I forgot about that thread. Yes all info looks correct. It would need flashing to DirectIP for pfsense. That still don't guarantee it will be supported by the freebsd u3g0 driver. Worth a try as DIP will work in most OS.

Thank you very much: after saving twice in a row the rc.d scripts appeared! :) I just started to collect flows again thanks to the softflowd package. Sincerely gratefully.

Yeah, no problem. To answer your question: No, I did not. The Mac Mini was the client's machine.

I think you may be right Stephen. I will try out the localhost tomorrow. Yes it makes more sense not to have it on the LAN. I have no excuse other than it being the weekend and limited unpaid time working on a test machine. I will get there in the end. ;) When I get to a happy conclusion I will amend my previous posts.

@fearnothing: @Nullity: I have LAN and WAN set to deny everything but the traffic I specify. It sounds tedious, but it was much easier than expected. The security and privacy (misconfigured apps are less likely to leak info) improvements are worth the trouble, imo. You also get to see just how spammy some of the stuff on your network really is, if you have logging turned on. My printer seems to think the network is icecream which is badly in need of its UPnP chocolate sprinkles. lol. Yeah, some iOS devices were leaking some reasonably private information in plain-text. I have a love-hate relationship with UPnP, but I think most of us do. That reminds me… I really need to setup a remote syslog service to send all my logs to.

Known issue reported many times, move one, nothing happening here any time soon… If you need monitoring, set it up elsewhere.

Ah that makes sense.  Was running 2.1.5 on this unit until recently and never noticed the messages before. That explains it, thanks guys

I have a Dell i7-920 that if you leave it powered down for more than a  few tens of seconds and you boot it back up, it will get memory errors. Maybe 5-10 minutes before Windows blue screens. Memtest will show problems all over the board. Power it down, wait 5 seconds, power it back up, 3 days of memtest, no errors, months of up-time in Windows, no issues. Stable. This is the strangest problem that I have ran into over my years. Typically something giving these kinds of problems is in its death throes, but instead it has been working well for 6+ years. I finally recently replaced it. The motherboard and CPU are now wrapped in aluminum foil in storage.

Ok, thanks. Tuned a little bit differently kern.ipc.nmbclusters="131072" kern.ipc.nmbjumbo9="20000"

What are your l2tp IP settings like? as far as server ip and remote address range

Really? What ISPs block pfSense? What is your evidence for this? How would they know? Steve

Most proxy settings have an option to bypass for local addresses.  Would this not solve the problem?  Since you're looking at HTTPS anyway, you might want to either check out WPAD configuration or pushing proxy settings down via AD GPO.

I guess we really should have mentioned that this is a not a network that will route ALL traffic via a single pfSense, that would be insane :-) pfSense would be deployed within local segments of the network where Internet connectivity would also be deployed. OpenVPN would be used to connect key locations together over the network.

Oh, thank you, it works!

Thank you all for your reply. When doing the speedtest there is not much in system activity. It's barely taxing the system. I just received a switch I ordered recently (Mikrotik RB250GS) and configured it for my network. I happen to do another speedtest while connected to this switch and voila I am getting what I am supposed to be getting. So I am inclined to think that I may have a cisco switch issue.

haproxy can do a little basic authentication.. but dont expect to much of it.. you will have to put lines like below into the advanced config sections. it might be enough for you purpose.?. let us know how it worked out. http://serverfault.com/a/242936 userlist UsersFor_AcmeCorp   user joebloggs insecure-password letmein backend HttpServers   .. normal backend stuff goes here as usual ..   acl AuthOkay_AcmeCorp http_auth(UsersFor_AcmeCorp)   http-request auth realm AcmeCorp if !AuthOkay_AcmeCorp

Hello Thanks to all of you. I will think about what soulution I go for. Thanks

thanks sir you rock…..  :-)