I purchased a TNet 1000 from them in October, no issues so far. Their support is good. To be fair I have only dealt with them twice.

got it .. thanks…

use backup to get the confix.xml file
make youre chanches then use restore to get them in to pfsense
and they will survive a reboot

try deepOfix Mail Server, http://deeproot.in/deepofix/features, a well trained monkey could probably set it up!

Services -> UPNP.

Make sure you are on 1.2-BETA-1 or a recent snapshot (RELENG_1_2)

Found strange behaviour.
After reboot, PPTP didn't work, even log file didn't show nothing strange. I got internal IP, but unable to ping to/from LAN/WAN.
After this made a connection via IPSec, everything working fine. ping from LAN to WAN and WAN to LAN works like a charm. Disconected IPSec, now even PPTP is working :).

Cool, thanks for the info.  If we decide to write up a script to save the logs, I'll certainly share it, although I have a feeling we'll probably resort to sending logs to a syslog server.

Not sure these nics even support it. Checking cables and switch might be a good idea as well.

Look again.  This was asked and answered in the last 24 hours.

Yeah most places are going to allow IPsec out, but you can run OpenVPN on any port you wish. By default it's 1194. It's UDP though, so running it on like port 80 may not be helpful if the network only allows TCP 80. But you can run it on UDP 500 if you want, then it should definitely work on any network that allows IPsec.

Just configure services>DynDNS. it will check for an IP change un reconnection and update the account if there has been a change (given that the pfSense WAN is your real WAN and not natted behind another router).

Entering a gateway at an interface will add NAT to it by default (unless you enable advanced outbound nat). Don't set a gateway at any of your LANs for the pfSense interface config. You only need firewallrules to prevent the LANs to talk to each other. A rule like this should do the trick:

At firewall>rules, LAN-tab: pass protocol any, source LAN-subnet, destination NOT LAN2-subnet, gateway default

At firewall>rules, LAN2-tab: pass protocol any, source LAN2-subnet, destination NOT LAN-subnet, gateway default

Now both LANs can get out to the internet but not to each other.

great thanks for that will get the nuts and bolts together

have found a few more nice features here that  will add.
(1) set the accounting update time
(2) allow to add a second radius server for fail back
(3) make all the changes to pptp server as well.

hope to have these done inside a week

ubuntu use apt for package updates, which usually use ftp or http. (cat /etc/apt/sources.list to see)

and remember that ubuntu just released their newest version, of course the mirrors will be slow