You mean this I assume: https://telex.cc It's obviously going to be very difficult to block since it's specifically designed to work around firewalls. Looks like it requires an intermediate ageng of some sort to recognise anc divert the telex encoding. Who is doing that for them? To be honest there are always going to ways around a firewall, to stop this sort of thing you need to be working at the client machine. Steve

Hi at all, I've the latest release 2.1.4-RELEASE (amd64) installed on a Ubuntu pc's and I use Virtual Box and it work fine . I use pfsense as netbalancer with 2 WAN connection and it work fine . But is for few days that I try to configure the pppoe server, but without success. With the help of mais_um are able to reach the server by changing to 25 the subnet mask, works for few seconds but disconnects. To get a little connection I add manually the outbound NAT rules, but don't resolve this problem. here are my configurations… Services: PPPoE Server: Edit Interface  LAN Subnet Mask 25 No. pppoe user 254 Server Address 1.1.1.1 Remote Range  2.2.2.2 Firewall: NAT: Outbound Interface  Wan1 Protocol    any Source      Network  Address 2.2.2.0/24 Destination any Firewall: Rules: pppoe server Action      Pass Interface pppoe vpn protocol any source  any destination any gateway  loadbalcer What's wrong or missing? I hope in a help. Bst Rgrds Christian

@ptt: https://forum.pfsense.org/index.php?topic=76848.msg418686#msg418686 Diagnostics –> Tables -->

Is your WAN interface dedicated to the VM in Hyper V (should be)? or Shared (should not be)? Check your MTUs on your interfaces (and the MTU your LAN needs), especially on the WAN. Disable every MSS Clamping values. Are youre gateway settings OK ? LAN = no gateway / WAN = 1 gateway (could be DHCP given). Are you sure pings from LAN client to 8.8.8.8 are OK ? Do not only try on the PF, you could be tricked by it's internal interface (127.0.0.1). First : Try a MTU = 1400 on your WAN side. Second : Can you browse (IE / FF / whatever) google (lightweight page) ? Can you browse MSN (heavy page) ?

I Think you are mismatching between routing ang gateway role of your PFSense. In Datacenter envireonment, we tried to manage the WAN Acces from 3 different operators. We wanted to manage the whole solution through VLAN Interfaces instead of physical interfaces. And we faced many problems, concerning routing, nating and IP Aliasing (VIP), because we wanted PF to act as a gateway role, not a simple routing role. We Believe PF loves 1 Interface = 1 physical interface when you want your PF behaving as a gateway. In a routing only configuraiton, no problem dealing with Vlans insteads of physical interfaces. If you want a gateway mode, i'd suggest you to dédicate 1 phys interface for Public side (WAN), and another phys interface for the Private side (LAN). You can still use VLANs for your LAN phys interface… Be sure of what you want to NAT beside of what you want to route. ...Or deal with AON - Manual OUtbound NAT....

Hello, Finally it solved with the help of your post. Thanks for all of your excellent support. -Vasu

Will add this setting - thanks very much!

Here is a free one for windows that I have used in the past http://www.snmpsoft.com/syslogwatcher/syslog-server.html Pretty simple to use.

Since you just made an adjustment to the firewall, I suspect you may be just seeing leftover connections that lost their states. They should go away on their own, but you can try rebooting your clients, then the firewall, to see if that clears it up. More here: https://doc.pfsense.org/index.php/Logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection,_why%3F @MaxPF: No other options were changed and up till 1 hour ago this was not happening. Is there a way to disable this behavior? On the WAN I only want to see the incoming traffic blocked. When you say "see" do you mean disable logging for the default rule? https://doc.pfsense.org/index.php/Firewall_Logs#Disable_Default_Block_Logging

I agree with Jon here. You are using the Cisco switch to replace four unmanaged switches. You are using VLANs internally in the switch to separate it into what is effectively four discrete switches. This should mean that there are no tagged packets entering or exiting the switch and there is no VLAN setup required in pfSense. This has the advantage that you can move ports on the switch between subnets just using a config change and that it's easy to add VLAN interfaces in pfSense if you ever need more than 6. The disadvantages of such a setup are that everything has to be in one physical location (probably not a problem for you) and that it's very easy to get the switch config wrong resulting in ports on the wrong group or communication between the subnets. Steve

Already been through these? https://forum.pfsense.org/index.php?topic=56766.0 https://forum.pfsense.org/index.php?topic=69807.0 https://www.google.com/search?q=pfsense+screensaver

you give me home my friend. I learned networking from the internet and a few trial and errors until i found myself working a wireless networking like Ptp, and PtMp. I have the definitive guide downloaded and have interacted with some guys here. Okay…I'll take that chances!

thank you guys, you are the best. it's working now thank to your knowledge.

Problem solved.  Proxy configuration.  Since I'm running on an APU4, I'm running nanobsd.  Since I'm running nanobsd, I have Hard Disk Cache set to Null (i.e. no disk cache).  I had values in some of the variables specifically dealing with disk cache.  I figured it was a moot point because my Hard Disk Cache was set to Null.  It looks like these values were causing Squid to think there was disk cache, and when it tried to retrieve it, nothing was there and I got the error.  I changed the settings such that Squid would only ever look to memory for cache et voila!  It works great.