Thanks!!  I got internet working, and it seems to pass through the router (now switch) via Ethernet, but still can't use it as an AP. Trying to figure it out still.

EDIT: Enabled DHCP server on pfSense and all is well in the land (home network)! Networking is not my forte.

Well I am not sure if it was a bug or not.  I am positive that I entered the range correctly at the start, and it is not what I see in the picture.  In any case I have since redone the range via the GUI and it shows correctly in the GUI now.

pfSense is a FreeBSD based distribution.
You don't "install" it on top of another OS. It's an OS itself.

Check the PPP log to see how authentication is going; Status/System Logs then select the PPP tab.

I use a Cisco 857 in bridge mode.

There isn't a command that I know of. Generally the way to roll back is to save the config, then do a fresh install. After that recover the config from backup. If you don't have the config backed up, do so after every change group you do. :)
Seriously though, if you have access to console, use something like winscp (if you have SSH enabled) to copy out the /cf/conf/config.xml file. Reinstall, I would suggest 2.1. I know your having problems now, but it looks like the upgrade was cut short. Then copy the config.xml back in place and reboot.

Ah, that would explain it.  :)

Steve

How are you running the CA22, what are you booting from?

Steve

If you ever go back to your Frontier supplied router in router mode, you may have problems. If your router says you are connected, but no clients can access internet sites, put this URL in a browser: http://192.168.1.1/frontier/redirect.htm (substitute your router's IP address if not 168.192.1.1). Click on the button on the page.

I'm requesting to make this topic steaky because it is really hard to find an answer considering the topic.
Thank you.

Hmm, interesting discovery.
I wouldn't have expected it to make any difference. 9, 09 or 009 all result in the same binary number 0000 1001. Leading 0s mostly just clipped automatically in anything I've ever coded with. If that's not happening then, yes, the input validation should catch it.

Steve

No problem. Sorry I couldn't help more. :-\

I you try again you might get more useful answers in the italian forum.

Steve

Yes you must create your own ca! I think it is not possible to use an "official" CA, because you are using a Man-In-The-Middle Attack to fetch and control https traffic.
Of course every https filter will use a MITM-attack so the client must have a trusted wildcard cert of the controling unit.

A Solution can be to have a non transparent SSL-Proxy and only devices that are under your control are forced to use Proxy.

you should be able to set it up internally and have it function.  I often build new PFsense boxes WAN interface to on my internal network, and then later they are put on the Internet WAN side.  I just always make sure to pick a completely separate subnet for the PFSense Internal interface that what would be picked up via DHCP.  Then just connect your PC to the PFsense LAN port.

PS I am pretty green to PFsense as well, but I have been using one for a couple years at home.

HAVP would be a lost cause on there. There isn't nearly enough RAM or CPU to keep up with AV on all web traffic through an ALIX.

Putting /var (and maybe some swap) on a USB stick might help the RAM part but not the CPU.

What address/subnet are you using on the WAN side? I don't use KVM, but in some virtual software, you need to enable promiscuous mode for this to work.

just like i have mentioned, the pfsense WAN is NAT'ed, therefore you won't be able to ping the vm behind it.

imagine a computer at your home that was behind NAT firewall modem, you can't ping the computer from your office… :) ... not without some configuration which i believe there are pro and cons.

Priorities.  ;)

Steve

I was able to install pfSense 2.1-RELEASE on the BCM MX945GSE by flashing a BIOS that is different from the BIOS that is linked to on the BCM support page for the board.

The BCM support page links to this BIOS, which will NOT boot pfSense 2.1:

http://www.bcmcom.com/admin/Bios/70701106.zip

Just for fun, I changed the "6" to a "5" and tried this, which - amazingly - will boot pfSense 2.1 (I think I lost access to four of the six COM ports, but that is irrelevant for my purposes):

http://www.bcmcom.com/admin/Bios/70701105.zip

url redirect to NONE

What is that?