Ermal: Thank you very much, I changed the relevant parts you posted in my pfs 1.2.3 setup and it worked perfectly, I set download speed to 200K/bs and tested with speedtest.net, works great!
Ill have another look at pfs 2.0 during this week, Im guessing I missed some sort of configuration along the way but I've read reports here that routing thru a particular gw fails, in my case both policy based routing and load balancing doesnt work, only by setting the lan rule to use default gw, can I browse the net, interestingly enough, if I set the lan rule to use "dualwan" gw (which is my WAN+WAN2 combined) pfs itself can communicate with the outside world, grabbing package info and new firmware from the pfs servers, just clients dont have internet connectivity unless I amend the rule above to route through default gw.
Chris: If i set lan users to route through my WAN2 gw for HTTP traffic, it works fine, not as before where as you stated correctly it would bypass the captive portal and let users through unauthenticated, I was under the assumption that wouldnt be fixed until pfs 2.0. I cant do anymore tests at the moment as most of my clients have woken up (its just past 8am here in london), so Ill fully test policy based routing and other stuff much later on tonight.
built on Mon Jan 26 23:30:30 EST 2009
I have this version installed with NTOP, IMSpector, Squid3,Lightsquid, CP and Dual WAN running off the same box...finally!
I will test further, plus throw in some VIP carps for WAN2's /29 block.
Thanks very much guys!