Thank you cmb! I will remember that, thats why it was not working :)

@tomli: Thank you for your suggestions. Would you mind teaching me how to set Active/Active or Active/passive in pfsense? No I can´t do so, sorry. I was using LAGs for a short time, but not together with pfSense, than I switched over to 10 GBit/s thats more efficient and more reliable and stable. In shorter words, there are two modes and one is using all lines of the aggregated line and the other modes is using only one line and if this line is full the next one will be begin to use. And they are also two different ways you can walk this road, one is automatic over the LACP with dynamic LAGs and the other is the manual way using static LAGs and you will be able to choose the method by your own to balance this out over more line at the same time. I was using even static LAGs, active/active and together with the "weighted round robin" method, to fill all lines constantly. So I was thinking if there is now something likes you were reporting likes port flapping or packet drops it would be perhaps the problem of the active/passive usage of the LAG.

https://forum.pfsense.org/index.php?topic=101186.0

Alright.  Looks like removing default gateway from the WAN interface, then, going command line and running: route add -net [network] [gateway] Fixes the issue.  Now able to access via devices on the sophos LAN, and it has internet connectivity. Tried advertising a default route from the WAN pfSense, instead of setting static via command line, but for whatever reason, it didn't want to work.  Even though the OSPF routing showed a 0.0.0.0/0 route learned, it wouldn't use it.

Thank you very much doktornotor  :) I'll try this today.

Wonderful thing, Google: https://www.youtube.com/watch?v=O9D2fM883Fc http://hubpages.com/technology/How-to-Set-Up-a-Captive-Portal-Using-pfSense http://pfsensebuddy.weebly.com/blog/setup-pfsense-captive-portal-in-easy-steps https://doc.pfsense.org/index.php/Using_Captive_Portal_with_FreeRADIUS

Makes sense, thanks!

https://github.com/pfsense/pfsense/search?utf8=%E2%9C%93&q=edns

Hi BlueKobold, Thanks for the reply.  I've thought of similar solutions where I put another router device between the modem and pfsense computer, however, I really don't want to introduce an additional component.  I would prefer to have everything work (as it should) with just the pfsense computer and HughesNet modem. Gordon

A small switch with a mirrored port is able to get for less than $100. Netgear GS105Ev2 Netgear GS108Ev2 So if the network tap is able to get for $59, take it! Together with a laptop, because it is USB powered you could not get it better in my eyes. And together with WINDUMP and WireShark you might be able to sniff what you want and on top you could dig into the stored captured packets. The APU1D4 could be sorted with FreeBSD or a Linux version of your choice likes CentOS that came hardened by default and for Linux you may able to get many programs for free of charge and easy to install if you are often on the road.

Thanks for the quick response.  Re-installing with hdd this time instead.  Will get a chance to test try the snort restore I posted about last week too.

Might be that a L2TP/IPSec tunnel would matching right?

I've not have had an issue with this at least with 2.1.5 and 2.2.4 using AD Auth for WebGUI, Console, and OpenVPN login. My admin account has a period in between and I can authenticate just fine (tested with 2012 R2).

So I'm testing out BandwidthD and Darkstat and both look like they will work. I have DNS resolving hostnames now so this should work perfectly, thanks.

Sorry for open this topic, but is about what I want to ask… It would have been better for you to start your own thread in the Traffic Monitoring forum… Any advice to see ? Lots of ways to do it.  My favourite fast way is Status - Traffic Graph.  Set Interface to LAN and Display to Host Name.

Bump? Sorry to be double posting but does seriously no one know anything about this?

@cmb: files.pfsense.org is at NYI's New Jersey datacenter. Generally at least 900 Mbps of bandwidth available at any given time. I'm getting about 7 MB/sec from home in Austin right now via either v4 or v6, with wife watching Netflix and misc other going on. I was thinking from the start is was some problem between here(São Paulo - Brasil) and our beloved(hated) connection through Level3. I asked just to be sure. Every time the route goes through Miami I have issues with bandwidth on servers hosted on Austin or anything north of it. Not only on pfSense, Spiceworks for example are there and I get similar problems. Anyway, thanks for the feedback.