why dont you post up how much traffic there is, what services you plan to run and what hardware you have…

generally speaking the hardware is almost always overkill.

Thanks for the quick reply,
I tried that, unfortunately its not working for those websites.
Any tips\guides on how to use Squid\SquidGuard on pfSense?

Thanks!

Bingo! That's what I needed to do!

Testing is going much better now! :)

All my experience is with the Firebox LCD which is built into the appliance so not much use to you.
Probably best to ask in the lcdproc-dev thread. Although I note that the only reference to the LCD you have is in reply to a similar suggestion.  ::)

Steve

actually.

GREAT Big thanks!
Now i can go further  :D

Thanks again cmb,

Battle plan is to read through the material and play with it some.  No doubt can sort it out quick with some hands on.

Ed

So you want a correlation of external ip to internal ip traffic analysis?  ie: 204.123.123.13 <-> 192.168.10.100

-ntop can do that though Im not sure how good the package is in pfsense at this time. Should be able to do netflow metrics.
-bandwidthd also seems somewhat capable.
-pflow might be another option though it doesnt appear to be a support package on pfsense.

Hello,

I could get only the test messages but not the alerts. Can anyone help me in this regard.

regards
Venkat

Hi Again,

I think you should firts remove nics on your vm then add again them. After that do steps.

Regards,
SGTR

Hi,

I have configured pfsense 2.0.1 for email notification and could get the test email message but no events are received by emails. can anyone help me in this regard.
Venkat

On 2.0 and newer versions, the better drivers include details on errors in sysctl output. For instance if you have those errors on em0, run:  sysctl -a |grep em0

and you'll see specifics on what they are.

Are xxx and zzz both public subnets?

Steve

Put the system in a welded "catwalk cage" along side a ZoneMinder monitor with a simple usb cam capable of sms/emailing notifications. Epoxy ports in place and metal shield cables.  Weld/Glue/Lock the case shut. Wire in a high capacity cmos battery. Back the entire thing up with a 4000VA ups with attach notif usb inside the cage.

Or, just hire someone with a larger pay grade and hand them a remington 870 and box of ammo. Cheap and effective.

Thanks for the info. I figured as much regarding the interface running as root etc. Just bothered me to see the perms. Suppose I could always just clean them up myself manually/crond.

Captive portal has no concept of what AP a user is connecting to. As long as the device has the same MAC and IP address, its CP session is still there.

1-Yes you can, you just need to start ppoe server on lan interface, dhcp server can be enable when you install pfsense is askyng you dhcp enable for lan interface ?…and is asking for range, or you can enable it from web gui in SERVICES you have also ppoe server and dhcp.

2-You need to make new rule in firewall, after starting ppoe server wich will appear in rules ex WAN LAN AND PPOE server , click on ppoe server and you should select as gateway ->wan interface for internet acess(for ppoe clients).

For me it worked !

Just to chime in here. I agree that double NAT is best avoided but it only gives trouble in rare circumstances. I have run double NAT for months with no problems at all.
This is not a double NAT problem.

You don't seem to have fully explored the packet capture that showed that pfSense was not NATing traffic. Simply switching from auto to manual should not stop NAT working. You would have to deliberately remove the NAT rules.
Switch it back to auto, I would reboot the box at this point, then rerun your packet captures to demonstrate that NAT is working.

Also unexplained is the fact that you somehow ended up without a default route?  :-\

Going right back to the beginning; is it a specific set of configuration changes that cause pfSense to stop forwarding traffic or simply making too many changes of any sort?

Steve