@MR-NT: Dear Sir if you please can clarify this point Ok : @johnpoz=topic=123266.msg794665#msg794665: Or they are doing dpi and notice that your ssl traffic is not typical ssl, but openvpn - that would be very rare, but can work around that with a stunnel and then openvpn inside the stunnel.

I was referring to setting a GATEWAY on the DNS SERVER configured in SYSTEM > GENERAL exactly as I stated. This has nothing to do with the default gateway the firewall might have for general routing. In fact, it overrides this for THAT DNS SERVER ADDRESS.  

Yes. It's the HP 1820-24g.

Gonna try that, thank you!

Thanks Bills - working great for me now. Cheers

@Derelict: All in all what does it matter since the secondary is not passing any traffic? I see your point Derelict.  :) Thanks, -Martin

Gateway status is displayed on page status_gateways.php Offline gateways displayed red, and online gateways displayer green. How to know color from the command line?

I am guessing you have multiple IPs and your having a problem with the vip your forwarding.. I would allow for icmp on your vip, can you ping the vip when your website goes down?  You say you can get into pfsense when having the problem… My guess a different IP.. If so then do a sniff to you see traffic hitting pfsense for your IP and port your trying to forward?

Hi…i am a new user here. As per my knowledge a punch out tool only makes sense for dozens of devices to modify.Just drill a hole and use a regular, round 3-conductor cable for your serial port. All you need is Gnd, TX & RX anyway. 1m of regular microphone cable from your local music store will do and is durable and solid.

Here is the thing - unless your shut down pfsense for an extended period.. Your IP should stay the same going forward, since it will just renew its dhcp lease when it hits 50% of the lease time..  On my previous isp I had the same "dynamic" IP for YEARS and YEARS at a time… Only time it changed was when I changed out the device with a different mac... And when they redid their ip space in my area.

@macaruchi: …. My question is: it is normal behaviour? No. Not at all. What was the error ?

The best way would have been to have been using DNS the entire time and just changing the DNS records. Probably either a packet capture into a filter or changing the rules that pass traffic into that interface to enable logging and looking at the logs.

@heper: if you read the info below the field you will find this: Enter any additional options to add to the OpenVPN server configuration here, separated by semicolon. so add a ; at the end of each line Now… why didnt I see that? Thank you.

Yes either the resolver or forwarder depending on which one your using.  Just add a host override and point it to whatever your boxes rfc1918 address is.

Np glad you got it sorted, derelict is correct lots of variables can be involved in this - so it can be difficult to put together any sort of comprehensive guide that covers all the possible iterations.

Did you try the official documentation at https://doc.pfsense.org/index.php/L2TP/IPsec ? What version of Windows do you use? Is your client behind a NAT?

install the traffic total package.  Or install darkstat or bandwidthd If your just looking for total traffic summary is prob what your looking for.  Just select say monthly or daily and get totals, or you can even see hourly, etc.