Re: [pfSense Support] CF 1.0.1 APPARENT boot failure - RESOLVED - SUGGESTIONS
Hi Holger et al Yes, it proved to be the null modem cable - and some errant assumptions on my part! May I suggest: 1) for the documentation - an addition that clarifies the differences in the CF card bootup sequence between Monowall and pfSense, as pfSense does not behave the same as Monowall (as one might have expected) - as the video and keyboard stop responding very early on, and the subsequent boot information is transferred and only available down the serial cable. FreeBSD/i386 bootstrap loader, Revision 1.1 ([EMAIL PROTECTED], Sunday Oct 29 01:30:00 UTC 2006) Loading /boot/defaults/loader.conf / 2) that just before pfSense transfers control to the serial cable that it also send a message to the video monitor, as suggested below. (So that one might not be lead to believe the install has hung, as one might be tempted to believe) FreeBSD/i386 bootstrap loader, Revision 1.1 ([EMAIL PROTECTED], Sunday Oct 29 01:30:00 UTC 2006) Loading /boot/defaults/loader.conf / Keyboard input and video display stopping and diverting to terminal, via COM1 serial null modem link. Connect to continue from there... 3) That one beep sounds when the default install comes to the first choice, so that the installer gets to know the boot sequence has completed correctly, even if they are not getting a serial output. If it helps anyone the HyperTerminal Config (for a PC using a CF card - not an embedded device) is 9600 bps. I hope these help someone in the future! Again, many thanks to the people involved, pfSense certainly is very good! Kind regards David Hingston - Original Message - From: Holger Bauer [EMAIL PROTECTED] To: support@pfsense.com Sent: Wednesday, November 08, 2006 2:30 AM Subject: RE: [pfSense Support] CF 1.0.1 boot failure Maybe your nullmodemcable is not ok. You need to assign NICs first from the console before you can use any of the interfaces (unless you are using sis nics which are preconfigured for the embedded image). Check your cable at another box to see if it actually is working. Holger -Original Message- From: Tortise [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 07, 2006 11:19 AM To: support@pfsense.com Subject: Re: [pfSense Support] CF 1.0.1 boot failure Perhaps I have a null modem connection problem as 5 beeps are eventually heard, suggesting it may be running up properly, however I can't ping any of the (3) NIC's at 192.168.1.1 as I presume I should be able to do on at least one? (Using 192.168.1.2 255 255 255 0) I get no output to HyperTerminal or to Teraterm, tried various cables, definitely using COM1 form the motherboard H - Original Message - From: Holger Bauer [EMAIL PROTECTED] To: support@pfsense.com Sent: Tuesday, November 07, 2006 10:48 PM Subject: RE: [pfSense Support] CF 1.0.1 boot failure The embedded images have output at com1. There won't be video output once it started. This is due to some embedded devices only having serial console and no video. Access your machine at com1, 9600baud using a terminalprogram. Holger From: Tortise [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 07, 2006 8:37 AM To: support@pfsense.com Subject: [pfSense Support] CF 1.0.1 boot failure Hi I am trying to run pfSense from a CF card, have written images to various cards. Monowall boots fine and runs from 16M CF card so it would seem the IDE CF reader is ok. This is on a Pentium 166 system. With pfSense, trying a number of different CF cards 128M and 256M: The BTX loader seems to run OK. Then I get: FreeBSD/i386 bootstrap loader, Revision 1.1 ([EMAIL PROTECTED], Sunday Oct 29 01:30:00 UTC 2006) Loading /boot/defaults/loader.conf / The / does a couple of circles then stops... I have tried to get the serial output by connecting HyperTerminal to the serial port. It seems it might be too early to get a serial output - as I do not get anything? Any guidance would be appreciated. David Hingston - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [pfSense Support] CF 1.0.1 APPARENT boot failure - RESOLVED - SUGGESTIONS
We can't display a message as the kernel is compiled without video support. This is needed to make a wrap bootup as it doesn't simulate a fake videocard with it's bios like the soekris boxes do. It would simply crash and not boot up. Without video support compiled in we can't display any messages. Everything else would need hacking the kernelmessages afaik and that's something we don't want to do. For the documentation part: http://doc.pfsense.org/index.php/Chapter_3:_Installing_pfSense (somebody did a newer version which doesn't have all that info, maybe it should be merged back in but the doc mediawiki is still ... We'll, let's call it unfinished; help needed here) I don't think a notification beep would help that much. We play a sound when it finished booting so you know at a headless setup it