Do you have VLANs? Is WANFFTC on a VLAN of re1? Post some example log entries so we can see what they are related to.

Uptime 10 Days 07 Hours 49 Minutes 23 Seconds Everything is working fine.  Thanks again everyone. -ram

You need two VLANs to the AP.  I will assume these are 10 for the LAN and 20 for the guest: Create VLAN 10 with a parent interface em1 Create VLAN 20 with a parent interface em1 Create a bridge with members em0 and em1_vlan10 Assign LAN to Bridge0 Set em1_vlan20 to be what you want for your guest wi-fi Tell the AP to tag your LAN ssid with VLAN 10 and your guest SSID with VLAN 20.

bump Is it true that the IGMP proxy can only handle proxying between different interfaces, not between VLANs sharing the same network port? Thanks.

what does your tracert / traceroute show ?

you want to block an iphone using an app? or you want to block an app on an iphone working? But you dont want to block the iphone itself ?

I agree that esxi is probably the best solution for it. But I had hoped for an all in one solution as I'd like to keep devices used and physical space consumed to a minimum. I'll try the method stephen has explained tomorrow when I've found some docs on it. Thank you for that :)

Still limited to 5 source IP addresses though  :(

Please don't double-post.  I answered your same question here: https://forum.pfsense.org/index.php?topic=87881.msg485252#msg485252

@Moses_2015: Is there any way to export those graphs to word or excel ? Which ones, built-in RRD graphs or bandwidthd graphs?  Images or spreadsheet data? If you just want some occasional images, just right-click and choose 'save image'. If you want to grab some bandwidthd images on a regular on-going basis, you can use the graph images that are already generated as .png files for the web gui, plus some scripting of your own.  Check /usr/pbi/bandwidthd-amd64/local/bandwidthd/htdocs for the bandwidthd image files; these are updated regularly as long as bandwidthd is running. rrd graphs on the other hand are normally updated only when required by the webgui; these live in /tmp.  You can look through /usr/local/www/status_rrd_graph_img.php to see how you can generate specialized rrd graphs on your own. Generating  a spreadsheet file from the rrd data should be possible, but 'this is left as an exercise for the reader' :)

who said anything about spoofing mac - if you change the mac of the device connected to the modem.  You quite often have to power cycle the modem to clear its old cache and work with the new mac.  Or you can do what I do and use the same mac on your different copies of your pfsense vm (never on at the same time) but this allows to keep the same public IP.  This allows me to test with different versions, etc.  Even if playing with different distro I set the mac the same on the wan interface so I keep the public IP.

@Derelict: Considering all the "As long as you don't call it pfSense" talk, it would make sense to have a straightforward rebranding process. I know nothing about the FreeBSD boot loader but it looks like the files you want are /boot/brand.4th and /boot/beastie.4th.  At least on 2.2 (FreeBSD 10.1). I'd search on the FreeBSD boot loader for more info.  They're more than simple text files. Thanks, I will look into those files :-)

Apinger has issues hear are some bugs : https://redmine.pfsense.org/issues/4081 https://redmine.pfsense.org/issues/4311 https://redmine.pfsense.org/issues/4354 https://redmine.pfsense.org/issues/3859 https://redmine.pfsense.org/issues/3815

I am using NPS RADIUS in Windows server 2012 r2 Is there anyway to fix it.

It looks like that's it, many 'delay' entries in the log.  Thank you!  I've been having some latency issues, I guess I've had my head backwards on this, my thinking was one source of high latency might have been this reloading issue, but the causation is the opposite way! Oh well, thanks again, learning, too often it's embarrassing and painful, especially after all that banging my head on the desk.

Bump

well I manage to get major hosts of iDevices ! and to make none mistake alias``` 17.130.137.73 17.130.137.75 17.130.137.79 17.134.62.129 17.142.164.50 17.154.66.11 17.154.66.54 17.154.66.67 17.154.66.69 17.154.66.74 17.154.66.108 17.154.66.109 17.154.66.110 17.154.66.124 17.154.66.125 17.154.239.50 17.154.239.54 17.158.28.8 17.158.28.14 17.158.28.17 17.158.28.21 17.158.28.25 17.158.28.36 17.158.28.37 17.158.28.48 17.158.28.49 17.158.28.50 17.164.0.36 17.167.136.28 17.167.137.30 17.167.140.64 17.167.146.36 17.167.146.37 17.167.150.74 17.167.193.60 17.167.193.61 17.167.193.64 17.167.194.234 17.167.195.58 17.167.195.66 17.171.71.105 17.171.75.198 17.172.208.47 17.173.66.82 17.173.66.84 17.173.66.133 17.173.66.134 17.173.66.135 17.173.66.136 17.173.66.144 17.173.255.107 17.252.27.248 23.44.244.118 23.44.246.52 66.235.135.144 82.166.201.169 88.221.154.217 88.221.155.205 92.122.12.93 92.122.15.163 92.122.214.57 184.29.70.224 217.12.15.152

You are missing a local group with assigned privs on pfSense box. https://forum.pfsense.org/index.php?topic=44689.0 Also, if you want to query a particular LDAP group only, fix your extended query: https://doc.pfsense.org/index.php/LDAP_Troubleshooting#Extended_Query

The challenge with trying iperf is that I have to reconfigure some things to test it. I am currently router-behind-router with a twist. The Motorola NVG589 in front of my pfSense system has a hybrid NAT as well as public IP, because I am paying for multiple IP addresses. So I have 5 IPs on the public subnet and then a private 192.x.x.x subnet. PFSense sits on one of the public IPs and I can use VIPs for the additional and NAT them in to a given host. The issue is putting iperf out on one of those 192.x.x.x IP addresses, between pfSense and the AT&T router (actually sitting next to pfSense, but "outside" my firewall). iperf can generate only 10's to 100Kbit/s in that situation, from inside my LAN to that immediate WAN before the AT&T router. I can get better iperf performance to a system I have at a colocation than a system sitting on my Motorola router just outside pfSense! So to test my pfSense router I'd have to reconfigure it entirely, do the test, and then put it back so my family can get their internet back :)