Oh yeah, good point.

I assume you mean NNTP?  If so, that is port 119, if memory serves.  Can't you just penalize that?

@jimp:

You probably want the Limiters feature, but that is only available in pfSense 2.0.

if it can give a global limit and a exception on certain ip/macs than i have to wait till 2.0

and going through the wizard for a third time is resulting in ~80ms while downloading. i think i'll just monitor it for a bit, seems to be ok.

I was able to solve this problem by turning off the FTP userland helper on the LAN interface.

For 99% of the users on the network, blocking/shaping bittorrent traffic using commonly-used ports seems to be effective. For the 1% who got through, you can use other means of tracking them down.

I pluged it in and it worked in a second.  :)

Aug 27 09:18:25 kernel: ugen0.2: <vendor 0x0fe6=""> at usbus0 Aug 27 09:18:25 kernel: udav0: <vendor 0="" 2="" 0x0fe6="" usb="" network="" controller,="" class="" 0,="" rev="" 1.10="" 1.01,="" addr=""> on usbus0 Aug 27 09:18:25 kernel: miibus5: <mii bus=""> on udav0 Aug 27 09:18:25 kernel: ukphy0: <generic ieee="" 802.3u="" media="" interface=""> PHY 0 on miibus5 Aug 27 09:18:25 kernel: ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto Aug 27 09:18:25 kernel: ue0: <usb ethernet=""> on udav0</usb></generic></mii></vendor></vendor>

Now I need to learn how to set up traffic shaping…

I'd really like to know that too … A friend was challenging me on pfSense on a forum and asked my exactly that and pointing this same Tomato firmware.

Imagine you download some files from MegaUpload, a Linux distrib. for example... This download would get high priority slowing down your normal browsing... But HFSC would cut the bandwidth in two, that's not a big deal, but I'd rather have a full speed while browsing and see this MegaUpload download in the P2P queue.

@stramato:

does this apply to BETA4 2.0 also?

Yes and no.  Yes, if you've just reconfigured the traffic shaper/ rules.  No, if it is with regards to WAN side load balancing/ failover.  The latter has an option to cover it so that states are reset automatically when the outgoing interface is switched.

I'd "solved" it with a workaround. I configured a IP alias which contains all clients. Then i had set up the shaper only with the penalize box pointing to the alias. The allowed bandwith was [MeasuredBandwith] - [150 Kbit per Phone]. The remaining bandwith is for the phones …

... not a really charming solution, and it's working only with my very easy setup!

What I did for a game should work for you.
Run the shaper wizard choose one of the game rules as higher priority.

Then mode the rules for the game queue you choose to the ports you use for your media server.
IE if you use port 123 forwarded to your media server change the port for the game you checked in the wizard.
You need to do both it makes and out and inbound rule.

Hi,

This simple queue is working just fine, however I'm now wanting to give VoIP priority in the simple queues, i.e. in the "5mb pool A" or "5mb pool B", if someone is doing a download at 5mbps and someone tries to make a voip call, the user doing the download must be slowed down and the voip call be given preference within the queue.I have set up a simple queue for my sip phone with ip address 192.168.15.250. Using winbox, double clicking on the "Sip phone" que and then on the Traffic tab, the graph shows neither Tx nor Rx traffic. However, when I click on the Torch button, I can see TX rates of 80kbits and RX of about 80 k bits.

Company Name Ideas