>Ok, does I do stupid things if I use a virtual IP together with NAT >reflection? > >The external IP is configured with proxy arp on the pfsense gateway >itself. > >regards >Oli Use a CARP address. This is what I use and it works for me--http and https both. Dimitri Rodis Integrita Systems LLC http://www.integritasystems.com