@m4rcu5: When can we start testing with 2.1? Running stable is not so exiting as running beta  ;D so true…so anti climatic now... its not the kill, its the thrill of the chase...bring on 2.1 :)

You should use Site-to-Site VPN to achieve this. How to do that is described here: http://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_%28Shared_Key,_2.0%29

I have experienced one or two boxes going doing because of power fluctuations and multiple restarts (which is another bad thing to Alix boards - no ON and OFF switch). The issue is not me being lazy but rather the client being totally dumb when it comes to the hardware and of course I would have to spend hours on the phone to get them to change the CF card. So, if I could have a USB back-up of the OS, I can give that to the client along with the box and then can simply replace the USB to get operation running which would not require me to fly down to their location :-) What boards similar to Alix do support USB booting? Or would it be an Intel Atom board? Thanks

If it's any solace I have the exact same issue on XenServer 6 beta and my 2.0 RC3 box is performing flawlessly as well.

SOLVED! Found some old config file - couple of days old, restored from it and after some time, so far the system is working, and connected from LAN to Internet. So I am sorry for making a lot of noise for no-thing. Anyways, thank you very much indeed for attention, and keep smiling, guys and girls! :)

Sorry i have no answer for you, but you have struck interest in me here.. i have just been wondering how i can go about creating a second mirrored pfsense for redundancy.. is that actually possible?  I have 1 physical pfsense box currently.. but i do have a VMWare ESXi server that i can run multiple VM's on..

Please post a snapshot of the output of pfSense shell command top -S -H when the system is 100% busy.

Thanks for your comments! It turned out to be my mistake because I tried to install the nanoBSD on a hdd and use a second partition for squid cache. I'm going to save the config and reinstall from scratch.

@jlepthien: Well all I can say is that no one should be doing it the way you did…I as an admin ALWAYS test such scenarios before I'd do a remote update on a production environment... Me too. But living where I live and dealing with what I have to deal with I didn't have an option this time :)

Just to let you know, i solved it. I'm no expert, but since trying to setup a VPN connection I have learnt a few things about routing tables, so it just struck me that the VPN connection pushed a new default route, so when i disabled the Open VPN client, I can ping and traceroute again.

I cannot get the loadbalance to work so I go to policy routing with squid in transparent. Although I am disappointed with my setup since I cannot fully utilize all my ISPs but I have to be contented with it. I manually balance the load to the 3 different ISPs. GroupA(high priority) - ISP1 GroupB(medium priority) - ISP2 GroupC(low priority) - ISP3 I just add the following in my custom options of squid to make it work (IPs are just for example): acl GroupA src 192.168.100.1/24; acl GroupB src 192.168.101.0/24; acl GroupC src 192.168.102.0/24; tcp_outgoing_address 10.10.10.1 GroupA; tcp_outgoing_address 10.10.10.2 GroupB; tcp_outgoing_address 10.10.10.3 GroupC;

I presume you have added a firewall rule(s) on OPT1 to allow OPT1 to access the internet. Do you need to add a rule to allow OPT1 to access the PPTP server on the LAN? Do the VPN clients access the server by IP address or hostname?  If you are using DNS forwarder on pfSense it might help to add an "override" entry for the server host name so that internally (on your local network) the server name maps to a different IP address than it does externally (on the internet).

Thanks Ermal.  I will test it as soon as I can. Patiently waiting on the official release. ;D

They're: Mars 1U Server Celeron-M pfSense Appliance CPU Speed: 1Ghz Celeron-M Ethernet: 4xIntel Gigabit LAN Memory: 1GB DDR RAM Storage: 4GB CF Mini-PCI: None The packages are the default, nothing extra has been installed - it's showing AutoConfigBackup and siproxd. It should be vanilla 1.2.3 as far as I can tell. 1.2.3-RELEASE built on Mon Jan 4 10:56:15 PST 2010

I have version 2.0 RC3 (built on Sun Sep 11 21:36:53 EDT 2011), but it is also not working. The patch does not work either. Patches manually. Is it possible in a short time to wait for a bug fix?

Viscosity works nicely and has the config export. It doesn't pre-package it into a dmg but it's easy to get the dmg + export to the user.