That could work in theory, but would be really ugly.

You can have multiple range statements that would go around them, it wouldn't be hard to code that up, but it's much better practice to not mix your DHCP and static hosts in the same range.

Multiple ranges are on my to-do list for 2.1, I think there's an open feature request ticket already.

A commit was checked in by Efonne for this:

https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/f444c3965cc13acc02ea028a528dcfff2c24d2ab

NAT Reflection is still broken in 2.0-BETA4 (i386) built on Fri Dec 17 01:17:30 EST 2010

No matter if you configure it manually in every rule and reboot or does using system default.

It just returns you to the login page whether its enabled or not.

I don't know … call me crazy now. I tried different things and every time after changing things i checked /var/etc/snmpd.conf. It's working now? Yesterday i made the screenshots and post the content of the config file. The essential lines were missing. This is what i did now:

First i just check and uncheck the boxes. Accordingly to the changes in the GUI the snmpd.conf was changed also. Then i tried to disabled completely SNMP services and save the settings. After that i enabled it again with checking the boxes. Works! Then the same but enabling without checking the boxes. Works too. Then checking the boxes ... works also.

It's not really nice not to know whats going wrong. But i can clearly say that i had this problem, not only on my machine. Since it's not a totally really needed essential feature (like IPSec), i accepted this behavior for a long time.

At the moment i hope, that it was a problem, that may be existed in older versions, and may be i upgraded it all the time, to the newer snapshots ... and the issue may only occur in touch with my existing config ... and it's now is away cause of the newer snapshot (wondering why i was yesterday not able to save the settings with same snapshot)?!

But thx very much for your help ... wishing you a relaxed weekend 8)

Give it a try in a few minutes, I committed a fix and it'll sync to the live package site in 5-10 minutes.

Two problems there really:

1: http://files.pfsense.org/packages/All/netio-1.26.tbz  should really be http://files.pfsense.org/packages/8/All/netio-1.26.tbz  (Or the amd64 directory, depending on which version you're one)

2: The FreeBSD URL should have ended with /All/ and not /Latest/ and then it would have worked. (Actually it also needed to be -release not -RELEASE but I fixed that yesterday) - that fix will be in future snapshots.

Try it again in 5-10 minutes, looks like the filename on that one was missing .xml from the end. It should work now.

today ive just noticed on the firmware update page, the drop down menus are borked also.

edit*

in firefox 4.0 beta 8, all is well.

jimp is correct.  This feature is more security theater than security.  If the attacker has physical access to your hardware, the fact that the console has a password prompt is entirely trivial to bypass.

That was fixed since then.

@evil_ted:

thanks alot for the help. it is appreciated, alot of people have read my post, but not one of them could even point me in the right direction.

i am writing to inform you that the 10th December snapshot has a working captive portal, but the voucher system does not. Im helping you, but your not helping me. too bad that this product is too difficult, and that no-one wants to help the newbs. so I'm going keep moving, and use a product that works.

Spend a little time learning about pfSense and how to get help. Learn to provide proper and relevant information regarding your issues.

too bad this product is too difficult

Perhaps the problem is that your to simple?

If you want instant support click here: https://portal.pfsense.org/index.php/support-subscription

Yeah I had to completely rewrite the widget. :)

Ok, this the procedure described above and 2.0-BETA4 (i386) built on Wed Dec 15 07:49:38 EST 2010, the issue disappeared.
Thanks!

@mromero:

Beg to disagree. Click Insert Image should immediately ask me to upload my image and select source.

Why ANOTHER click - wearing out my fingers  ::)

The good news is we run an open source forum.  Hack the feature in ! ;)

http://www.freebsd.org/releases/8.1R/relnotes-detailed.html
The ada(4) driver now supports BIO_DELETE. For SSDs this uses TRIM feature of DATA SET MANAGEMENT command, as defined by ACS-2 specification working draft. For Compact Flash use CFA ERASE command, same as ad(4) does. This change realizes restoring write speed of SSDs which supports TRIM command by doing newfs -E /dev/ada1, for example.

.

Looks like 8.1 supports TRIM but I'm not sure how it's implemented.

There is a patch meant to fix pf's behavior with TSO and checksums, but it seems to be causing a few other problems.

EDIT: I disabled the patch in the repo and have a new snapshot building now. The next new snapshot dated after this update should be OK.

I update Wireshark to the latest release. Same thing.
Looking at Wireshark after error message, the last frame displayed is always http:

2 2010-12-15 21:15:13.709145 172.16.1.205 192.168.1.101 HTTP Continuation or non-HTTP traffic

HTTP Continuation or non-HTTP traffic is always displayed in info field

The header is :

Frame 2: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits)
Ethernet II, Src: 00:0c:29:c5:2c:76 (00:0c:29:c5:2c:76), Dst: 00:50:04:48:f6:e0 (00:50:04:48:f6:e0)
Internet Protocol, Src: 172.16.1.205 (172.16.1.205), Dst: 192.168.1.101 (192.168.1.101)
Transmission Control Protocol, Src Port: http (80), Dst Port: dlms-cosem (4059), Seq: 1, Ack: 1, Len: 1260

I have always over 30,000. I think this is the reason may be take forever.

Post a screenshot of the rule page with all of the settings shown, and the relevant line from /tmp/rules.debug.