50 Euro for a quick config

ginosteel

I have spent all this night trying to config my pfsense and …... I did not succeed.Untill today I`ve used a single ISP and now i have another ADSL line whaiting
What i want is a simple config:

i have:

ISP1........ WAN public ip...........
>pfsense..........LAN= public IP`s
ISP2.......adsl router WAN2.........

I want DHCP and Captive portal with user management enabled on LAN

1 HTTP routed to WAN2(adsl)
2 All the rest of connection routed to WAN
3 Rules to block ports EX. (blocking bittorent, emule )

maybe is wrong what i need and someone can advice me how is better
Anyway if someone is interested.......I`m here

ginosteel

I`ve made Multi-Wan/Load-Balancing working but only on WAN 1.
I have ping replay from WAN1, WAN1 gate, WAN2 but no reply from WAN2 gate.
The offer is available!

Mercredi

look, if you want to route a network with public IPs so you should disable NAT, or your public IPs will act just like NATed IPs. and aslo in such configuration you will loose all firewall rules, as described on your Advanced settings page.

and also if you didnt configured a rule to pass icmp traffic to pass to the wan2 interface - you should recieve no reply from wan2 gateway. pinging from pfsense box and from your lan is a completely different action since pfsense itself didnt act like your lan IPs.

hoba

@Mercredi:

and aslo in such configuration you will loose all firewall rules, as described on your Advanced settings page.

That's not entirely true. You will loose firewallfunctionality if you set this option at system>advanced. There is another way to disable NAT and keeping firewallfunctionality. Enable advanced outbound NAT and delete all mappings at firewall>NAT, outbound.

PM me the IPs and subnets that are in use please and I'll see what I can do.

Mercredi

hoba, thank you :) this information is usefull for me :)

ginosteel

hoba do u want to try your ideas?
The offer is still available!

hoba

Yes, provide me some information on subnets and IPs and we can arrange a time for a remote session if it's doable. That's why I first need details on networks and so on.