Thx Phil

No problem with that but I don't think I would do it that way. I might assign a /24 to one of your pfSense interfaces and put the cisco WAN ports on that, then in pfSense route, say, 10.1.0.0/16 to one and 10.2.0.0/16 to the other.  Then the first could do whatever it wanted with 10.1.0-254.X and the second whatever it wanted with 10.2.0-254.X.

Been running it for a few days now and that was it! Added the alternate DNS and now it's lightning fast! Thanks again @sowen and @KOM

I don't want it in transparent mode because I want to activate authentication However I want to filter HTTPS too. So I'm already running SQUID3, I'll start to integrate SQUIDGUARD ! Thanks all!

Thank you for all the suggestions.  I will look at the logs, network and other aspects of the setup and will post anything that will help the next person with Tivo issues. It just does not make alot of sense the issue I am having

Are you sure it really is? Try running 'top -aSH' so you can see the idle processes. Are you running powerd? Is the CPU running down clocked? Have you left the webgui dashboard open anywhere, I've been fooled by that before? Steve

My experience with comcast ipv6 and pfsense has been less than perfect that is for sure - but my tunnel with HE is stable, never any issues and never have to worry about it changing, etc. You can get a /48 from them if you need more than one /64 on your local stuff.  You can even setup PTR for your ipv6 you get from HE - comcast doesn't provide that, etc. ;)

Yes - Now this I can agree with, but thats a user issue. I think trying it a couple days with a clean install of whatever OS he likes is probably a good idea. If malware is the problem, don't need to be bouncing his pfsense box all the time.  Needs to get rid of the malware.

Yes.  Add VIP with type "IP Alias", which shows up as type "IfAlias"

"I can;t resolve any IP on the network or on pfsense" How would 8.8.8.8 know about your IPs?  if your using windows for dns, why would pfsense know about your network? Need more info. What are you clients using for dns?  What are you trying to resolve?

I think the problem is that /etc/rc.openvpn didn't end. I have them multiple times and didn't see why they didn't terminate.

Hmm Very odd - did a factory resetand then rebuilt it and all is now well - Not sure what was happening there have been messing around fairly heavily adding and deleting interfaces so I guess something got messed up. thanks

@stephenw10: That's what I thought you'd say.  :D You could look at the various sections on the status.php page. The information you want will be there but not necessarily how you want it. It's not linked to from anywhere in the GUI just enter it manually: <pfsense ip="">/status.php What are you wanting the report for? Steve</pfsense> Nice, was not aware of that page. I just want something to show all Vips, carps, Alias, rules.

The Nano variant uses md(4) rather than tmpfs as a ram drive. You could use that. [2.2-RC][root@xtm5.localdomain]/root: mount -p /dev/ufs/pfsense0 / ufs ro,sync,noatime 1 1 devfs /dev devfs rw 0 0 /dev/ufs/cf /cf ufs ro,sync,noatime 1 1 /dev/md0 /tmp ufs rw 2 2 /dev/md1 /var ufs rw 2 2 devfs /var/dhcpd/dev devfs rw 0 0 You can move /tmp onto a ram disk on a full install using the options in System: Advanced: Miscellaneous: Edit: Although..https://forums.freebsd.org/threads/tmpfs-dev-shm-md-questions.45210/#post-256239 Steve

I may question how the 8 hour graph can get results like 0.12% in a 1min average,  but when I ran a ping myself and upped the sampling rate, I would get similar numbers. I wonder if it does some kind of weighted sliding window for the average percentage. The main thing is the numbers seem trustworthy, so I'm happy. Maybe I just to look at the code. I've never done that before.

Leave it unchecked to kill the states. That's almost certainly the behaviour you want. Steve