In 2.0 you can use the traffic shaper wizard to setup rules that will affect all WANs, and give some priority to different traffic. Though if your downloads are on port 80 and the streaming video is also on port 80, it may not really be possible to differentiate accurately in an easy way.

You're probably best paying for the commercial support service that's available since it sounds like you're massively out of your depth.

@changhe: I got an answer from the moderator heiko in the german speaking part of this forum: @heiko: Hallo, nicht möglich auf 1.23, nur mit einer Spzialversion der 1.2 von Ermal. Drer Traffic Shaper is in der 2.0 komplett überarbeitet und bietet dort auch IPSec TS etc. Regards Heiko Translation: It is not possible with 1.23. There is a special version of 1.2 from Ermal, which can do it. The traffic shaper is completely reviseded in 2.0 and has traffic shaping inside it's IPSec tunnels etc. mh, okay. i'm now strugled over this post. i need also this shaping inside the vpn tunnel, because the tunnel use the full bandwith. regards

ermal, When we discussed this the other day, you said with multi-wan it was better to put the limiters on floating rules (unless I misunderstood something, which when it comes to shaping is quite possible). Or perhaps that was specific to what the other person was trying to do.

P2P trafic can't  detect any rules  :-[

Oh yeah, good point.

I assume you mean NNTP?  If so, that is port 119, if memory serves.  Can't you just penalize that?

@jimp: You probably want the Limiters feature, but that is only available in pfSense 2.0. if it can give a global limit and a exception on certain ip/macs than i have to wait till 2.0

and going through the wizard for a third time is resulting in ~80ms while downloading. i think i'll just monitor it for a bit, seems to be ok.

I was able to solve this problem by turning off the FTP userland helper on the LAN interface.

For 99% of the users on the network, blocking/shaping bittorrent traffic using commonly-used ports seems to be effective. For the 1% who got through, you can use other means of tracking them down.

I pluged it in and it worked in a second.  :) Aug 27 09:18:25 kernel: ugen0.2: <vendor 0x0fe6=""> at usbus0 Aug 27 09:18:25 kernel: udav0: <vendor 0="" 2="" 0x0fe6="" usb="" network="" controller,="" class="" 0,="" rev="" 1.10="" 1.01,="" addr=""> on usbus0 Aug 27 09:18:25 kernel: miibus5: <mii bus=""> on udav0 Aug 27 09:18:25 kernel: ukphy0: <generic ieee="" 802.3u="" media="" interface=""> PHY 0 on miibus5 Aug 27 09:18:25 kernel: ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto Aug 27 09:18:25 kernel: ue0: <usb ethernet=""> on udav0</usb></generic></mii></vendor></vendor> Now I need to learn how to set up traffic shaping…