@coxhaus Only floating rules have a direction.

WAN/LAN/etc are only for inbound packets on that interface.

Unbound can forward, but if you do that uncheck the DNSSEC option which is on by default.

@grety Do you have an NVME drive installed? I was getting this error as well, but once I removed the drive it worked like it should have.

@Squuiid said in pfSense on Watchguard M370:

The best CPU to use is an Intel Core i7-7700T. It’s fast, multithreaded and only 35W TDP. (QC/8MB/8T/2.9GHz/35W).

Still surprisingly expensive though. I'd argue the 7500T is better value. Potentially much better depending on how cheap you can find one.

Yes, I only found one system here that reports that sysctl. And it probably shouldn't!

Yup, just one SODIMM slot.

On most of those devices (except the 1100) the LEDs are closest to the PCB. In the 6100 and 8200 (and 4100) the PCB is above the ports to allow for a larger heatsink below it.

Well still no but I don't think that's that's same thing. They appear to be available only for Cortex-M CPUs and it's not clear to me if they can be updated after build.

Not easily when they were posted at that time. If you re-add them now they should remain.

Hmm, so it only fails to reconnect when coming out of standby?

The system could be holding the NIC powered to allow WoL etc. There may be some BIOS settings to disable that.

@stephenw10

Ahhh. I didn't realize this was solved. Thought OP was still having issues.

OK, turns out I couldn't ping because my ISP had to provision my router. I had to go through port by port until they could finally see my MAC address. Turns out port 6 is igb1. What a huge pain in the neck... Anyway, now I can ping.

Next, I just left the ethernet cable from my PC in one port and just changed the interface assignment for the LAN port until I found the assignment that lets me access the web gui. So port 7 is igb2 and I can access the web gui using a static IP - but I can also pull an IP via DHCP. I guess I'll repeat that until I've mapped all the ports.

Thanks for the help, everyone!

@ErniePantuso see diagram below for illustration, for Sophos XG125W. Similar concept applies to other appliances with multiple NIC cards. See if this makes sense, otherwise, feel free to ask more questions.
2934e6ac-cc43-4b4f-afcf-745f1c74b728-image.png

Not on Netgate hardware, pfSense Plus is included.

@Finger79 And a big thanks from me who forgot to put JPME2 back again after flashing with the same results…

I can't recommend anything specific myself but there are a few threads in the Netgate Hardware section with reports of drives other users have fitted.

Steve

Mmm, from a high level I would expect to need to set the link speed at 1G. And that may require a dual speed module.

I have a 1G BiDi module like that running in an 8200 but it will only run in the combo ports where the link is forced to 1G.

Is that actually the same server you're testing against? The ping time looks different.

The default queue doesn't seem to present any restriction from what information you have given us. It wouldn't affect downloads at all since the only queue it can hit is outbound on the WAN. So you should be seeing much better than that from the firewall itself.

Right because it now is the default so you don't need to set it. You can try setting it to something different as a test if you want but I don't believe it will make any difference.

@Gertjan hi!
I don't have any these packages installed.
I have many open-vpn site-to-site and ipsec site-to-site connections (50) .

Outputs:
systat -iostat

systat -iostat /0 /1 /2 /3 /4 /5 /6 /7 /8 /9 /10 Load Average || /0% /10 /20 /30 /40 /50 /60 /70 /80 /90 /100 cpu user| nice| system| interrupt|X idle|XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX /0% /10 /20 /30 /40 /50 /60 /70 /80 /90 /100 ada0 MB/s tps|XXXXXXX da0 MB/s tps| da1 MB/s tps| da2 MB/s tps| da3 MB/s tps| pass0 MB/s tps| pass1 MB/s tps| pass2 MB/s tps| pass3 MB/s tps| pass4 MB/s tps| pass5 MB/s tps|

iostat -c 10

tty ada0 da0 da1 cpu tin tout KB/t tps MB/s KB/t tps MB/s KB/t tps MB/s us ni sy in id 0 0 11.0 12 0.1 0.0 0 0.0 0.0 0 0.0 2 0 2 3 93 0 234 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 1 0 0 3 96 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 2 0 1 3 94 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 1 0 1 2 96 0 78 15.2 66 1.0 0.0 0 0.0 0.0 0 0.0 2 0 0 2 95 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 2 0 0 3 94 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 1 0 1 2 96 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 1 0 1 4 94 0 78 0.0 0 0.0 0.0 0 0.0 0.0 0 0.0 1 0 1 4 94 0 78 10.8 55 0.6 0.0 0 0.0 0.0 0 0.0 2 0 2 5 92