@hda: System: Package Manager ("Service Watchdog") Thx very much !! found it and its working fine  :)

I could have - probably the package was installed but maybe not enabled. Still, that is such a bad package if it does something like that.  :o

Very good setup.  ;D I guess I want to get bridging correct before I completely  leave DDWRT. I guess also I would like to learn how to bridge correctly on pfSense then tag them for testing purposes too. Ill keep you posted if I figure something out this week. Thanks

Different subnets don't matter.  If you have different subnets defined on a single interface then expect traffic from a host on one subnet to reach a host on the other subnet, you're going to be dealing with "out the same interface it came in on." Interfaces are what's listed in Interfaces in the pull-down menu.  They can be physical, virtual (VLAN), PPPoE, Wi-Fi, etc.

That looks like a problem with the Broadcom (bge) card or driver in that system. Is that an on-board or add-on NIC? What, if any, changes have you put in place in /boot/loader.conf.local ?

Ah I see what you mean now, then everything seems fine except the interrupts being a bit higher than you think they should be. Thanks I will see if I can get them a bit lower.

@Derelict: Running what throughput?  Looks like total overkill to me. If you're getting the quad NIC so you have ports to plug everything in, get a switch instead. Yes I have everything . Throughput of my wan is only 50mbits V

Snort/Suricata is anything but quiet and absolutely NOT something that "every user" would run. These IDS/IPS things are noisy, intrusive, paranoid, plagued with false positives and require weeks of careful tuning and babysitting. Absolutely NOT something an average Joe out there would do. Regarding Squid, I already pointed you to the proper forum concerning the Squid experience. Also asked about the use case for proxy there, no answer.

I disabled the rules I created in the Firewell>Rules>LAN and the I am now able to access HTTP websites.

OK I was just checking that you had specified the prefix.

Issue was caused by on board LAN. Once I disabled it in the BIOS, I can add as many PCI NICs of any speed and still get 150Mbps down though the proxy.  Thanks for your help!

so you got a /30 for your WAN and a /29 routed to WAN-address ?

Thanks for the reply. Since stopping the service I've not had a reoccurence of the CPU problem. I will see about upgrading shortly, though I have to be careful as this is a production system. I guess I'll have to just see whether the upgrade solves the issue eventually.

I'm prepared to offer a bounty to anybody who makes this happen. Bounty thread started for those who would like to contribute RFC 4638 (PPPoE 1508 MTU) - let's pitch in

I think I already got where the issue is coming from. I have three Gateways saved in System>Routing>Gateways, where two of which is running. I deleted the first two, and now I can ping and view websites from my computers. I just don't know why would this cause the issue.