Got it and thanks for your reply.  :)

I have a 4 lan interface box very similar to this one:
https://www.amazon.com/Qotom-Q190G4-S01-celeron-Pfsense-firewall-router/dp/B01AAKGH88/ref=sr_1_5?ie=UTF8&qid=1525656793&sr=8-5&keywords=pfsense+network+box&dpID=51RsQ8C3R5L&preST=SY300_QL70&dpSrc=srch
I bought it just before pfSense announce the requirement for Hardware Encryption (AES-NI) in later releases :( … we'll see how long I can run with this one.
Thank you for the additional info and documentation! Helps a lot!!

I was thinking maybe there was some online service which transparently PAT'ed traffic or something

I have multiwan (load balancing) and when I create a rule for this site to use 1 gateway the problem solved

Thanks Alot  8)

This is not a pfSense problem. Check your local network.

What i do first is to review and check all connection cable from Switch HUb device and review one by one  unplugged and plugged it. then finally found the problem :)

so the problem is from the LAN1 LAN2 and LAN3 connected to same Switch HUB1,2 and 3 device so i removed LAN1 and connect to HUB1 Only and LAN2 to HUB2 Only same to LAN3 to HUB3

so HUB1, HUB2 and HUB3 are not connected to each other anymore then i tried LAN2 to access the shared folder from PC50 were the subnet is from LAN1 which is 192.168.1.10 whoaalllaaaa i get access denied

Thank you soooo much for giving me a time to understand and i learned so much guys

@MR-NT:

Dear Sir if you please can clarify this point

Ok :
@johnpoz=topic=123266.msg794665#msg794665:

Or they are doing dpi and notice that your ssl traffic is not typical ssl, but openvpn - that would be very rare, but can work around that with a stunnel and then openvpn inside the stunnel.

I was referring to setting a GATEWAY on the DNS SERVER configured in SYSTEM > GENERAL exactly as I stated.

This has nothing to do with the default gateway the firewall might have for general routing. In fact, it overrides this for THAT DNS SERVER ADDRESS.


Yes. It's the HP 1820-24g.

Gonna try that, thank you!

Thanks Bills - working great for me now.

Cheers

@Derelict:

All in all what does it matter since the secondary is not passing any traffic?

I see your point Derelict.  :)

Thanks,
-Martin

Gateway status is displayed on page status_gateways.php

Offline gateways displayed red, and online gateways displayer green.

How to know color from the command line?

I am guessing you have multiple IPs and your having a problem with the vip your forwarding..

I would allow for icmp on your vip, can you ping the vip when your website goes down?  You say you can get into pfsense when having the problem… My guess a different IP.. If so then do a sniff to you see traffic hitting pfsense for your IP and port your trying to forward?

Hi…i am a new user here. As per my knowledge a punch out tool only makes sense for dozens of devices to modify.Just drill a hole and use a regular, round 3-conductor cable for your serial port. All you need is Gnd, TX & RX anyway. 1m of regular microphone cable from your local music store will do and is durable and solid.

Here is the thing - unless your shut down pfsense for an extended period.. Your IP should stay the same going forward, since it will just renew its dhcp lease when it hits 50% of the lease time..  On my previous isp I had the same "dynamic" IP for YEARS and YEARS at a time… Only time it changed was when I changed out the device with a different mac... And when they redid their ip space in my area.

@macaruchi:

….
My question is: it is normal behaviour?

No. Not at all.

What was the error ?

The best way would have been to have been using DNS the entire time and just changing the DNS records.

Probably either a packet capture into a filter or changing the rules that pass traffic into that interface to enable logging and looking at the logs.

@heper:

if you read the info below the field you will find this:

Enter any additional options to add to the OpenVPN server configuration here, separated by semicolon.

so add a ; at the end of each line

Now… why didnt I see that? Thank you.

Yes either the resolver or forwarder depending on which one your using.  Just add a host override and point it to whatever your boxes rfc1918 address is.