Thank you Jim.

I think I might try a vanilla install again, and see if same problem comes back.

@PixelsGC:

I cant seem to get the router to give out ip's

You want to enable DHCP server on the LAN interface? See Services -> DHCP Server, click on the LAN tab, fill in the details, tick the Enable DHCP Server on LAN interface box at the top and click on Save near the bottom.

I suggest you work on your reading comprehension, then.  Here was my first reply on this: "I have pfsense on FIOS.  If you are not using their TV, have VZ switch the ONT from COAX (MOCA) to CAT5 and just throw the AT in the rubbish."  How that gave you the impression the ONT wouldn't do this is beyond me.  I am done with this thread :(

@jupiters_spot:

My company has been using pfSense on a Soekris Net 5501 for several months.  It has been stable and happy, until yesterday when it became non-responsive.  By non-responsive I mean:

would not respond to http requests on Lan interface DHCPD would not provide leases upon request Firewall allowed no traffic through the appliance

If you connect to the serial console, is there any reaction? If the system just 'hangs', it's a good idea to replace the power supply of the soekris as (even though the soekris boots initially), a broken power supply will hang the system without much diagnostic, it's a very frustrating problem to debug.

You can use any DC power supply between 7 and 28 volts, I usually use my IBM laptop power supply (it's 16 volts).

@kpa:

@XIII:

for pfsense: 253 users per subnet/nic

PfSense is not limited to /24 on a network, you can easily use more addresses for a network if you just set it up with a wider netmask.

For example 10.13.0.0/16 for LAN would give 65533 usable LAN addresses 10.13.0.2 to 10.13.255.254 if you reserve 10.13.0.1 for LAN interface.

Same applies to other firewalls as well, not just pfSense. What addresses you use on your own private networks is really up to you.

I meant a basic class c network supports 253 devices besides the pfsense box, you could get it to support up to 131,072 devices via /15 or if you really wanted to 134,217,728 devices via supernetting (/5). OP doesnt say what size network he wants to utilize though.

I agree with jimp, you shouldnt have any problem reaching the speeds that you want.

Thanks mhab12,

It seems that ftp is old, insecure and frowned upon by today's network gurus, including the pfsense development team.  Unfortunately it is still very popular which makes it hard to avoid.

I found this page with a discussion on the subject and a few alternatives to ftp..

http://blog.pfsense.org/?p=212

..some of which, SFTP for instance, can be a simple as changing a setting in your ftp client.

This does, however, require the equivalent setting at the other end of the connection, which means you have to motivate your prospective file sharing partner to include the same setting (or possibly to implement a different server application).

Cheers

Nigel
Australia

I also noticed a strange routing thing:

on the wifi dedicated vlan (vlan3) I have many ipsec tunnels, when I touch something in the ipsec configuration or I reboot the firewall, routes to remote peers go to hell.
From netstat I can see that routes to those remote peers are in the wrong vlan (vlan0 that is the vlan of the principal wan).
Doing a "route delete ip.of.the.peers" the routes coming back to the right vlan, and I am happy again.
At the moment I semi-solved with a route delete host every 3 min in the crontab.

Giaco

Go with an Alix board, they're reliable, inexpensive and rock solid with pfSense.

A number of users have been successful using Cacti with pfSense as well.  Browse the forums for these threads if you're interested in doing this.

Thanks for the Reply, so basically the theory of the guy with the most bandwidth dominates turned logs off thank you since there where ON argg…  At least there is still some margin left on the connection never thought of traffic being blocked causing an issue... Oh well thats why we have redundant paths...

Chris

too late  ;D I kicked out the package for the moment.
As I'm a bit far away of the machine I prefer to avoid problems :)

Just before the last reboot I tried to delete the logs…
In my case df displayed the same 101% full even without the files.
I had no time to play, the system was already dead :) so...

But don't forget to restart snort after deleting the logs to release the disk space and restart a blank log :) thanks for your help !

Thanks for the response.

Thanks for the quick response, I did setup openVPN and PPTP on pfsense and I don't see any log associated to his account. our basic network setup is everything coming from outside our internal network will goes to the pfsense, so I assumed that all connection from outside the building will goes to the pfsense. I did not notice any abvious network change internally, because I thought maybe he setup a wireless router and this is the place where he login, but no there is no physical change on our network I don't see any hidden router or connection internally.

I am thinking my first resource to verify this is through the firewall which is the pfsense, assuming that he was trying to access our network from outside the building.

Also, check the output of "ifconfig -m" on your WAN interface to make sure 10baseT/UTP is a supported media specification for that ethernet card. (It should be, but it's worth double checking)

Note to my last post. The disk usage has raised another 2% since yesterday on my first post I made aout this.

So after playing with it a little more, I did a modem swap and last few days it's been working smoothly, got Motorola Surfboard 5101 instead of another webstar.

Thanks Cry.