should be ready to be used. In case you don't hear this jingle after some time you have to check the console anyway. Holger -Original Message- From: Tortise [mailto:[EMAIL PROTECTED] Sent: Thursday, November 09, 2006 10:29 AM To: support@pfsense.com Subject: Re: [pfSense Support] CF 1.0.1 APPARENT boot failure - RESOLVED - SUGGESTIONS Hi Holger et al Yes, it proved to be the null modem cable - and some errant assumptions on my part! May I suggest: 1) for the documentation - an addition that clarifies the differences in the CF card bootup sequence between Monowall and pfSense, as pfSense does not behave the same as Monowall (as one might have expected) - as the video and keyboard stop responding very early on, and the subsequent boot information is transferred and only available down the serial cable. FreeBSD/i386 bootstrap loader, Revision 1.1 ([EMAIL PROTECTED], Sunday Oct 29 01:30:00 UTC 2006) Loading /boot/defaults/loader.conf / 2) that just before pfSense transfers control to the serial cable that it also send a message to the video monitor, as suggested below. (So that one might not be lead to believe the install has hung, as one might be tempted to believe) FreeBSD/i386 bootstrap loader, Revision 1.1 ([EMAIL PROTECTED], Sunday Oct 29 01:30:00 UTC 2006) Loading /boot/defaults/loader.conf / Keyboard input and video display stopping and diverting to terminal, via COM1 serial null modem link. Connect to continue from there... 3) That one beep sounds when the default install comes to the first choice, so that the installer gets to know the boot sequence has completed correctly, even if they are not getting a serial output. If it helps anyone the HyperTerminal Config (for a PC using a CF card - not an embedded device) is 9600 bps. I hope these help someone in the future! Again, many thanks to the people involved, pfSense certainly is very good! Kind regards David Hingston - Original Message - From: Holger Bauer [EMAIL PROTECTED] To: support@pfsense.com Sent: Wednesday, November 08, 2006 2:30 AM Subject: RE: [pfSense Support] CF 1.0.1 boot failure Maybe your nullmodemcable is not ok. You need to assign NICs first from the console before you can use any of the interfaces (unless you are using sis nics which are preconfigured for the embedded image). Check your cable at another box to see if it actually is working. Holger -Original Message- From: Tortise [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 07, 2006 11:19 AM To: support@pfsense.com Subject: Re: [pfSense Support] CF 1.0.1 boot failure Perhaps I have a null modem connection problem as 5 beeps are eventually heard, suggesting it may be running up properly, however I can't ping any of the (3) NIC's at 192.168.1.1 as I presume I should be able to do on at least one? (Using 192.168.1.2 255 255 255 0) I get no output to HyperTerminal or to Teraterm, tried various cables, definitely using COM1 form the motherboard H - Original Message - From: Holger Bauer [EMAIL PROTECTED] To: support@pfsense.com Sent: Tuesday, November 07, 2006 10:48 PM Subject: RE: [pfSense Support] CF 1.0.1 boot failure The embedded images have output at com1. There won't be video output once it started. This is due to some embedded devices only having serial console and no video. Access your machine at com1, 9600baud using a terminalprogram. Holger From: Tortise [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 07, 2006 8:37 AM To: support@pfsense.com Subject: [pfSense Support] CF 1.0.1 boot failure Hi I am trying to run pfSense from a CF card, have written images to various cards. Monowall boots fine and runs from 16M CF card so it would seem the IDE CF reader is ok. This is on a Pentium 166 system. With pfSense, trying a number of different CF cards 128M and 256M: The BTX loader seems to run OK. Then I get: FreeBSD/i386 bootstrap loader, Revision 1.1 ([EMAIL PROTECTED],
[pfSense Support] Wireless weirdness
I recently got a new laptop with an Intel wireless chipset; It seems to have trouble connecting to PFSense. I does connect but keeps rekeying which in turn causes slow response times. Nov 9 12:29:12 hostapd: ath0: STA 00:18:de:71:4a:1c WPA: group key handshake completed (WPA) Nov 9 12:29:12 hostapd: ath0: STA 00:18:de:71:4a:1c WPA: pairwise key handshake completed (WPA) Nov 9 12:29:12 hostapd: ath0: STA 00:18:de:71:4a:1c WPA: received EAPOL-Key 2/2 Group with unexpected replay counter Nov 9 12:29:12 hostapd: ath0: STA 00:18:de:71:4a:1c IEEE 802.11: associated Nov 9 12:29:12 hostapd: ath0: STA 00:18:de:71:4a:1c IEEE 802.11: deassociated Nov 9 12:29:12 hostapd: ath0: STA 00:18:de:71:4a:1c IEEE 802.11: deauthenticated due to local deauth request This goes on and on (every 20 seconds or so) Any ideas? -- Jeroen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Wireless weirdness
