Could you give an IP of one of these servers that are off by 5 minutes?  They should not be listed as public if they are not going to keep correct time… But you can set a refclock offset if you have a refclock source, ie PPS for example then you can set the server to have a specific offset from that source.. But I am not aware if just running a ntp client/server that pulls time from a ntp server how you can offset its time from what that server - that your suppose to be trusting is giving you the most accurate time possible, etc.  Other than setting your timezone to be off.. Back to these servers that are off by 5 minutes - they for one could not be in the ntp pool, since the monitor checks their time and if offset is too much their score drops and unless they have a score of 10 or more they are dropped from the pool Example is stratum 1 ipv6 ntp server I run.. Typical offset from the monitoring station shows to be 5ms..  If some server was off by 5 minutes there would be no way to be allowed in the pool.. So I would love to check out this server your "using?" that is 5 minutes off?? [image: ntpserver.png] [image: ntpserver.png_thumb]

has there been any development with this… I have gotten my pfSense box in front of my Telstra router and have the phone service working on the supplied router... but I can't seem to get dhcp6 to pick up an IP address I can supply relevant information if people are still chasing setting up the phone through pfSense. EDIT:  well it's an unreliable phone connection I've found out

@pfBasic: Has an ISP or even an individual ever been successfully sued for.downloading (not distributing) copyrighted media? If so is certainly the exception not the rule. Realistically he has to worry about getting his internet throttled or cut off which would affect his business. I dont think so, the laws are just very convoluted on the matter, and confusing lol. So Big ISPs do not give out info, unless there is a court order, for them to do so. So Like was said I think the notice is the worst that ever happens. There is a clause for "Hotel Wifi" and that states, that as long as the guests use a completely different Public IP (took care of that today they gave me a bridged modem and a /29, so I am directly routed.) I also cannot monitor or have the ability to monitor setup, what sites they visit, or keep logs on it. Easy lol. So in those regards I am clear, now, I was not before (we used the same Public IP). The true ISP way to do it, would be to get a /26 and give each user an IP, that is tied directly to them, and while that would work for long term guests, that ability is slightly hampered by short termers needing a bridge to my network. I also, have been configuring the guest lan with some pretty strict firewall rules, to help somewhat I hope. I am slowly opening on anticipated need, and locking them down hard.

traffic shaper related I think, looks like one of your queues has its share of bandwidth too high.

When you say "anything above the CIR will be discarded", do you state this as a fact or a requirement on your end? If it's a fact, then let the ISP drop the packets, TCP will back off. If it's a requirement, then you will need to use one of the traffic shapers. Different shapers have different characteristics.  HFSC has the most correct implementation and should be nearly perfect. Just enable traffic shaping on your WAN interface, set to HFSC and assign a bandwidth. Don't need to configure any queues as the entire interface will be limited to whatever rate to specify. Depending on your circuit, you may need to play around with some settings. If your circuit is unbuffered but hard rate-limited, you may need to reduce your bandwidth slightly under your provisioned amount due to scheduling and bursting. You may need to reduce your bandwidth a bit anyway because they may be calculating bandwidth differently, layer1 vs layer2 vs layer3, and possibly layer1/2 that is different than Ethernet.

Noeone has an idea? Please help i think its only a little failure :(!

Turns out it's more difficult than that for afraid.org.  Gawd! In their interface you have to click on "Dynamic DNS" then click on "Check out: dynamic update interface (version 2)!" Then click on "activate" after ticking your IP's which will then ACTIVATE them for Dnyamic DNS…seriously?  That's why I'm there LOL can't you just activate them?  My gosh afraid!!! Now they're active AND you get a proper URL without the special character "?" in it! Done...the struggle is real people LOL.

what version of ntopng is everyone running? Mine seems really low compared to the advertised version.

Can anyone offer any suggestions please?

It doesn't make any sense. Will have to try other hardware and ultimately another router. To rule out the problem. I don't think it can be Vmware since i can meassure the full speed on both sides of it. (both adapters)

So my wild guess here is, there is no default filename and the GUI doesn't offer any method to set it or change it in dhcpd conf. I could set it manually but yeah it would get overwritten by each change of config. So I'd need to change the source template. Where can that be found? Honestly expected more from the much praised pfsense. Apparently <2.3 had that feature but not anymore.

Have you or anyone else found a solution to this? I am stuck with the same problem!