*** Update - Problem Solved *** After pfSense version 2.2.1 was released, I downloaded the software and performed a brand new install for the second time. Now it also runs perfectly stable in combination with my Virtualbox setup. I still don't know what caused the issue in the first place, but it does not matter much anymore… One thing I noticed, there seems to be a huge improvement with the openvpn performance. It connects much faster, and I can get up- and download speeds up to 60Mbit, where I got 35 - 40 with the old version. Same settings, same hardware... I'm happy with it. Thanks to anyone involved! :)

@Chris: you always could establish a tunnel  :D

+1 I'm also very interested. Where to subscribe for any news on this?

Please exclude squid and snort from the lottery style auto install…  Otherwise you will never hear the end of crying.

Second best option, if it doesn't have a 'modem only'/bridge mode, is a dmz mode where the modem router 1:1 NATs all your traffic to the router of your choice and gets out of the way as much as possible. Modem bridge mode is much better though.  ;) Edit: It claims to support PPPoE pass-through so look for that. Edit: Reading the manual it has a whole boat load of bridging options. You are attempting to establish a PPPoE pass through type bridge in which the modem establishes the DSL connection only. So you need to enter the VCI/VPI dsl details etc in the modem and then bridge that connection to (it looks like you can select the LAN port) and let your Asus (or any router  ;)) handle the PPPoE connection. Steve

We moved to pfSense exclusively….Will only sell/install ASA's if client demands it.  Have close to 40 client sites using them now....We also buy 100% of our boxes directly from the project....Saves us a ton of time and supports the project.  8)

Also ignoring that you broke HTTPS in the process. You can't proxy HTTPS without breaking its security. Many exploits have been done around this, like forcing Windows update to install Malware. Amazing what you can do when you tell clients to trust fake CAs.

if i wanted to turn pfsense into bridge mode how would i configure this on a 3750 switch? I followed this guide to bridge http://people.pharmacy.purdue.edu/~tarrh/Transparent%20Firewall-Filtering%20Bridge%20-%20pfSense%202.0.2%20By%20William%20Tarrh.pdf but am having trouble getting my PS4 out of a NAT type 3.  I figured putting the router in bridge mode would make things a little simpler when it comes to getting by the NAT type 3 as right now i think i have a double NAT issue

I love the feature! Can you pull it on pfSense? Could drive people away from the darned proxy stuff.  ;D ;D ;D

I used Astaro/Sophos at home for a couple or three years. It, like pfSense, takes some getting used to and networking knowledge to make work. It's URL filtering and Antivirus are an integrated part of the product, and is free to license for home users (or at least it used to be).  If that is important to you, it might be worth a look. Its hardware requirements are larger.  If you like a more modern GUI, that might be for you, but it's very, very javascript-heavy.  I don't think it'll run on a serial console node, and to run it in a business setting is not cheap. It's Linux/iptables not FreeBSD/pf. The 50 local IP address limit is probably going to be enough for most home users.  It used to be 10.  I was one of the people squawking loudly and they eventually upped it to 50.  Never came close to the state limit. I can't remember why I switched back to pfSense, to tell you the truth.  Probably the less expensive (!) licensing for businesses. Sophos UTM is a solid product.  Or at least it was since about the time Sophos bought Astaro.  Haven't looked at it much since.

Does he really have to use profanity all thru the video? Makes him look really immature.

I don't think its that big a deal but these guys need something to write about I guess.

And now you are chatting me? Ohhhhhh…  Yeah.  You are screwed for sure. Seriously, these days I'd be surprised if some public service wasn't archived forever...

$csrf = substr($buffer, strpos($buffer,'sid:') , 110); Actually needs to be $csrf = substr($buffer, strpos($buffer,'sid:') , 55); in order to get the csrf token working. This is because the token length is 55.