It sounds like the rogers modem needs to be configured slightly different. There be some conflicts with the modem lan and pfs wan setup. I'm gonna blame the modem. if you can log into the modem remember you just want it to talk to the internet for you and thats all. I know the newer rogers modems have a config page you can get to and tweak.

I have rogers too just not the wireless. I planing to switch back to DSL b/c it run the same 10mbps/80kbps as cable. (Look into Primus if you do want switch)

Take a look at the Snort package.

The regex and related code I used for parsing the filter log should be in /usr/local/www/includes/log.inc.php, in the function parse_filter_line($line).

That code is in version 1.2.3-RC(1, 2, or 3) or on earlier versions can be obtained by installing the Dashboard package.

A VPN simply gives you the ability to link in to a network from another network.  Nothing else changes - if they can do it on the work network then there is a way to do it with VPNs.

Your first choice is the nature of the VPN - IPsec, PPTP or OpenVPN.  Which you choose will depend on the operating system(s) the client(s) use.  Your simplest option, in terms of client behaviour, is to use a bridged VPN so that the clients appear to be on the internal network.

You could be running out of states but you would have to go some to use them all up that quick. This "Internet Download Manager tool" wouldn't happen to be torrent related would it?

Yes install Squid and route all traffic through proxy…

Agreed.  Does any else have experience here with CALEA?  I believe I am compliant as I can give any LEA (law enforcement agency) remote access to a live feed anytime, but I am still learning a little on this front.

You'd need to add the progsreiserfs package, and realise that support for ReiserFS in FreeBSD isn't as solid as for Linux, so you may run into problems or corrupted file systems.

I've played with gmirror on pfSense before. Gjournal is a bit more complex, but with a bit of work you might be able to get a full install journaled. It might be as easy as copying a few files from a full install and configuring. Or it might not be, I haven't tried it.

@gravyface:

Thanks for clearing that up.  So basically there's no tagging going on prior to hitting the VLAN'ed port on the pfSense, so it treats everything as untagged.

If you configure a pfSense network interface as a VLAN interface pfSense will probably expect to see VLAN tags in incoming frames and will put VLAN tags in outgoing frames.

Based on the preceding discussion, it seemed external constraints prevented you using VLANs so its just confusing when you now talk about VLAN'ed ports on the pfSense box. Have those constraints changed?  Why would you make the pfSense port a VLAN'ed port?

1- squid proxy server is a good choice for caching pages and files
2- bandwidthD  traks usage of TCP/IP network subnets and builds html files…
3- lightsquid is High perfomance web proxy report. Requires squid
4- ntop is a network probe that shows netowrk usage

i am using all the above, it is helping me find out who is doing what

i hope this helped

It means link is up on the interface. In my experience, it doesn't seem to show up on vlan interfaces.

I have a wired LAN bridged with wireless LAN. It was pretty straightforward to set up.

"First attempt was a no go" covers a wide variety of problems. Can you be more specific?

Maybe one of the bridged ports didn't work. You might need a cross over cable there rather then a straight through cable.

Maybe you didn't get DHCP assigned IP address on the OPTx port. You need firewall rules to allow DHCP traffic on the OPTx port. See discussion in the DHCP and DNS forum.

It seems when I delete the config.cache, it replaces it with one containing something like i:-1;
From researching around, it seems that I can build an array with parse_config(true) and then overwrite the config.cache file with a serialize()'d config array, however I'm noticing that pfsense's parse_config() function creates an array which somehow loses some of the passthrumac entries, which is not good. Any suggestions on how to fix this behavior?

Go to a shell.
Make a directory to mount the CD at:
mkdir /tmp/cdrom
Mount the CD:
mount_cd9660 /dev/acd0 /tmp/cdrom
CD is now mounted at /tmp/cdrom
When finished unmount:
umount /tmp/cdrom

Note: If your cdrom device is not acd0, check the bootup messages for the proper device.

Yes handling of DHCP adresses based on in which class they belong and to which network they should have the adress….