Yes, the draw graph checkbox should now be checked on initial install. The graph data should go on and off based on the checkbox setting (previously it always did "draw graph", the checkbox was not effective). The "bandwidthd has nothing to graph…" initial page got cached in my browser (Firefox) - I messed around for a while wondering why nothing displayed, then forcibly refreshed the page and the bandwidthd graphs appeared. So try a page refresh, or clear your browser cache. bandwidthd tries to write its data to different places in "/usr" depending on the pfSense version: switch ($pfs_version) {   case "1.2":   case "2.0":     define('PKG_BANDWIDTHD_BASE', '/usr/local/bandwidthd');     break;   default:     define('PKG_BANDWIDTHD_BASE', '/usr/pbi/bandwidthd-' . php_uname("m") . '/bandwidthd'); }

But on nanobsd "/usr" is read-only. So everything goes well until it wants to actually write the graph data!
There used to be some other issues with packages that wrongly left "/usr" read-write. At those times, bandwidthd could "jump in" and write its graph data. If the system was in this state for a few weeks, there were lots of writes to the CF card. I think this was a reason why I killed a CF card a few months ago.
Anyway, bandwidthd on nanobsd is not expected to work at present (certainly does not work on 2.1-BETA0). I am going to make some code changes to put the graph data in "/var" on nanobsd but haven't got to it yet. For that, I also need to think about what to do about periodically saving a copy to the CF card (and at shutdown) and reloading it on startup.

Hi,

First of all thanks for your replies, my problem is solved, it was following two lines in config http://fpaste.org/wKm7/

request_body_max_size 20 KB
reply_body_max_size 51200 deny all

i changed this two lines & now youtube is working correctly.

Thank You.

As logger mentioned just click the Edit button next to the interface you want to configure.
Kind of makes sense since you might want different categories and rules for different interfaces.

Logger, thanks for the suggestion about preprocessors.

ntop and bandwidthd will tell you what ip/protocol did the traffic

Thank you Ermal, for the quick response.
What config files and logs specifically do you need?

Do you need the specific blocking events logged by snort?
Or the contents of the Aliases from the config.xml?

thanks for reply.

1 i can't find the ssl_crdt command
/usr/local/libexec/squid/ssl_crtd -c -s /var/squid/lib/ssl_db

2 can't find this directory
delete /var/squid/lib directory

i think i must be running a different version of pfsense/squid.

3 /usr/local/sbin/squid -z
i've been seeing a lot of this command, so i decided to jump in using this

http://wiki.squid-cache.org/SquidFaq/OperatingSquid#I_want_to_restart_Squid_with_an_empty_cache

and so far, squid been up.

thanks much for the reply

@RoFz:

How dumb of me! I've just found the categories tab and after enabling the needed categories everything started working. My apologies for posting such a dumb problem.

how do you enable those rules and found the categories tab ? shed some light TIA

I am facing the same problem , what do you mean by "run /var/etc/openbgpd/bgpd.conf" ?

@hanzer:

thx! will check it out!

BTW… the other thing you might want to consider is that google now does SSL search by default if you are logged in (see http://support.google.com/websearch/bin/answer.py?hl=en&answer=173733). If someone is using SSL google search, the URL parameters and the returned content is not checked by Dans. You can get around this by making some changes to resolve the google address to nosslsearch.google.com.

I managed to solve the problem with Aliases (CIDR) and firewall rules also with enabled transparent proxy in squid.

Doesn't cause any problems on our systems.
However it may not be down to snort per se but could be caused by the rules you have active.

Is there anything in the system logs?

Nope I unchecked it and now its simply caching static stuff. There is no config I can make it cache dynamic as youtube, windows update or other.

Simply when I tick cache dynamic content, all I get are TCP MISS 200, if I uncheck it, I get hits for static content.

@pfinch:

In pfSense 2.0.1-RELEASE, OpenBGPD 0.5.6 the /var/etc/openbgpd/bgpd.conf permissions are set wrong causing OpenBGPD not to start.

chmod 600 /var/etc/openbgpd/bgpd.conf fixes the issue.

On a clean install I'm facing this issue too: pfSense 2.0.1-RELEASE (amd64), OpenBGPD 0.5.6

My setup also complains for missing /usr/local/etc/bgpd.conf
To be able to run OpenBGPD I've had to:

ln -s /var/etc/openbgpd/bgpd.conf /usr/local/etc/bgpd.conf chmod 600 /var/etc/openbgpd/bgpd.conf

Ok, fixed.
Thanks to the replies above!

@marcelloc:

On first Box, create a nat rule with
source LAN nat
destination any
Destination port 80
server ip second pfsense on dmz
Server port 3128

On second box enable squid.

So.. squid in transparent mode and all that setup on the first box?  As in, all of the cache management settings have to be setup on the first box ?
Lightsquid setup on which box?  If it has to be that cache and lightsquid need to be setup on the second box, how can i transfer all lightsquid logs from the first box to the second one?  i would like that all of the data that i see now in my lightsquid reports, still be on the new setup, combined with all new data.

In the past i think you mentioned that in this setup squid needs to be installed on both boxes.. i just wonder where all the settings for cache management need to be setup, i would guess the second box, but i dont see how i can have squid enabled on the first box without any settings.