Hi, ref 1), advice on how would I do the correct routes? Thanks.

Tunnelblick works perfect with with config  exported via Inline Configurations: Others

Well i solved the problem. Rebuild the VPN using http://blog.stefcho.eu/building-site-to-site-connection-with-openvpn-on-pfsense-2-0-rc1-with-pki/ that Rebooted Both Firewall…. Than to redirect the internet throught the vpn just chect the related boxes and and create the nat routes...

Glad you go it sorted… and happy I could point out how simple it was ;)

Hi again, thanks for your comments. I have tried saving the server config again with no luck. I am not using subnet 192.168.80.X por any other purpose. I think the problem might have anything to do with the fact that the client gets assigned ip address 255.255.255.255 instead of 192.168.80.X (see the image). Any other suggestions?  

Found the problem, I'm also using "User Auth", and I had "auth-nocache", apparently after one hour I have to renter the user and password! I removed "auth-nocache" and the problem is solved. Is this a security hole? Allowing the cache of the user credentials? Thank you all Best Regards

@skaaptjop: Could you describe what you meant by "single OpenVPN configuration file"? Sure. All my users are using the exact same OpenVPN configuration file(s), but every user can login with his own Active Directory login. The files are OpenVPN Configuration file Security certificate Key file Each user has to import those three files in his […]OpenVPN/config/ directory to be able to connect to pfSense VPN. If they connect with this connection/settings, they will see a login prompt for username and password and there they can use their Active Directory login credentials. :) Well… At the end I just had to create one single OpenVPN configuration package and user and don't have to create always a OpenVPN configuration for each user. Also I don't have to delete all those users after they may have left the company or just don't need the access anymore. To manage the access to pfSense, I've created a security group in our Active Directory, which has members like me and other users, which should have access to pfSense VPN. If somebody shouldn't have access anymore, I just have to remove his membership of this group. Very easy. :)

yes, I did that. After I switched to automatic, all other rules got disabled. After that I checked that all network applications are still running as intended and it turned out they were obsolete anyway :-D

I also have added and removed multiple OpenVPN interfaces before and have not seen this before. Did hestitate to post this issue, because I did expect a question if I could reproduce. But currently do not want to try reproduce, because of the risk of internet connection going offline again. Maybe later, have to schedule. But I am also quite sure I did not accidentally changed the WAN interface to OpenVPN interfaces. The moment (described as: "Then I saw no new gateway was added, but the WAN_DHCP (default) gateway was now automatically linked to new created OpenVPN interface") I clearly remember me thinking: how is this possible, that a way to change OpenVPN in upgrade from 2.1.5 to 2.2.5, why does anybody wants this to be done like this, I do not understand the purpose. I can PM the config history of that day if you would like? (I did make a total diff dump from beginning to end. Maybe something missing from the start of the day, I am not sure. Maybe there is also a easy way to create a total dump for each individual change made during the day from begin to end?)

Thank you for all of the replies.  He said the quality was good after switching on the fastforwarding, which surprises me too, but he seems happy. The cpu doesn't seem to be an issue at all.  There is nobody around here that will sell me a faster upstream.  I hope Ting or someone like that will come here someday. This is for college sports, which they should sell internationally, but they don't, so he needs the US. Is this the type of vps you are talking about?  http://lowendbox.com  I thought about something like this before, but the ones I looked at were much more expensive. We started this way, because he was complaining about it and it dawned on me that it would be really easy to do with pfsense, so we could test it for free and go from there.

on a side note I douse tun, but the virtual driver in windows is called TAP anyway

To be honest I don't know why is set with such an algorithm  :o . I changed it to a more standard AES. I tried to change the network mask to 24 but nothin changed. For the firewall rules: How should be set? is not enough a "allow all" rule in both the openvpn tab? Thank you Update: now works, but the connection goes down every one hour or so and hangs on ping-reconnect. also I found a crash report logging into the server: http://pastebin.com/dHKJ9CKz Any advice about what to check? Thank you