The situation is like this: Head office has pfsense and its public ip is 94.30.20.xx and internal ip range 10.10.0.x Branch office public is 78.112.85.xx, internal ip address is 192.168.1.x. In this situation, if I check both reserved networks on wan, will I be able to use openvpn or ipsec from branch office?

@Chrismallia: @w0w Thank you for all your responses. If I am not mistaken snort only blocks traffic it does not help shape it right? and any Idea  when FQ_CODEL is pland  to be in pfsense?  I will try out codel as I never did. Yes looks like that, snort is not intended to use with shaper and other shaping possibilities like SQUID rules are not widely tested in pfSense. As for Layer7 patterns for youtube, this is also like moving target. https://forum.pfsense.org/index.php?topic=62863.0 I am not sure that provided DD-WRT pattern is still working nowadays and not only for Layer7  missing in pfSense reason :) I am not so familiar with snort, squid and other packages but it looks like currently there is no simple solution to shape youtube videos, until you got all youtube available IPs but this is also moving target.

pfBlockerNG v2.1 w/TLD https://forum.pfsense.org/index.php?board=70.0

Well, probably fastest solution since you wanted a factory default anyway. (Otherwise, grabbing the /conf.default/config.xml and restoring that would probably work, sans the additional work that the script is supposed to do.)

@guardian: All my package manager became totally nonfunctional after a restore. I wanted to restore my configuration but uninstall pfBlocker temporarily but couldn't because the package manger wasn't working. Maybe this was your issue? https://redmine.pfsense.org/issues/6603

Works as expected  :)

I can't say too much, not sure how much is meant for public consumption, but it's safe to say the situation you describe is a common situation we have accounted for.

If the automatic values are sufficient, you don't need to tune it.

Why would you need to install a web package just to serve files???  Nginx is already serving WebGUI.  Use that.

Electrical appliances don't work so well when their power cord is bumped out of the socket by your S.O.  >:( Poor router barely held on until it's power cord was bumped completely out just now. sigh

Hi Sorry I missed your post. It did it again today so I have the dump. crash.txt

Have tried to remove the address from the ARP, reset the MAC/IP settings but still no luck. So the next steps is going to be: **- Replace an old small little switch located in the room where the troublesome machine is located (Multiple machines located close by) If still no luck then I have to conclude that the Ethernet port might be somewhat faulty and then** *** EITHER *** – Replace the machine through guarantee (it is 2 months old) *** OR *** – Add in an USB3-Ethernet adapter My fingers are crossed for having good luck with the replacement switch…  8) Knottolf

1)you plug it in & install 2) run through the default wizard 3) setup vlans 4) configure vlan interface 5) configure firewall rules for those interfaces this is a fairly basic situation thats in use on thousands of systems

Then you are doing something wrong. Works fine. Never seen anything like what you are describing on any installation. This one here is a mix of DHCP pool, DHCP Static mappings, and static assignments outside the pool. NAT does not care how an address is assigned. Maybe using statics you're making a duplicate? System log should have some sort of entry in that case.