Ok Josh, thx for the answers.  :)  Cya

i put again modem in bridge mode and add mikrotik. so far it works. upload is on maximum. i guess that pf has problem with mtu and packets (change tcp mss packets)?

correct

@dusan: NTP's destination port is 123 UDP and (rarely) TCP. Does NTP ever use TCP/123 ? It doesn't according to the NTP folks: "Note that NTP does not use TCP in any form. Also note that NTP requires port 123 for both source and destination ports." – http://www.eecis.udel.edu/~mills/ntp/html/debug.html

You can install squid3 High performance web proxy cache. It combines squid as a proxy server with it's capabilities of acting as a HTTP / HTTPS reverse proxy. It includes an Exchange-Web-Access (OWA) Assistant.

It should just create a default queue. The default queues don't need a rule assigned to it. All traffic we be applied to that queue. Mine just happens to be qP2P, but if you don't enable that, it should create one called Default.

@Bonline: HI thank you again for replying me :) so did I unterstood it too. would you know where I can check this into freeradius? Best regards That depends on where you store the users. If you store them in the "users" file in ../raddb/ folder then it would look like this: "Testuser" Cleartext-Password := "testpassword" WISPr-Bandwidth-Max-Up := 524288, WISPr-Bandwidth-Max-Down := 2097152 If you store it in a MySQL database - I do not use any database - this would be probably stored in any "radreply" table. If you are running freeradius in debug mode "radiusd -X" then you can check this if a user connects then the radius server must answer with the two attributes from above. If the server does not send these attributes you must configure your freeradius server.

One other suggestion, you should test your network with something like jperf (iperf gui for windows).  File transfers are not always a good judge of bandwidth limits because of all the dependencies involved.  The problem could be with the sending/receiving  hard drive, filesystem, OS, NIC, or some combination of those.  If Jperf shows a good amount of bandwidth the bottleneck is not the network. http://openmaniak.com/iperf.php#jperf - Jperf tutorial Josh

@awesomo: In your situation, your best bet is to use "realtime" ignore m1 and d and just specify the amount of bandwidth you need available to whatever traffic and set the priority to 7. It will send data out of that queue as fast as it can, always. I just wanted to point out that HSFC has no sense of Priority, the fact that there is a spot to specify priority is just a mistake in the GUI. HSFC just tries to share bandwidth fairly between all the queues.  Other than the realtime queue which gets it's bandwidth first, which you mentioned. It is my mission to make sure everyone knows that HSFC doesn't use priority. :) http://forum.pfsense.org/index.php/topic,42798.msg222507.html#msg222507 Josh

The default rules just means that it is the rule that matches everything.  Create a rule that matches all traffic and have that be the last rule in the list.  That rule should assign traffic to the limiters that manage the not reserved bandwidth.

In most cases rsync would look like ssh traffic, so if you shape/filter ssh it should catch rsync. Rsync also supports a –bwlimit=KBPS parameter so you can have the NAS box limit its own backup if you set, say --bwlimit=80 then it would go no higher than 80KByte/s (not that's Bytes, not bits.)

I get the same thing and I was curious what this was. I never tested to see if it actually blocked this traffic so I don't even know if I did it right.

Just so you know, set it up with anything, say 10% and then edit the queue once the wizards creates the queues for you. If you are still using the shaper, then having to separate limits could put you over your bandwidth.

If you turn shaping off, does it continue to be an issue? Can you make a call on both phones at the same time to different numbers and hold the call? I really thing this is an issue with one of the providers of the phones, not a firewall issue.

Run the multi lan traffic shaping wizard. Answer the questions accordingly and notice it asks about p2p traffic and how you would like to prioritize it.

@rbblue8: Hey, Thanks for the response!  :-) Do you see a noticeable difference when you make a call while downloading? If you cap both your upload and download to just below your providers true limit, I found it sounds as good as if there was no one downloading at all. Just a couple of minor hickups but I was just calling my cell phone and leaving a message to hear the difference. I very rarely saturate my line so for this I did remove my sabnzbd's cap on usenet while downloading to do. So give it a shot, I think you'll be happy with it.