You got it

I'm afraid that is not enough, which chip you use etc. Check your hardware and then check that list which url i already post. And when using virtuals, hardware is going to change a bit. cause of "virtual machine"

Dear Nicklas, I really look forward when your document is ready. Last night I am trying to upgrade from 1.2.3 rc 3 to 2.0 rc3 and ran in a lot of problems. I got the traffic in and out through the firewall but I can only access the Gui from the Lan side (it was a problem that I cannot access the firewall remotely). Also the firewall has DNS issues itself which cannot ping external or dns look up. But the servers behind the firewall can access SSH, WHOIS, DNS, FTP, WWW..pop…etc are all good. So, I am now restart the whole setup from scratch instead of upgrading it and import the configuration file. May I ask a question: On the Wan side rules, the "Lan net" is replaced to "any" ? is that how you did on yours?

Because I believe this problem doesn't really have a lot to do w/ PFsense, I created a blog post about this specific issue. I would still love for any others to share their experiences with OpenOSPF. http://ouliakk.blogspot.com/2011/08/using-openospfd-with-freebsd-78.html

Maybe you have 50/50 loadbalance, you should try weighted loadbalancing to get more upload speed

Thanks. I noticed that difference in both versions. I decided to play with my chances and quickly change WAN IP which helped. I think the buffer from the time that some action is done on pfSense to the time that it takes effect would help a lot in changes. Maybe a universal buffer time button or APPLY button would be a great feature.

Hi Guys, Can anyone answer these questions? thanks, jits

http://forum.pfsense.org/index.php/topic,40080.0.html

Edit first post subject with [SOLVED], if you don't encounter any further problems with this setup

Probably per session, though I don't know the internals of the multi-WAN support well enough to be certain.

What kind of use case do you have that requires multiple GIF interfaces on a subnet like that? I wouldn't exactly call that something that is "often" needed.

Hi wirklich, simply define a firewall rule in LAN tab where you set: Proto: * Source: single host or alias Destination: * Gateway: your Gateway This should work. Regards, brick1

As far as I know you can close the topic on your own. Please put an [SOLVED] in front of your topic of the first post so that everybody knows that you found a solution.

@ermal: It can be done. You just have to learn how to do it ;) So sorry to say but RTFM I think I may be having the same problem, but to know for sure that I didn't do what the manual specified, would you mind specifying what manual you read that made it so clear? If not, can anyone else provide better information than, "sorry to say but RTFM"?

@abcvidu: So if I checked "No Proxy" with PC Default GW= Firewall IP, is there any way to access internet? If you browse the web with port 80 (http) the squid automatically redirects this packets and so the traffic is going through squid. This is why you call it "transparent". You do not need any additional setting on your clients and the clients in general do not (need) to know that there is a TRANSPARENT proxy anywhere in the network. You only need to edit the proxy address in the browser if you squid in NOT usinge transparent mode.

Assign the gif interface and you can bridge it :)

80K/sec is extreme load. I would suggest you go for more CPU and RAM. Load balancing can take up CPU process, and when you say 80K/sec that means switching 40K times in a second. I doubt if the i3 will be able to take that load. i5 with 8GB+ would be a better choice in my opinion. Add a 1x8GB stick first, if required you can add in additional RAM to the second slot.. depending on what kind of mobo u will be using.

I think I may have figured it out. I won't be able to test until tomorrow morning, before the rest of the employees get in. I don't test config changes during business hours. If it's what I think it is, I will be embarrassed  :-[.

Remove those destination addresses and replace those with any

FTP TO GO OUT VIA DIFFERENT GATEWAY MANUAL(modest version) Make sure you have the another up and running ok Make sure you have aliases for ftp server ip-address and needable ports Check in what subnet(interface) that server is Goto that interfaces rules tab and create new rule 4.1) Pass RIGHT_SUBNET TCP FTP-SERVER-IP_ALIAS * * FTP_SERVER_PORTS 4.2) goto "advanced features:Gateway" and select your desired gateway