OK, but I think its best to always the redirection only points to virtual IP. I logon to console on both boxes and ping respective sync interfaces, no RTO, but the master shifted. Also why does when it shifted, we need to relogin again to the portal, and it does'nt carry the record of already login users to the next master? When I shutdown either master or backup. Yes, it still work. For now I think it still best to run CP alone or CARP alone, but not both on same machine. additional question How many CP users it can accomodate? My CP seetings for Hard timeout is 720minutes or 12 hours. CP users always displaying portal page cannot continue anymore. already logon users can internet. Reboot fixed the problem temporarily for a day. Since 2.0Beta to 2.0RC1, when ever CP users reaches or below 50. 2.0RC3, when ever CP users reaches more than 50 or more than 100.

Interesting. On my 2.0 box kern.ipc.maxsockbuf is already set to 4262144. The -w option on the sysctl command is not needed. See here. My own experience is that skype is far from perfect and below what I expect from my connection. Anything you find will be useful. Steve

All figured out, my rules were backwards, I had my source and destination switched. I have it successfully set up to forward port 80 to my Ubuntu server which is on 192.168.1.22, and I am able to remotely login to my pfsense using https://, all from one dyndns host. Thank you for the help.

Thanks jimp. That's what I was looking for.

well I just did a sockstat and don't see anything listening on those ports.. Let me turn it back on and see if the errors come back and then I will check with sockstat.

Writing to CF isn't exactly speedy. Far too many variables there to really speculate. It could be any of these, all of these, or none of these: Speed of the CF Speed of the box itself Other operations on the firewall could be slowing it down (check cpu usage) Might need to increase nmbclusters Sun spots, gremlins, stray sabot, etc, etc.

Yes. It already does this on 2.0.

And µ$ is lacking of reliability in means of uptimes is getting higher than 1 year

I inserted a 3rd NIC and connected the WAN to that 3rd NIC leaving the 2nd NIC (former WAN) empty. So I have the following: 1st NIC: LAN 2nd NIC: Empty 3rd NIC: WAN It worked. The strange part is that in our main router in which 2 nics works normally, Pfsense's WAN doesn't work for some reason.

Then you can edit first posts subject with [SOLVED]

@haluong: The application establishs connection by inputting PC IP or PC Name. When 2 PCs in same network, the connection is OK, but in different networks, it isn't. "it isn't" is nowhere near enough detail - what application? what does it report? how does the application work - for example, do the two "ends" each try to establish a connection to the other end? Does a ping from a PC on LAN to a PC on another network get a response? If not, what is reported? @haluong: I don't know how to set firewall to allow the connections. Could you please help me your ideas? Default LAN firewall rules allow a computer on LAN to establish connections with any other computer. I'm happy to help with ideas but I don't have time or the interest to write down everything I might think of. I need more information to work with to help reduce the number of possibilities to consider.

I split out the only recent report with info and am locking this thread as it's all over the place and the originally reported issues were long ago fixed and it's been hijacked a ton of times since.

Yes, I think you found it. September 3 patched work. Many thanks.

Does anyone even noticed it?

can You give me some more details? Do You mean: create few pipes for specifict traffic: Remote Access (SSH, RDP, OpenVPN) Gaming (all my games ports) Web (http/https/smtp/smtps/pop3/pop3s) is this something like this? http://cs.baylor.edu/~donahoo/tools/dummy/tutorial.htm

Just tried 1.2.3: after installing I get stuck in a similar fashion "can't exec /bin/sh for /etc/rc: Exec format error".