ICMP is the protocol used by ping.  You don't need to worry.

The best vpn is the one where you own both ends.  Server and client.

Good idea. I will post this there with pics. thx.

Logic ! Blind Sry for the stupid question. It can be closed

Dare to dream…

Fixed. I reinstall perl it's ok

@owner524: This should be the ips I use?? Is this what I need these are the ips the router is pulling for the ISP

Thank you. I am planning an upgrade. I was hoping maybe it was a known issue that would be resolve with upgrade.

The data was never supposed to be there in the first place, it was only there by luck/coincidence the way that pf log output was interpreted by tcpdump. It's data that should never have shown up, but… [image: 1g3TM1p.png]

lacp would only failover when a link goes DOWN (ie you unplug/cut a cable). it would never failover if, for some reason, you can not ping google anymore.

Erm? You mean to power off/power on the box? You can use cron for the former, for the latter obviously you can use nothing since the OS is not running, Schedule a WOL elsewhere if supported, or set up BIOS to power on the machine if supported.

Yes I was a trying to tag to Gamebox.  Thought since the layer-3 devices have VIP, VLAN and the bridging of the VLAN to the LAN or WLAN they might relay VLAN packets.  If I go back to the 1:1 Nat solution from PfSense VIP to AP, then DMZ the Station to reach Gamebox, I believe I would need to use 1 VIP for every Gamebox.  I only have four VIP's left and don't really want to use them up for this purpose.  If I could get all Gamebox's onto one VIP that would be good but I don't believe 1:1 Nat works that way.

@kejianshi: DHCP static mapping are this way already.  It doesn't mess with the way a laptop get DHCP IPs on this and that network.  Only the way pfsense assigns their ip. Ah yes, thank you. I didn't think about that but should have. Jason

This is what I mean the blocked shows the network ip and the wan ip but the pass only shows the ip of pfsense box how can I record the wan ip ? https://www.dropbox.com/s/gxgrxhp6ux11wvt/pfsense.jpg?dl=0

If you use OpenVPN, just the inbound port for your server on WAN (UDP/1194 by default). Then you must set firewall rules on the OpenVPN tab, which governs what connections from VPN clients the firewall will allow into it, but for a personal remote access firewall it's probably safe to just set it to IPv4 any.

Thanks for the reply. There is not really any reason why i have the ADSL router on the LAN, i was just testing pfsense on my current environment. Just out of curiosity, I was playing around with ZeroShell and it somehow routed the packets correct is there some way of configuring pfSense to "tag" the packets to return to the pfSense box? So to fix my current issue can i just change the IP address of the ADSL router to 192.168.11.8 and set the wan on pfSense to 192.168.11.10 or do i have to physically connect the ADSL router to the WAN port and make sure it is not physical on the same network as the lan?