great thanks! I think i was just getting confused with having 2 LAN's. cheers

If both servers and clients are on the same network, you will have problems. For that you need to use a load balancer that proxies (e.h. HAproxy) or you must switch to manual outbound NAT and add rules to translate the traffic from client->server on LAN so that it appears to come from the firewall. Otherwise the server tries to reply directly to the client and breaks the connection

Remove the 'default lan to any' rule. Everything will now be blocked except access to the webgui via the antilockout rule. Add rules to allow the services you want. There is no need to add a rule for DHCP, it's added automatically but not shown when you enable DHCP in the LAN. Steve

I did what you said There are several modes to use memory For me it was set to AC-STD I changed it to LOWMEM So far, so good Thanks

i left 6.4 downloading in the office.. download pfsense too…. hoping to find a hard drive somehwere in the office so i can install both and test them ..and see who wins out

For anyone who comes across this in the future, my solution requires me to set the OpenVPN service to automatic in services.msc.  After doing so, the OpenVPN service attempts to connect to any configuration in the folder specified by the affiliated registry entry, and it does not need the use of the GUI.  Adding "auth-user-pass passwordfile.txt" to the configuration, and creating passwordfile.txt with the user name on the first line and password on the second line allows it to connect.  This can be a security vulnerability if you do not restrict what the VPN clients are allowed to access and is not suggested for most applications of VPN. I haven't tried it, but I'm fairly sure the GUI won't work after setting the service to automatic.  It doesn't bother me much, and it just means we will have to use IPsec on the computers which need a VPN connection to access our internal network.

Yes, I agree. If it's just the printer and USB/serial ports you're trying to use it will probably be much easier to serve those things directly rather than use some generic USB virtualiser. IMHO. Steve

What build of pfSense are you running? I'm running 2.1-RC1 (i386) built on Thu Aug 29 16:33:12 EDT 2013 FreeBSD 8.3-RELEASE-p10 and my system's configuration file has empty username and password on a ppp interface on a serial port and there is no complaint about that in the system log or the ppp log.

So you're not using pfSense for DNS then? Have you flushed any DNS cache, locally or at the server? If you ping the web server by URL what address does it try to ping? Steve

Just mount the ISO and install that way, it works fine.

really people need a fixit for "route delete 0.0.0.0" wtf – these people should not be on a computer in the first place ;)

Hey Phil, I meant the kbps levels. Before it was presented in an ascending order, now its so different. It doesn't seem to notice the ip addresses that are using a lots of bandwidth, place them at the top and those that have gone off the network. Instead it mingles everything to an extend that I cant notice. But anyways, helped lots. Thanx

You need to redirect based on host-header information which isn't something that the firewall usually sees. As Kejianshi says if you run a reverse proxy that will be able to see it. Searching the forum for 'host headers' reveals some promising threads. E.g.: http://forum.pfsense.org/index.php/topic,46494.0.html Steve

Why don't you use freeradius2 which restarts much faster with radiusd onerestart Freeradius2 can do everything freeradius1 can and more.

I'll try it and see if it works out! Thanks