Thanks Hoba, I will try to test.

Ok.
Let continue.
I presume you can ping the OPT1 interface from the SSH interface (option 7).
You should be able to ping other devices behind the OPT1 interface, also.
To be sure : give these devices a static IP (192.1968.2.x in your & my case) - check if they haven't any restrictive firewalls activated on them.
For instance, I use a couple of AP's (192.168.2.2,3,4,5,…), attachad to my OPT (Hotspot network) and they accept only (local administration) traffic comming from 192.168.2.1, my OPT1 IP.
I don't want my 'hotspot clients' to start administer my AP's  ;)

Btw: You're saying/using "OPT1 net" as an alias (see post below) - check it twice if your usage of aliases are correct. Use hardcoded adresses instead (192.168.2.0/24) to test.

Reinstall.

@hoba:

Did you already have a look at status>rrd graphs? It's included in core, no package needed for that.

I think I dont; If I remember I've seen the Traffic Graphics, that one that are updated live; I'll check this!

Another simple question; I'm using squid and would like to know how can I use word black list for urls??

Thanks again and I must say that every new feature discovered shows me that I make the right choice for the firewall… contratulations for the tool.

srs

You should shut down NAT to make the clients at LAN1 and LAN2 see each other by it's local IP (go to firewall>nat, outbound, enable advanced outbound nat and delete all custom mappings). Set the gateway at pfsense1 link1-1 to pfsense2 link1-2 (WAN). Same procedure for the OPT1 there (with according settings). You also should add some pass any rules to all interfaces. Then at pfSense create a gatewaypool consisting of link1-1, link2-2. Use this pool as gateway for the lan rule at pfSense1. Set this up vice versa at pfSense 2. Oh, and disable block local subnets at both wan interfaces.

I hope that makes some sense and I haven't forgotten anything. I would be interested if that actually works. Give some feedback  ;D

I got the settings…. but for 1 WAN....
Only WAN works and not OPT1 (with the same routing settings)

Can somebody give an example what i have to do to route incoming info to a OPT1 port?

Thank you.

I'm wandering if this can be done OK with pfsense too. Hoba suggests yes. I have a webserver that I need (temporarily at least) to be accessible from internet via either WAN connection. My first effort was with a commercial dual WAN router = no go (with the OPT connection up port forwarding on primary WAN stopped working!) Then I tried putting a 2nd nic in the server with 2 routers and that didn't work (I couldn't figure out how to get traffic to go out on the gateway matching incoming connection!) so I am hoping pfsense will work.

If I do this do this and create 2 X NAT portforwards for 80 > webserver one FROM OPT and one from WAN or just one rule with ANY and are there any other things I should watch out for? Thanks!

You must have arp/IP conflicts of some kind

I'm pretty sure not.

you have misconfigured something wrong

But I could easily imagine that to be so  ;)

As it is/was a state issue have a look at firewall optimizations at system>advanced. "Aggressive" might be worth a shot too (additional to the larger statelimit). It will help keeping the amount of states lower than with the default optimizations. You even can finetune this by using the advanced options that hide behind advanced buttons when you edit a firewallrule to set statelimits/timeouts per port, per source, destination…whatever.

Yes it work fine with this option activated.

Thanks !

regards,
ronan.

When using loadbalancing you won't see the pfSense in a traceroute. It's forwarded firectly to the upstream gateway of the interface. This is normal and no evidence that pfSense doesn't work. Can be as well be your upstream gateway on that interface or something else. Not sure what to  say besides make sure you are on the latest snaphsot and maybe restart the configuration from scratch. You must have something wrong. Even if that link is down and your monitoring is set up correctly it should work as this link then gets excluded automatically within 5 seconds.

Good to hear  :D

You got the idea  :D

Thank you for your reply.

What i mean with firewall rules don't working after loadbalancing, i mean:
I tryed to portforward like your example and that doesn't work.

Anyway i also tryed the loadbalancing but it isn't what i expected (like the traffic shaper doesn't work with more then 2 lan/wan's)

But maybe a stupid question can you made for me a (example) config file with the next features:

Dual Wan
IP 10.1.1.10
gateway 10.1.1.1

IP 192.168.1.4
gateway 192.168.1.1

Single lan

IP 10.10.0.1
DHCP

With firewall rules :

Incoming:
port 21 on gateway 10.1.1.10 goto lan ip 10.10.0.20
RDP client on gateway 192.168.1.1 goto lan ip 10.10.0.20

Outgoing:
port 80 from lan ip 10.10.0.20 works with gateway 10.1.1.10
Port 80 from lan ip 10.10.0.21 works with gateway 192.168.1.1

Why? becuase i tryed this but it doesn't work after using the loadbalacing settings.

Thank you!

its not so much a pppoa problem, as pppoe works as well.

Backup/Restore is the only way to do this atm. Backuparea "Interfaces" should be enough for this.

Make sure you monitor IPs actually respond to pings.

run "top" at diagnostics>command. Show us the output to see what process is using up the CPU.

Depending on your needs grab a 10/100 or 10/100/1000. Intel cards are supported pretty good by freebsd. If you don't have need for a multiportcard you should be able to get them for small money.