FYI, same issue in 2.2.2-RELEASE (amd64). Any suggestions? Thanks!

Its great that you use the most recent version but no I am not saying that NAT isnt working anymore. Clearly from my description the SMTP server is responding to the incoming connection request its just that I am not receiving the banner on the external connection as I do from the internal.

Ah, interesting. Slightly odd that you couldn't use any of the virtual ips to history the vpn service though. That's how it's usually done. You may have been able to do so by adding the 'router ip' as a virtual IP leaving the wan free to talk to the modem (if you get an unlocked one). Steve

Where power cycling a switch fixes a problem, it's likely a general network problem like an IP conflict on the gateway IP. Before changing NICs, reinstalling things, etc. troubleshoot what's causing the actual problem. Can you ping the LAN IP? Get to the web When you try to reach the LAN IP when things aren't working, what MAC do you end up with in your ARP cache? Any "X is using my IP …" messages in the system log?

How is your outbound NAT configured? Firewall>NAT, Outbound.

Shut down your outbound ports and see how much you upload to peers that listen all kinds of random ports.

@jimmy_1969: During package installation the install log is shown in the GUI. But sometimes the package installation fails and the GUI log is no longer updated, nor showing any error message. Not sure if this is helpful or not … but I ran into similar problems installing Snort and other packages. Sometimes it worked but other times the installation would just stop and no errors in the GUI log. :'( For me it turned out to be a problem using Window 8.1 and Firefox 37. Once I moved back to XP and Firefox 37 then the GUI would finish the install every time without error. ;D

That is almost always caused by packages and then mostly by Squid or Squidguard but Sarg is also good at that. What packages are you running? Steve

Ok, after so much fiddling I figured out the issue. It was the MTU but not the MTU of the server, it was the MTU of the client.

Yeah. Uninstall obvious junk like squid before upgrading next time.

@Derelict: Damn packages.  Don't know why people install them.  No wonder pfSense "just works" for me and not for other people. Glad you found it. I don't really use them either, I might as well uninstall most (if not all) of them. Thanks for the continued back and forth dialogue though.  Much appreciated.

[co]Incidentally, I got connected to Virgin Media today and after initial hiccup, I'm now connected. Cable modems tends to allow connection from one MAC address. If you connected the Superhub2 to your laptop prior to connecting to pfSense box, most probably Virgin still got your previous MAC registered. First of all, you need to setup DHCP, as almabes said. Then, connect the Superhub to LAN port and switch-off the hub. Wait for a min or so and then switch on the the hub - that will refresh the MAC address. Best!

I do have the same problem….sigh.....Guest network@2.4GHz wifi will never go beyond 5Mbps while I also not able to have > 10Mbps for 5GHz signal, and my WAN speed is 1000Mbps.... At the beginning I was wondering if there is any issue with my WAN link.... But double NAT is not an option for me, since Airport Extreme is unable to achieve 1000Mbps NAT throughput.

How do the domain suffixes look on the local and remote sites? e.g. host1.localdomain.net / host-b.remote.com Could you use domain search suffixes & DNS forwarder / referers?