Block 80 and 443 on LAN.  Make sure you place the rules above the Default allow LAN to any rule rule.

You also need a rule on wan to allow udp port 1900 (also with IP options?) for the ssdp part of the discovery.
I'm not totally sure on this but I beleive it should go something like this:
Client sends out a multicast igmp packet, 'who is out there?'.
Server responds.
Client then talks SSDP to find out the name of the server and what services it offers.
Client then talks to the media server to request files/streams on the appropriate port.

Steve

Agree. When you have firewall rules on there that serve no purpose and you didn't put in you aren't in control. Who knows what else might be going on. Start from a known good config.

Steve

1. <intel 100="" pro="" 946gz="" (ich7)="" network="" connection="">2. <realtek 8111="" 8168="" b="" c="" cp="" d="" dp="" e="" f="" pcie="" gigabit="" ethernet="">Both have the same issue.</realtek></intel>

This problem is still present on 2.2-RELEASE.

True. On HiAdaptive, the speed stays on max. On Adaptive it seems to step down.

Thanks, your comment about multicast put me on the right track.

We run pfsense on KVM and used the passthrough NIC setting on the guest rather than just using a bridged set up. For reasons beyond me, this does not allow multicast traffic to pass to the network. Changing to a bridged network config for the pfsense VMs solved the issue. omping for the win.

My other issues are best placed in another topic, so marking this solved. Thanks!

Use your first wan as your primary, failing over only in case of failure to your second. Open the ports you want open per wan interface. If you want traffic from your second wan then point your external traffic at it, it'll still come through if the rules are set, at least to my knowledge

No problem. That's useful info, bound to be a few others caught by that.  :)

Steve

It should be no update without a reason.

You should have something similar in the log:

php: rc.dyndns.update: phpDynDNS (MyHostName.privatedns.org): No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry.

I periodically get a "slow response" after restarting PFSense. I think it has something to do with connection pools and modern browsers. I get this often with Chrome and FireFox if I have the browsers open when I restart PFSense.

Try loading up an incognito or privacy mode and run it side by side to see if the privacy mode "fixes" the issue. If it does, just close your browser and open it back up. Don't just close a tab.

where can I find the check-box to disable the lighttpd logs in Version 2.1.5-RELEASE (amd64)
built on Mon Aug 25 07:44:45 EDT 2014 ?

thank you

edit: found it


I'm not sure about those cameras or how many you can stream or processor required.  I never stream more than 1 at a time due to bandwidth constraints.  Mine are not open to public so when I'm not logged into one, its not burning bandwidth.  The way I do it, I could support as many cams as I like on a little bandwidth.

thanks for the replys, i have updated to 2.2 RELEASE now anyway to will rescan again soon as see what comes up

NVM - fixed with reinstallation

In pfSense install the OpenVPN client export package. Export the in-line config for Android. Import that into the Android client. The certs and key are all taken care of.
I'm sure there are some instructions here somewhere…...

Here:
https://doc.pfsense.org/index.php/Android_VPN_Connectivity#Exporting_configuration

Steve

Nope.  Not mbuf exhaustion.  I originally thought this might have been the issue but it's no where near the max.