Sponsor it!

Packeteer is simply a traffic shaper.  It's a good traffic shaper, but its just a traffic shaper.  pfSense is a full-featured firewall which incorporates a traffic shaper.  It's not the best traffic shaper in the world, but its very effective for many tasks.  Also, its free, which packeteer definitely isn't.

Sorry, i didn want to fight anyone … sorry if looks like i want :( i was thinking about this, and as i said will block port 25, only i need some transition period. thanks for advices ;)

I do not know why it seems to have a tunnel to itself. I do not see that in the setup.  I did finally get traffic to the 10.25.22.0 subnet and now the phone traffic is traveling thru the IPSec tunnel to the 10.25.18.0 subnet to the pbx server. I had to reboot both systems and something kicked in and now I can access the phones webgui and the phones registered with the server.

What does the systemlog say when you try to connect?

Thanks. It seems problem with my CentOS server, because when I tried to setup a Windows workstation with the IP address I stated on the OPT1 and connect it to the switch coonnected to the OPT1 interface it works. But when I tried connecting my CentOS it does not work. But at least I know that pfsense is working and my configuration is good. Now I have to deal with my CentOS server. It's kind of puzzle because when I tried to connect my CentOS server directly to my ISP switch it works, but if I connect it to the switch connected to the OPT1 interface it does not work.  ???

He means using a cellular data broadband card (like G3 or GSM) as a WAN connection. This was kicked around a while ago and there was a bounty open. The parts are slowly coming together, but I haven't heard details of a successful setup yet. It could be very handy for a backup connection when options are limited or for temporary setups (eg- construction site).

So how was your experience?

This is extremely common on modern networks as a result of Path MTU Discovery. Most TCP packets on modern networks will have the DF bit set. For example run a tcpdump -v on your network and you'll find that pretty much every TCP packet has the DF bit set. The problem is almost certainly something else.

My suggestion would be to create an opt1 interface on the pfsense box.  Call it 10.10.0.1, make your access point 10.10.0.2 or something like that.  In my experience, this setup will work with Squid transparent proxy bound to both the LAN and OPT1 interfaces.  Also, traffic between them should pass unless you block it with a rule.  If you need them bridged, that should work too.

How about this old age saying…. If it ain't broke don't fix it.

I´ve changed the kern.ipc.nmbclusters from "0" to "32768" and works fine. thanks at all, Paulo Coimbra

I have the same problem with pfsense and Comcast. I have to reboot my modem, usually works. If not sometimes reassigning the WLAN/LANS works. Best of luck.