You need to use manual outbound NAT also. Create 2 LAN (or VLAN) segments. After that, got yo manual outbound NAT and select WAN1 for outbound on LAN segment 1 Then select WAN2 for outbound on LAN segment 2. Then you are done. Don't over complicate the plumbing.

I understand completely.  Considering how my comprehension skills have seemingly declined over the past month, you're lucky you got a correct answer from me.

i have the same issue, does anyone know how to address this: My setup is this: 1. I am running the PFSense as the main firewall. 2. PFsense is in transparent proxy. 3. I have several AP which is under  VLAN ** all routes to LAN which has a cisco router is also indicated in the routing table of PFSense ** MSRDP works fine when I use on LAN ** MSRDP works fine also when I use my Cisco Router as GW. ** It does not work in VLAN , I can connect succesfully but after logging in it disconnect and reconnect and I cannot move anything on the remove.

This is awesome, thanks! Did you get this running on v2.2? I can't seem to get the patch working there, and also can't seem to log outgoing traffic … :(. Thanks again.

On 2.2 there is a knob in the GUI to change the file size for logs. I don't know if it could work being that large or not. I wouldn't expect it to. If you manually resize it on 2.1.x then it would probably get reset any time the file was recreated (clearing the log file, etc)

Ran the command $ ps -ax |grep snort 22022  ??  S      0:00.04 sh -c ps -ax |grep snort 2>&1 22305  ??  S      0:00.02 grep snort 82654  ??  Ss    0:27.14 /usr/pbi/snort-amd64/bin/snort -R 3755 -D -q -l /var/ @bmeeks: Maybe you have already, but did you reboot the firewall itself again? To rule out a problem with Snort itself, you can either try starting it from the icons on the SNORT INTERFACES tab or you can open a console session and execute the start script directly like this: /usr/local/etc/rc.d/snort.sh start It should sit there a few seconds and then drop back to the command line prompt.  Snort should then be running.  You can check with this command also from the console: ps -ax |grep snort Bill

Thank you for your responses. I think I will avoid the widescreen patch as my Wife works from home. I realize that I have lost the flexibility of fooling around with my firewall as I did when I first installed Smoothwall years ago and we were not so dependant on our internet connection.

If we had true Layer7 in PFsense then you could block them on the word "facebook" alone….

You also mentioned LACP. I'm assuming that it's not configured in a way that it spans both switches, correct?

Quick - backup your config!!!! haha

the issue fixed it self… i dont know how

I agree that ESF would be far more knowledgeable and detailed however, I need tutorials over the phone with some basic and moderate techniques of configuration. I think it will take about an hour, and won't cost $400. At some point I may be willing to spend that money but right now I need to try this way and see how far I get