i had the same issue the other day (but i point to openDNS) and i dont block it in my opendns portal.  i logged into another network that i manage that has openDNS and it worked fine and that network doesnt run pfsense.

after a few minutes if trying, facebook finally loaded, but it was strange.  this happens once every couple weeks. i am not on facebook that much to care, i just found it odd that it was not responding.

i found a tutorial that used mpd , freeradius +mysql in freebsd
in the end of this tutorial they give a solution for get the online list from freeradius (mysql query)  ;D
here we go ! ;D
http://www.freebsdonline.com/content/view/511/506/

also i have an other question  ???!  can i do same thing with pfsense as like as this guide for load balancing in large isp networks for pppoe server ?

thanks!  :)

Ok thanks

Virtualising the firewall, has (so far) stopped it from intermittently dropping all traffic. I have had one more instance of it stopping forwarding under proxy ARP. Have shifted it back to IP Alias and will see hot it goes.

Cheers
Sam

We have already tested that the remote system with squid will do the right kind of caching.  So that shouldn't be a problem.

The concern right now is how to manage all of the devices and vpn sounds like the right option because we need the pfsense box to do tunneling in scenarios where we are connected to 3g or behind someone elses firewall.

I am not clear on what you mean by mult-wan.  The pfsense will only be connected to one WAN connection at a time.  ie. it may only be 3g or only behind someone elses firewall or only directly connected to the internet.

I think I saw mention in the documents that bridge setup doesn't work in the 2.0 version of pfSense when using OpenVPN?  Can someone confirm this?

is there anywhere that shows how to setup pfsense to do that

Hello,

I got this in syslog:

Jun 27 07:28:19 root: rc.update_bogons.sh is sleeping for 33512 Jun 27 07:28:19 root: rc.update_bogons.sh is starting up. Jun 27 07:28:19 root: rc.update_bogons.sh is ending the update cycle. Jun 27 07:28:19 root: Could not download http://files.pfsense.org/mirrors/bogon-bn-nonagg.txt.md5 (md5 mismatch) Jun 27 07:28:18 root: rc.update_bogons.sh is beginning the update cycle. Jun 26 18:54:29 root: rc.update_bogons.sh is sleeping for 44603 Jun 26 18:54:29 root: rc.update_bogons.sh is starting up. Jun 26 18:54:29 root: rc.update_bogons.sh is ending the update cycle. Jun 26 18:54:29 root: Could not download http://files.pfsense.org/mirrors/bogon-bn-nonagg.txt.md5 (md5 mismatch) Jun 26 18:54:29 root: rc.update_bogons.sh is beginning the update cycle.

2.0.1-RELEASE (i386)
built on Mon Dec 12 18:24:17 EST 2011
FreeBSD 8.1-RELEASE-p6

found the two below links that may help:

http://forums.freebsd.org/showthread.php?t=17786
http://lists.freebsd.org/pipermail/freebsd-hackers/2009-July/029076.html

Thanks jimp.  Knowing for sure that it is not possible, I can come up with a workaround for my needs.  Just wanted to make sure that I was not just missing something.

@cmb:

Packages don't integrate well into the user manager permissions, no way to do that AFAIK short of granting access to all packages.

It's fixed on 2.1 :) both XML and php package files can be applied to user permission.
The only missing thing are packages permission files now.

I came up with the idea to provide Wireless Network Bridging to small business customers and hopefully some Government departments. The two departments I questioned today about any interest in the concept was very excited about it and wanted to know more.

I'm thinking of using ubiquiti equipment to provide Point To Multi-Point connections and bridging customer networks this way. I don't know how to fully implement this, but we're going to buy the equipment we think we need and do our own testing / discovery.

I'm under the impression that MPLS-VPN type connections are the way to go along with aggregation and TDMA to maximize the customer experience.

With in-country bridging on the island being so bloody expensive, I'm about to upset an handful of people and wouldn't want them to waste their pressure pills on nothing to cry about, or….die about.

Thanks, Jits.

Fantastic!

Thanks for the information guys. I thought I was going crazy (and so did heper it seems)

It does fascinate me that one of the places I work at switched it on in the GUI with their multiple pfSense boxes at multiple campuses and never had an issue with it.
I must check to see if they are actually pointing their systems to it for NTP or they only think they are.

Hey, thanks for trying FlashPan. We're all in this together.

So we're not using AD (yet). At the moment, it's just a separate box (a VM actually) running OpenLDAP. Since we now have about a dozen services that can use LDAP to authenticate, we're trying to go that route. pfSense is just one of these services.

The good news is that we figured out how to get this working with pfSense…kind of. By adding a 'manager' attribute to Person objects, setting a manager to point to a DN that starts with cn=SOMEGROUP, making sure that there is a pfSense group names SOMEGROUP, and finally setting pfSense's group member attribute to 'manager', it works.

The only issue we have is that using the manager attribute to store group membership is disgusting. I'm hoping that we learn something while setting up an AD service (through Samba4).

Hard to say what's messed up exactly that lets it pass the test.

Step 1 would be to get us a copy of the "bad" file.

I belive I had found perect solution http://www.jasemccarty.com/blog/?p=101
crossroads may provide what I need.

No problem.  ;D

Steve

There isn't an option for that yet, but you might be able to hack around a bit in /usr/local/www/bandwidth_by_ip.php and manually adjust it. (I don't know which specific numbers are limiting the table to that size, but it's all in that file)