Not only that, but I'd say by disabling certain bits like ACPI and maybe IOAPIC, you might actually reduce performance. BIOS tweaks aren't going to buy you a whole lot, but it is a good practice in general to disable hardware you aren't using.

Thankyou!! yes.. i missed that..

pfSense doesn't have anything to do with Fiber Channel equipment and I'm honestly not sure how you plan to use either for your install.  FC equipment is used to connect servers to storage, not servers to servers for network traffic.

Item #2 may be worth trying on the most current code for the snort package. (Not sure how well it's working on 1.2.3, but on 2.0 it's been working) - Lots of fixes have gone into it over the last few weeks.

@syedadi: the reason my network have two isolated subnet because of the security, so changing the subnetmask is not piratical. You may find it helpful to read http://forum.pfsense.org/index.php/topic,39604.0.html It is not a trivial task to provide real isolation between two subnets sharing the same ethernet segment.

Don't bug people via private message for help, it's against our rules (otherwise we'd all be wading through 1000 PMs every day) and definitely not going to encourage answers (I /dev/nulled that and am answering now just because I stumbled across it browsing threads). That isn't currently supported, you can't use md5sig currently (far more to it than a kernel option).

@submicron: If a company already has a significant investment in Juniper gear, they're going to be fairly skeptical of some candidate who wants to strip it all out for another solution.  Its better to learn the gear they have, be proficient with it and then after you've proved yourself to your employer, make appropriate recommendations for how to make improvements.  You'll also find that this approach tends to help you plan your pfSense deployments a little better since you already know how the network is configured and can keep an eye out for the little gotchas that any large network retooling project has. This is a very honest advice. Two thumbs up for this. @Derek: "if it ain't broke, don't fix it." This one I learned in a hard way. ::)

Because nobody took the effort to convert to mpd5 and/or nobody has requested/supported for it to go to mpd5.

@tim29: Is there any way to do this with just two NICs? That would make this particular installation a lot easier. Yes, use a small VLAN capable switch as "port multiplier" for one of your pfSense NIC: one "trunk" port between the switch and pfSense, one switch port to each office. There has been a number of posts on VLANs in the last few weeks. A search of the forums for VLAN should turn up useful additional information.

The network map will help. http://www.pfsense.org/index.php?option=com_content&task=view&id=62&Itemid=73 Steve

https://…/services_captiveportal.php "Enable captive portal" is not enabled

@thewev: The 00:bd:4a:4c:00:00 MAC is for TAP0. I guess pfSense assigned it TAP0 when I created an old OVPN configuration. Is there such a thing like a "private MAC range" similar to the privat IP subnets? Where does pfSense pull the MAC from?

Actually i can't i've got only one isp link and no cp at use.. But here are smarter ones also

@Metu69salemi: mpls is done by operators, but still some other vpn over it would be nice something from wiki concerning mpls Thanks for the link.

Thanks a lot.  It seems that the reset RRD data method will get rid of all graphs and recreate the rrd files according to the latest interface/gw info.  If I accidentally deleted the wrong rrd file (ie interface still exists) via shell, it seems it won't auto recreate it on next refresh.

No problem. It has taken me a while to find my way around the menus and what the items mean.