I am trying to implement BT (British Telecom) IPTV utilising IGMP / Multicast. I would suggest you at first to find out what type of IGMP version you will really need. We have two versions here in Germany and they are both different each from another. Perhaps you will ask your ISP at first about that! The old entertain (version 1) needs IGMP v2 (version 2) proxy or snooping This can be solved with pfSense alone The actual entertain (version 2) needs IGMP v3 (version 3) proxy or snooping and PIM (routing)! This can be not solved by pfSense alone, you will need PIM (routing) able to get by Raspberry PI 3.0 and Linux or a small MikroTik router For PIM routing you will need a small Raspberry PI 3.0 or a small MikroTik router that will be able to solve your problem.

Basically looking for the following:  1 WAN and two separate physical LAN's.  1 on using the LAN port and the other using the OPT1 or OPT2 port. WAN as it is served to you by your ISP LAN1 with 192.xxx and DHCP range from 192.xxx.20 to192.xxx.50 OPT1 as LAN2 with 172.xxx and DHCP range from 172.xxx.20 to 172.xxx.50 What exactly was now the problem? You can realize either that with managed or unmanaged switches likes you want! Technically after this point my router has two LAN IP's right? Right, and both must now configured likes you want to allow or deny the traffic between them. one for each subnet? Yes, you got now two totally different subnets (CIDR) with private IP address ranges or pools and its own DHCP server for each. Now you should overthink what to allow or to deny for them and their clients.

@kesawi: I have this same issue as well since upgrading from 2.2.6 to 2.3.1 (and now 2.3.2). Gateways are up Happens whether monitoring is disabled or enabled. Happens whether state killing on gateway failure is disabled or enabled I have the same issue as above although i use the most recently stable version. I'm a newcomer of pfsense. I have to say the help docs are not good. For example, I cant even find a sample or demo to help  set up flow control of my network which is so easy in other cheap routers.  Pfsense is professional but not user friend. Who can show me how to set a rule to block MACs or bind MACs to a fixed IP?

Here are a couple of ways. Hire a network engineer and provide necessary budget for accomplishing the task. Between the hours of 8am - 12pm and 1pm - 4pm; unplug the network. But seriously, oh wait, that was serious.  Which social media sites?

After testin in an other environment we were able to confirm that pfSense is just working als a relais. NTP for Clients against pfSense is only working if pfSense itself has valid connections to at least on other/ real NTP server.

Yes, exactly. I have added the rules and it works fine now. Thank you all for your answers. Best regards Kostas

@Steve_B: You don't specify the hardware you are using, so who knows? In general though if a "shutdown process" is performed then it probably safe. If it just disconnects power, then it may not be. I am using AMD Athlon 64 X2 Dual Core Processor 5600+ 4GB Ram Nvidia 6150SE IGPU 40GB HDD @kpa: Usually the power switch sends an ACPI power off event and pfSense will just do the equivalent of 'shutdown -p now' which is the correct way to shutdown the system. Okay / Thanks … I guess I can use the power button safely then.

The first option registers them to an external DNS server (specified in the options underneath that checkbox). The second activates special code to find hostnames in the leases DB and use them in the resolver.

My AP (temporarily) is a netgear wn3100rp. Using my Laptop does not work either (using a usb-lan donge. Have to see if I can get something attached to it w/o a donge, but I doubt that this would change anything). The weird thing right now is that I can no longer configure the AP after a factory reset even though it worked yesterday. So it must have worked once or I had some weird luck. Secondly, my FireTV Stick connected once while I was asleep. Edit: Attaching my AP to the main LAN port works flawlessly. So it has to be the port and not the AP.

well the command is as follows tcp_outgoing_address

Ok so I eneded up putting a switch between the two, I know that LACP  provides fault tolerance and load balancing but it will not increase my bandwidth, each link will be treated separately, if I wanted to increase bandwidth I would use a round robin scheduler on both ends. The reason I have lacp between both pfsense boxes is to provide another link to load balance tcp connections as well as vpn traffic through. The main reason I posted my question was to find out whether pfsense could be set to setup a LACP link between two pfsense boxes without additional hardware. I soon found out that this was not possible. And yes a seperate IDS on each box. After adding the switch to my network design this has opened up a third location to stick an IDS Kind Regards. This issue can be closed

look this.  :( Help me! haha [image: 5b6c1a67-2beb-4bf2-8925-6c67ae66c31b.jpg] [image: 5b6c1a67-2beb-4bf2-8925-6c67ae66c31b.jpg_thumb]

You guys are right! I missed it, but even with 10.2.0.1 I have the same issue :/

@johnpoz: "172.16.220.220 /16" Why would you use such a large network?  Do you have some 65k nodes there? yeah there are a lot of connecting people diagram is attached [image: nw.png] [image: nw.png_thumb]

Yes. You can do both, however. Some routes across a transit network tagged to the L3 switch and a VLAN tagged to the same switch but no L3 there.

@phil.davis: Click the "tool wrench" on the System Information widget title bar to access the settings. Select all (or the items that you want displayed). Press Save. I am not sure how that would unselect all the items by itself, but maybe there is some upgrade path causing an issue there. That was it, thank you. I am not sure how I managed to hide everything in the first place but, either way thanks.

Post yours settings of squidguard. Please

https://doc.pfsense.org/index.php/Installing_FreeBSD_Packages