I am also been looking in the forum for taht topick with no luck, would be great to get some informations and time line!

Thank's in advance

I have a similar setup.
You should use a AP only device, 2.4 g,b
I use a linksys about $50
Very nice, never have a problem with it it up 24-7 with no lock up like some
others in the market.
The reason is to take the load off you file server
especially if you use a software RAID setup like i do.
and/or it allows you to place the wireless ap in the center of your home or office for equall
coverage with out the expense of RF cables and Antennas.
and if your ap ever burns up your file server will still be running

just my 1/4 of a cent thought
happy networking

I tried enabling the filtering bridge option and disabling…same problem.

pfSense will do what you want, but how fast it moves packets will depend on the hardware you chose (as has been discussed in many threads).  That same limitation applies to any other choice of router software.

WEIRD  ??? ???

Changing the MTU to 1400 solved the problem.

See there : http://m0n0.ch/wall/list-dev/showmsg.php?id=17/46

Now I must find a more standard way to solve this problem.

Start a new thread.

Search the forum. Known error.  Upgrade.

I do not understand exactly why no…?

Might be good to see system load details and a list of what packages you have installed.

Add a rule blocking IPV6 at the top of the interface rules and do not set the log checkbox.

Denyhost is available thru pkg_add

just note that the package may not install all dependencies - just read the message after the install

using it with pfsense and works fine

All suggestions are appreciated!

regards Xed

Why?  If it really bothers you this much simply disable console logins in System -> Advanced.

Yeh, i used to run a linux box with shorewall and had the same issue, I know its nothing to do with pfSense.

Thanks for the help.

This sounds more like a job for Linux Heartbeat than for Pfsense.  From what you wrote it sounds like you have intelligence at the server level to determine which should be master and which should be slave.  Linux Heartbeat does a very good job at shifting around virtual IPs and services…

If you wanted to use Pfsense, you could set up a failover load balance pool.  The only problem there is that you would have to kill the primary server if you wanted failover to occur.

-G

@sullrich:

Those are cosmetic.  It's trying to delete prior schedule items.. No biggie.  Please file a bug report and mark it as non-priority and I will look into it.

I have filed a bug report so I will close this thread.

Marcel

So the system has an onboard ethernet, 802.11a PCI and 802.11g PCI (plus usb ethernet for uplink); when I bridged g+ethernet and then set up a as a different range with different dynamics, the dhcp server wanted to serve a single range of dynamics on both interfaces (the g/eth bridge, and the a), which of course resulted in nonroutable addresses on one of the nets.

While reconfiguring I inadvertantly bridged the a net to the g/eth net. It works, including over a reboot. Beats the heck out of me. But it's been working for over a month.

What do you define as loadbalancing?
pfSense can do Roundrobin balancing so not a "add the bandwiths of both WAN's together" but more a "spread the connections to both WAN's"

What do you mean with: "My firewalls are behind a hardware loadbalancer that supports loadbalancing firewalls."
Could you elaborate on that?

It was more Seth's posts that suggested a desire to bypass corporate security/policy.

My 0.02 <currency>- if you want the VPN to really be secure then you need to manage the clients too.  Convenience is nice, but having your corporate network compromised because your end users can install anything they want isn't a good goal ;)  Oh, and I've seen that happen, so it's not just theory.</currency>