WAN interface issues



  • Hello All,

    I'm having some issues that I would like your assistance with.  I have a setup where my PFSense WAN interface is on a 192.168.0.0/24 network, and it periodically stops passing traffic.  I recently moved in and haven't had a chance to check the logs yet (I will post them when I get home).  I am using a Powerline AV system between the WAN interface and the ISP-modem.  I have tried the WAN interface with DHCP and with a Statically assigned address and both result in the same behavior, it will work for a period of time and then stop (today it was approx 3 hrs).  I was trying to have the WAN side have the same subnet as a VLAN but I feel that may have been causing issues, which I have already changed.

    I had to reboot to bring it back up last time, but in my testing I could get it to come up by disable and re-enabling the WAN interface.  At one point the WAN interface acquired an IP address from OPT1 interface.

    Does anyone have any thoughts/ideas (other than checking the logs which is #1 on my todo list)



  • Hello All,

    Have some new information.  Everything appeared to be up for over 24-hours straight, however, last night between midnight and 5 things appeared to go down.  The thing that baffles me is that it went down at about midnight, then it came back up when I connected my laptop to see what the problem is and started working on its own.

    I'm trying to export my firewall logs to a remote server to see if there is anything in there which will be helpful.



  • Hello,

    I'm looking at my syslog server and I find the following log entries around every time the wan connection goes down:

    Dec 15 10:59:59 10.1.1.65 Dec 15 11:00:00 /usr/sbin/cron[93325]: (root) CMD (/usr/bin/nice -n20 /usr/local/bin/php -f /usr/local/pkg/snort/snort_check_cron_misc.inc)
    Dec 15 10:59:59 10.1.1.65 Dec 15 11:00:00 /usr/sbin/cron[93770]: (root) CMD (/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 webConfiguratorlockout)
    Dec 15 10:59:59 10.1.1.65 Dec 15 11:00:00 /usr/sbin/cron[94091]: (root) CMD (/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout)
    Dec 15 10:59:59 10.1.1.65 Dec 15 11:00:00 /usr/sbin/cron[94344]: (root) CMD (/usr/local/pkg/swapstate_check.php)
    Dec 15 10:59:59 10.1.1.65 Dec 15 11:00:00 /usr/sbin/cron[94545]: (root) CMD (/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot)
    Dec 15 10:59:59 10.1.1.65 Dec 15 11:00:00 cron[93249]: (root) MAIL (mailed 46 bytes of output but got status 0x0001 )
    Dec 15 11:00:00 10.1.1.65 Dec 15 11:00:00 cron[92957]: (root) MAIL (mailed 74 bytes of output but got status 0x0001 )

    Dec 16 11:00:00 10.1.1.65 Dec 16 11:00:00 /usr/sbin/cron[30482]: (root) CMD (/usr/bin/nice -n20 /usr/local/bin/php -f /usr/local/pkg/snort/snort_check_cron_misc.inc)
    Dec 16 11:00:00 10.1.1.65 Dec 16 11:00:00 /usr/sbin/cron[31532]: (root) CMD (/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 webConfiguratorlockout)
    Dec 16 11:00:00 10.1.1.65 Dec 16 11:00:00 /usr/sbin/cron[32008]: (root) CMD (/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout)
    Dec 16 11:00:00 10.1.1.65 Dec 16 11:00:00 /usr/sbin/cron[31725]: (root) CMD (/usr/local/pkg/swapstate_check.php)
    Dec 16 11:00:00 10.1.1.65 Dec 16 11:00:00 /usr/sbin/cron[32172]: (root) CMD (/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot)
    Dec 16 11:00:00 10.1.1.65 Dec 16 11:00:00 cron[30438]: (root) MAIL (mailed 46 bytes of output but got status 0x0001 )
    Dec 16 11:00:00 10.1.1.65 Dec 16 11:00:00 cron[30168]: (root) MAIL (mailed 74 bytes of output but got status 0x0001 )

    any idea what could be happening?