On 18/12/10 10:16, Evgeny Yurchenko wrote: > my only concern now is PPPoA... But I need public IP on pfSense for sure > to do port-forwarding.
Not really; if you can ask the modem to port-forward to the pfsense box, you can then ask pfSense to port-forward to the final destination. So the public IP stays on the modem's WAN interface, you burn a small private network for the connection between the modem's LAN and pfSense's WAN (using DHCP so that pfSense gets the modem's sense of DNS providers), and provide ordinary services over pfSense's LAN. This means you end up with double-NAT, which isn't ideal in a busy environment, but is stable enough for quieter locations. -jim --------------------------------------------------------------------- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org