Jeroen wrote .. I recently got a new laptop with an Intel wireless chipset; It seems to have trouble connecting to PFSense. I does connect but keeps rekeying which in turn causes slow response times. Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c WPA: group key handshake completed (WPA) Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c WPA: pairwise key handshake completed (WPA) Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c WPA: received EAPOL-Key 2/2 Group with unexpected replay counter Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c IEEE 802.11: associated Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c IEEE 802.11: deassociated Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c IEEE 802.11: deauthenticated due to local deauth request This goes on and on (every 20 seconds or so) Any ideas? -- Jeroen Can you provide client/AP configuration? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [pfSense Support] Wireless weirdness
Are you using the built in windows wireless zero config tool or the intel client utility? Try to use the intel tool. I have a notebook with an intel abg card and it works fine when using the tool. Holger -Original Message- From: Jeroen [mailto:[EMAIL PROTECTED] Sent: Thursday, November 09, 2006 12:33 PM To: support@pfsense.com Subject: [pfSense Support] Wireless weirdness I recently got a new laptop with an Intel wireless chipset; It seems to have trouble connecting to PFSense. I does connect but keeps rekeying which in turn causes slow response times. Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c WPA: group key handshake completed (WPA) Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c WPA: pairwise key handshake completed (WPA) Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c WPA: received EAPOL-Key 2/2 Group with unexpected replay counter Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c IEEE 802.11: associated Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c IEEE 802.11: deassociated Nov 9 12:29:12hostapd: ath0: STA 00:18:de:71:4a:1c IEEE 802.11: deauthenticated due to local deauth request This goes on and on (every 20 seconds or so) Any ideas? -- Jeroen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Wireless weirdness
On 11/9/06, Holger Bauer [EMAIL PROTECTED] wrote: Are you using the built in windows wireless zero config tool or the intel client utility? Try to use the intel tool. I have a notebook with an intel abg card and it works fine when using the tool. I've tried both with the same result. Using latest drivers, fresh install. The laptop has an 3945ABG card, PFsense an Atheros based card. Wireless on PFSense configured as: Protection mode off 802.11G only Transmitpower: 99 Channel: 4 WPA Pre Shared Key WPA Pairwise: both KEy rotation: 60 Master key rotation: 3600 PfSense is running latest version, 1.01. Really strange problem! -- Jeroen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[pfSense Support] rrd graphing
Hi all I'm a pfSense newbie, i have a question on rrd graphing: -Is there some way(php page/option/command) to see rrdgraphs/data from a start-date to an end-date? Especially for traffic stats. Thanks Paolo Forner - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [pfSense Support] Wireless weirdness
Try setting WPA Pairwise to AES. Holger -Original Message- From: Jeroen [mailto:[EMAIL PROTECTED] Sent: Thursday, November 09, 2006 3:33 PM To: support@pfsense.com Subject: Re: [pfSense Support] Wireless weirdness On 11/9/06, Holger Bauer [EMAIL PROTECTED] wrote: Are you using the built in windows wireless zero config tool or the intel client utility? Try to use the intel tool. I have a notebook with an intel abg card and it works fine when using the tool. I've tried both with the same result. Using latest drivers, fresh install. The laptop has an 3945ABG card, PFsense an Atheros based card. Wireless on PFSense configured as: Protection mode off 802.11G only Transmitpower: 99 Channel: 4 WPA Pre Shared Key WPA Pairwise: both KEy rotation: 60 Master key rotation: 3600 PfSense is running latest version, 1.01. Really strange problem! -- Jeroen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [pfSense Support] rrd graphing
Not really though you might be able to run some kind of command from diagnosticscommand, php field to produce a graph for a custom period. See http://pfsense.com/cgi-bin/cvsweb.cgi/pfSense/usr/local/www/status_rrd_g raph.php for the source that renders the page and produces the graphs. Holger -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, November 09, 2006 1:21 PM To: support@pfsense.com Subject: [pfSense Support] rrd graphing Hi all I'm a pfSense newbie, i have a question on rrd graphing: -Is there some way(php page/option/command) to see rrdgraphs/data from a start-date to an end-date? Especially for traffic stats. Thanks Paolo Forner - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Wireless weirdness
