nice one  ;D

|      PPoE pfSense DHCP  Snort        | –----------------------------------       LAN        OPT1        OPT2         |            |            |         |          VOIP          |     switch                    switch        |    |                    |      |   PCs WiFi              WWW  DNS 1. pfSense's DHCP server uses clients MACs for assigning IPs (usefull for wake up on lan also) 2. All servers and clients are using OPT2 DNS (bind9's views) 3. Snort uses different rules for each interface. Just been following the logic to join services with similar security risks on the same interface. Possibilities are unlimited ... but common sense will give you the right setup.

This sounds like a timeout of the DNS query. I would configure the DNS on the pfSense fix to 208.67.222.222 and 208.67.220.220 and uncheck the "allow DNS to be overwritten by DHCP on the WAN". Then set your clients all to use pfSense as DNS server.

Thank Perry for the answer. If I add a line to the OLSR PHP file, it will chang de config.xml file for something like this. <olsrd><config><enable>on</enable> <enablelqe>2</enablelqe> <iface_array>lan,wan</iface_array> <enablehttpinfo>on</enablehttpinfo> <port>8117</port> <allowedhttpinfohost><allowedhttpinfosubnet><enabledyngw><enableannounce><announcedynamicroute>10.5.200.232/29</announcedynamicroute> <ping><polling><enabledsecure><securekey><linkqualitymult>192.168.10.7 0.10</linkqualitymult></securekey></enabledsecure></polling></ping></enableannounce></enabledyngw></allowedhttpinfosubnet></allowedhttpinfohost></config></olsrd> but when PF will creat is oslr.conf file from this file, it will not know what to do with the <linkqualitymult>option and it will probabely result in a error. I would also need to add somewhere that the option <linkqualitymult>mean that it have to write LinkQualMult = "text box" and also cheak if the text box have a valid IP adresse and multiplicator. Somebody know how I can add this or show me a howto of how script are built from config.xml ?</linkqualitymult></linkqualitymult>

This is, admittedly, an easier approach but its not without its downsides.  Bridge filtering isn't supported by CARP so if you need to do a CARP firewall cluster because you have an HA requirement for your network, then bridging isn't going to work.  Its really about your needs, pick the solution that fits yours best.

pfSense 1.2.3 is based on FreeBSD 7.2 which provides the operating system including device drivers. See http://www.freebsd.org/releases/7.2R/hardware.html for list of supported devices including wireless chipsets. The corresponding information for pfSense 2.0 BETA (based on FreeBSD 8.0) is at http://www.freebsd.org/releases/8.0R/hardware.html

also resetting my router during my pfense installation may have activated this feature from my isp as well

Yes, other settings that particular brand and model might have.

If you keep all incoming ports closed, nothing can get in that way regardless. If something (virus, etc) gets in, it's because a PC on your LAN downloaded it or let it in, which is a completely different problem.

This minimum length still is true if you have a hub somewhere. The collision detection cannot work if the cable is too short. I think the exact value for the length is somewhere in the CSMA/CD standard. Wiki has a short notice to this too: http://en.wikipedia.org/wiki/Ethernet_physical_layer#Ethernet_minimum_cable_lengths But with current equipment you will have to look very hard to find a situation where a colission is possible. As long as you dont use hubs (or rings even) you wont have problems with the minimum cable length.

My laptops have a key combo that shuts off the screen (or at least the backlight) You might also be able to grab blank_saver.ko from a FreeBSD 7.2 box or VM and add blank_saver_load="YES" to /boot/loader.conf I think green_saver.ko will turn the monitor off via DPMS if it's supported. There are a few other _saver modules too, some more useful than others (I like daemon_saver and rain_saver myself!) One of these days I should make a package for them

No, there is no way to limit that to your phone, not unless your cell provider would give you a static IP, which is unlikely. Most VPNs are left open to the world because they have increased authentication requirements (lengthy PSKs, PKI authentication, etc) and can't be brute forced by traditional means. PPTP and SSL VPNs are an exception to that rule, but that's all part of the classic security-vs-convenience tradeoff.

http://blog.pfsense.org/?p=560

what type of bandwidth cap? as asked one could say yes or no. do you mean limit the max bandwidth that one can utilize? or like what some isp do, lock the user out after a certain bandwidth is reached?

What a relief!  My network has computers, where upnp is not desired, and gaming consoles, where upnp is desired.  This will allow me to set my consoles to a static internal ip and only enable upnp on them.  It's the best of both worlds.  Thanks for your help.

Thanks! I also found some really good videos on YouTube.