Entering a gateway at an interface will add NAT to it by default (unless you enable advanced outbound nat). Don't set a gateway at any of your LANs for the pfSense interface config. You only need firewallrules to prevent the LANs to talk to each other. A rule like this should do the trick: At firewall>rules, LAN-tab: pass protocol any, source LAN-subnet, destination NOT LAN2-subnet, gateway default At firewall>rules, LAN2-tab: pass protocol any, source LAN2-subnet, destination NOT LAN-subnet, gateway default Now both LANs can get out to the internet but not to each other.

great thanks for that will get the nuts and bolts together

have found a few more nice features here that  will add. (1) set the accounting update time (2) allow to add a second radius server for fail back (3) make all the changes to pptp server as well. hope to have these done inside a week

ubuntu use apt for package updates, which usually use ftp or http. (cat /etc/apt/sources.list to see) and remember that ubuntu just released their newest version, of course the mirrors will be slow

Have a look at http://forum.pfsense.org/index.php/topic,3330.0.html . It should fix your issue.

It's something I'm interested in, as I have an EVDO card for my laptop, but not anything I'll have time to look at for probably a few months. If you would like to shift priorities, start a bounty.

What you're describing is very typical of pegging your connection with cable. When you hit your cap, packets start to queue in your cable modem, and your latency goes through the roof.

hello I have mentioned in very first post that I have already syslog machine… but it is useless in case of interfaces hanging ;)

Basically the config.xml is stored there only (the same file that can be downloaded at diagnostics>backup/restore). Additionally to that it will write the rrd data to this media on a clean shutdown (when performed from wengui or shellmenu). Everything elso is stored on ramdisk and therefore will be gone (like dhcp leases unless you have added static mappings which will be backed up in the config.xml).

That is what i use to test with. http://www.nwlab.net/art/netio/netio.html http://www.koepi.org/smbdownloader.html

When pfsense will support the "from" parameter of the pf rdr rule type it will be possible. For the moment you can try to script it in order to add these rules at runtime.

Problem solved, but don't ask why or how. I was trying tonight for yet another time. Changed the modem to router and put WAN on DHCP (wanted to know if maybe the interface was broken). This worked. Then changed back the modem to bridge mode, configured pfSense for PPPoE on Wan and BINGO, it work all of a sudden. I thought there might be a bug in the configuration of pfSense (the only thing i did different this time was first configuring pfSense for DHCP on WAN, saving, then back to PPPoE). So, i reinstalled pfSense completely (reflashed the CF for my WRAP board). Tried again and it worked first time with PPPoE. To cut a long story short, i did nothing wrong in pfSense the first times, i did nothing wrong on the modem the first times, but after configuring it for the 999th time, it worked.  ??? ??? ??? Nevertheless, i'm happy ;D Many thanks to all trying to help.

Already been asked 1000 times.  Search.

Good to hear  :)

@hoba: there are some hosts at your fxp1 subnet that have the same IP. This could be some teamed nics. If that is not the case you should find the conflict and resolve it. I doubt if those are teamed NIC's in this case - usually that'll be two NIC's from the same vendor. These are two different vendors: 00:13:8f - Asiarock Incorporation 00:14:c2 - HP Gintaras: I would look into this and see why you're seeing that IP switching between MAC's.

@Juve: I started working on that type of addon few month ago, it is not yet "usable" but I hope I will finish it asap and release it to our great pfsense community. It's a windows service with a frontend GUI that stores all information about multiple boxes (securely stores password for automatic logons), makes full backup of every box everyday (with tunable history list), detects whether or not a node of a cluster has fail over (triggers mail alert). I would like to add some other features as well….like managing a whole box through the GUI (I'm looking at the xmlrpc interface instead of building my own HTTP requests and parsing the replies (that's what I do now for box backup for example)...). At the moment I have not enough time to go through it quickly...this may change soon. ;-) Nothing else roxxx as pfsense do! Nice! Can't wait to see this  ;D

If you have another device plugged in, your ISP may only allow you to get one lease. If you're changing out an existing device, you may have to power cycle your modem before it'll let a different machine online.