Hmm, yes too many errors to ignore if was me. Do you have a switch you can put in between the WAN NIC and your modem? Steve

Your right because after testing I didn't have any joys. I am tempted to move it to ESXi anyway which would solve this. A 1GHz via just isn't cutting it anymore now I am running squid and dansgardian.

Maybe you should look at this: https://redmine.pfsense.org/issues/1943

I see example , and i also do nslookup on firewall log screen. and many dns(port:53) logs up ..like this matter is existing , should not Introduce auto resolve function in PFSense , i interpreted. I still like study of English is not enough :-[ Even in awkward sentences,Thank you for reading.

Ouch! That's unlucky.

ICMP doesn't have ports, but it does have an ID. That's what that is.

That site doesn't appear to be tailored to PFSense. Is there a guide on how to do this with PFSense?

Using the internal CA and generating a self-signed cert in the OpenVPN wizard, I have successfully been able to connect. If someone could point me to a tutorial on creating a 3rd party CA and cert, I would be very thankful.

@Derelict: Yes.  I would create a VLAN for the green network.  Call it VLAN 20. Thanks much for the VERY helpful post. I haven't had too much time to work on this yet, but I have made some initial progress. I've actually decided to go with 3 new VLANs: VLAN 10: RED - No restrictions VLAN 20: YELLOW - Trusted family devices   – Access to RED net for printers, etc. (I implemented account controls for the NAS to allow backups)   -- Web filtering, with pass rules for Steam and Battle.net (so far) VLAN 30: GREEN - Untrusted guest devices   -- No access to RED or YELLOW nets   -- Web filtering, HTTP, IMAP, SMTP ports only (80, 443, 465, 993) Haven't had time to implement the WLANs yet (right now both APs are on RED, using the same 2.4g SSID, and in addition the NT-R66U is using a unique 5g SSID). Mostly using the two APs to extend range. I may use dansguardian filtering on YELLOW and RED instead of OpenDNS--it would be helpful to have all the nets use the DNS forwarder and cache. But I do have OpenDNS working on YELLOW by defining the two DNS IP addresses on the interface page and rejecting port 53 on the firewall page. Thanks again!

I am sorry for delay but i am away for few weeks and cant work on my project. When come back will continue with digging in the debths of firewalling. Thanks for understanding

Thanks for pointing me in the right direction I can recommend the HAproxy package or the Squid Reverse as they are both capable of doing this. I've installed the Squid3 package which includes a Redirects Tab.

same issue here pfsense 2.1.5 fesh install. after many tests/reinstalls I isolated the issue to igmp proxy. as soon I enable this the shell does not work any more most commands fails thinks like ls cp… etc to have the system back 1 boot on single user mode. 2 mount a fat32 usb mount -t msdosfs /dev/da0s1 /mnt 3 copy /conf/config.xml /mnt/config.xml 4 edit the file on the usb. (This is because I can't get the vi to work in single user mode. remove the section  5 copy the file back to the system. repeat step 2 and reverse 3 Reboot the system and it should be back alive without igmp proxy. sorry there might me mistatakes since I'm new to pfsense and freebsd just a couple of weeks working with this. please does any one know how to fix this igmpproxy issue. I could deal with all the other issues I have but without igmp proxy there is no iptv and I can't live with that. Regards.

Why do people complain before rebooting?  Its trouble shooting 101.

@stephenw10: Do you see any errors on the Status: Interfaces: page? If you run 'top -aSH' at the command line what does it show? Steve None, i have been looking at various possible errors on the interfaces, but nothing.

You might want to take a look at the 2.2-BETA snapshots.  The 2.1.x code based on FreeBSD 8.3 is quite old and a lot of things have been update din the newer snapshots.  Release candidate is coming soon with a final release early in the new year from what I've read recently. http://snapshots.pfsense.org/

thanks Steve makes a lot more sense now its working as I was beginning to think it was my ability of understanding and following instruction but now I have a much better understanding and proving to be a rather powerful tool three cheers for the community!

Check the ppp log, is it trying to connect? Any errors shown? Is the parent interface showing a connection? Which NIC is it? Steve