Thanks for all of your patience regarding my ignorance of this topic.  I have finished watching a really great series on VLAN's on YouTube, and I am getting a better understanding. I will watch them one more time, and taking your responses and assistance as tools, I  will attempt to build the VLANs I have used as examples in previous posts. I'll post either a success story or durges of a flame-out when the experiment is finished.  Thanks again to all of you!

@Derelict: The old unit wouldn't even run that command. What version of pfSense was it? Sounds like a correct decision was made re: the old hardware. Thanks.  The newest one, 2.3.2-p1 amd64.

I see. Thank you very much.

it can IF the multiple wans have different subnet's. this usually means different isp's

As traffic is routed out an interface those rules determine how the source IP address and port are mapped. There are many uses for them a few: Sourcing traffic from a VIP instead of the interface address Not performing NAT at all if the inside addresses are routable/public Using a pool of source addresses in high-volume environments Setting static source ports for services that require it

Well I found a slightly used tp link 24 port L2 managed switch for $240, VLAN heaven here I come!

This is another great site for Mail Server Blocklist validation:     http://multirbl.valli.org/ If you have your mail server on a separate WAN IP then your main WAN IP, then it looks like a device on your LAN was caught sending SPAM… Create some firewall block rules to block all outbound MAIL ports from your main WAN IP network... Enable logging, and see if you get any hits on that... Then cleanup the infected LAN device(s)...

If I remember correctly it has something to do with the MAC address VSpehere is assigning the new interface (at random). As most unix/linux sort their interfaces with some kind of "lowest mac address first", there could be the problem in your case. If the random assigned MAC is lower than one of the other 3, it gets mangled. (I stand corrected if that's not the case here, but we had a somewhat similar incident with normal BSD and Linux hosts and vSpheres random MAC assignments) Greets

Michael, you might get better results if you would post your question in one of the numerous support forums you have to scroll past instead of this general discussion forum.  They're arranged logically by topic.  The General Questions forum is a good catch-all if you aren't sure of which forum to post in.

"Perhaps this process could be refined further with the ability to place that config.xml file on the same installer USB stick." That would be nice, but would also require to mount the FreeBSD filesystem in your currently running OS where you create said stick. If I'm not mistaken, even the installer stick is partitioned with the freebsd filesystem & slices and e.g. Windows (and some linuxes) have a bit of a problem with reading and writing to that :)

There are, however, ways to mount filesystems over SCP/SSH depending on your client OS.

If all want to do is monitor something via ping.. Smokeping would be what I would look into.

Huh??  What is the masks on your 10.x.x.x networks? what is pfsense firewall IP of 10.11.12.1 and lan IP of 10.11.10.1 ??? Can you draw up your network labeling your networks and masks and what they are connected too.

Thanks I will start a new thread as this is going off topic.

BUMP Is this a taboo subject in Pfsense? Sorry if it is… was not my intention.. just a thought of how to allow users  to remotely setup rules in a albeit limmited yet simple way. VPNS are not always possible and leaving my ports open for travelling users abroad is caused some issues of late. Cheers -wookiefw