Try it and see how it works for you.  The method is correct.

I am working with No-IP support now, but I think it's because I had the No-IP app on my Iphone that it updated the DNS. I have removed the app. I thought the app was just to monitor my ip address didn't know it would make updates. Waiting to see what support has to say.

It depends. If you have created firewall rules for the lan interface then it is not inherited by vlans. But if you are running captive portal running then vlans will also inherit it. I think same goes true with squid (not very sure).
I hope this helps.
Ashima

https://doc.pfsense.org/index.php/Accessing_modem_from_inside_firewall

Lets all not forget that the IP database of location data - is far from perfect..

Having a bitch of time trying to get maxmind to update theirs.. A /24 off our /16 they kept saying was in Malaysia..  When clearly its in the US..  Tried for months to get them to correct via their forms with little luck, until it became moot when we no longer proxied data web traffic through that connection.

As to what vpn service your using.. Unless you got one that allows you to pick your endpoint location and country and you did.. And just using it to mask your traffic from your local isp then sure the endpoint could be almost anywhere does not matter where the HQ of the company is, etc.  If your having a issue with your VPN ip now showing the origin country that you want for its IP, then you should get with your vpn provider..

Again - geoip information is not an exact science ;)

This is not TV where they get an IP and lookup that is located in the bedroom of the house on 123 Street on the 2nd floor hehehehe

I've described it here two days ago: https://forum.pfsense.org/index.php?topic=146424.msg795676#msg795676

Some IPv6 & IPv4 multicast comming from the clients regardless of enabling IPv6.

Also out of state traffic.

https://doc.pfsense.org/index.php/Why_do_my_logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection.

If you don't want to see the IPv6 stuff create an IPv6 block any any and don't log.

The default block rule logs everything.

Sounds to me like you don't really need VLANs. For your VPN clients you can simply use an alias consisting of a list of IPs to route over the VPN. You wouldn't need a VLAN for wifi either unless you wanted a separate Guest WiFi Network.

Hello guys, sorry it took soo long for me to respond, i hope i still can help someone by writing it down now. So this is how i did it. I created some firewall rules to allow the connections i wanted to pass, and doing so  logged DHCP requests and leases with the timestamps, for questions of readability and/or time saving issues, i forwarded this logs to a remote server using rsyslog, you can do this by enabling remote loging on pfSense. On the rsyslog machine i configured graylog to get inputs from rsyslog and pfSense extractors with regex, to filter out the information i really wanted without the overhead of information, than correlating information and i got what i wanted.

NOTE: This is the way i did it, im still a noob so maybe there is some new ways or other ways to do this faster/better.

Take care.

It was a misconfiguration of the equipment owned by my ISP. They corrected it and now everything works fine.
Thanks for your help!

Boot into single user mode and update the driver by hand, petition the FreeBSD developers to include the driver. Add another NIC to the device, so pfSense does find at least one network interface.

Thanks.. Already posted in the proper forum part.

Thanks jimp, much appreciated!

;D

Everything works absolutely fine after the BIOS downgrade. I am running coreboot 4.0.7.1 now. Uptime 1 day and >6 hours.

At least for their regular DSL Fusion X2 service their 6rd works with pfSense. Just configure the modem to bridge an Ethernet port for pfSense WAN port. Configure pfSense to use the 6rd settings they provide. It's tunneled so it's not as good as native IPv6. You wind up getting a /60.

Don't know about their resold uverse or fiber products.

Still trying to get this to work. Using the utility "radtest", I noted that the radius server seem to be just listening on the WAN port of the box, eventhough I configured Freeradius to listen on a LAN port. Anyone? Need more info?

help me please :(

I'm not aware of an plans to do that. It seems unlikely to happen.

I think it would need to be significantly more used to consider it to be honest.

You should be able to use it as a package though.

Steve