ICMP doesn't have ports, but it does have an ID. That's what that is.

That site doesn't appear to be tailored to PFSense. Is there a guide on how to do this with PFSense?

Using the internal CA and generating a self-signed cert in the OpenVPN wizard, I have successfully been able to connect. If someone could point me to a tutorial on creating a 3rd party CA and cert, I would be very thankful.

@Derelict: Yes.  I would create a VLAN for the green network.  Call it VLAN 20. Thanks much for the VERY helpful post. I haven't had too much time to work on this yet, but I have made some initial progress. I've actually decided to go with 3 new VLANs: VLAN 10: RED - No restrictions VLAN 20: YELLOW - Trusted family devices   – Access to RED net for printers, etc. (I implemented account controls for the NAS to allow backups)   -- Web filtering, with pass rules for Steam and Battle.net (so far) VLAN 30: GREEN - Untrusted guest devices   -- No access to RED or YELLOW nets   -- Web filtering, HTTP, IMAP, SMTP ports only (80, 443, 465, 993) Haven't had time to implement the WLANs yet (right now both APs are on RED, using the same 2.4g SSID, and in addition the NT-R66U is using a unique 5g SSID). Mostly using the two APs to extend range. I may use dansguardian filtering on YELLOW and RED instead of OpenDNS--it would be helpful to have all the nets use the DNS forwarder and cache. But I do have OpenDNS working on YELLOW by defining the two DNS IP addresses on the interface page and rejecting port 53 on the firewall page. Thanks again!

I am sorry for delay but i am away for few weeks and cant work on my project. When come back will continue with digging in the debths of firewalling. Thanks for understanding

Thanks for pointing me in the right direction I can recommend the HAproxy package or the Squid Reverse as they are both capable of doing this. I've installed the Squid3 package which includes a Redirects Tab.

same issue here pfsense 2.1.5 fesh install. after many tests/reinstalls I isolated the issue to igmp proxy. as soon I enable this the shell does not work any more most commands fails thinks like ls cp… etc to have the system back 1 boot on single user mode. 2 mount a fat32 usb mount -t msdosfs /dev/da0s1 /mnt 3 copy /conf/config.xml /mnt/config.xml 4 edit the file on the usb. (This is because I can't get the vi to work in single user mode. remove the section  5 copy the file back to the system. repeat step 2 and reverse 3 Reboot the system and it should be back alive without igmp proxy. sorry there might me mistatakes since I'm new to pfsense and freebsd just a couple of weeks working with this. please does any one know how to fix this igmpproxy issue. I could deal with all the other issues I have but without igmp proxy there is no iptv and I can't live with that. Regards.

Why do people complain before rebooting?  Its trouble shooting 101.

@stephenw10: Do you see any errors on the Status: Interfaces: page? If you run 'top -aSH' at the command line what does it show? Steve None, i have been looking at various possible errors on the interfaces, but nothing.

You might want to take a look at the 2.2-BETA snapshots.  The 2.1.x code based on FreeBSD 8.3 is quite old and a lot of things have been update din the newer snapshots.  Release candidate is coming soon with a final release early in the new year from what I've read recently. http://snapshots.pfsense.org/

thanks Steve makes a lot more sense now its working as I was beginning to think it was my ability of understanding and following instruction but now I have a much better understanding and proving to be a rather powerful tool three cheers for the community!

Check the ppp log, is it trying to connect? Any errors shown? Is the parent interface showing a connection? Which NIC is it? Steve

Got that. But after warmstart the same error is still present. And I also see more interfaces as cuaU0.0 (which should be the modem?!) [image: fiKBbPd.jpg] EDIT: OK, I was to fast. It works now, thank you! :)

Install bandwidthd, goto Services->Bandwidth and enable it on LAN. Wait a few minutes, click the Access Bandwidthd tab and the graphs should be there.

They are close to an RC build, so while they say you shouldn't use it for production purposes, it's getting very close to release.  Lots of stuff has been fixed, lots of new goodies added.  If you're new, I might recommend that you start off with the new base instead of using the much-older FreeBSD 8.3-based pfSense.

What are you trying to accomplish?  Pfsense would be meant to replace your soho router, yes it can be run in vm.  I run mine on a esxi host and works great for my whole network. You could then leverage your current wifi router as just an AP for your network.

5353 is mdns..  You sure that is chromecast??  I would think that is most likely some other apple type device on your wifi network.