On 11/9/06, Holger Bauer [EMAIL PROTECTED] wrote: Try setting WPA Pairwise to AES. Unfortunately that doesn't work either. I just connected my old Linksys wireless bridge to an available ethernet on the firewall and bridged it with the LAN. I have a perfectly stable connection then. So the problem is not the card in the laptop. At least that's one thing to rule out ;) Other laptops (including my previous one) could connect fine with PfSense in the past so i'm a bit stumped. -- Jeroen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Wireless weirdness
Jeroen wrote .. On 11/9/06, Holger Bauer [EMAIL PROTECTED] wrote: Try setting WPA Pairwise to AES. Unfortunately that doesn't work either. I just connected my old Linksys wireless bridge to an available ethernet on the firewall and bridged it with the LAN. I have a perfectly stable connection then. So the problem is not the card in the laptop. At least that's one thing to rule out ;) Other laptops (including my previous one) could connect fine with PfSense in the past so i'm a bit stumped. -- Jeroen The Intel 3945 chipset supports both TKIP and AES so that should not be a problem. Can the laptop connect if you disable all encryption on the AP? What are the symptoms when it tries to connect? Are there any logs on the Intel side? Can you get a wireless packet capture during a connection attempt? You can use something like BackTrack CD for this. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [pfSense Support] Wireless weirdness
I've had customers tell me that they have had problems with the Intel chipset connecting to AP's also. -Original Message- From: Yuri Lukin [mailto:[EMAIL PROTECTED] Sent: Thursday, November 09, 2006 10:11 AM To: support@pfsense.com Subject: Re: [pfSense Support] Wireless weirdness Jeroen wrote .. On 11/9/06, Holger Bauer [EMAIL PROTECTED] wrote: Try setting WPA Pairwise to AES. Unfortunately that doesn't work either. I just connected my old Linksys wireless bridge to an available ethernet on the firewall and bridged it with the LAN. I have a perfectly stable connection then. So the problem is not the card in the laptop. At least that's one thing to rule out ;) Other laptops (including my previous one) could connect fine with PfSense in the past so i'm a bit stumped. -- Jeroen The Intel 3945 chipset supports both TKIP and AES so that should not be a problem. Can the laptop connect if you disable all encryption on the AP? What are the symptoms when it tries to connect? Are there any logs on the Intel side? Can you get a wireless packet capture during a connection attempt? You can use something like BackTrack CD for this. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Wireless weirdness
On 11/9/06, Yuri Lukin [EMAIL PROTECTED] wrote: Can the laptop connect if you disable all encryption on the AP? I also tried that, it does connect but has the same stability problems as with encryption. It connects and works for a moment then stalls and comes back to live again after about 10-20 seconds. According to windows the connection never stops What are the symptoms when it tries to connect? It does connect but stalls regularly for about 10-20 seconds. Are there any logs on the Intel side? No i don't have any logs; at least not in the event log. Can you get a wireless packet capture during a connection attempt? You can use something like BackTrack CD for this. Yes that's a good idea, i'll try that later tonight thanks! -- Jeroen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Wireless weirdness
Jeroen wrote .. I also tried that, it does connect but has the same stability problems as with encryption. It connects and works for a moment then stalls and comes back to live again after about 10-20 seconds. According to windows the connection never stops So the laptop still says its associated even though your network connection drops? Is there anything in the pfsense logs? Could it be that the Intel card is in power save mode and if so, can you disable and try again? A wireless packet capture would be helpful but try to keep it small so as not to burden our mailboxes. If you want, you can email it to me directly. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[pfSense Support] ntop blank page
Installed ntop package. Initially it would notstart, but setting the password resolved that. After I did so, it starts and stops upon request. However, when I attempt to view the ntop page (dianosticsntop), I get a completely blank page on the browser with the root address of my pfsense server. Should I have been challenged for my recently set password when I requested the page (I wasn't)? If I look at the page source, that is completely blank too. Seems like the underlying configuration must be incomplete, but I can't find any documentation or prior mail list entries that provide solutions to this problem. Advice? P.S., I am veiwing the webConfigurator using firefox 2.0.
