HI Swoody, i have the same issue, did you manage to find a solution? Vuko

I have been using Pfsense for years to protect VoIp. Nothing beats this with Pf8Blocker. I have never had a NAT issue due to PFS since 2.x earlier version did have issue that needed some tunables etc..

Hello, I figured out the speed issue. The tunable for flow control does not load when placed in /boot/loader.conf.local I used cli to do the following "sysctl dev.ix.0.fc=0" the command prompt in GUI works as well by entering the same string. Now if I could only get the DOM readout I will be a happy person.

Hi This is sorted.. Years back I'd setup IPTABLES rules on the servers to block specific traffic. I'd forgotten about that and it was those settings that were causing the issue. I now have 4 SIP trunk from different providers registered and routing to the correct devices. Everything seems to be working fine.. Thanks

The ASUS can be setup and configured as a Wireless Access Point. This is now in and connected to OPT1. The ASUS is doing MAC filtering and is configured to use the 10.10.10.1 as it's default gateway. All devices are being given DHCP addresses and network config from the OPT1 interface. This all appears to be working fine. By default I've blocked all devices from the AP/OPT1 to the LAN but have allowed a small 'approved list' So far so good. Thanks for the help and advice.

Thanks, both. Looks like I saved the cost of an antenna. The wireless card will remain in the spare parts box.

Yeah that's OpenVPN prompting for a password. I was able to half-duplicate that using an auth-user-pass /root/openvpn.pass option with the file only including a username. Looked a little different (newline before Enter Auth Password:) only specifying a username in the GUI. Neither of those hung there on 2.3.2_1 but it's easy to think that older versions might have behaved differently (waiting there for input) in the same circumstance. So fix your OpenVPN Client Auth and you should be good.

OK got it all working…still not sure what it was. I reinstall Pfsense and factory reset my switch redid everything and seems to work. Might have been also a problem the laptop adaptor I was connecting to the switch, one person mentioned that, so I tried my desktop and it work. All is good now. Thanks guys for all your help. :D

haha and this is not freepbx forums. PFsense router is working great! lmfao

Sorry I spelled rule wrong on the topic.

Draw a schematic, wording descriptions don't help here.

So my best option is to use user name authentication instead of Mac or buy expensive cisco switch and do port isolation putting user mac in their own little vlan.

sounds like pwnage - someone prolly got logins to your box do you use a remote log server to see if there's any suspicious activity?  If they have your logins then local logs will be useless unless they were sloppy.

How many ms are you you talking..  Are you saying your having clients/apps timeout trying to resolve something that you do no have locally cached.  I really find that unlikely.. I think its all in your head.. Oh how come that took 12 ms, its should be 10 sort of thing..

I'm not quite sure I understand the question, I'm guessing the apache server will be connected after the pfsense. Like: client->wifi(router)->pfsense->apache server For now I can't test this setup since I don't have a second ethernet interface. Is there a way of using the internal wireless interface of the laptop to connect to the server? (Just for testing purposes) I tried a server under the same wifi like: client,apache server->wifi(router)->pfsense with no success and I believe I can see why. (The router is managing the traffic with no intervention of pfsense?) Essentially what I'm trying to do right now is turn the router into an access point and connect it to the pfsense laptop but I think I didn't quite manage that. For some odd reason the portal works with 192.168.1.4 but there is no machine using that ip. (btw vouchers are working perfectly) Shouldn't the firewall redirect me to the captive portal even if it didn't have internet access after I enter a www.example.com url in the browser? The ip's that I see from the logs are: Pfsense: 192.168.1.1 Router: 192.168.1.2 Client1: 192.168.1.21 Client2: 192.168.1.103 (or server if I try to enable apache as in the above scenario) I had seen the video and that's exactly my configuration in webconfigurator +dhcp server and DNS resolver enabled. Btw I had no success by connecting a client directly to the pfsense through a cable.

"but I'm confused on why the source field can be anything other than an address on that interface." Your confused to why the drop down lists other pfsense interfaces?  Or you don't understand how you could have downstream networks where this interface on pfsense is the transit network? Have you tried programming dropdown lists to filter out all the other interfaces?  When the dropdown is will be used by all the interfaces? ;)  So you want it to not show you opt2 network, because your on opt1 interface? [image: dropdown.png] [image: dropdown.png_thumb]

Not sure why you think you need to whitelist domains. Why not just protocols just log?  Keep an eye on the traffic.  Once you watch them for a while and where they go, then you can lock down to netblocks if you want, etc.