Depending on your location there might be other things to consider as well (I can't tell from your profile). If you're offering internet access publicly in Germany, you must log traffic and store it for 6 months together with the username. Offering it for free is not an option then. Apart from this, wireless internet throughout a hotel complex might be challenging as well. Client security might be another concern. May users see each other's computers or do you have to block this? At least you have to talk to your client about this!

@skysurf76: Just wanted to update you wallaby. Thanks for the update. Regarding the wireless issue: Maybe you have some interference on some channels. There are some pieces of software (e.g. kismet at http://www.kismetwireless.net and wavemon at http://eden-feed.erg.abdn.ac.uk/wavemon) that can give you much more information about our wireless environment and these might help identify why you are seeing what your are seeing. For example, perhaps there is significant interference on one or more channels.

ssh log messages just go into the main system log, in /var/log/system.log - but that is a binary circular log, not a plain text log, so you need to use the 'clog' program at a shell prompt to access it, like so: clog /var/log/system.log | grep sshd http://doc.pfsense.org/index.php/Why_can%27t_I_view_view_log_files_with_cat/grep/etc%3F_%28clog%29

Some options for getting more NICs on a system with small number of PCI slots: You can probably pick up a couple of reasonable quality 10/100 multi-port NICs on eBay. (These would have two or more ports per PCI slot). If you are looking for something "new", some possibilities include NICS described on http://www.soekris.com/lan16x1.htm and various Intel multiport NICs. You can use a VLAN capable switch to multiplex many switch ports onto a single LAN connection to a pfSense box. FreeBSD supports  some USB NICs.

Perry, Thanks for the hints. It was the traffic shaper causing the issues. I disabled it and immediately I got much more reasonable speeds.  :) I guess I need to re-run the shaper wizard to get it to work properly. Thanks again for the super-quick response.

Look in the BIOS - check all CPU power saving modes are disabled.  How you do that depends on your BIOS but the manual should help you.

That's normal for the ALIX boards (and WRAP too, I believe)

Just watch the 2.0 board here on any given day and you'll see how the quality can vary from day to day as bits are actively worked upon. It will be quite a while before all of the bugs and kinks are worked out.

There isn't a good place to do it, but you could always write a single script and then make sure it gets called before the shutdown command in all cases: /etc/rc.halt, /etc/rc.reboot, and /etc/rc.shutdown

I don't remember it every being asked here. What version of pfSense are you using?  Is pfSense your external (WAN connected) device, or do you have a modem or router between it and your ISP? What, as GruensFroeschli says, does the log show?

The reason that works is that NAT reflection is only supported for port forwards, which is why you need the port forwards to access them locally in the first place.  I'm working on something that would also work for 1:1 NAT rules (I've already got it figured out and just need to finish coding it), but I don't know whether it will be included in 2.0 (or any other version).  I may make it available as a package for 2.0 at least, and may even backport it as a package for 1.2.3.  If someone (or multiple people) wants to sponsor it, I might be more likely to consider backporting it to 1.2.3.

That is because nfs support is not built into pfSense.  It constitutes a significant security risk for a service which shouldn't be running on a firewall.

@jdwilliams: @Topell: Why do you need to bounce the box every night? Just to try and keep things running smooth… Its for a user whos 300 miles away and they have some slowness issues after squid has been runing for a few days and the webcon give a 500 error at random. Do you normally work with Windows?

Oh, different problem.  If you want to be able to access OWA from the inside using the external DNS name, you're going to have to make an A record on your internal DNS server pointing to the internal IP address.  (And if you're going to do that, making a zone for the public domain name on your internal DNS server, you'll have to replicate all the other public records or your users won't be able to get to, for example, 'www.companyname.com'. Or just create an internal A record like 'mail' and get a multi-name cert that will work with both the internal and external domain names.

can you name a some torrent clients which allow you to manually enter WAN ip..?? because there are too many available and i have ti try each one indiviually..