oh yeah….. feel completly stupid now... so, first rule when you play with vlan: Be sure to configure your host to tag the right vlan OR Be sure ton configure your switch/port with the right vlan before saying that nothing is working ;-) thanks again. I still have a network issue but I will put this in another thread. Romain

AT&T is blowing smoke about your router. There's nothing keeping your router from using all 4.5 Mbps of your connection. Or 10 Mbps, or 100 Mbps, or 1000 Mbps. There are other people using PfSense in much larger applications than yours. But it's worth noting that the speed you're getting on the WAN link to the first router and the speed you're measuring on speedtest.net are not the same. It's pretty much true that only AT&T can measure the connection speed of the T1, unless you somehow have access to the T1 termination equipment and you know how to ask it what the connection speed is. Also, you will lose about 10% or so of the actual connection speed to TCP overhead, and even if you had a Speedtest.net server connected directly to the router at AT&T, the connection speed and "internet" speed will be different as a result of that. So I would expect a maximum capacity of about 4.09 Mbps on 3 T1s and 2.73 Mbps on 2 T1s. If you're getting somewhere in between those two numbers, then AT&T isn't lying to you about the connection speed (especially if you're getting slightly more than 3Mbps - that would be impossible if only two T1s were working).

Got it working, thanks so much.

It's almost as if em3 is not brough up during a reboot procedure at all. Is anyone aware of why this would occur? Cheers!

Sometimes you have to power down the ISP provided modem before you change what's connected to it.

Does the ADSL modem have a full-duplex Ethernet connection? Does the pfSense computer have one, too? If not, both should be. Both ethernet connections should probably support 100Base-TX (or higher) just to make sure that there is never a moment in which the ethernet is the bottleneck.

I just realized I forgot the most important term ! :) I'd like to create a custom quality graph of the LAN if. Is it possible ? This option is not present in the custom preset graphs.

ahh nfs with firewall rules - perfect! thanks closed!

Not in the way that you'd want.  It would be a major management nightmare and wouldn't work quite like you'd expect.  Better to throw a squid (or other filtering box) into the DMZ and send all connections through it.

jakobud, get to work  early in the am,,get a bootable cd with memtest86 on it. 1. boot the (linux)cd and at command prompt type in memtest let it run for a couple hours. ,,,if this results "OK"(no red blocks) 2. Put a different keyboard on this pfSense machine as someone else mentioned. 3. restart pfSense machine. Post your results so someone else will know what has been found. Take Care, BC

Thanks for the information.

Hello, I had similar problems, the solution on my system was to define the pasv_address in your vsftp.conf. It is mendatory, that this address is your WAN-IP. I found a script which put my WAN address in to this config file once a day. Every night at 2a.m. my PFSense is restarting the wan connection and five munutes later a cron job will run this script. #!/bin/sh #vsftpd.conf IP update vsftpd_conf=/usr/local/etc/vsftpd.conf vsftpd_log=/var/log/vsftpd.log my_ip=`host your-dyndns-address | cut -f4 -d" "` vsftpd_ip=`grep pasv_address $vsftpd_conf | cut -f2 -d=` if [ "$my_ip" != "$vsftpd_ip" ] ; then ( echo ",s/$vsftpd_ip/$my_ip/g" && echo w ) | ed - $vsftpd_conf echo `date` "$vsftpd_conf updated with $my_ip IP address" >> $vsftpd_log /etc/rc.d/inetd restart >> $vsftpd_log fi

Take a look at the traffic shaper features.

http://doc.pfsense.org/index.php/Accessing_modem_from_inside_firewall

Ok thanks that seems to have worked.  Its showing me that theres a constant stream of UDP requests from an ip address to the sip port (5060). If i stop my sip proxy then the outbound traffic goes away, but the inbound traffic doesnt stop. Also despite me putting reject or block rules against that IP address, when i restart the sip proxy, the outbound traffic starts back up again, suggesting that the firewall isnt blocking the traffic for some reason. A packet capture shows that the incoming traffic is a SIP packet "REGISTER sip: SIP/2.0" and the outbound replies when the proxy is enabled are "Status-Line: SIP/2.0 407 Proxy Authentication Required" Does this indicate a brute force attack of some kind ? or am i missing something obvious here? The IP in question doesnt appear to be related to my SIP provider, so i dont think its them, but thats my next port of call.

The run driver is already included in the 2.0 BETA snapshot builds. You will find most of what you are looking for if your search the 2.0 BETA TEsting forum for the string "runfw". As Efonne suggested in your other post, you should use the GUI for your configuration.