Yes, this is very possible. At current, I have it enabled on my box. One wan (plugged into the motherboard) and two lans (using a dual port NIC) What I did was: 1.) Go to "Interfaces / OPT1" 2.) Set IPv4 config type as "Static IPv4" Leave everything else alone in that section 3.) Scroll down a little and give opt1 a static IP. Something like 192.168.2.1 4.) Leave both of the boxes in "Reserved networks" unchecked 5.) Click save 6.) Go to "Services / DHCP Server / 7.) Click "OPT1" 8.) Check "Enable" under "General Options" 9.) Change the range to "(From) 192.168.2.2" "(To) 192.168.2.254" Now, plug in your OPT1 to your pc or something, and you're good to go. (at least you should be) [EDIT] (also, make sure you have the "allow all traffic" rule enabled in OPT1. You can customize it to your liking, but this is just to be sure that it works.)

@KOM: You have to type 124 on the keypad, believe it or not, instead of using the numbers above your letters. Thanks but I know that and that does not work either. There seems to be a problem with ESXI since I am using the webinterface for ESXI and when trying to make a pipe on the computer I am using to connect to the webinterface it works, both the symbol (in my case ALT GR + the key to the right of my left "Shift" button) and the alt-code ALT+124 on the numpad. :( Edit: Solved this by enabling "Secure Shell" (option 14) and then used my SSH client to run the command and then all the characters worked (or at least copy-paste).

I just send xinetd logging to ntp.log (tried to send it to his own log just in case, but couldn't). It's probably not a permanent solution, i guess syslog.conf file will be rewritten on reboot. Just change this two lines on /etc/syslog.conf and restart the syslogd service !ntp,ntpd,ntpdate,xinetd … !-xinetd,ntp,ntpd,ntpdate,charon,ipsec_starter,openvpn,….

There is also an option under System > General Setup to make that panel open by default, if you prefer.

Thanks for your help guys.

On which pages specifically? And did it work in 2.2.x? The entire UI was rewritten between 2.2 and 2.3, some pages may have just been missed when sorting was added back in. Others may not sort for a reason. Usually configuration pages won't sort because the order is meaningful, but status pages will sort.

I can also suggest to never use the admin account as VPN authentication. Sounds a bit paranoid, but why not.

Lightsquid generates reports based on squid's access.log. It's a package.  Install it.

Thank you very much. It showed that the mongod was hanging. It’s part of the UniFi controller running on my pfSense as well. Until now there was no problem with that. Now ipsec is running but no IPv6 traffic. Any further advice?

You're using limiters, not actual interface shaping. I have no experience with limiters, but a common issue is the IP mask used. You may be creating a limiter PER CONNECTION. If you want to shape the entire interface, use shaping, not limiters.

I haven't seen that one before, but it would appear at a glance to be crashing in handling of SCTP on IPv6. Are you actually using anything like that or allowing it through the firewall?

Controlling outgoing traffic with just firewall rules is really hard because of the multitude of TCP/UDP ports used for different applications and many of them are not officially allocated. The worst are filesharing applications such as BitTorrent that can use almost any port imaginable. You're much better off using a proxy with whitelist/blacklist techniques if you want to control outbound.

Thank you for your help.