Yes thank you for all the help so far.

…that's frustrating! Interestingly: On an other box (fiber modem) it's the same, while on a third one (PPPoE) it's logged only once a day, after reconnect... Strange.

I ended up changing the vmware nic's from the e1000 to vmxnet3.  When doing this, pfsense blew up and wouldn't boot anymore.  Tried to change it back, but it didn't work.  I honestly think something happened when I upgraded from 2.2 to 2.2.1. I ended up reinstalling and restoring the config.  It broke the system again, and then did a fresh install and only chose options that I knew were safe (like firewall rules, dhcp, dns, etc).  I didn't choose the packages or system, or parts I didn't use.  I am now back up and running, and the speeds are about 60/12.

802.1x authentication takes place between the client and the switch directly. pfSense will not be involved in the process. Managed switches are mandatory for this I'm afraid.

Hello, please build a DMZ and place the Xbox and the BluerayPlayer then there inside. And use then the Squid Proxy only for the entire LAN or your Servers. So you do not need; open to many ports to the entire LAN the both devices will not be affecting the entire LAN if an error occurs the DMZ will be reachable from the LAN side and from the VPN over the Internet

Not off hand. I would be searching the FreeBSD mailing list and forum using the details from the specific adapter given by pciconf. Steve

Same here… any idea?

In proper routing a route is literally just a destination network range and the gateway used to reach that network range. So you can't have a route without a gateway. Dumping traffic onto an interface is known as a connected network and is using ARP, not routing, to handle traffic. So if you want pfSense to send traffic bound for 172.20.0.0/16 to interface 3 without a gateway then you need to give pfSense an IP in this range on interface 3 and make sure there are no layer 3 devices between pfSense and the client machines on this network. I suppose you could put a proxy ARP device of some kind between pfSense and the 172.20.0.0/16 network and then create another /16 subent between pfSense and the proxy ARP device, but that would just make things complicated.

Just tried that. It did not work.

If I'm going to shoot in the dark, I might as well shoot twice. :) https://forum.pfsense.org/index.php?topic=88081.msg505539#msg505539

Sorry but no one has any idea why this doesn't work ?

hello, Let me thank you for using your "pfctl -k ip & cron" solution to be able to use schedule on pfsense 2.1.5 ( because upgrade to 2.2 failed for me… some packages I use in 2.1.5 did not worked any more on 2.2 ) and now I need help if possible: question is: how to clear only connections that go ( or come ) to specific destination port, I tried to find on internet some help but no luck. The problem is that children are playing minecraft all day long if possible and I want to clear only the connection with port 25565 used to go to minecraft servers and not all connection established at the expiration time, in case something important is going on background and of course as you know at scheduling expiration rule is not kill established connection on that port. Anybody who can help ? thank you

@doktornotor: Accessing how? i can't see the website, i can't even ping the IP.

ICMP is the protocol used by ping.  You don't need to worry.

The best vpn is the one where you own both ends.  Server and client.