Ah, that would explain it.  :) Steve

How are you running the CA22, what are you booting from? Steve

If you ever go back to your Frontier supplied router in router mode, you may have problems. If your router says you are connected, but no clients can access internet sites, put this URL in a browser: http://192.168.1.1/frontier/redirect.htm (substitute your router's IP address if not 168.192.1.1). Click on the button on the page.

I'm requesting to make this topic steaky because it is really hard to find an answer considering the topic. Thank you.

Hmm, interesting discovery. I wouldn't have expected it to make any difference. 9, 09 or 009 all result in the same binary number 0000 1001. Leading 0s mostly just clipped automatically in anything I've ever coded with. If that's not happening then, yes, the input validation should catch it. Steve

No problem. Sorry I couldn't help more. :-\ I you try again you might get more useful answers in the italian forum. Steve

Yes you must create your own ca! I think it is not possible to use an "official" CA, because you are using a Man-In-The-Middle Attack to fetch and control https traffic. Of course every https filter will use a MITM-attack so the client must have a trusted wildcard cert of the controling unit. A Solution can be to have a non transparent SSL-Proxy and only devices that are under your control are forced to use Proxy.

you should be able to set it up internally and have it function.  I often build new PFsense boxes WAN interface to on my internal network, and then later they are put on the Internet WAN side.  I just always make sure to pick a completely separate subnet for the PFSense Internal interface that what would be picked up via DHCP.  Then just connect your PC to the PFsense LAN port. PS I am pretty green to PFsense as well, but I have been using one for a couple years at home.

HAVP would be a lost cause on there. There isn't nearly enough RAM or CPU to keep up with AV on all web traffic through an ALIX. Putting /var (and maybe some swap) on a USB stick might help the RAM part but not the CPU.

What address/subnet are you using on the WAN side? I don't use KVM, but in some virtual software, you need to enable promiscuous mode for this to work.

just like i have mentioned, the pfsense WAN is NAT'ed, therefore you won't be able to ping the vm behind it. imagine a computer at your home that was behind NAT firewall modem, you can't ping the computer from your office… :) ... not without some configuration which i believe there are pro and cons.

Priorities.  ;) Steve

I was able to install pfSense 2.1-RELEASE on the BCM MX945GSE by flashing a BIOS that is different from the BIOS that is linked to on the BCM support page for the board. The BCM support page links to this BIOS, which will NOT boot pfSense 2.1: http://www.bcmcom.com/admin/Bios/70701106.zip Just for fun, I changed the "6" to a "5" and tried this, which - amazingly - will boot pfSense 2.1 (I think I lost access to four of the six COM ports, but that is irrelevant for my purposes): http://www.bcmcom.com/admin/Bios/70701105.zip

url redirect to NONE What is that?

Does startup still freeze on squid3-dev? On my amd64 test machines, it's starting up fine but still not working.

@plang: Thanks a lot! In order to make things clean, is it supposed to be safe to make a backup, remove manually in there everything related to ntop, and restore everything back? Maybe there is a better way to remove these menu entries? I answer my own question: I simply made a backup "without package information", followed by a restore. Works perfect, no "hack" was necessary.

More information please.  ;) What hardware are you using? What modem? What sort of connection? What subnets? Steve

Hmm, you would expect your newer bios to boot more easily.  :- Odd but at least you're up and running anyway. Steve

Hi, welcome!  :) If you're using the laptop as an AP behind your existing router it should be connected to one of the LAN ports on the router. The WAN port connects to whatever device you have for connecting to the internet, cable modem for example. The Latitude D420 appears to have been fitted with several different models of wifi hardware. pfSense has limited support for wifi hardware so it's all important. Do you know what is fitted to yours? Have you already installed pfSense? Steve