Complexity is also the enemy of security (and reliability). If the guy needs a file server, why should he be forced to use three OSes (bare metal and two VMs), a hypervisor, some virtualised networking between the VMs, and beefier (and therefore hotter) hardware to do it, when he could just use a puny box, one OS, and the firewall and file server directly within it? I guess someone thought that about FreeSWITCH (great feature!) at some point, too. Just pointing out that there are two sides to the coin, and sometimes different answers for different needs.

Aha, you have a logical point. I will try setting OpenDNS on the DHCPd server as the DNS servers and see what happens …

So how do I modify or add a custom dhcp config?

see this post for a patched apinger, version 1.2.3 apinger not working: exit in log, no apinger process with "ps -A", and status for load-balancer without any change (marked down) but connection (both wan and vpn) working. My question now would be: How can I check for apinger periodicallly and have it restart if necessary, or even force kill and restart ? (any shellcmd or similar to insert in the configuration?) pfSense is going to be used in branch office for double wan, and double openvpn between main and branch office (16M ADSL on main office, 2 x 6M ADSL on branch office). Present setup is using 2 NAT routers to split my poor and only 1M ADSL in order to have 2 WANs for pfSense. During testing apinger exits from time to time, one example: Dec 23 09:39:46 kernel: pid 2031 (apinger), uid 65534: exited on signal 6 Dec 23 09:39:46 apinger: Target "10.2.1.2": Received packets buffer: ########################.......................### #################### Dec 23 09:39:46 apinger: Target "10.2.1.2": Lost packet count mismatch (6(recently_lost) != 23(really_lost))!

@torontob: No interest for anyone to take the project for $4000 or because people who committed were not willing to wait longer? Thanks A little of column A and a little of column B.  Doing this project even remotely correctly would involve several thousand hours worth of effort at least and I doubt many developers with the requisite skill set would want to go to all that effort and then try to chase down money from all those different people.  Ultimately, the bounty was retired due to non interest as per the rules of the bounty forum.

Ya, I ask my friend he also do it the same, just act it like server he said. About ping, let's forget it =.=

For the d-link, you are double natting, which I dont like as it can and does break things. I would recommend disabling the DHCP server on the d-link and plug the pfsense cable that was going into the dlinks wan into its lan, after setting a static LAN IP on the router thats in the same subnet as the interface its plugging into. For the rules, I would make the opt rule the same as the LAN rule (if its not working) Otherwise it looks fine to me.

well, i dont know whats causing it but the graphs on the home page are correct, but the rrd graphs are incorrect. The WAN graph is graphing everything (VPN, WAN traffic etc) while the respective graph is empty. Is there a way to fix it without doing a reinstall?

Yeah I ran it on an Ubuntu box next to me same thing, I'm on Windows 7  x64 on my evga 780i. I'll go check that link. EDIT: Just turned traffic shaper on pfsense, got a whopping 61ms of uplink buffering, of course I effectively killed Comcast's speedburst, before I got 4.7 mbp/s on upload, now I got 2.0 mbp/s. Not that it really matters because my config is 13200/2200

@jimp: Why not swap the WAN and LAN ports so the IPMI interface will be on your LAN instead of on the WAN? If it's riding on the same physical port as WAN, that seems like a bad idea in general, but one with an easy solution. Of course, the obvious! Let me try and see if that will work. Although, IPMI may by default be dynamically assigned to the WAN interface depending on what interface you designate as WAN.

Just to followup, the change over went as smooth as can be. Changed IP in WAN settings - hit SAVE. Lost connection. Called Telco - gave the go ahead to make IP change. Clicky Clicky Ping Monitor shows new IP in place. Adjust IP in WebGUI Bookmark - login (ok new cert) - voila! all is well. Good Job PFSENSE Team for making such a rock solid Firewall App - I really (really!) did not want to drive 2.5 hours to make the change in person.

There are no shortage of power strips with network interfaces that you can control via either SSH or an HTTP interface.  APC do various models with individually switched sockets.  You could then easily use a script to SSH onto the power strip and toggle the sockets.

Anyway the problem already solve, Thanks for replying and viewing.

That's correct. This is called - like you just mentioned - Load Balancing. Your topic title is misleading.

Keep in mind that the $600 pays for support hours which can be used over the course of a year.  So if the setup only takes 1/2 an hour, you have plenty more time to use for setting up things like the traffic shaper, load balancing, high availability clustering or upgrading to 2.0 when its released.