dude does your wifi come into pfsense on different interface?  If not then you would have to create your rules to block only specific IPs that are the ones you want to block, or allow depending on how you right the rule.

Alright, well I don't know how much that zbox set you back, but you have to isolate the issue somehow.  I would suggest testing a new install on different hardware.  If your symptoms go away, which I believe they will, you know your issues are coming from the zbox and it'll have to be replaced. You also try USB NIC's, but I don't know how reliable that will be.

Most likely whatever startup script/action you're running is wiping all that out then. Those aren't in a place that would be removed by the firewall itself.

The two pages you're looking for are here: https://www.pfsense.org/our-services/gold-membership.html https://www.pfsense.org/get-support/software-support.html Gold membership doesn't include support - hence the second link.

virtio is best regardless Thanks for the info. I was wondering if it was a wise choice.

Hi, thanks for your replies. NIC status says 1000mbps. I did change the cables after seeing interface errors and it seems it is okay now. Still observing though.. thanks guys!

Thanks to tips Please keep reading and you answered my question :) :) :) ;) ;) ;)

@jimp: Looks like /usr/local/sbin/gmirror_status_check.php lacked execute permissions in the repository, so this should fix it: chmod a+x /usr/local/sbin/gmirror_status_check.php Yes!! This fixed it, Thanks JIMP

"LAN on 192.168.1.0" won't work with a /24 (or 255.255.255.0, it's the same) netmask. Valid IPs are from 192.168.1.1 to 192.168.1.254 and your LAN has to be in that range! The same for your WAN networks, of course. .0 is the network's address and .255 the broadcast address (in a /24 network). @Ste178uk: … I can not connect to the webpage on the WAN interfaces... ??? If you want to connect FROM your WAN interface you have to add a rule to allow this.

Rebooting the modem on change of device connected to it is not faith based computing..  You have to clear its cache of the mac of the device it connected too..  Since they give you no interface into the things, the only way to reset that is reboot it. The instructions laid out marvosa are correct order of how you would swap out a device. What I do to get around having to reboot the modem when I play with different distros for firewall/router - I always go back to pfsense, but like to see what the other guys are doing every now and then.  Or if want to play with different version of pfsense, or want to try some with clean install of pfsense is just make sure all the VMs always use the same mac that is connected to the modem.  This way I don't have to reboot the modem and always have my same public IP as well.

found out it was the shutdown wake on lan that was the issue, changed it to enable and while i was in there i enabled patter match, dont know if i need this but oh well shutdown WOL - enable wake on pattern match - enable job done

Hi jonathanbaird, Well - after some serious head scratching you'll NEVER guess what the issue was.  Some joker (hilarious I think not) had added an EAST coast IP address to my WEST coast system.  This not only explained why I wasn't getting responses back from the other side of the VPN, but also why the response was coming from an IP address that I hadn't even asked for.  So all my logic into when a ping gets a response but with no destination was a little misguided. For shiggles, I'll explain what happened in more detail : On my WEST system (192.168.101.123) someone had added 192.168.100.3 to its IP stack. This obviously explained why, when attempting to ping the EAST coast system of 192.168.100.20 I get the (correct) response "Reply from 192.168.100.3: Destination host unreachable".

Hi Jimp, Yes 32bit. I am glad to hear this. So no need to worry about. Thanks alot! Kind regards,

Thanks for the help fellas, got it running  ;D

How is 1 adapter going to work??  When you clearly have 2 in your drawing.. As to how to setup networking in KVM, your going to have to ask KVM forums/docs Maybe someone help you in the virtual section of this forum, not sure why your post was not there to begin with? More than happy to walk you through how to do it on esxi..  But like I said before not 100% how how things done in KVM.. As heper mentioned that might not be the best choice for vm pfsense.  I can tell you with esxi its a no brainer and stable as all get out and performance is good..  Why are you picking KVM if you are not sure how to setup its network??

I would suggest to connect on device at one port and another PC to another port without VLANs because now you know only the inter VLAN throughput and nothing more. mbuf size to 1000000 PowerD (hi adaptive) enable TRIM support in pfSense Would be the most common settings to tune this board, but anyway if you are running pfSense 2.2.6 amd64 full install on a SSD or HDD it must be more available then ~250 MBit/s as others would report here in the forum. And for the LAN speed it should be nearly 1 GBit/s at all. For the WAN speed it is mostly only not so fast related to the circumstance that the PPPoE Internet connection is only running on a single CPU core.