@mrkrad: you will get 5mb/s with uTorrent or anything that uses a download accelerator to CDN's that are on multiple C class segments (common). You will only get 5MBit/s if you are downloading a file which allows MULTIPLE connections. utorrent or torrent in general allows this. But this will not work with every download!

If you are much willing to pay, you can post this in the bounty section. I cannot answer all your questions since I am just a newbie with pfsense. question: Anyone got a sample list of configuration to make this work? Yes. Multiwan is much easier now. Just go to your firewall LAN rules and assign what ports your apps are using to the specific gateway that they will use. Question: Sticky connections yes or no? There is an option in System>Advance>Miscellaneous. Just check it there Question: Any way to get more robust interface up/down - i've found aggressive settings result in too much interface flapping. You can try the high-latency or conservative.System>Advance>Firewall/NAT If you want to use failover, just create a group gateway in different tiers.

what if you continue the download (aka ftp restart)? cheap vpn? Check out snort - we got a free tippingpoint low end IPS and it has this feature - it can detect 10/100/500/1000mb file transfers and you can take actions - like block, throttle - i guess if you can master snort you could add a filter to do this? no idea personally but possible definitelyl

on pfsense1 lan rule allow tcp/udp lan_subnet_or_wanted_client * these_web_sites_Alias these_ports_alias + advanced settings gateway1 Hope that was clear enough EDIT: Ofcourse this rule is above default rules

Hi, Please keep all discussion on the forum rather than PMs.  ;) @PM: We are facing an issue with Pfsense. when we setup Load balancing the Secure connection( Mainly HTTPS sites) is not working . It does not allow two public IP’s in same session, So it is being rejected. As per pfsense documentation available in net we tried to use “Sticky Connection” and also  tried to setup LAN rule for HTTPS but the issue is still not resolved. We are using Pfsense 1.2.2 version. We are  using  same IP for two different HTTPS  mail server.Actully the two mail server hosted into single Machine. Please let me know how  can I resolve the issue? Why are you running such an old version of pfSense? Your message is a bit confusing. Are you using inbound or outbound load balancing? Steve

I got my answer from another post… "VLAN to VLAN traffic is handled entirely within the smart/managed switch and doesn't get to the router"

@Nachtfalke: I am thinking of a small home router like a small d-link, netgear, zyxel, fritz!box, speedport Just something really small, quiet, less power consumption. http://www.reichelt.de/?ARTICLE=37669;PROVID=2028;&utm_source=Preisvergleich&utm_medium=CPC&utm_campaign=google_feed Didn't you get any Modem, Router from you ISP ? Yes but my cable modems doesn't have advanced firmware. It's like a usb modem. (does not have router function) Do not have NAT-Firewall anything. Thanks.

Only way this would work is to bond connections…  Since your using two transport methods Im not sure how well that would work...  Your ISP would have to support it...

Right now both links are from the same ISP, fibre + WiMax. In the near future the secondary link will be switched to another ISP. We'll be doing some tests with DNS failover (not load balancing), we'll see how it goes…

The vlan interface names on 1.2.3 (vlan1, vlan2, etc) have no correlation to the vlan tag. If you have four VLAN tags setup, you'll have vlan0..vlan3. On pfSense 2.0 the interfaces are renamed to reflect the proper tag and parent interface. For example if you have vlan tag 20 set on bge0, it gets named bge0_vlan20.

Maybe i'll travel around a globe someday, but not today. there is no way that personal budget can stand that kind of investment. Good that it was solved. Can you tag first post subject field with [solved] or similar

ok will try. thank you!

It seems that the latest fix was the real one

You are posting in the "English" section of the forum ( not spanish ) Which version of pfSense are using you ? Have you checked / readed the Docs ?  http://doc.pfsense.org/index.php/Main_Page Have you used the "search" option before post ? estas posteando en la seccion en ingles, utiliza ese idioma con que version de pfSense estas trabajando ? Consultaste la documentacion ? usaste el buscador antes de postear ? Saludos

All you did is ok. The rules are applied from top to down. So if there ist traffic with destination port 80 and 443 your rules for GW1 will be applied. All other traffic will use you GW2

update ! atleast to a stable 1.2.3 release , but i'd suggest you try the 2.0 latest rc3

You don't have to have nat on servers, but if you do it would be easier to access those servers in same subnet. create a virtual pfsense machine to see what it's capable of or try to read documentation. then you see that this product can do almost everything except brew coffee or shave my beard

with filtering bridge you should use 3 interfaces for management. filtering bridge is transparent in network means, so it has no ip-address to show to clients ok as usual using search helps a lot and ofcourse documentation wiki helps with how-to's and tutorials. you can block websites with transparent squid+squidguard