Verizon forums on DSL Reports is probably were you'll get answers for this.

Well, not an academic issue as its the primary firewall for my home office and it seems silly to limit bandwidth below a certain rate when the equipment (not to mention paying for it) should be able to handle it. That being said, within 4hrs of the initial post, the firewall killed again, without artificially saturating with a speedtest.  Additional testing with hard setting the rate to 1000 didn't seem to have an effect.  Something over 100mb/s and obviously less than 1000mb/s kills the thing. At this point, reviewing my old notes and logs from a while back… and actually forum posts here.  The original WAN port was bad, so with the current symptoms and it not seeming to be a pfsense issue, pretty sure the old IBM appliance is just giving up the ghost. As such, think it is time to replace... so just going to mark this as solved so folks don't attempt to go down a rabbit hole.

hmmm that is what I was thinking too.. I made the MAC address static and block traffic. I'll check back in a day or so to see if anything turns up.

Not sure what your seeing.. But yeah NO..  Sorry doesn't work that way..

@markn62: Does the Vlan adapter need its MTU adjusted from 1500 to 1528 to tag packets or is it done behind the curtain? Not 100% sure but never had to do it with any of my setups. @markn62: Does the dedicated parent adapter need to be created and enabled No. I usually leave the parent alone since I avoid having tagged and untagged traffic on the same interface. When I started this (mixing T & U) was strictly a no-go. Nowadays it is supposed to be ok - but I still don't feel comfortable with it. @markn62: If both a Lan2 & Vlan adapter are needed for the Vlan adapter to tag packers properly, what should the parent adapter's MTU be set too 1500 or 1528? not needed, don't mess with it.

If a burst of bandwidth is a problem, then traffic shaping may be in order. But it would be nice to know what is causing it. Tricom_2 shows a reduced mirror of the incoming bandwidth, indicating something like ACK packets. If this is the case, then it's a TCP stream.

If you try to sniff the packets then all you'll see is encrypted data.  You can look at Squid and SquidGuard logs to try to get any information but I think you'll be sniffing the LAN and WAN ports instead.

Hello Do you have the opportunity to test with a computer on each interface (PC on WAN - pfsense - PC on LAN) and have some iperf or similar tests between the two PCs  (in passthrough and in firewalled configuration) ?

Put some rules on them.. Unlike lan opt interfaces have no rules when created so no access.

It works since it uses the default gateway to exit. The LAN interface ip can go out routed and natted like any other lan host ip. https://forum.pfsense.org/index.php?topic=115870.0

What is the limit of hosts to be connected through pfsense or maximum bandwidth handling …......

@Chrismallia: for UTM maybe checkout untangle ? It has zeblo for web filter  I believe fortinet also uses zeblo Thanks.  We used IPCop long ago, then Untangle, and now pfSense.  I'm trying to get a sense of how it compares to established companies.

Hi. You yourself have answered the question in Excel form. :) Regards

Thanks for pointing that out, I have obviously overinterpreted something I read somewhere.. However, then the question morphs into a different one. The certs are in the 'all' export and possibly in the 'system' part? However a lot of other stuff will get imported with 'all' that I want to alter and also the number of NICs (but not interfaces - a number of VLAN interfaces) are different on the two boxes, need to edit something here then I guess. One piece if info that may be useful is exactly how the xml is imported, are info superimposed or are every section present in file type (all, or parts as chosen) only overwritten? For instance if sections are empty in backup (to be uploaded) will the resultant config then still have what was in that place in the system? I guess it makes most sence that all values are overwritten, so I probably need to edit uploaded file. I'll do some testing myself, I can always reset config at this early stage of the config. Thanx,

@louisg00: Here is the amazon link: Thank you. This is very helpful. I have edited your initial comment to remove the link since what the protectli is doing is against our terms of use. https://doc.pfsense.org/index.php/Can_I_sell_pfSense

What makes you think this is a pfSense problem?