@nyit_dk: phil.davis, it will run but if you at the same time use IPSEC, it will drop dead :( Oh - I use OpenVPN, no IPsec. I expect Ipsec troubles are not specific to Alix. And it might just be something related to the calculation of subnet max address, which has a nasty bug on 32-bit systems. That bug easily runs the Alix out of memory. Forum: https://forum.pfsense.org/index.php?topic=87257.msg491635#msg491635

no problem :)

The key will lie in identifying the twitch traffic, or the game traffic, and policy routing it separately. How you do that is up to the services in question. If all the twitch traffic goes to a specific IP, or if the game traffic goes to a specific IP, then you could match that, or match by port numbers perhaps. As long as you can match the traffic with a firewall rule, you can make that happen, but the specifics of that depend entirely on how the services operate.

Set your browser to bypass the proxy for internal addresses.

Maybe you put your SSH key into pfSense in a user (System > User Manager)? Seems the most likely explanation.

We take a git checkout of the FreeBSD repository and then apply our patches to it, so they aren't committed into that repo (yet…) The result is the (harmless) tag calling it a dirty, dirty, kernel.

thx very much for your help

Probably solved, see: https://forum.pfsense.org/index.php?topic=89259.0

@Derelict: However, trying to browse to any webpages still fails. Fails how.  You'll have to give us something to go on.  Can you resolve names?  Ping? What? I rebooted pfSense after spoofing the MAC, and now things seem to be working.  I will call my ISP tomorrow to see if they can remove the old MAC address or renew the lease so I no longer have to spoof it.  Thanks for all your help!

@doktornotor: [image: 34y5q0w.png] why pink sir? :D :D

Ultrasurf contacted Google and asked this url: http://74.125.206.93/gwt/x?u=http://66.221.61.150/news/8VrySXvVPg0QS9Vo/0J_1AaiLjDYLy/3FulZtSTAtNf/1D1-j5O9djWY/Y8y6vO_vyUyfM/_XQoYTfBZa/IP8-XUrNi5/8cUPgaXWe/hNo9SBD1/fnFNkxv-ZLDmH/taEzi0T-QjSZ/9l96mNgMZ/79v2JvVBGgj So I tried to open it on Google Chrome and view source but can't find anything that says what it is doing. I suppose Ultrasurf is getting new ip addresses of servers using this way. So, is google being used by ultrasurf ? Is google aware of this? may this be legal? I suppose its legal because is Google Mobilizer Service. A service to show an entire website as mobile friendly. Good trick Ultrareach!

@cmb: Indeed, it could have been anyone. There is no solid indication of who is responsible. This thread's timing could just be a coincidence. "According to Verisign's latest Distributed Denial of Service Trends report, attacks can cost between $5 (USD) per hour or as low as $2 (USD) an hour. In addition, massive and longstanding attacks can be launched for as little as $800 a month." http://www.securityweek.com/ddos-hire-services-cheap-effective

Could you PM me a copy of your dhcpd6.leases files? Can scp it off from /var/dhcpd/var/ directory, or download /var/dhcpd/var/dhcpd6.leases from Diag>Command.

Consider it done!

@sparkynerd: The only problem I have now is there doesnt seem to be any internet access on either vlan. I am guessing this is a firewall rules issue? Without any information we'll just be guessing, too. Yes, you need pass rules on your interfaces that allow traffic from your clients, into your interfaces, and into pfSense. The following are on an interface called GUEST.  

johnpoz Yes, you are correct, I have created 3 equivalent Interfaces on pfSense, LAN 192.168.1.1 BLUE 192.168.2.1 and Orange 192.168.3.1 Thanks for your reply.

Yep, there's a current bug involving nested and mixed aliases you might have hit. Does this apply to your configuration: https://redmine.pfsense.org/issues/4296 Steve

I'll give it a go and see what shows up, although one thing I have noticed, I can specify a log size in bytes bigger than the physical hard disk, dont know if it would be worth throwing an error message saying log size in bytes exceeds disk space, otherwise you can file up the HD quickly and then possibly crash some part or all of pfsense that way.

@citizenccc: So, how can I save my session in the new pfSense version? Simple - you don't - https://forum.pfsense.org/index.php/topic,72418.0.html Go nag on issue #3128 if you care.