Problem solved…..it was as Einstein predicted that only 2 things are infinite universe and human stupidity, and he wasn't sure about universe. Anyway solution. 1. In Interfaces>Assign->Wireless as i suspected add ur wireless clone as BSS under some name. 2. Then in Interfaces> choose for wan that particular clone of wireless card 3. Next step in Interfaces>WAN way down properly configure parameters of ur home wireless network, BSS, encription, channel key etc. 4. In System-> General setup just switch on 1st dns server from none to WAN apply each step, and everything work as charm. Cheers

Awesome thank you!

i figured it out guys thanks anyhow

You could use also Cisco Systems wireless mesh devices, those are expensive. But the problem really is that like dhatz sayed consumer devices radios isn't capable doing such big amount of users.

@jimp: @xbipin: so would it mean an alix upgrade would also be needed in the future to use a wireless n card? is there any 8 port switch + ap available, something like a 8 port wifi router so i can replace my switch with that instead of using alix, switch and ap and powering all 3 differently Well ALIX can support N rate cards technically, but its CPU will never be able to push more than about 85Mbit/s, probably less on wireless with all of the overhead there. I'm not sure what's out there with 8-port switches. I love my Asus RT-N16 with Tomato on it, but I've also heard some good things about Buffalo gear. The RT-N16 has a 4 port gigabit switch on the back, and with Tomato or DD-WRT you can bridge the 5th "wan" port to the switch as well. It's not dual band though so it can only operate in the 2.4GHz range. how is the performance of the 4 port switch? can it be compared to using a normal 4 or 8 port switch?

Nevermind, made it work. To be able to pass all traffic, it seems you have to enable ICS on windows host… it works, but it doesn't make sense.

How are you presenting the adapter to pfSense?  Sounds like you are just adding a NIC to your VM and mapping it to the same vSwitch as the USB adapter on the host.  If that is the case, that's exactly what should happen.  If you want to be able to configure the wireless NIC then you need to pass it directly through to the VM. If you are using vSphere, check the document below. http://pubs.vmware.com/vsphere-4-esx-vcenter/index.jsp?topic=/com.vmware.vsphere.vmadmin.doc_41/vsp_vm_guide/configuring_virtual_machines/t_add_a_passthrough_usb_device_to_vm.html

Yup, it won't work. ath0: <atheros 5416="">mem 0xfbbe0000-0xfbbeffff irq 19 at device 1.0 on pci4 Same chip that's in my Dlink card. Once we get a 9.0 kernel the card should work much better.</atheros>

Can you elaborate on "no luck":  From the link I suspect when you tried to kldload  if_ath kldload reported "Module already loaded" Correct? Initially I suspected that loading a kernel module for a device driver that was already present in the kernel was unlikely to succeed but other forum reader have reported they have successfully done so. I thought it worth a try.

@dotdash: FreeBSD supports MAC filtering on wireless interfaces. See the ifconfig manpage: The following parameters support an optional access control list feature     available with some adapters when operating in ap mode; see wlan_acl(4).     This facility allows an access point to accept/deny association requests     based on the MAC address of the station.  Note that this feature does not     significantly enhance security as MAC address spoofing is easy to do. Due to the fact that most agree on the last sentence quoted above, there has been little interest in putting the feature in the GUI. If you would like the feature implemented, you could try a bounty. Thanks for you answer. I will to eat  my  bounty by myself  and do not hesitate to correct me if i am wrong in my solution bellow :) 1/ editing the /etc/inc/inferfaces.inc and replace the #accept_mac_file line by : accept_mac_file=/conf/hostapd.mac.accept 2/ create a file in /conf/hostapd.mac.accept  with all your MAC address (one MAC address per line) 3/ disable and then enable your WIFI Interface 4/Enjoy ! ;)

This radius product allows self registration…...And inexpensive.  I provide it as a hosted radius service for companies with multiple locations that want a single point for auth control. http://www.dmasoftlab.com/cont/home

@BeerCan: Well I can't really explain it but this just simply started working.  After running for some time my client suddenly obtained an ip address and started working. I hate those "spontaneously started working" circumstances. They leave me with a suspicion that they will just spontaneously stop working at some time. @BeerCan: Wish I knew what I did. It might not be something you did. Just for the record, have any of the parameters displayed by ifconfig run0_wlan0 changed? @BeerCan: thanks for your help wallabybob You are welcome. Thanks for reporting back.

So far I have had the best luck with cards based on the ar9280 chip.  I have 1 card with a ar9285 chip that is giving me intermittent troubles (in ap mode) and could be a defective card. Now if I could only find a usb dongle that works :(

yep, that's what I did. but my question was about that icmp packet being new as I never got this with previous version (and same rules)

Sorry if unclear…. Capture user e-mail & or library card from Captive_portal page Then use db information // logs. As pfSense does have logs in the GUI, it appears that all the information I'd like in a back-file are present already.

You might be better served by using a directional aerial and pointing it towards your neighbour's WiFi router. "Standard" devices use an omnidirectional aerial. These radiate the wireless signal evenly in all directions.  If you use a directional aerial it increases the effective radiated power in one direction and reduces it in most other directions. This reduces the likelihood your WiFi will interfere with other neighbours. There is a number of cheap WiFi cards with detachable aerials capable of acting as APs. The detachable aerial could be replaced by an external directional aerial such as a panel aerial. You may not even need to boost the signal. If you can get 1Mbps data rate over the WiFi link and your max download speed from the Internet is 1Mbps then boosting the data rate of the WiFi link is not going to increase your neighbours download speeds.

No answer? I forgot: "2.0-RELEASE (amd64) built on Tue Sep 13 17:33:40 EDT 2011"

If you bridge the interface then you need to allow DHCP traffic. Create an allow-rule on the WLAN-interface above all other rules with: Protocol: UDP, Source: 0.0.0.0, source-port:68, destination: 255.255.255.255, destination-port:67