see http://forum.pfsense.org/index.php/topic,6805.msg38804.html#msg38804 also. same problem there.

VNC over SSH port tunneling is good as long as you can trust your LAN. Better solutions depend on your client OS. With Windows, RDP is better from a security standpoint (better yet with Vista) and drastically better performance-wise. RDP security also depends on host-based controls like account lockout. Also Windows won't let accounts with blank passwords login over the network including via RDP, so that protects you from some mistakes.

Got a cheep switch, and hooked that to the LAN port, and now everything is working great. Just want to thank everyone who replied to my thread.

Actually if you sponsor it there might be a configuration that works and does what you ask for! FreeBSD has vimage which gives you different net stack instances on the same hardware you can combine that with jails each running a fpfSense instance on each virtual stack and that gives you what you want and since nokia and juniper started from freebsd they can support such feature, and this is a wild guess, just cause of this feature in freebsd. vimage is only present on RELENG_7, so you have to wait till then or try to experiment yourself. Regards.

This has been solved.  I guess I just needed to reboot.

It's not run from cron (and it's not ddclient), it runs automatically when your IP changes.

This has been a feature since the very first alpha release.

Normal varies a lot - you've missed out just about all useful information to help define that, however… Try enabling polling.  It can hurt throughput, but it does reduce interrupts.  You'd probably also find a better result with a better card, such as an Intel Server NIC.

ok thanks Jahonix i was thinking that to.

Option 8 also takes you to a shell. If you don't want a shell available to anyone on the console, you need to enable login for the console on the advanced page.

IPsec passthrough (not rewriting the source port for UDP 500) is enabled by default. Shouldn't need anything other than that.

atrun is there. /usr/libexec/atrun You just need to add a cron entry to your config.xml to run it.

I copy, graph are now OK. Thx a lot.

I suggest you offer a bounty in the appropriate forum, stating exactly what you want and how much you'd like to pay.

I have updated the ticket. If the filter reloads often the traffic counters on the queues reset to 0 which makes the counters wrap. I already clamp down the graph based on the bandwidth set in the magicshaper. If the MagicShaper is not set it will automatically default to 1gbp. Otherwise all values over the defined speed will be ignored by the graphing code as a wrapped counter fault. One should always use the queues graph as a indication only so the numbers would not even match up normally. Which is why the graph doesn't have numbers in the 1st place.

wow O_o I really dont get what you want to do… Could you make a diagram and explain in complete sentences what you are trying to accomplish?