I just did a test with a single laptop and it seems to be working now. You are correct, the WAN does not need an address. I realize now that I have a separate issue when I consider what I eventually want to accomplish. I really want to block Internet Explorer from accessing the internet and I have just learned that a transparent squid will break the bridge. I will do another post for my new issue. Thanks for the help.

I've set up a draytek 130 vdsl same setup .. I found that this exact issue is due to the setup of the draytek. ensure you have setup the router correctly… and update the fermware to the latest verison a quick setup (ensure you save the config as asked and conferm settings at end as my draytek lost vlan tag each time) *** ADSL Connection Reset router factory defaults Compete Quick Internet Wizard Disable PPPoE/PPPoA client                    (internet access >> PPPoE/PPPoA) Enable PPPoe Passthrough                      (internet access >> PPPoE/PPPoA) *** VDSL connection Reset router factory defaults Enable vlan and enter tag                      (internet access >> general setup) Disable PPPoE/PPPoA client                    (internet access >> PPPoE/PPPoA) On MPoA set                                            (internet access >> MPoA / static or dynamic IP)                       a)  MPoa (rfc1483/2684) >>>  enabled                       b)  Encapulation >>> 1483 Bridged IP (IPoE)                       c)  MTU >>> 1492 If vlan is enabled in step 2 then no vlan settings are needed on the pfsense firewall hope this helps :) Bodie

Ha. Ooops.  ;)

OK so I up dated to 2.1.3 the most recent release and for the last 3 days my memory allocation has been sitting at 46 % Don't know what the dev guys did but she is looking nice and stable now! Thanks Steve

what kind of trouble are you having with haproxy? what config are you using? have you looked at the stats page of haproxy that backends are 'up'.

The shellcmd method may have worked if you put the full path to arp: /usr/sbin/arp

You could use pfSense and then just reconfigure the RT-N16 as an access point. Not sure what is causing your RT-N16 issues though, so that may not solve the issue…

not sure if this is relevant any longer, however it appears the pfsense / dodo isp problem has been resolved. I'm running 2.1.3, however I suspect it might be dodo that sorted things out. Looks like they allow an MRU of 1492 now, pretty sure last time I tried this (a year or more ago) they were only accepting 1500 which was causing the problems. Anyway, I hope this may help someone if they are still having issues. 2.1.3-RELEASE (i386) built on Thu May 01 15:52:17 EDT 2014 FreeBSD 8.3-RELEASE-p16

Hi Shaulliv, I have a similar setup can you please advise how you got it working? Thank you,

Hollander, Something you might want to try with Outlook 2010 is using the Rules Wizard to create a rule that only leaves emails from your Contacts in the Inbox and dumps all the others in the Junk Mail folder. Of course you need to create and maintain the Contacts.  Maybe that would be easier given that you use BCM.  I haven't ever tried it. I have used a program called Outlook Email Address Extractor in the past.  It scans through Outlook Inbox items and extracts all the email address together with a count of emails in which each address appeared.  I used that as the basis for checking that I had everyone worthwhile in Contacts. I'm assuming that "Hot Marijke" and her friends aren't using the same sending email address used by your retarded government official correspondents.

Hi Shaulliv, Were you able to solve this? Thank you,

Yes, there are login accounts from the system.  Is that what you mean?

There is no way to do it from the webgui. The configuration is invalid but more and more ISPs are starting to use similar setups. See: https://redmine.pfsense.org/issues/972 Steve

Why are you not running 2.1.3? Not that there is anything specific that might be effecting this. Steve

Suggestion: use the "bounty" section of this forum for work like this: https://forum.pfsense.org/index.php?board=34.0 Be prepared to provide: good description of what you want provide a share of your eventual profit ($$) There are smart people hanging around here from around the globe, with some luck you can find someone who has time to help you AND is not restricted by law.

You can achieve that with "captive portal + Freeradius". There is a good tutorial on pfSense wiki https://doc.pfsense.org/index.php/FreeRADIUS_2.x_package#HOW-TO_-FreeRADIUS.2B_Captive_Portal_configuration I've followed it and successfully implemented time and traffic quote for users.

I'm 100% sure it's the USB wife dongle. The clients are no more than 2 meters away from it. The strongest channel running is 13. The dongle is running on channel 1. From max 6mbps throughput going down to 4 mbps and starting to lag when the third client connects. Could be a driver issue though but installing new drivers on pfsense is just not worth the time.