My dns server was my primary DC and it still is.
Sorry to say.. i have installed isa 2006 configured it. and now all my problems are gone.
Thanks for all your help anyway!

Port 21 on LAN interface is not the same as port 21 on WAN interface.

It is open on LAN interface because of the ftp-helper, if you really want to close the port you can turn off the helper at:
Interfaces->LAN->"Disable the userland FTP-Proxy application",
but doing so will break outbound ftp unless you configure firewall rules yourself for outbound ftp.

Thanks for your advice! I am going to do that SNMP things.

As jahonix said: try not to use the MAC as something to bill/identify your customers.
ANYONE can sniff on your network, fake their MAC and have pretty fast full access.

IMO you're better off if you assign each office a subnet and restrict by IP/subnet.
To control access you could use the Captive Portal and/or a FreeRADIUS server.
You allow per customer only his own subnet/IP's. If he uses other IP's of other customers he's simply blocked.

To counter NAT-able devices this thread might help you:
http://forum.pfsense.org/index.php/topic,10392.0.html

@BRuTAL_HiTMAN_:

maybe this question was answered before, if it was i was unable to find it altho i wasn't 100% sure of what to look for, but ok here it goes:

i have a computer connected wirelessly, and it has shared folders, it's a windows machine, and when it'd plugged into my wired LAN,192.168.1.xxx i can view the shared files by going start->run \LANIP, but when it's connected to the wireless subnet, 192.168.2.xxx, i can't find it, and when i try remote connecting it using ultraVNC it can't find it either, but i can use remote desktop connection, i don't get why one remote tool works, and another doesn't on different subnets, any help is appreciated thanks!

Hi,

Yes, under Windows, at least XP this moment, you can not browse another Windows box residing on different subnet through it's default sharing. That sharing can only be done for the machines in the same subnet and with same workgroup name. Unless you are running samba or active directory something like that. (Please correct me if there is easier tool may help!)

For the ultraVNC problem, you should better check with your firewall setting first to make sure your firewall is not blocking UltraVNC.

Hope this can help.
Aldo

You are kidding, aren't you?
Top menu, right hand side of 'Status'…

BTW, which theme are you using?

@ermal:

Sponsor it. It can be added but its not on priority list.

That's a great idea.  I'll definitely put a bounty on it when I'm ready to go.

Not that it's a definitive answer, but typically Signal 11 crashes are faulty hardware - usually RAM.

See: http://www.freebsd.org/doc/en/books/faq/troubleshoot.html#SIGNAL11

Not saying it couldn't be a software issue, it easily could, but without others seeing similar issues I'd be more inclined to distrust the hardware.

Np at all  :)

@submicron:

Use a remote shell?  Given your self-proclaimed extensive experience in all things networking, one would assume that you can come up with an appropriate set of test scenarios to troubleshoot this problem.

Never said I couldn't… l33t

The graphs are generated on demand. My suggestion would be to setup something that fetches the webpages or just the graph urls.

The status_rrd_graph_img.php will return the rrd graphs. You'll have to look at the status_rrd_graph.php for which arguments you need.

blak111 - :-[  I am so sorry - I did not understand that the first time you said it!  Thank you!  Apologies for being dense ;D

Thanks everyone, for your answers and your patience!

Setup a DHCP range for OPT1 and plug one of the switch ports(not the WAN) on the router into OPT1. Also make sure you disable DHCP on the wireless router. It wont be doing any routing or NAT, just acting as a wireless access point. Setup some firewall rules for OPT1 that allow traffic out to the Internet. Then go to captive portal and enable it for the OPT1 interface. Click Enable and then select the OPT1 interface. Select the option for local user manager. Go to the Users tab at the top and add a new user.

Once someone connects to the wireless and gets a DHCP address from pfSense they will be prompted with the captive portal page when they attempt to access a web site. They can use the username and password setup on that users page.

All you should have to do is create the appropriate Virtual IPs so you can NAT the addresses, and it should work OK. Is that not working?

You can start here: http://www.paessler.com/

it works fine with the snmp of pfsense, you can download and test it for free.

doesn't work for some reason… tried it.