Squid and Squid Guard are amazing! But the easiest stress free option is to use OpenDNS.com! Go on that! your love it!

You should have your DD-wrt box setup as an access point only so:
Disable DHCP on the dd-wrt box.
Enable DHCP on the pfSense OPT1 interface.
Set the dd-wrt box to a static IP in the OPT1 subnet so you can access it later.
Connect the ethernet cable from the pfSense OPT1 interface to one of the dd-wrt LAN ports.
Add firewall rules to the pfSense OPT1 interface to allow traffic from the wireless clients to your server.

Steve

resolved by doing the following, create vlan, and then adds the vlan vlan physical interface that was craiada, eg RE0, re0_vlan1 a bridge, then asymp interface creates another interface, opt2 eg, ai the interface will be connected to interface bridge0 eg, there went all the normal traffic.


That actually lands you in a special table. The place you'd need to clear is under Diagnostics > Tables, "virusprot" I believe.

Remove the record from that table and you should be able to send packets again, or just wait for the entry to timeout (takes a couple hours)

Thank-You very much Jimp for the very prompt reply. You relieved a lot of stress. Briefly I built a server and mail system mostly for my children on the East Coast and I was using a WRT54G router with DD-WRT and a pgm called WallWatcher to monitor port probes and the like. Someone turned me on to pfSense and I am just starting to learn this stuff for an old man in my mid 60's.
    Again, thanks an awful lot for the help.

QinQ sounds interesting, can't clearly tell if it will work.

I'm running Supermicro X7SPA-HF in a M350 chassis,
I haven't see a compatible riser card / IO Panel so a third nic isn't in the cards.
Currently have em0/em1 dedicated to the modems and LAN via a USB adapter which is very dirty.

wallabybob's #2 looks to be the only solid option at this point.

those are not kept in the config.xml file.

/etc/ssh keys are re-created when the host boots up the first time.

Root's authorized_keys are written out from config.xml using admin's User Manager account entry. Manual changes to files in that directory are not kept and are not needed.

Notifications are used for.. if a WAN connection was to go down if your in a multiwan setup. As far as i am aware. This is also a 3rd party package for emailing RRD graphs, and that package uses those details. So its good to have! I love that 3rd party package. Customers love seeing there data display like it.

Some 3rd party hotspot app.? There are plenty of solutions to enable 'hotspot mode' or similar without going through the official hoops because many operators like to charge extra for that.
Is it jailbroken?

Steve

I don't think your problem has anything to do with bridge mode but rather the interrupt rate on your NICs or the loading on the cpu. When you disable pf completely it reduced the cpu cycles required to forward a packet massively allowing your system to keep up. I would check to see if flow control is enabled.

Steve

aha Okey Thanks .. so i'm working on Pfsense i need a Report about pfsense with Intro,I,II,II …

Probably via outbound firewall/NAT rules they are simply redirecting all outbound requests to UDP 53 to OpenDNs. This should be easily accomplished on pfSense as well.

Quick question why has your isp given you a Lan address? The 182 address is not an a,b,c class address?

that's it. Thanks to all!

Provided everything is correctly configured, your inter-VLAN traffic will go to your pfSense box where it will be routed between the VLANs unless blocked on entry to the box by a firewall rule.