Ah, of course, that would explain the rules. I'll just use the IP addresses and ranges rather than the pre-defined options. Thanks again!

See 4 posts below yours:  ;) https://forum.pfsense.org/index.php/topic,72307.0.html Steve

Would the Policy rules of Snort Block this? 2012647 tcp $HOME_NET any $EXTERNAL_NET $HTTP_PO… ET POLICY Dropbox.com Offsite File Backup in Use 2012648 udp $HOME_NET 17500 any 17500                         ET POLICY Dropbox Client Broadcasting 2804233 tcp $HOME_NET any $EXTERNAL_NET $HTTP_PO... ETPRO POLICY dl.dropbox Download 2014313 tcp $EXTERNAL_NET $HTTP_PO... $HOME_NET any ET POLICY Executable Download From DropBox 2017015 tcp $EXTERNAL_NET 443 $HOME_NET any ET POLICY DropBox User Content Access over SSL

My ISP's tech support guy said that, if a given MAC address isn't seen for a day or two, it's likely that it will get a different IP address the next time it's connected. Thus, if I ever need to change IP addresses again, I can probably just swap LAN and WAN again. It was very easy and quick with the pfsense GUI.

solved, thank you @phil.davis: Post what you are entering in Host Overrides and/or Domain Overrides and what you want to achieve.

https://forum.pfsense.org/index.php/topic,66908.0.html Long story short-  Try a 2.1.1 snapshot. http://snapshots.pfsense.org/

https://www.google.com/#q=pfsense+log+websites ?

@johnpoz: yeah it is becoming a very recurring issue – maybe we need to create BIG FLASHING RED letters that say do not put a GW on this LAN interface unless you fully understand what that means.  And then rethink it and then don't do it!! ;) Can we just remove the option all together, if you you classify it as LAN interface there is NO option to put a GW on it at all.. ;)  Is this connection used as WAN/INTERNET sort of check mark, and if not checked no GW option is even available?  I am almost positive that the wizard of setup clearly skips over asking the question even - doesn't it?? THIS. Argh. I've been working on getting VLANs to work and part of that was moving DHCP off the pfsense box so I could configure the subnetting correctly. I didn't notice this put a gateway on pfsense's LAN side. And until this thread, didn't realize that was why the internet just turned off. :( Thanks though! I hate having my business behind store bought wifi routers. Chris

I disabled Static Outbound NAT just for testing and still having the same problem. No I have no idea what could be causing it.

Hi, look into Menu System / Advanced and there on tab Admin Access: At bottom you find the property Console Options / Console menu, check this property. BR wkn

Hi all, This is just to say that it works perfectly on the Alix board. I did some penTesting over the firewall and it performs great. Thanks a lot!

I am on the 25mbps plan with comcast, and my pfsense is just 1 of a few VMs on a N40L with Turion II Neo 1.5ghz Dual-Core, pfsense vm has only been given 512 and I max out both my download and upload pipe.  So I would have to think such a machine should be able to handle it no problem.  As asked what speeds are you seeing, and have you validated these speeds from more than just 1 test location?  And what speeds are you seeing? [image: 3284196746.png]

@jerk_shop: Can you download the wpad file directly from your browser? E.g. can you type in http://wpad.yourdomain.com/wpad.dat and does it load up your file? I can't download it via wpad coz my wrong is not creating a wpad inside usr/local/www but I was able to download via LAN_IP/wpad.dat but when mydomain.com/wpad.dat it says ooopppsss google can't find that stuff. wait quick question can I access the webgui using my inputted domain under general setup like for example under domain icantmakethisstuffwork.com. Can I put that at my browser to directly access the webgui? if you are using firefox, you have to change the proxy dedection option to the second one from top(by default the third one is selected), in browser proxy settings and be sure that your dns host override is correct host=wpad (not the host name you give in pfsense general settings) domain=domain name you have given in pfsense general settings ip=your lan ip description=anything you like

@darkcrucible: If you're seeing the 4% loss continuously throughout the day, then you're probably seeing a common issue with the apinger service. If it only shows up during part of the day, then you should search dslreports for their smokeping service to collect more evidence. If it is continuously reporting 4%, then see this: http://forum.pfsense.org/index.php/topic,68637.0.html The RRD quality graphs get their data from the apinger service. The workaround to the continuously bogus loss issue is to restart apinger. Try going to status->services and restart apinger. See if that resets the reported losses to around 0. Just the other day I saw a bogus 4% loss too. Restarting the service fixed that. restarting apinger worked for me… thanks!! will keep monitoring to see if the problem comes back...

Sorry for using the term "dumbed down" rather than "simplified for new users", I suppose that sounds better.  I would log bugs and patches if I understood the process.  I've been using PfSense for about 5 months now so I'm a relatively new user. On this issue I initially suggested that all native unbound commands be recognized by the GUI custom entry box such that they override the GUI setttings.  Or if this is unacceptable, at least allow custom commands that are not configurable via the GUI.  I could test every unbound command to see if it keeps the service from starting but that would take about a day.  I'm sure someone more familiar could generate a list in a few minutes. The bigger question is, "what's the goal"?  What can and can't be done with the unbound package script.  So far I'm seeing more interest in using command parameters to generate other command parameters.  In other words, a continuation to keep it simple and automated, rather than improving the ability to troubleshoot performance issues should they arise.  Maybe you can explain why the native commands weren't included in the package.  Is it just the time and effort to provide features that may get little use? As someone who had been using a stand-alone unbound service with only a script, surely you would expect some moaning when most of the script settings were rejected by PfSense.  It would have been nice to drop in a well tested and stable script rather than use the automated package that restarts now and then.  I may go back to a stand-alone service if I can't resolve the restarts. Are there other 64-bit users seeing their unbound package perform unattended restarts?  No idea how to troubleshoot this especially with many of the commands unrecognized.  Fortunately the service restarts fairly quick so it doesn't seem to cause much disruption.  However with each occurance the cache is cleared and has to begin rebuilding when the service starts making the package less effective.  I don't save the cache because of the SSD and it adds too much time to a PfSense reboot.

Hmm, I think I did something stupid like deleting the user from User Manager that I was logged in as.  It should never let you do that, but it did.  I'll try to log it once I can reproduce it.

If the machine running the game (or server) is behind pfSense you can look in the webgui at Diagnostics: States: and then filter by the IP of the gaming machine. That will show you the ports of any connections. Steve