NP - glad you got it sorted.  I would suggest you move to current 2.3 vesion.  2.1 is not really a supported version. You might want to look into maybe doing something with what I would guess is bufferbloat since looks like when your downloading something your pings are going through the roof..  A somewhat simple help for that is just turning on codel

ok guys I made ​​the change to the file , but the problem has not been solved  :( OK guys I have just restarted pfsense and now all works fine. thanks for all  ;D

Richard, it may helps you and others if you draw a small network schematic that can be watched by all other users.

Can please tell us what kind of storage connectors are on your mainboard or inside of your hardware? Something likes, SDCard slot, CFCard slot, IDE interface, SATA interface, SCSI interface, USB ports or perhaps something likes a miniPCIe slot for mSATA drives. Elsewhere in the forum some users where reporting a work around to get it working together with a 1 GB CFCard, but I don´t find it back now. Please do a search about it, it was during the last two month.

I would configure it in your situation likes that; WiFi as an WLAN AP (AP mode) create a separate VLAN for each SSID give all VLANs his each IP subnet or IP range create now rules for drop the playing around with your box activate the WiFI client isolation then on top for the guests VLAN

Tried the above an to no avail. I think I am going to have a change around. I have a gateway doing nothing so I'll swap out the modem/router and out that in, then from there directly into the x500. This should save all the issues I'm having. Trial and error I guess.

You have misunderstood how ARP works. It is used only when there is actual traffic on the network. There is no reason to keep an ARP entry dangling if there hasn't been traffic for a while, ethernet is not based on active connections but broadcasts. Because of the broadcast nature of it it's also stateless and it's not possible to (easily) keep track of active or inactive devices on a network.

And, for quick and dirty log searches, you can exclude multiple patterns with filters like this: !pattern1|pattern2 This works in any field such as !80|443 in destination port. And there's always clog /var/log/filter.log | grep any_regex_you_want There's a link to PCRE docs on the log filter page if you're feeling randy.

Search for "router on a stick". Basic idea is to use a VLAN capable switch and use VLANs as WAN and LAN (or even more as OPT) interfaces.

Well I waited all night because I didn't want to fiddle with an cron reboot edit via ssh and was getting late. Not something I do regularly. So had to reboot the router during AM business hours.  Had no choice.  Now I know a non-disruptive solution and what "not" to do to begin with. Thanks again…

Having nothing in the DHCP log suggests nothing is making it to the DHCP server. The packet capture shows it's making it to that box at least. Check Diag>States, filter for 255.255.255.255, and make sure you're seeing that UDP port 67 traffic there when there is a device making a DHCP request on OPT1. If it is, try restarting the DHCP Server service under Status>Services (though I can't think of any reason that'd be necessary), or reboot.

That is exactly how you do it.  You will want to make sure you have your username / password for the PPPoE account handy.  I forgot to jot it down before I reconfigured my Q1000 and had to make a call to CentruryLink.  Once I had the login info, it took less than 5 minutes to get everything up and running. I've had my Q1000 playing nice with PfSense for quite a while now.  You should be quite happy once it's setup!

"Expert" is subjective.  Depends on your needs. I agree with previous poster. You should just post your needs. Some of them them may be outside of what pfsense does - or not.

so you want users using pfsense as their dns to resolve host.example.org to 192.168.1.99 that is a simple host override in either the forwarder or resolver depending on which one your using. if you want example.org you could do that to with example being the host and org being the domain - see attached screenshot of my resolver overrides, and then my queries for them to pfsense. The higher response times are because I am via vpn connection to my home network, that has to bounce off proxy in texas, then back to chicagoland while I am in chicagoland. [image: overrides.png] [image: overrides.png_thumb]

@muswellhillbilly: @chris4916: Technical solution to your concern with proxy configuration client side is WPAD  8) Or use a proxy.pac file for the same purpose (auto client configuration). We use this at my office (230 users) and it works fine. To be more accurate: this is not WPAD or proxy.pac WPAD does nothing more than providing in a (more or less) standard way access to… proxy.pac WPAD RFC (unfortunately still draft as far as I know) describes how to push to devices information that will permit to load an use proxy.pac file