RE: [pfSense Support] ntop blank page
Same thing happens to me once I switched to https on the webconfigurator. just use http://yourfirewall:3000 you'll get in just fine :) -Tim -Original Message- From: Bestul, Kurt [mailto:[EMAIL PROTECTED] Sent: Thu 11/9/2006 12:16 PM To: support@pfsense.com Cc: Subject: [pfSense Support] ntop blank page Installed ntop package. Initially it would not start, but setting the password resolved that. After I did so, it starts and stops upon request. However, when I attempt to view the ntop page (dianosticsntop), I get a completely blank page on the browser with the root address of my pfsense server. Should I have been challenged for my recently set password when I requested the page (I wasn't)? If I look at the page source, that is completely blank too. Seems like the underlying configuration must be incomplete, but I can't find any documentation or prior mail list entries that provide solutions to this problem. Advice? P.S., I am veiwing the webConfigurator using firefox 2.0. winmail.dat- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] ntop blank page
Have you selected the interface(s) when you set the password too? -Raylund Bestul, Kurt wrote: Installed ntop package. Initially it would not start, but setting the password resolved that. After I did so, it starts and stops upon request. However, when I attempt to view the ntop page (dianosticsntop), I get a completely blank page on the browser with the root address of my pfsense server. Should I have been challenged for my recently set password when I requested the page (I wasn't)? If I look at the page source, that is completely blank too. Seems like the underlying configuration must be incomplete, but I can't find any documentation or prior mail list entries that provide solutions to this problem. Advice? P.S., I am veiwing the webConfigurator using firefox 2.0. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [pfSense Support] ntop blank page
Yes. That was the problem. Thanks From: Tim Dickson [mailto:[EMAIL PROTECTED] Sent: Thursday, November 09, 2006 3:39 PMTo: support@pfsense.comSubject: RE: [pfSense Support] ntop blank page Same thing happens to me once I switched to https on the webconfigurator. just use http://yourfirewall:3000 you'll get in just fine :) -Tim -Original Message- From: Bestul, Kurt [mailto:[EMAIL PROTECTED] Sent: Thu 11/9/2006 12:16 PM To: support@pfsense.com Cc: Subject: [pfSense Support] ntop blank page Installed ntop package. Initially it would notstart, but setting the password resolved that. After I did so, it starts and stops upon request. However, when I attempt to view the ntop page (dianosticsntop), I get a completely blank page on the browser with the root address of my pfsense server. Should I have been challenged for my recently set password when I requested the page (I wasn't)? If I look at the page source, that is completely blank too. Seems like the underlying configuration must be incomplete, but I can't find any documentation or prior mail list entries that provide solutions to this problem. Advice? P.S., I am veiwing the webConfigurator using firefox 2.0.
Re: [pfSense Support] Wireless weirdness
On 11/9/06, Yuri Lukin [EMAIL PROTECTED] wrote: So the laptop still says its associated even though your network connection drops? Is there anything in the pfsense logs? Could it be that the Intel card is in power save mode and if so, can you disable and try again? A wireless packet capture would be helpful but try to keep it small so as not to burden our mailboxes. If you want, you can email it to me directly. I was trying to get backtrack to work and finally got it working with WPA. (think i'll write an how-to, not to much info on that for backtrack) But anyway; at the moment i'm writing this message in backtrack and guess what, no wireless problems at all. Streaming a MP3 radiostation for about 30 minutes now without any interruption. This however puzzles me. There must be something wrong with the windows drivers and/or settings. I'll try disabling powersaving all together tomorrow. Now it's time to sleep ;) Thanks for now! -- Jeroen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[pfSense Support] Losing Packets through the firewall
Guys, Great product, however I appear to be losing packets when traversing the firewall and Im not sure wether or not this should be happening. Let me give you some background. I have 2 pfsense boxes running on p4 3Ghz 2Gb RAM HP Servers with 4 interfaces in each. Sitting behind the pfsense boxes are 3 freebsd boxes running web services. From the WAN when we perfom a simple test (approx 6 packets per second) to the web services we intermittently experience packet loss to the extent that our test fails. If I turn the firewall off in pfsense this issue goes away. Hopefully someone can shed some light of this little problem CHeers This email and any attachment(s) is intended only for the use of the intended recipient(s) and may contain information that is confidential and privileged. If you are not the intended recipient(s), you are hereby notified that any dissemination, distribution or copying of this email is strictly prohibited and may be unlawful. If you have received this email in error, please notify the sender immediately by return email, and destroy the original message together with any copies made of it, electronic or printed. Message protected by MailGuard: e-mail anti-virus, anti-spam and content filtering.http://www.mailguard.com.au/mg