Thanks guys, i just enabled SSH and now ill just use my cell phone to SSH into the console when needed.

Thanks… That also helps alot!

@avvid: Yes, I was trying to see if pfsense could "safely" terminate a port that goes nowhere and respond to the TCP requests. If it goes nowhere it might as well not exist.  Thus it must be answered by something. In this case you want your firewall to answer the request. This means you want to open a port to the other server on a security device..  Bad ju ju! But you could allow their server  (and it only via a well crafted WAN firewall rule) to your pfsense WAN address GUI port.  Still a security issue but much safer than selecting "any" for source IP. WAN Rule-    Source-  their IP address  any port    Destination- "Wan Address"  Port- (your GUI port)  80??  .

@BBcan177: Use the Snort OpenAppID processor. BBcan177, could you post on how to do this, or a link? If I remember correctly there are no GUI settings to facilitate this (other than just turning on the OpenAppID processor)..

Thanks for the update.  I can't remember the last time I had a corrupted download in general.

Are you guys familiar with "bad file descriptor" error which essentially bricks pfsense at  boot time? I can reproduce this error everytime the virtualbox machine closes without proper shutdown.  Everytime. Luckily, to fix this I just have to copy the backup VDI I keep stored. I am anticipating a world of hurt once the UPS's lose their batteries and the server goes down on power failures. Thinking of testing 2.4 with zfs before deploying another 15 machines.

Please draw your network how you want it.  You mention a VM, so is pfsense on a vm.. How is your your mv host tied to the network? When using some soho router as just an AP, normally the easy thing to do is not use the wan(internet) connection of the router.  You might be able to leverage it if your wifi router supports AP mode that bridges the wan interface with your lan ports and wifi.  But many soho routers do not support that option.  If you can put 3rd party firmware on it then you could most likely do that. If you have a vm host that you want to leverage as pfsense and other vms, and then use some old wifi router as AP.. This wifi router does not also supply your internet currently does it?  Its not a gateway is it with your modem/router in 1 device?  Please draw up your current setup, and then how you wnat your future setup.

Any real downside to doing this as long as the pfSense box has enough resources?