Ok, I updated to 1.0-RC3

It works  ;D

Auto-solved ^^

You probably should start with deciding how many zones you need. A typical setup to start with would be 3 nics in your pfSense (WAN,LAN,DMZ). Depending on usage a 4th nic for "home use" might make sense that is only able to connect to the internet but to none of the other subnets. Put the servers that should be available from the internet to the DMZ. The other trusted machines go to you LAN subnet. Untrusted machines go to the "home use". You can setup DHCP individually for each internal subnet at services>dhcp.

Now create the additional IPs you have at your WAN connection using firewall>Virtual IPs. You can use them then for portforwards to your servers.

Create firewallrules between the different subnets with appropriate rights at firewall>rules (like pass LAN-> DMZ; block DMZ -> LAN;…). Setting up aliases for ports/hosts can keep the amount of rules low and makes reading/changing firewallrules later easier.

You also should enable nat reflection at system>advanced as it usually makes using a DMZ from other subnets easier.

Can't reproduce this.

Modify the /etc/inc/system.inc file - the /etc/syslog.conf is build in there.

Check the log option for your default lan to any rule. Then all connections will be logged as pass in your syslogs. Other option is to use a package like darkstat or ntop.

@Gertjan:

A DSL PCI card modem device ?!! Why not, as long as it exposes on the PCI side a compatible Ethernet interface.

Well, if I remember this one right, they were offering special drivers for some brand(s?) that had to match built numbers of the distribution etc.
I doubt they were serving an ethernet-like interface to the host machine.
And manufacturers were quite limited. Very limited at that time (I haven't looked since then).

jahonix

FTP Sesame handles bridged interfaces.  This should be working.

Thankyou!

Sorry,
I have just tried what you suggested and still does not work.  Due to this not being connected to the internet what should be used as the gateway?  i have tried setting it to 0.0.0.0 and the WAN ip address but no luck either.

Thanks

Beau

@sullrich:

Take a look at /etc/inc/pfsense-utils.inc

In paticular:

enable_rrd_graphing()

Thank you sullrich for the tip.

I am using pfsense in a very pequliar way, you can find in :
http://forum.pfsense.org/index.php/topic,772.msg4635.html#msg4635

Since my original post, the ethernet card of the LAN interface, totally useless to my wireless community application, gave it's seat on the PCI bus to a 3rd wireless card, shrinking to a vlan opt that serves nothing.

This, as an update.

The important thing is that by looking at your mentioned file, I now have quality rrd graphing on one of my wireless links.

My coding skills are just not existing, so my implementation is the "crude" way.

a) For my setup the quality of the WAN interface is of minimal importance. It is directly wired to the cisco router.

So, I changed the if statement :

if("$ifname" == "wan") {
/* create link quality database */

to the Atheros card interface :

if("$ifname" == "opt2")

b) Then, I had to change the ip address it is pinging to. I did this by "hardwiring" the ip of my peer's wireless card.

I know, it's not a very educated way, but it works.

out=$btick ping -c $numpings -q $gatewayip $btick

this was changed to :

out=$btick ping -c $numpings -q aaa.bbb.ccc.ddd $btick

The next thing I have to figure out is which part of the code I have to duplicate to provide the same service for the other two wireless interfaces.

Any help on this will be appreciated.

If I had the required programming skills, I would have included a parameter box in the wireless interface web page for setting the ip to be pinged.

But I am not a programmer, nor a purist, so even so it's a nice thing to have.

It turns out to be a bad setting in the slow machines BIOS….

There is no problem with pfsense, I have problem with my hard drive. Thx for help.

Can I get access to this machine?

Great!  Good to hear.

Thanks, I've add this:

http://faq.pfsense.org/index.php?sid=147209&lang=en&action=artikel&cat=1&id=178&artlang=en

"and Luiz should be installing the .po files soon."

Still have not heard from him…