in the operation system. you can use "netstat -an" or "netstat -anb",to see which port is used. if bt go the voip port, what you see is very correct. in my env ,I use white list, for example,put 80 port in other queue. then set a low bandwidth and low priority in the default queue. any undefine port and traffice will go default queue.

@spartan7: anyone selling a premade 1U for 2 WAN/1LAN running pfsense? or link to a build. http://www.applianceshop.eu/index.php/firewalls/opnsense/opnsense-rack.html

For some reason ports will NOT show in any rules I create. Not sure what to do to get them to work correctly.

It happened again this morning. It looks like the problem was one of our lines - despite the modem saying it was connected at 3700 kb/s, throughput to the ISP's speed tester was more like 500kb/s. The ISP has done something, and it is better. The situation is complicated by the fact that my access to the system is through a wireless network to where the router is, a mile or two away, and the router load balancing means the problem comes and goes, depending on which line a given connection gets. However, to help diagnose, I put a temporary firewall rule to direct all traffic from my IP through a particular modem, and, by editing the rule, was able to pin down which modem it was. I have kept the rule (disabled) for future use if it happens again. I am still mystified as to what I might be doing wrong with the traffic limiting wizard, that it would halve the bandwidth, so any suggestions gratefully received.

Ok, I have the exact same configuration. Two limiters, a firewall rule for the LAN interface with "LAN net" as source. As you stated "Anon Freifunk" is a subnet. LAN net is my LAN subnet, so it schould work.  ;D

That's correct.

A bridged queue would be handy. AFAIK there is no such thing and therefore no way around deploying a transparent firewall and use the shaper on the bridge. Let me know if I am wrong.

TCP/UDP rules cover both TCP and UDP, so packets can use either protocol and it will work. Usenet traffic would be all TCP as far as I know.

Would this happen if you had less bandwidth than you thought, and put too high of values for ISP bandwidth when going through the wizard?

Go to firewall –> rules --> edit a rule scroll down to the advanced options and click on "Advanced options". There you will find some options about connections and states. Not sure if there is also something which will help you.

@kyu: @redflag237: Sorry but is there noone who could geve me a hint? If your HFSC is working, you could fiddle with m1 and d perimeter. Say the queue responsible for downloading will get m1 = 20Mbit (bypass all other limit) for d=30seconds, and after that it's given a lower bandwidth m2=2Mbit. I believe this will automatically throttle any file bigger than 20Mbit x 30 / 8 = 75MByte. Works fine, thank you very much!

@kyu: @drwebster93: @podilarius: In the floating rules there is a source and a destination. Just specify the IP range of the phone as the source for outgoing connections and the destination for inbound queue. That would work for one phone, but how would I do this with five IP phones? Thanks! Create an Alias, and input the IPs of the phones inside the Alias. In the floating rule, specify the alias instead of IP. kyu, thanks for the tip on the Alias! So I made an alias, and put that in for the VOIP adapter in the traffic shaping wizard.  I have been monitoring my queues though, and it doesn't seem to be doing much.  If I monitor my queues on the pfsense box on the side with our phone system, I see around 50 kb/s per call in the qVoIP on WAN queue.  But at the same time, on the pfsense box on the side with the 5 IP phones, I am only seeing around 900 b/s per call.  The only difference in configuration is that I used the IP address of our phone system for the VOIP adapter in the wizard on the side with the phone system, and an alias with the IP addresses of the 5 IP phones on the side with the IP phones.  Any ideas? Thanks!

@sofakng: EDIT:  What concerns me is that I can only prioritize the packets I'm sending to my ISP.  I can't prioritize the incoming packets (i.e. if I'm downloading at full speed while trying to make a VOIP call, etc) The shaper does prioritize incoming packets too. It's true that particular packet has already used your Internet bandwidth at that point, but TCP's congestion control will kick in and quickly slow the download as needed by queuing once it gets to you.