This is normal the FTP helper does all of the work on behalf so it comes from the firewalls ip.  This has been covered before in the forum.

@goofyfoot: can i set up read only accounts or can i allow users to view log files of sites hit and network traffic by authentication w/o giving them rights to configure anything? Not at the moment.  No ETA when these features will appear, they exist in HEAD but not completely refined as of yet.

DD-WRT support DHCP relay and i was playing with this option also. on pfsense i have denied unkown users to get a lease from dhcp and i have connected the pfsense LAN side to the campus network DHCP forwarder is set on dd-wrt routers to forward dhcp requests to pfsense. routers are connected to campus network from their LAN side Now when a registred wireless user connects to ddwrt router, it gets a dhcp from pfsense. but if it's not a registred user, it get an IP from the university DHCP after 1 minute : so no captive portal authetication and no security and when a PC connects to campus network, sometimes it doesn't get its IP quickly. this is not a real problem, i think there are some additionnal setup to do with university network and routers.

@sullrich: Must have been removed.  I'll look at restoring it soon. I marked it as 2.0 cause it was broke.  I don't recall what the issue was, but it certainly doesn't work in HEAD (although I think that might be a package manager issue). -Bill

Thx for the fast reply. I`ve made this setup and i will monitor if it will happen again. thx again

Here's an updated version. #!/bin/sh PROGS_TO_TEST_FOR="make top ls script screen cvs cvsup" for processing in $PROGS_TO_TEST_FOR; do         CPUUSAGE=`ps awux | grep $processing | grep -v grep | awk '{ print $3 }' | tail -n1`         CPUUSAGEB=`echo 100 \* $CPUUSAGE | bc`         RUNNINGCMD=`ps awux | grep $processing | grep -v grep | awk '{ print $11 }' | tail -n1`         PID=`ps awux | grep $processing | grep -v grep | awk '{ print $2 }' | tail -n1`         if [ $CPUUSAGEB -gt 30 ]; then                 echo "$PID $RUNNINGCMD using more than 30 cpu. restarting"                 kill $PID                 exec $RUNNINGCMD         fi done

It only counts in/out traffic at one interface and as you only view one of the interfaces you shouldn't see traffic in the graph from another interface. However I haven't tested this yet. Maybe you can do some tests to verify your suspicions?

Someone needs to create a pfsense package for you to use it.  Anything else is unsupported. I suggest posting a bounty if this is something your willing to fund.

Thanks a lot for the tip.  Will do. Hank

No rush…I just thought maybe others were seeing the same thing. I'll check back in periodically to see if there are any updates.

forgot to mentoin that im using 1.0.1 version freshly installed in vmware… any other info needed? btw, i have one more question, is it possible to do 1:1 mapping using ip from pppoe client?

@sullrich: Reinstall via a recent snapshot.  We now have a cron job handler item that ensures check_reload_status is running. Yes, a reinstall is required to get the new entry. Thank you, I'm on my way to install it.

You always should try these kind of things from externally. especially such crappy protocols like ftp  ;)

The symlink from /cf/conf to /conf has been damaged. Recreate the symlink and it will function again.

Just look at http://granados.sourceforge.net/ You have to learn C# or VB.NET before of course but if you alreay know some C/C++/java coding it won't be difficult to master C# ;-) You can do a lot of thing with that free editor (Visual Studio clone): http://www.icsharpcode.net/OpenSource/SD/

Alright thanks ;). Did not notice this with the previous snapshot, and it too had it's logs forwarded to a central syslog server. That syslog server alerts me by email of any syslog messages that are not on a "Permited" list.

@sullven: Also another question - if I save my config, reflash should the RRD graphs be reinstalled with the original config when "All" is selected for the backup options? RRD-Graphs are not stored in the config.xml so you'll lose this information on backup and not overwrite this information on restore.

You'll need a vlan capable switch. Though there are nics that can handle vlans better than others most of them should do.