgate.com/pfsense/en/latest/routing/gateway-configure.html

У меня указано так сейчас. с загрузкой нет проблем все суммируется все работает. Оба канала по 30мегабит. А вот с выгрузкой скорость меньше чем по каждому отдельно
balancegroup OPTIC_GW
WIFI_GATWAY
Tier 1
Tier 1
bal2 OPTIC_GW
WIFI_GATWAY
Tier 2
Tier 1

bal3 OPTIC_GW
WIFI_GATWAY
Tier 1
Tier 2

@netnerdy

You need to create a new switch (it can't be the same switch as your LAN). For the Switch, set the VLAN ID to (0) None. This will strip the VLAN tags off that interface. Make sure your physical adapter is mapped to that switch, and then connect that WAN switch to an interface on your PFSense VM. Enjoy.

BTW, the snapshotting feature is super useful when updates are having issues. :)

great tutorial, thank you!
are these instructions still valid for the current version of pfSense?

merhaba,
çok uzun süredir herhangi bir hareket olmamış ama buna tekrar ihtiyacım oldu. kurulum dosyalarının olduğu sıkıştırılmış dosyayı nereden temin edebilirim?

@stephenw10

No. You were right and it was the internal psu capacity. Worked with a 450w atx just fine. I guess if it were blacklisted it would keep running but not boot. Looking for a 200-300w flexatx.

@marcelloc

Hi Marcelloc, i have postfix and mailscanner running on pfsense 2.4.4-p1, i got the following warnings:

MailScanner[64731]: Clamd::ERROR:: UNKNOWN CLAMD RETURN ./lstat() failed: Permission denied. ERROR :: /var/spool/MailScanner/incoming/64731

Permissions looks fine, i did chown -R postfix:postfix /var/spool/MailScanner/incoming/, also chmod -R 6666 to the same folder.

Runas user on MailScanner.conf and clamd.conf is postfix.

Also mailscanner logs display syntax errors:

Mar 6 16:09:51 pfsense2 MailScanner[56749]: Syntax error(s) in configuration file:
Mar 6 16:09:51 pfsense2 MailScanner[56749]: Unrecognised keyword "deliversuspiciouspdf" at line 93
Mar 6 16:09:51 pfsense2 MailScanner[56749]: Unrecognised keyword "pdfidcommand" at line 84
Mar 6 16:09:51 pfsense2 MailScanner[56749]: Unrecognised keyword "pdfidtimeout" at line 87
Mar 6 16:09:51 pfsense2 MailScanner[56749]: Unrecognised keyword "scanpdf" at line 90
Mar 6 16:09:51 pfsense2 MailScanner[56749]: Warning: syntax errors in /usr/local/etc/MailScanner/MailScanner.conf.

Please Help.

Dear , I'm new to this, but fix this problem by simply checking the "Do not verify the remote certificate " located in Man SSL option menu in the filtering.

SSL Man Int the Middle Filtering>Remote cert checks> check "Do not verify remote certificate".