@cmb: The "multi-WAN on a stick" scenario (that is multiple WANs on VLANs) is documented in detail in http://pfsense.org/book Hello again… I was reading some more and Ive based this multiple WANS on VLANS with some commercial products.  IS this the same concept and function that is TRUFFLE on mushroom network have been advertised? Thank you for your honest and utmost opinions.

It's not broken on any version or architecture in general. If it's a driver issue, it could be specific to 64 bit. That sounds like the symptom when you're doing MAC spoofing on a DHCP WAN on 2.0x versions pre-2.0.1.

More information please!  :) You are using the same Supermicro board? 64bit install? pfSense 2.0.1? Steve

Hi, The problem is resolved. It was a problem of route missing in backend to access to frontend. Now, it's works. This post can be marked in "resolved". Thanks to Steve to your advices and your patience to help me. Regards Vincent

Thanks! The Soekris has a larger case than I was hoping for, but meets my specs.

That's great.  :) Shame it's too late for the other other guy who sold his box.  ::) So did you get all three NICs working? The board manual mentions that the BIOS supports console redirect though it doesn't give any details. It may be disabled by default. Trend may have used a custom BIOS modified from the Advantec version. However if it is enabled where you normally press DEL to enter the BIOS setup you usually have to press TAB via the serial console. That's because DEL can't be sent over serial. You'll just have to experiment with some serial speeds. One thing you can do is use the flashrom package in pfSense to extract the bios image and them open it from a Windows box with modbin6 to see what the defaults are. Then you can try modify it and flash it back if you're feeling really brave! (don't unless you have some good reason  ;)) Since it seems that there is no watchdog timer to disable or modify (which would normally be used to activate the by-pass if the box crashed) is there any reason in particular you need bios access? How are the LCD and LEDs connected to the board? Which header are they using? There is a pfSense package for lcdproc that may work and LEDs can also be coaxed into life with some experimenting. Internal photos may help. Steve Edit: The default console speed seems to 38400 8N1. That's according to the manual for the FWA-600, a box made by Advantech which uses the same board. This also has a better description on the LAN by-pass functionality and console redirection. Edit2: Yes that manual has a MUCH better description of the BIOS functions. It looks like there is a LAN by-pass control in there after all.

check this http://forum.pfsense.org/index.php/topic,45439.0.html

Unfortunately, here in the colonies, most ISPs are rejecting "universal" compatibility and are instead striving to adopt propriatary equipment/configurations so as to ensure they create a corner on a "bundled" market and don't become "dumb pipes."

FYI Bought and configured: MICROSERVER G7 AMD N40L 2GB 1X250GB LFF SATA NODVD HP NC112T PCI EXPRESS GIGABIT SERVER ADAPTER pfSENSE 2.0.1 all hardware components are recognized without problems and it runs smoothly.

Thanks, great :-)

Steve: I finally figured out how to access the Viking card through pfSense–see the new thread I created earlier today under the "Firewall" forum.

After reading through the SSD thread, I'm still thinking of buying a SSD. It seems like my installation will take much space, even with logging turned on, so probably a disk that is 64 or 128 GB.

@Nonsense: I am wondering if activating Snort is really necessary in my home environment (I have set no ports open)? My answer is not hardware related, but: I assume you mean all ports from Internet is closed, but all ports outward is open. If/when your computer is compromised by malicious code, I can bet that it happens while surfing the web and a webpage will take advantage of a vulnerability on your system. (PDF, flash, browser, java or similar). The malicious code might have a call back function so it connects to a server that either upload new mailicious code, adware, or are able to control your machine. This connection will be done in intervals and will never be initiated from they outside, but from your computer. So having all ports blocked will not help you. Snort, might be able to detect this traffic, but that depends if you are willing to use time to tune Snort and actually use time to investigate the alerts. If not, you will not have any advantage of using Snort. You would probably use less time by having your system patched all the time and run scans of your systems now and then. Minimizing the risk of actually being compromised by surfing the web. While I'm at it, here are something I would recommend (even if you didn't ask): Personal Software Inspector (PSI) - Free for personal use. Scans all programs installed and report of outdated programs. Really useful Qualys Browser check - Checks if your browser (Chrome, FF and IE), plugins, FW, AV, WU are vulnerable or outdated. Firefox plugin checker

@stephenw10 …. Well said There are many scenarios that will be playing out over the next decade globally, as corporations/governments will have total control over the majority of commodities/services/goods etc. They will create the perfect Storm. Need I say more?

Don't worry about it, we get quite a few of them but we don't investigate them all because most of them are issues we know about or flaky hardware. Most often we'll only dig through there when a customer or user submits one and asks for it to be reviewed.

FYI:  Here's a post on adjusting your MBUF values. http://forum.pfsense.org/index.php/topic,37754.msg194854.html

@Clear-Pixel: After doing more research on the Thinkpad T61 & T400 I found very little to support that the on-board nic will function reliably. I found a few references to the T400 in the FreeBSD Mobile Computing forums: Notebook / Laptop compatibility list Lenovo T400 report T400 - fully compatable Since pfSense is FreeBSD based it's probably a safe bet to say it will work with it too.  It's up to you though.

Excellent.  :) It's probably worth noting here for anyone replicating this that the pciconf command is system specific. Don't just copy it without reading through this whole thread. Steve

This is a great article, and the guy should start a business! I'm sure there could be demand for a monitor/pc that is silent and drinks very little power. I also learned that I overprovisioned my server hardware in terms of power supply (although I had suspected so at the time…) with a 150W picoPSU, perhaps I should have gone for 90W instead...

I had the exact same issue with a realtek 1Gbps port in our datacenter where they force 10full.  The solution was to put an Alix box in there that would actually work at 10full.  Been there for 3 years now with only 2 reboots both of which were upgrades to PFSense.