It's been a while since I've looked at an interface page for wireless, but I believe there was an option there for allowing clients to communicate with each other directly. Do you have that set?

I wrote in the 2 IPs to OpenDNS that Perry gave me. And it seems to be working  ;D

I would like to just bring this up again since we have 1.3 available to us. Can I see an example of an entry? I am not sure that I am getting it right. I make the alias, it saves, but when I make the rule it gets upset. I am going to plug away a bit more at it, but if someone has an example I can work off I would love it. :) EDIT: Okay, I found that I was just being dumb. I have it sorted now, but I am wondering if there is a size limit to the number of lines in my alias import? Okay, I just tried to feed it this list. And it's just sitting there and the DNS Forwarder stopped working. Once I get more info I will let you know. EDIT AGAIN!: oops… List to long, broke my post.

@submicron: Or you can look at the spamd package, which is still in development, but works quite well. quite a few of us are using the spamd package with great results..

The latest 1.3b12 and 1.3b13-pre releases of M0n0wall contain changes to bring in full (?) IPv6 support. Is it worth looking to see if these changes can be ported into pfSense ?

I ran into exactly this problem too. My connections were all physically stable, and established connections (downloads, VoIP calls, etc) were reliable. But new connections were intermittently flaky, and packet loss was appearing while pinging the router's internal addresses. A quick look at the RRD graphs showed that I was hovering around the 10k default state limit. So I doubled the state table size (in System / Advanced). Thanks for the thread. Love those graphs.

First off, get off the release candidate onto the final release. Secondly, there are a few ways of solving the problem.  Probably the simplest is to block any outbound traffic on 80 and 443 (yes, there are other ports, but if you're not blocking by default it's a good start) and allow traffic to the proxy.  Then simply tell people that they have to use the proxy.  You could also install Squid in transparent mode and configure MLabs as your upstream proxy (and you'd still have to block 443).

How about: wget --output-document=traffic.png --no-check-certificate --user=admin --password=yourpassword "https://10.10.1.1:2001/status_rrd_graph_img.php?interval=4h&database=lan-traffic.rrd&style=inverse" in a cron job on your web server? I suppose there is cause for a little concern having plaintext usernames and passwords on the web server, but…

Take a look at Traffic Shaping (there's even a forum for it).

Another- Lan net - Lan net why are those needed? I think the answer to your problem is in your system logs. But we need more… What interface do the various names equal? rl0?   rl2?   What are they?   If I had to guess Id say you had a loop connection someplace. Can you draw a picture of your network? http://www.gliffy.com/ is a good resource for this... The same mac address is showing up on both rl0 and rl2 but expected on rl1.

I'm not sure if it's even linked in the docs. I only know about this because cmb posted it here: http://forum.pfsense.org/index.php/topic,6784.0.html I'm not sure if in 1.3 the gui solution will just be an implementation of the described procedure in the pdf. But dont worry about breaking someting when you update to 1.3 1.3 is still more than a year (or even more) away :)

Check out the load balancing/failover function.

if you run tor as a server it can be hard on pfsense you will want to raise your state table and also set pfsense as "aggressive". I run a tor relay in the lab with 10mb up / down set for it, pfsense has been dealing with it great. but I'm not hosting it on the pfsense box. Tor is one of the best tools for testing hardware and or mucking with least cost routing…cant do that part with pfsense....but upsteam i have some devices doing it. Tor allows you to bring and turn around as much traffic as your willing to give it.

You can install whatever you want…. unsupported. --> You are on your own. But for gods sake dont do it. A firewall is a security critical system on which you just DONT install unneccessary software.

or sockstat -4 | grep lighttpd

hi i did change my isp really and back to the previous one  :D still one more problem bugging me here, it is squid upstream proxy not working with pfsense, and most of the isp here wants us to use it when connection becomes bad, well one day might work thanks