@bennyc: @gonzopancho: Hope springs eternal. Fell of my chair again laughing, 2nd time this week while reading here. (was reluctant to jump on topic, might cost me some karma :D) What are you drinking lately? (must get me some of that too ;)) right now?  coffee.

thanks

Indeed. The old book (linked above) is somewhat outdated but it's still covers a great deal. Some of the specifics will have changed but there is a huge amount of general networking/firewall info in that book. Anything that covers pf such as you referenced above will give you great insight into the underlying processes but won't be much help in using pfSense specifically. Steve

Google sites doesn't like IE?  ::) If you go to the site and just click the file it takes you to a 'download page' of some sort. I expect you were actually downloading the html for that instead. I'll add a note to the docs. Steve

Anyone have more information on this? I have the squid-dev package installed and would like try time quotas out. How do I do something like this with pfSense and Squid? https://www.youtube.com/watch?v=3HfwP2ld4yg

Fixed, thanks!

It's not 100% necessary in that specific case, but it is typically the standard to do so. I fixed the page.

If it will help, I can support with doing Arabic translation.

Fixed, thanks!

You are right - the base system does not have a proxy server/caching utility. You need to install a package, e.g. Squid. Of course, in modern times with lots of servers building custom pages for people on-the-fly and users browsing all over the place, there may be not that much stuff that is referred to multiple times. Thus not that much to effectively cache - depending on your users, caching mileage will vary.

I had issues with my Actiontec router several years ago and Verizon came out and connected it via ethernet from the ONT, so that was already taken care of.  When I set up pfSense on an old PC I put together out of spare parts, I still had one set top box that required the Actiontec for guide data.  I configured the pfSense setup so that the WAN from the ONT connected directly to the pfSense WAN NIC.  The LAN side connected to a 24-port Dell gigabit switch in unmanaged mode.  I just hung the Actiontec off one of the LAN ports with the wireless enabled.  I have a laptop with wireless that we keep in the family room upstairs, but everything else in the house is hardwired.  This setup appears to be working well and it keeps anyone with a wireless connection from getting into my server since the Actiontec is basically isolated from the rest of the network.  I'm about to set up pfSense on a Watchguard Firebox so I'll probably connect the Actiontec on its own network port on the Firebox and assign it a different IP address to keep it totally separate from everything else.

Enable proxy on lan and check transparent proxy. It will create forward rules. There is no need to create nat rules.

We've had that problem before with some of the images. As we go through and refine the text during the editing process we'll clean that up. It is still a draft, after all. :)