what would it matter what IP you put in.. So your saying your dhcp server normally hands out something else and you put in the lan ip interface..  Well I can test that as well.. But I don't see why pfsense would care what IP it hands out. Seems you might be running into this https://redmine.pfsense.org/issues/3915 Would need to see some sniffs of your dhcp to validate your running into this situation

I searched the bug list and see that this has already been fixed in a future patch. https://redmine.pfsense.org/issues/4693

Oh, well that's a lot more simple than I thought…. Well, for now it seems to work. Ideally I'll change it eventually but as for now that's what I'll use.

@hda: System: Package Manager ("Service Watchdog") Thx very much !! found it and its working fine  :)

I could have - probably the package was installed but maybe not enabled. Still, that is such a bad package if it does something like that.  :o

Very good setup.  ;D I guess I want to get bridging correct before I completely  leave DDWRT. I guess also I would like to learn how to bridge correctly on pfSense then tag them for testing purposes too. Ill keep you posted if I figure something out this week. Thanks

Different subnets don't matter.  If you have different subnets defined on a single interface then expect traffic from a host on one subnet to reach a host on the other subnet, you're going to be dealing with "out the same interface it came in on." Interfaces are what's listed in Interfaces in the pull-down menu.  They can be physical, virtual (VLAN), PPPoE, Wi-Fi, etc.

That looks like a problem with the Broadcom (bge) card or driver in that system. Is that an on-board or add-on NIC? What, if any, changes have you put in place in /boot/loader.conf.local ?

Ah I see what you mean now, then everything seems fine except the interrupts being a bit higher than you think they should be. Thanks I will see if I can get them a bit lower.

@Derelict: Running what throughput?  Looks like total overkill to me. If you're getting the quad NIC so you have ports to plug everything in, get a switch instead. Yes I have everything . Throughput of my wan is only 50mbits V

Snort/Suricata is anything but quiet and absolutely NOT something that "every user" would run. These IDS/IPS things are noisy, intrusive, paranoid, plagued with false positives and require weeks of careful tuning and babysitting. Absolutely NOT something an average Joe out there would do. Regarding Squid, I already pointed you to the proper forum concerning the Squid experience. Also asked about the use case for proxy there, no answer.

I disabled the rules I created in the Firewell>Rules>LAN and the I am now able to access HTTP websites.

OK I was just checking that you had specified the prefix.

Issue was caused by on board LAN. Once I disabled it in the BIOS, I can add as many PCI NICs of any speed and still get 150Mbps down though the proxy.  Thanks for your help!

so you got a /30 for your WAN and a /29 routed to WAN-address ?