Depending on the details of your requirements, pfSense for the router/firewall and OpenDNS (http://www.opendns.com) might be satisfactory for the content filtering. For this combination you would configure OpenDNS as your name servers, then a name to IP address for a site hosting "unsuitable" content would return the IP address of an OpenDNS server that displays a message that access to the site is blocked and the category for which it is blocked.

you could also backup your config and reinstall, but choose the developer's kernel. That way it won't automatically reboot on a panic, it will wait at a debugger prompt and you can get a picture of what it shows (and type "bt" at the prompt for more info, too)

Great choice!

I read that book.  Recommended.

The particular attack that presentation is covering, amongst others, isn't specific to any product and isn't a vulnerability in the listed products. You need to take care with any device. Use strong passwords, don't use the same browser for management and general web surfing. Other recommendations from a while back that are still applicable here:
http://blog.pfsense.org/?p=232

@cmb:

Some things won't pick up a timezone update until they're restarted, or you reboot the system. We don't recommend the GMT offset zones, pick a named zone or one of them like EST5EDT or similar for DST, depending on where you are in the world.

All the problems are solved after time zone was set as "Asia/Hong Kong" and rebooted the system.

Thank you so much, cmb.

@calebjk:

What speed would you recommend?

"It depends". Ultimately just adding bandwidth isn't going to fix anything, 800 college students will find a way to peg anything you can afford to throw at them, from my experience with many similar setups to that one. Throttle the P2P, and ensure you have enough bandwidth to meet general web needs. Probably will want to limit each user to a particular speed as well. Probably going to want to use 2.0 for that setup, for the best options for bandwidth control. I've done a few setups similar to that on 2.0 that are working nicely.

There's nothing to it other than checking the enable box. Look at the system log to see why your attempts are failing.

You don't have to have a switch, but will generally want one unless you don't need super-fast (gigabit) throughput between the hosts and must filter traffic between them for some reason. It's generally more sensible to get a switch, but depends on the circumstances.

Found the issue, our local users and servers are on the same LAN, but we had activated the Advanced option "Disable NAT Reflection" . When we took that option off everything started working properly.

Thanks for the help.

cjb

Hi,

This problem are solve. The problem are on my client computer. Because when I use different computer to ping www.google.com with pfsense. My latency are back to 40ms.

Thanks to all.

Looks like something corrupted the log file. It wouldn't really be a bug in the system log, though.

I've seen messages interleaved on the console sort of like that, on multi-core/multi-CPU systems, but usually the logs are OK.

I wouldn't worry about it unless it happens repeatedly, and if so, I'd check out all the hardware to make sure you don't have something flaky in that department.

cool. thanks for the advice. might switch back to sata for now and look at ssd as the price comes down.

There's only one rule there, created while setting up carp according to the book. Anyway, it's fixed, so no need to punish the brains any further… Thanks for helping!

How many local users?

How many remote users?

What VPN bandwidths (and packets per second) are you expecting to push at peak?

How many VOIP phones are you planning on using?

What else are you planning on running (rather than just apparently doing a copy and paste on somebody's question please list the packages or explain what you want to do)?

I thought your question was how to handle the DSL authentication automatically by pfSense but guess you just want to get to the auth page …

What happens when you try to surf to the 173.23.0.3 page, browser time out?

Can you post a screenshots of pfSense's Status->Interfaces and Diagnostic->Routes pages when connected with DHCP.