Internet going down every ~5min

[fusionache]

Hi, I use pfSense for  only one month ago.
I'm curious if somebody cand explain me why internet is going down like this, for 1 sec, at every 5 min.
Everything goes great until last weekend, from there is working like this. I need help quickly.

Thanks guys

[doktornotor]

Not without logs.

[doktornotor]

I would suggest to start with disabling access from WAN ASAP!!! WTF! Why are exposing your admin GUI and SSH to Internet?!?!

[fusionache]

because I want to acces the GUI from outside LAN. I'm not always in the LAN connection and I have to manage it

[doktornotor]

Completely horrible idea. Use OpenVPN or something.

[fusionache]

I din't change anything. It works fine for almost 2 years. I'm a new sysadmin in a dorm. I don't think that is a problem.

[David_W]

It's a truly appalling idea to open the user interface of a firewall to the outside world, especially in the sort of hostile environment a dorm can be. As has been suggested, set up OpenVPN or IPsec, then you can VPN in and open the user interface over the VPN.

[fusionache]

Ok, I ll do this, but the others dorm have the same configuration. But they dont get this spike. Anyone?

[divsys]

What does "Status->System logs->Gateways" show you, especially around the time of the spikes?

BTW - one more suggestion to setup OpenVPN access to your site, external access is dangerous these days.
Not nagging, just saying - you're playing with fire  :P

[fusionache]

Nothing… can be something hardware? the configuration of the system is like this:

internet ->switch->server->lan.

[divsys]

internet ->switch->server->lan.

Where is your pfSense box in that diagram?
What hardware are you using?
Are you connected to the internet via a modem or are you behind a modem/router?

[fusionache]

pfSense is installed on the server.With the configuration

Intel(R) Xeon(TM) CPU 2.66GHz
8 CPUs: 2 package(s) x 2 core(s) x 2 HTT threads

[divsys]

Is this on bare hardware or are you using a VM?

Are you connected to the internet directly via a modem or are you behind a modem/router?

[fusionache]

The internet is coming on optical fibre, and then converted to ethernet, going in a switch(megabyte) and then in server and then in lan.

I dont know if I understand well your question.

[divsys]

Does the WAN interface on your pfSense box get an external IP address or an RFC1918 one (like 192.168.x.x or 10.x.x.x or 172.16.x.x)?

Just trying to figure out if there's another router upstream of your pfSense box.

Is your pfSense running directly on the server hardware or are you running a virtual machine (ESX, etc) with pfSense under that.

[fusionache]

I don't know if I ll give you a right answer but as I know, there is other router before the server. I have one switch before the server because I need 2 entry for 2 telephones.

As I know, the pfSense is installed on a FreeBSD system.