To update: Progress maybe just to the side tho!! Two servers: 192.168.1.200 & 192.168.1.201 Urls: 1.a.com, 2.a.com, 3.a.com, 4.a.com. The two servers are set up as peers within the Webservers Tab of Reverse Proxy, they are both listed on port 80 and have their relevant IP address listed. subdomains 1 and 2 are meant to go to 192.168.1.200. 3 and 4 should go to 192.168.1.201. Everything is going to 200. Ideas?

I can now confirm that with pfsense 2.1 BPDUs are exchanged properly when rstp is enabled on a bridge with the root bridge upstream. I ended up setting my 2950 switches to rstp defaults except for a cost of 37 on port 3 to put the pfsense2 box Lagg0 Lan interface into blocking mode. All is well!

Bah!  Was looking at the UNIX man of date… http://unixhelp.ed.ac.uk/CGI/man-cgi?date

Just updating this to say that I increased /var to 80MB and haven't had an issue since. Steve

Well now I feel as your just throwing me a bone ;)  with that fine statement – hehehe As to security -- I personally have no issue with ping being allowed, and even it allow my public ip to answer ping..  Allowing it on your internal network should not be an issue at all.

@nightwalk74: It is NAS that I am most interested in having it own NIC. Why?

Yes, if you have to provide real performance, then don't use a USB Network Adapter. If you have only 1 physical port available for LAN, then you are going to need VLANs - buy a VLAN switch and connect it to the LAN port… There is going to be downtime in changing over!

Thanks a lot for you help.I installed the healthd package tried all the parameters and i also get wrong temps. I actually get 255.0 as a cpu temp.  :P Well this ADM1025 is way too old to be monitored.Even the bios dont have a monitor utility.Anyway thanks a lot for your help. Friendly Nick.

Thanks everyone I created two new rules TCP LAN net * -> Routers 80 (HTTP) ICMP LAN net * -> Routers * Works a treat

Or install package crond and schedule reboot etc.

Is that working via port forward? If so… https://doc.pfsense.org/index.php/Why_can%27t_I_access_forwarded_ports_on_my_WAN_IP_from_my_LAN/OPTx_networks%3F

Clear your browsers cache/cookies etc and try again. @hackin8: When opening the dashboard in IE8 everything appears to work, but the display never refreshes - just sits open on original view showing "CPU updating in 10 secs…"  but it never does. Manually refreshing gets a new date / time - but no CPU, just same message. I am running 2.1 on an Alix - works fine from other computers, locally. I am trying to access through VPN - everything else seems to work, except this. Any help appreciated

Sure thing :) P.S. You should really upgrade to 2.1 :) P.P.S. Lepo da je še kak Slovenc tle gor :)

Any ideas how to achieve this?

I don't know why your calling it a dmz?  You do understand that your dmz from your rules has full unfiltered access to your lan network as well as the internet. And unless you need to do something really odd, the automatic setting for outbound nat will nat your other segments you create - there is rarely any reason to change to manual outbound nat unless you have to do something out of the norm.. Which having another lan segment or "dmz" as you want to call it is not out of the norm. A "dmz" is normally a network segment between the public internet and the private secured network..  Or just a segment that has filtered access between the public networks and the private network. In your above rules you have a firewall between your dmz segment and your "lan" segment - but your rule base is wide open.. Normally you allow traffic from your lan into your dmz, but you do not allow unsolicited traffic from your dmz into your lan - which is what your current rules are. example my dmz segment can not talk to my lan or my wlan or networks via an alias that has those local networks in it.  Unless the lan or wlan IP started the conversation. [image: dmzrules.png] [image: dmzrules.png_thumb]

#Resolved After a lot of thinking and poking around I found the issue. Under System -> Routing (System:Gateway): I found that the default gateway was set incorrectly. Many thanks for your time. Mike

#Resolved After a lot of thinking and poking around I found the issue. Under System -> Routing (System:Gateway): I found that the default gateway was set incorrectly. Many thanks for your time. Mike