Well, it should be pretty straight forward to set up the main router / gateway. You can either use the 'wizards' within pfSense or do it all manually. If not certain on 'how to' there are some ok videos on YouTube, and some are not so ok. I've installed SNORT, and initially I added in squid and squidguard, but I have moved those to a separate machine due to a bit too much load with those packages, since my hardware ain't on the 'high end' of things. I have 5 NIC's, where I use 3 actively now (WAN, LAN, WLAN), but have reserved one NIC for future extra WAN and one for a GUEST network. The basis of pfSense setup should not be to complicated. The part it could be hardest to find documentation for is how to separate the traffic between the WAN interfaces if the amount of videosites involved are many. Routing on the Application layer might be the answer, but I've haven't tried this in practical terms since where I live the options for multiple WAN's is not there (yet). I've considered using a 4G router, but since the subscriptions are still bound to number of GB traffic it hasn't really been an alternative, especially not for video. Not sure if it was much help, but I found the base setup for pfSense to be pretty straight forward. I used the wizards to make the standard install, and modified the setup later. The load balancing / routing on the WAN is something I have not tried (yet), but I do hope to get there one day as well. All of this is at my home, and I do have some bandwidth / traffic 'hungry' users @ home… Knottolf

Taking a peek at my crystal ball (you don't give any information at all): Did you create any firewall rules which actually allow traffic?

The situation is like this: Head office has pfsense and its public ip is 94.30.20.xx and internal ip range 10.10.0.x Branch office public is 78.112.85.xx, internal ip address is 192.168.1.x. In this situation, if I check both reserved networks on wan, will I be able to use openvpn or ipsec from branch office?

@Chrismallia: @w0w Thank you for all your responses. If I am not mistaken snort only blocks traffic it does not help shape it right? and any Idea  when FQ_CODEL is pland  to be in pfsense?  I will try out codel as I never did. Yes looks like that, snort is not intended to use with shaper and other shaping possibilities like SQUID rules are not widely tested in pfSense. As for Layer7 patterns for youtube, this is also like moving target. https://forum.pfsense.org/index.php?topic=62863.0 I am not sure that provided DD-WRT pattern is still working nowadays and not only for Layer7  missing in pfSense reason :) I am not so familiar with snort, squid and other packages but it looks like currently there is no simple solution to shape youtube videos, until you got all youtube available IPs but this is also moving target.

pfBlockerNG v2.1 w/TLD https://forum.pfsense.org/index.php?board=70.0

Well, probably fastest solution since you wanted a factory default anyway. (Otherwise, grabbing the /conf.default/config.xml and restoring that would probably work, sans the additional work that the script is supposed to do.)

@guardian: All my package manager became totally nonfunctional after a restore. I wanted to restore my configuration but uninstall pfBlocker temporarily but couldn't because the package manger wasn't working. Maybe this was your issue? https://redmine.pfsense.org/issues/6603

Works as expected  :)

I can't say too much, not sure how much is meant for public consumption, but it's safe to say the situation you describe is a common situation we have accounted for.

If the automatic values are sufficient, you don't need to tune it.

Why would you need to install a web package just to serve files???  Nginx is already serving WebGUI.  Use that.

Electrical appliances don't work so well when their power cord is bumped out of the socket by your S.O.  >:( Poor router barely held on until it's power cord was bumped completely out just now. sigh

Hi Sorry I missed your post. It did it again today so I have the dump. crash.txt

Have tried to remove the address from the ARP, reset the MAC/IP settings but still no luck. So the next steps is going to be: **- Replace an old small little switch located in the room where the troublesome machine is located (Multiple machines located close by) If still no luck then I have to conclude that the Ethernet port might be somewhat faulty and then** *** EITHER *** – Replace the machine through guarantee (it is 2 months old) *** OR *** – Add in an USB3-Ethernet adapter My fingers are crossed for having good luck with the replacement switch…  8) Knottolf