@digity: To split up the network I set up a VLAN (ID 20) and assigned interface OPT1 to it. Devices successfully get an IP address from pfSense, but oddly don't get Internet access. Even more odd is I can't even ping the firewall (192.168.20.1), but CAN ping devices from the firewall (via console and webUI). The VLAN and OPT1 interafce were generadted via the "Assign Interfaces" option on the console. Any idea how to get devices on OPT1 to successfully get Internet access? P.S. - On the other interface (LAN), devices get Internet access with no problem. SOLVED! I didn't have the correct rule set up for OPT1 interface (Firewall -> Rules -> OPT1). I erroneously selected "LAN net" as my source in the allow rule (for IPv4). It should be "OPT1 net" (or maybe "any" would work too). Once I changed it to "OPT1 net" devices were able to ping the firewall/pfSense box and get on the Internet. Hope this helps someone else.

Yeah, lack of sleep and caffeine don't make for a cognizant mind. So it may be bad memory? I'm still trying to figure out why its in readonly mode, and whoever set this up put permission on file transfers so i can't get access to the backup. The bios diag came back all clear on the memory/ram.  Look like a complete reinstall is in order. Now if I'm doing a full reinstall on a new HD (got a sandisk SSD) I should be able to pull the config file from the old HD through the pfSense installer right?

Hi dude, i`m on same problem. I cant figure out till now. Have you ever been able to solve this problem?

If they are routing the main block via the transit block, you should be able to just add virtual IPs from the second block. You might want to consider obfuscating the first octet or two of your IPs.

Thank you.

If the servers do not support DNSSEC, then yes, you'll have to disable DNSSEC in addition to enabling forwarding mode in the resolver. Given how OpenDNS manipulates record results to perform its filtering, it's no surprise they don't support DNSSEC.

facing problem with streaming site like showbox, netflix or other movies site i  used https://www.downloadwab.com/download-revo-uninstaller-pro/ and also http://filehippo.com/download_bitdefender/ but still facing the issue

What were the routes you measured or which interfaces were laptop and server hanging of during measure? Can it be you measured one with routing and the other without?

@Derelict: No matter what, pfSense captive portal will not pass IPv6. It will be IPv4-only. Then it's solved. I'll have to use iptables to filter MAC addresses and abandon pfSense.

I disabled the VPN NAT Rules, the VPN interface and the VPN itself.  After this the speed test results varied from 250 to 300Mbps.  Looks like the VPN has something to do with the slow speeds, even the sites that weren't using the VPN. It occurred to me that I recently updated from 2.3.4 to 2.3.4-1.  I might not have noticed the slow speeds until this latest mess with comcast.  If the slow speed was only on the VPN I might think it is a problem with the VPN server, but that seems unlikely given the effect on non-VPN sites. Could something have happened with the VPN client during the upgrade? If so, can I download or update the VPN client?

Is it not possible?

You need to look for anything that indicates it restarted. No. Uptime is time since it was booted.

Thanks johnpoz. Besides naming conflicts with other devices, does domain name defined in pfSense have any consequence to DNS on subnetworks. I am still not sure why the firewall has a domain name definition.

I am not doing any HTTPS traffic inspection. I will check, but I'm pretty sure that wouldn't be turned on as default. It turns out, the phone didn't have net connection. It uses cell when it says "Connected, no internet". Once I put it into airplane mode and turned WiFi on, it wouldn't pull up any pages. Oddly enough, it let Hangout messages and Allo messages through. That still doesn't explain why my laptop worked fine. The other thing I noticed is that the firewall isn't logging any packets from my laptop as allowed or denied. I have turned logging on for all the rules that I'm trying to follow on the log. Another thing, the when the log does show any action from my laptop, it's usually just the web portal itself. Not any page requests. I have gone to my wits end with pfSense. Need some sort of help Please