@tanhosy:

I customize the pfSense sources and rename the "pfSense" to "MyFirewall" and sold it as a commercial product, I have to open my sources code or not ?

The full details are on the license page, but since the code is BSD licensed, that means you do not have to disclose the source code. You only need to keep all of the copyright notices and license disclaimers in place.

If you really want to know 100% for sure, you will need to consult with a lawyer. Which if you are seeking a commercial business, you may already have one handy.

Try an even lower MTU and see if it helps.
If it does start increasing the MTU until it happens again then go back to the last working MTU.

This is the sticker/badge I'm gunna get made up as a dummy run, it will be 16mm x 20mm - unless anyone can think of any show stoppers.

The first batch will be of 250.

badge-rc1.png
badge-rc1.png_thumb

Others have reported the same thing, where ntop reports just over 50% of traffic as bad.

I believe it did have something to do with checksum offloading or NAT causing some checksums to appear bad.

Either way it seems to be purely cosmetic.

i dit not allowed anything.
but the ssh port (the pfsense ssh) is open on a Carp VIP (with ssh closed in forwarding and rules).

i will send you the info asap.

You could sponsor it!

Reboot did the job, quality graphs now working. Must have been a corrupted RRD DB

No.

@wonslung:

why not use static dhcp?  it's much more simple than using static ip and the results are the same

Agreed.  Static IPs are for servers and network equipment.  Anything the end user touches is DHCP.  Addresses can be reserved so they always get the same one, but no end user equipment is ever static in my environments.

Personally I'd go with IPsec since I'm familiar with it, but it really shouldn't matter.

All you'll want is to make sure that the VPN appears as an addressed interface on both ends, then set up the VPS to do NAT with the VPN interface being the "inside".  Configure pfSense with the proper rules so the box you're using is routed over the VPN and you should be good.

I don't have my pfSense box hooked up right now (running an 1841 so I can learn IOS) otherwise I'd try it with my dedicated server and post specifics, but maybe someone else can fill in the blanks.