This is what remote syslog is for.  Look into it.  Learn it.  Love it.

Thought i would leave this up here… After tonnes of testing it seems my 2-bit switch needs you to tell it full duplex......or it does 100 half max. Have used a old 4 port adsl modem as a switch and that is actually working better.

I depends how you have the PCs setup, how locked down they are. You can assign a fixed dhcp lease for each pc based on MAC so that they each always get the same IP address and then create access rules based on IP. However that's trivial to bypass if the computers are not locked down. If they aren't locked down then you can change the MAC anyway. I'm not sure if there's a filter based on cumulative access time. Steve Edit: Doesn't seem like this is in place yet. See: http://forum.pfsense.org/index.php/topic,36435.msg187789.html#msg187789

Kind of what I suspected. I'll try getting hold of a better NIC before I start complaining to the ISP though, just to be sure. Thanks a lot for the help!

Tests on the other boxes could be a TCP tuning issue. What OS is running on the machines behind pfSense? Assuming it is Windows, if you are using Vista/7 you shouldn't need to do anything as it generally does a good job at dynamically adjusting it's settings as needed. XP and older though don't have the dynamically adjusted settings and can benefit from this: http://www.dslreports.com/tweaks and then this: http://www.dslreports.com/drtcp. I know that tool won't work for non-windows OSes but the tweak test is Java based and should run on any OS, of course making the adjustments it recommends would require a skillset I don't have :P

@dmg210: I will post another log with more information next time it drops. Do you mean run a traceroute when the WAN link goes down? No, I don't mean a traceroute because that won't get very far if the link is down. I meant packet capture, for example, pfsense shell command: # tcpdump -i vr0 (replace vr0 by the physical name of your WAN interface) to see what is happening when you expect your WAN link to be recovering.

MAN! USE THE PACKAGE RATE! HE IS PERFECT!!! Use in Status  >  Traffic graph PFSense is the best

Think I found the culprit…. I noticed that the number of processes was steadily increasing over time as well... Turned off NAT reflection, and things seem back to normal. The start of this problem also coincided with my use of Wuala (a great service) which requires UDP port forwards in the ~7000 range to work properly. Hope this helps someone else.  It's worth noting that I experienced the same problem on 2.0RC1 and 1.2.3RELEASE. -Matt

Is it something simple like your PPPoE connection timing out, and turning on keepalives will fix it?

Perry thank you very much.  :D :D :D

I have a similar problem, my bonded pair PPPOE WAN connection drops one line and therefor the connection but PFSense 2 RC 1 (build Tue May 3 10:16:12 EDT 2011) appears not to notice, I have to reboot to get it to authenticate again. This does not happen in version 1.2.3 The Zxyel P-663H-51 modem is in bridged mode. Regards Grant

Ethernet handoffs are the simplest way for any appliance to work with be it pfsense or any other band. It's made even easier because you have a static IP block. You only need 3 things, one IP in the block you were assigned, the subnet mask and the default gateway. Assign that one IP to the WAN port and the rest into the virtual IP section to handle 1-1 mappings of the remaining IPs and away you go.

If this is the case, then you will be doing a double-NAT configuration.  In this scenario, the network segment between the WAN interface of your pfSense box and the ethernet interface of your 2811 should be treated as your WAN network segment.  The down side to this type of configuration is that you cannot allow any inbound services (SMTP, HTTP, etc) without having your provider create port forwards for you on the 2811 and then you repeat the same configuration on your pfSense box.  Your network would then look something like this: Office LAN -> pfSense LAN -> [pfSense box] -> pfSense WAN -> 2811 Ethernet -> [2811 box] -> 2811 Fiber connection -> Internet