Weird thing happened today
-
So my pfSense box has been running for months with no issues. So at around 1:40 today the internet went down. I tried to access pfSense remotely via management console 443 and it didn't work. I went to go look at the monitor that is directly connected to pfSense and it was an error about a boot device (I should have taken a picture). I rebooted and it was fine. We had no power surges or any other issues with power which would have caused a reboot.
Anyone know what this could be related to? I was thinking maybe an malware attack against the device but nothing stood out in firewall logs. Looks like it has blocked 100% of traffic.
-
Without knowing the boot error it's impossible to say what it might have been.
As for that graph, that isn't a graph analyzing your traffic, only your log messages. If the only rules you have that log are block, or you didn't have any traffic that matched a pass rule with log set, then seeing 100% blocked on that graph is normal.
