Thank you, dhatz.  I do find these sorts of papers very interesting. There's nothing quite like challenging "the way we've always done it" and providing a significant benefit as a result.

Thank you very much mamoraes!

Hi Steve, So I tested the URL you sent me, but he now calls perl-5.10.1_1. My pfSense that is running is 2.0.1 i386 command in CLI: uname-r 8.1-RELEASE-p6 Regards

Thanks! That worked perfectly!

Some interesting info here and relatively recent: http://ivoras.net/blog/tree/2011-01-29.who-uses-freebsd.html Steve

@stephenw10: I hear you also have excellent beaches!  ;) Certainly I am biased, but the beaches are the most beautiful in the world! ;) Thanks for the info though, makes me wish I spoke Portuguese. Speaking Portuguese is not so difficult … We have some letters and accents more! :) []`s Jack

@brunoguidone: Hi, you can explain how to do this ? thanks for your help.. Bruno Guidone Use this line while creating new Target Catogary (./..(asf|wm|wma|wmv|midi|mov|vob|cab|mkv|3gp|mp3|mp4|avi|mpg|swf|exe|mpeg|mp.|mpv|mp3|wm.|vpu)) Note : I had removed mov extention because I as not able to delete messeges from Hotmail, as it was found mov extention was blocking it. [image: ext.png] [image: ext.png_thumb]

Sounds like a good move. I don't think you would ever get that working as you wanted originally. You would need a switch that is able to talk FC but also extract the IP from IPoFC. Does such a switch exist? It looks as though the IPoFC protocol was put in place to allow high bandwidth between servers that are already on a FC network and not as a bridge between FC and Ethernet. If you were using pfSense to bridge 10Gbe interfaces then the limiting factor would be in software not the PCI-E bus. The bandwidth of PCIe varies by how many lanes what generation etc but say a x8 card in a v2 slot could, theoretically, support 32Gbps. However the limit in pfSense is, I believe, currently around 4Gbps. This is due to a single giant locked process coupled with a the maximum single core speed of current cpus. That is my limited understanding but I could easily be wrong!  ::) Steve

interesting can we know how they do it for each product maybe theres a free a way ?

http://pfsense.org/book explains that and lots more.

It wouldn't help with that really, since that would break them trying to reach anything else to other subnets. The static route is the best way there.

I don't think there is an easy way there. On the ACLs there is an "order" drop down that can be used to move their places around but I don't think that same function exists for the Categories. If it doesn't, you may have to make a backup, edit the xml by hand (moving the new one up), then restore the backup. Not simple, but it would get the job done, and it's probably less work than deleting your other categories. Or edit your first one, rename it and use it for this, and make a new one at the end with the old one's settings.

In your first post, you actually want to allow the audio-video stuff during leisure time, so in the left column, select "allow" for the categories you want to enable. In the right column (off-time) select "deny" for the categories that you want to deny outside of leisure time. Also note that various people are having trouble getting the time-based rules to actually work in real-time on 2.0.n, so you might find that sometimes your rule doesn't turn on and off as you expect - see http://forum.pfsense.org/index.php/topic,43352.0.html