First thing you'll have to do is to check your 3g modem and use that model with search. if there is no results, then you reply to this topic and add that information

Hi GE, My original setup was in VMware. What gave me issues was splitting the subnet between 2 DMZs. Are you having issues getting your DMZ working?

For quick and dirty:``` netstat -an Alternatively you can use``` iftop ```to see a better list of clients using bandwidth.

@Wendo: I may be missing something here, but why do you think you need 2.5Ghz + to run a 7Mb DSL connections? I can max a 15Mb cable connection with a 500Mhz Pentium 1 If you have more than one internal subnet and have them segregated using different interfaces in pfSense then traffic between the subnets (and hence the interfaces) is filtered just as it would be between WAN and LAN. This if both 'LAN' interfaces are gigabit you will need to filter at gigabit speeds. @sully: If you can't have segregated internal networks, because of your existing wiring, then you don't need fast box. Even so I can get throughput of around 500Mbps from my Pentium-M 1.5GHz box. It would be faster if it had nice Intel NICs. If you think about it carefully you can probably come up with some compromise solution. E.g. put your teamspeak boxes on a separate interface close to your pfSense box. Leave your NAS in the same subnet as your clients so that traffic is not filtered. The concept of red, green and orange interfaces doesn't really hold true for pfSense since, especially in 2.0, all interfaces are treated equally. The differences between them are simply down to what rules you have applied. E.g. you could have five internal interfaces and they would all be 'green'. If you are going to use pfSense as a web proxy it would probably actually be easier to use it as a router as well.  ;) Steve

Thanks :) After i figure all this out im shooting for OpenVPN and RADIUS stuffs. Thats easily searched though.

Did you enable the traffic shaper on the old connection and set it to those values by chance?

What can you see from switch two? Of those machines on switch 2 that get IP addresses from pfSense, what can they see/do? Can they ping the firewall's LAN interface? Also what IP addresses are the switches themselves on? They both appear to be managed switches so will have IP addresses themselves. This means switch 2 may also have a DHCP server running (you'd need to turn that off). You may also have switch #2 on an IP address already in use on the network.

Also, have you run the traffic shaper wizard in pfSense or are you doing any traffic shaping at all?

Interesting, my wife told me that it is just fine on the nintendo Wii over wifi, but my xbox over wired is not working correctly, after uninstalling havp it worked perfectly on xbox, but I would like to have it installed and working. I am at a loss.

When you use a 'home' router as an AP - or put another way - when you are not using the WAN port, it becomes a simple switch with the 4 LAN ports and Wireless bridged together. Most of the configuration settings become of no use.

Perhaps you could use Layer7 filtering and create a rule for blocking bittorrent. FIREWALL -> TRAFFIC SHAPER -> LAYER7 and then you can chose "bittorrent" as protocol. Didn't use this in the past butr I think you can create a Shaper-Rule which allows/denys bittorrent protocols and then you can put this shaper rule in firewall rules and block bittorrent for all wifi users.

Port forwarding is covered in the documentation.

And to answer my own question. Create a URL Table alias and use this site http://www.ipdeny.com/ipblocks/ and point the alias to the zone file you want to use. I experimented with adding all the IP's to a backed up config then importing it, and while it works, the WebGUI really isn't designed to handle editing it. With nested aliases you can even allow or block multiple countires per rule. From another post these aliases aren't updated automatically but it's coming (can't find the damn post now though that said that)