Thank you so much for your kind and helpful response. No CD or DVD in the drive so I shall ignore the warnings as you suggest. Btw, I just love pfSense.  :)

We don't have that capability in pfSense, but if you send the syslog messages to a remote server, there are likely other dedicated monitoring packages that do support such notifications.

You could use rsync to copy the file(s) from firewall to firewall, assuming you have the right ports open across the back of all the systems: https://www.freebsd.org/doc/en/articles/hubs/index.html

@cmb: The routes are handled by each side on its own with shared key, fill in the "remote network" on each end accordingly. With SSL/TLS, the server side can push route(s) to the client but they're still required on the server side. Ah, I see. All working now. Thanks!

Thanks so much for your reply heper.  I am going to try that out and let you know if it works. Much appreciated.

have you set your interface rules for the wifi network?

Are you using proxy?  Are you using portal?  Do you have snort installed?  is your wireless part of pfsene or a stand alone AP connected to pfsense on its own segment or same segment as your lan? I can tell you have 2 iphones, 5c and 5s and ipad none of which have any problems grabbing new apps from the store, or updating existing apps, etc..

https://doc.pfsense.org/index.php/FTP_without_a_Proxy

If you are willing to switch to haproxy-devel (1.5) it should be able to do both ssl-offloading and transparent-clientip. Also in the background it will create the needed ipfw rules. How good of a job it will do for pop3s / imaps / smtps.. i have no experience there.

"but it would be useful if it could default to a common subnet mask imo." And who says what is common.. is /24 common?  Maybe to you - but to others maybe they always use /25 when bringing up a new segment..  You have no idea what a user might be creating a interface for..  To assume /24 solves nothing - if the user doesn't understand what the mask is in the first place.. Put in a feature request if you would like the drop down to start on /24 for new interfaces for ipv4, and /64 for ipv6 since drop down on that one is /128

Check the Packets RRD graphs, it's likely more or less in line with the search rate. There isn't a "you must have X rate of searches given Y rate of insertions/deletions", an average setup will be roughly along the lines of the numbers I posted previously, but that's dependent on what's happening on your network and can vary widely depending on the typical load your system is under. It sounds like you have many packets going through a small number of connections.

The bandwidthd package will do that. Thank you for that tip.  I had it installed a long time ago but haven't looked at it in quite a while.

Yes, its working for me!!! Great thanks  :) Can you please guide me how to enable joinme in?