Would a reboot have sold the problem too? Very likely, OpenVPN  tries to keep itself alive through many scenarios but there are a few that require an explicit "Kill-Restart". Once back up and running it should be very stable.

Thanks for reply, this gives me a picture of this mechanism. I will configure it tomorrow and test it, and later I will think about usage for each connection. I might be lucky, because both connections are from the same ISP, I might be able to negotiate to summarize all usage and divide it on half and half for each connection - this would be the best solution in this configuration. I was only worry that if I ask them to divide it on half then at the end of month I would find out that one connection is already reach the limit and on another I still have like 20% left to use and I was wondering how it would affect service quality for every single user. I dont want them to come to me and complain that at the end of month in one moment they can watch youtube with 2Mbps and in another moment (another movie) with 256Kbps.

So you know how to burn iso, but not how to verify your sum?  What I can tell you is the hash checks fine, and iso boots just fine.. [image: hashchecks.png_thumb] [image: hashchecks.png] [image: bootsfine.png] [image: bootsfine.png_thumb]

@divsys: Anybody have already try this configuration ? Unfortunately, as robi mentioned it's going to depend completely on your modem - Make, Model, and probably your ISP as well. Without that info, we have no idea what interpretation of "DMZ" you're dealing with. On consumer grade modem +adsl  what op says it's true at least in my limited experience.

@SaschaITM: I have to relocate a pfSense install to different hardware. The recommended way of doing this seems to be the config backup/restore routine, but as far as I can see this is missing stuff like Squid logs, Sarg reports, etc. . I'd like to have these on the new machine, if that's possible at all. Could this be done by restoring a full backup created with the /etc/rc.create_full_backup script? The tgz archive created by that script seems to include the full file system. If I install the same pfSense version the backup was made with on the new machine and restore the backup with /etc/rc.restore_full_backup, will I get a working "clone" of the old system? Has any of you guys migrated pfSense to new hardware like that? Will you also be replacing the harddisk?  Bad is not like Windows to scream when harddisk is attached to different system.. Or clone disk and plug in other machine reconfigure interfaces and test before migrating..

nano has packages. You'd have to be running off the live ISO or memstick, not an installed system, to not have a packages menu.

@Phishfry: Is it harmful to flash a 1 GB image onto a 4GB card? No, and can be better because of wear leveling. https://doc.pfsense.org/index.php/What_are_the_512M,_1G,_2G,_and_4G_NanoBSD_files

This issue is know fixed. Thanks

System>Packages. If it's not there, you're running from the memstick or live CD and need to install it.

You'd be much better off just putting everything on the HDD RAID. The USB flash is more likely to fail, much slower, has no redundancy, and there's no benefit to putting it on the flash rather than the RAID.

There's no mix to add anything to. Make a configuration backup, get a bigger HDD, reinstall and restore the backup. P.S. Anything USB-based is strongly discouraged.

If the pfsense box has a LAN IP address of 192.168.10.1 and has IPSec server running or a OpenVPN server running that does NOT mean the clients that connect to it via VPN should receive an ip address in the 192.168.10/24 space. In our case we give VPN clients an IP address in the 192.168.20.0/24 address space and have NAT rules that just divert traffic and allow communication between the two address spaces. That is why I said "provided you have appropriate NAT rules". Separating out our address spaces allows us to prioritize traffic and apply filtering rules slightly easier.

Yes, I used the 1G nano image. The size mismatch actully occured when i tried to write a 2G image to a 2G USB drive, and Win32diskimager complained so had to use the 1G image instead. No such error with the CF card though, but the size check seems to work so less probable it's a size mismatch. But of course, I can do a test next time I open the case. Other suggestions?

Well, at least it's solved quickly, lol. :D