@YipYip: Was just wanting to understand that is itt normal that pfsense will or can corrupt itself if you hard reset the box. Is this normal or is there an underlying hardware compatability problem ? (I am running intel i350 and i5 8 gig) I'd say that it's very far from normal but of course always a risk if doing hard resets. Unfortunately I've had many (>10) unplanned power failures over the last 3 years because of initial lack of an UPS and then lately had one UPS malfunctioning several times until I managed to correctly diagnose the issue. I've never experienced any configuration corruption. In my opinion, if you expect frequent hard resets of your firewall that's probably a more important problem to focus on solving than the possibility of the configuration to become corrupted. If it is normal how do you backup/restore if this occurs without too much pain ? I've never had to use it but I'd expect the Diagnostics, Backup/Restore option to be usable.

maybe members of this board,  who are paid employees,  are helping anti block advocates  to assert their view of things…..?

I'm actually doing the same thing as you (almost). What I am trying to do now is have my L3 switch act as the router for the intervlan traffic for 2 of me 3 vlans. The third Vlan however will have to go upstream to the router to have the rules their decide what device it should be allowed to speak with. Does that sound viable?

I realize this thread is a bit old but I am having a real hard time trying to understand how to configure ELK for pfsense 2.3 -p3. I have tried to follow may guides and the ELK server running. When I log into Kibana at http://<ip address="">:5601 to configure an index pattern I do not have the "create button". See the screen shot below. I think this is doe to my logstash config file and possibly the pattern file. If someone could tell me what I am doing wrong or has an guide for configuring ELK with pfsense 2.3, I would really appreciate it. [image: kibana.JPG] [image: kibana.JPG_thumb]</ip>

Is there a fix for this? You need a NIC that has ALTQ support in FreeBSD.

Again lets go over it 1 more time… If this client and server are on the same network.. Pfsense has ZERO to do with them talking to each other other than maybe providing name resolution vs dns??  Pfsense does not have UPnP enabled out of the box so if something is looking for some answer to UPnP even though the other device is on the same network that might have something to do it it. Your going to have to give a bit more detail if you actually want help.

@beamen: @TeeConnector: Has anyone experience with pimd? Why doesn't pfSense support PIM? Because nobody has submitted a pimd package. That is one that would be useful to have, but few people are familiar enough with pimd to write up a GUI for it.

lets start like this. For PC that are connected to the switch; Once they are connected to the network, does transparent proxy proxies web contents immediately without any web browser proxy configuration changes ? (I am not very fluent in transparent proxy) ? If yes, it should work for wifi users as well (free radius and captive portal).

These are all owned (/22,/23,/24,/26) network blocks and a pair of Cisco routers are going BGP in front of the HA Pix. The end result is to replace the aging HA Pix with a pair of CARP pfsense and migrate the Pix rules into pfsense. I know how to setup CARP and pretty much everything with the pfsense…except question is how to convert some of the NAT rules. I have already started on a lot of the aliases and rules, because of the number of networks and ip addresses involved, setting up single 1-1 rules is not ideal, hence the question about entire network block 1-1 NAT.

One problem per thread.  This thread was about Enforce Google Safesearch.  Since you have solved that problem, move on to a new thread with a new title that reflects your problem.

Hey, could you share your rules with me? I've been trying over and over but I cant get this to work.

https://doc.pfsense.org/index.php/2.3_Removed_Packages Sarg - deprecated in favor of lightsquid

Well what is your budget or what is your needs?  Go with the PRO, if your needing to pinch pennies go for the Lite.  I am assuming you would go AC, if not they do have cheaper N models still. https://www.ubnt.com/unifi/unifi-ap-ac-pro/ If you have money burning a hole in your pocket, and budget is not really a concern I would prob go with something from aerohive to be honest.. http://www.aerohive.com/products/access-points/ap550.html But it retails for $1400 vs the unifi ac-pro you can get for $130 ;)

What are the settings you are using in System / Advanced / Notifications / E-Mail?

PFsense CP with pass-through is another solution but flexibility of cumulative time usage the issue.