OK, so I went about this a different way.  Since port 80 traffic was already being treated as medium priority in the default queue, I got rid of that rule.  The roku device now goes into the correct qstream queue with high priority. Thank you.

Sounds good, but that's not really what I meant. My question is: in my scenario (nntp traffic lowest priority, all other traffic normal, processor PIII already straining to keep up with the traffic shaping (35% when there's a lot of nntp traffic)) which ones should I check? I guess there's a trade-off somewhere between processor power and extra methods checked. Can anyone shine a light on this? I can read about the theory but I would like to hear some practical experience. (Again thank you Setsun for your help!)

Check the limiters on Firewall->Traffic shaping.

Ignore me. There is always simple answer. DMZ port wasn't connected to anything. Once I plug the cable into the switch I could create rules without errors what I've mentioned in first post. Hopefully it will help someone.

Maybe open a ticket at pfsense bugtracker http://redmine.pfsense.org/projects/pfsense attaching the full contents of your /tmp/rules.debug and shaper-related portion of your config.xml file?

Hello, I've made this working as it should be in version 1.2.3. It was definitely down to our ISP provider as I didn't do to many changes, then we've switched over to fibre optic and QoS for VoIP is working as a charm. Even though I'm going to switch to 2.0 version of pfsense. Already some problems with the config but overall I think 2.0 version is a way to go right now. Thanks Andre

and apparently you have to register on that site….

@gderf: Where are you initiating the pins from? I think I know where the problem comes from, it's just the pipe on my machine is probably full, all ping came from my laptop. I'm changing the status of the post to [solved] :)

Now I am really confused.  You say you agree with me, but my complaint is that I never see anything in qACK - and that makes sense as the generated rules don't reference qACK.  ???

try to look failover and loadbalance settings for your wan connection. and look also for policybased routing

Hi, thanx for the info. I am searching for a good solution to block skype in our network. I don´t understand how to integrade it in L7. Can you help? Regards, Valle

Thanks Metu69salemi. sorry i shoudn't have asked such simple issues. Feels like i'm being spoon feeded. thanks anyways kalu

Hi again, It's look to they have a problem with the wizard and the Penalty Box, actually I don't have any queue who's maid by the wizard, just one in Firewall -> Rules -> Floating who refer to a queue who don't exist. in this rules I don't see the Alias or the Ip I put in the wizard. Regards Totorux

Update your snapshot.

Hi, need this too. Do you have a solution for this problem? Need this for the captive portal.