I would recommend using OpenVPN if possible.  I have to use IPSEC as I want VPN access from my iPhone and I cannot jailbreak because it is a work device.

For those that are interested, I started using DNS-O-Matic as an intermediary to my dynamic DNS host, which provides email notification on every successful IP address update: http://www.dnsomatic.com/

You can just reassign or rename the interfaces after you have setup your 3g modem. The only difference between any of the interfaces in pfSense is whether or not it has a gateway assigned to it. (AFAIK  ;)) Steve

In addition, screen shots can help us find the problem. In this case, port forward rules, FW rules and out bound NAT rules. How is Zimbra getting mail to it? Is https enabled? The more details, the better we can help you.

Just checking… Did you ever get this working? Not having any luck here with the new files. appears to fail getting groups from AD.

@Nachtfalke: Not sure if it is possible with PPPoE and pfsense but with CaptivePortal and freeradius you are able to limit bandwidth, time and so on for every user. Yes correct, i am currently doing that with FreeRADIUS.

i'am new to this stuff… how do i make a backup??? :P

We up until last week 4 or more of us on the lan could connect to the same online game server for a game like Urbon terror. and all play at once. Now as soon as 1 player connects the rest can't. Im curious if the administrators of that particular game server didnt do an upgrade that blocks multiple people on the same public IP…  You might visit their forums and see if anyone else noticed...

@GruensFroeschli: What is a possible source of problems in your setup is, that you assigned the parent interface on which VLAN's are assigned. –> em1 is directly assigned. OK, that's what I was afraid of. I deleted one of my previous "WAN_x" and renamed/reconfigured "WAN" as the previously deleted.

Hi bruno, looking at your name and your email, I suggest you looking at portuguese forum. Here is a post with some tips to install samba on pfsense. http://forum.pfsense.org/index.php/topic,45828.msg239737.html#msg239737 att, Marcello Coutinho

@jaredadams: Its a shame that an older 95W 3.0ghz Pentium 4 which is extremely notorious for heat will perform better than even a C2D, C2Q, or even a Xeon whos clock is <= to it. Not true in the least, CPU performance is no longer tied to its frequency. The better performing the CPU, the more it can push. A C2D/C2Q/etc. is MUCH faster than an old P4 even though they have lower clock rate.

@mendy: I am wondering what are some of the features in PF sense. does it have a general category filtering? (gambling, online gaming, etc)  this "captive portal" does it have logs of every website visited? any other information regarding pf sense would be helpful. The base pfsense system doesn't include URL filtering features. It is possible to do URL filtering by installing 3rd party packages (e.g. Squid+squidguard) but the overall result won't be as tightly integrated or as feature-rich (e.g. reporting websites visited by each user) as some commercial products.

That's what packages are for (varnish, haproxy, etc), you can already do that sort of thing, just not in the base system. And just because it would make it easier for what you want to do, it may make it more confusing for someone else. You can't please everyone all the time :-)

http://redmine.pfsense.org/issues/1938

www.viako.com make some good looking cases but they are not cheap. plenty to choose from given your requirements.

Ah, thanks for keeping us up to speed. Steve

just removing the include was my first try – didn't work. would be nice if there was some built-in support for allowing anonymous access to certain pages.