@avvid: Yes, I was trying to see if pfsense could "safely" terminate a port that goes nowhere and respond to the TCP requests. If it goes nowhere it might as well not exist.  Thus it must be answered by something. In this case you want your firewall to answer the request. This means you want to open a port to the other server on a security device..  Bad ju ju! But you could allow their server  (and it only via a well crafted WAN firewall rule) to your pfsense WAN address GUI port.  Still a security issue but much safer than selecting "any" for source IP. WAN Rule-    Source-  their IP address  any port    Destination- "Wan Address"  Port- (your GUI port)  80??  .

@BBcan177: Use the Snort OpenAppID processor. BBcan177, could you post on how to do this, or a link? If I remember correctly there are no GUI settings to facilitate this (other than just turning on the OpenAppID processor)..

Thanks for the update.  I can't remember the last time I had a corrupted download in general.

Are you guys familiar with "bad file descriptor" error which essentially bricks pfsense at  boot time? I can reproduce this error everytime the virtualbox machine closes without proper shutdown.  Everytime. Luckily, to fix this I just have to copy the backup VDI I keep stored. I am anticipating a world of hurt once the UPS's lose their batteries and the server goes down on power failures. Thinking of testing 2.4 with zfs before deploying another 15 machines.

Please draw your network how you want it.  You mention a VM, so is pfsense on a vm.. How is your your mv host tied to the network? When using some soho router as just an AP, normally the easy thing to do is not use the wan(internet) connection of the router.  You might be able to leverage it if your wifi router supports AP mode that bridges the wan interface with your lan ports and wifi.  But many soho routers do not support that option.  If you can put 3rd party firmware on it then you could most likely do that. If you have a vm host that you want to leverage as pfsense and other vms, and then use some old wifi router as AP.. This wifi router does not also supply your internet currently does it?  Its not a gateway is it with your modem/router in 1 device?  Please draw up your current setup, and then how you wnat your future setup.

Any real downside to doing this as long as the pfSense box has enough resources?

Hello jimp, I noticed that your sg 1000 has a micro SD card installed on it. I can't seem to install the firmware on an micro SD card using the recovery firmware provided on the members log-in page. The  firmware recovery only erases and reinstalls on the emmc. Are you booting from the SD card? I emailed pfsense and they said it was not yet possible to install on the micro SD card. I was wondering if you were able to install on the micro SD. Would you kindly teach us how to do it? if indeed possible… Thanks very much for you time and assistance

Very well. I am extremely surprised that the SG-1000 is sold with a MicroSD card though. I've experienced these issues with SD cards before, but usually using read-only has helped these run for several years. Its a shame that the live-cd version isn't produced anymore.

Thanks