Did you check the windows system really was assigned an IP address by pfSense and didn't just acquire an autoconfig IP address? (You might have needed to release and renew the DHCP lease on the Windows system.)

What is the ouput of the Windows shell command ipconfig /all and what is the output of the pfSense shell command ifconfig -a

Workgroups have no relation to your firewall.

edit:  what johnpoz said.

No.

Packages can't be used at all. Other than that everything else should be equivalent.

But if you're running from USB, use USB flash w/nanobsd version on it, and not a CD drive. Then GruensFroeschli's response applies and not mine.

Apart from the fact that what you want to do is completely illegal.. the answer is yes its possible.

There may be other ways to do it (squid for example) but this is simple to do with a RADIUS server.

@bmatic586:

great. i ordered from netgate.

Netgate is an excellent place to get them. I just wish they would start carrying the new PC Engines enclosure. They have a nice custom one with side antenna mounts, but the new PCE one has front antenna mounts (it's wider), and you don't have to pull the board to swap the PC Card.

If you are using static IPs , you can create 2 Alias, 1 with your 8 heavy users, and the other with the 12 users. Then use "Policy Routing".

http://doc.pfsense.org/index.php/What_is_policy_routing%3F

http://doc.pfsense.org/index.php/Aliases

http://doc.pfsense.org/index.php/Multi-WAN_2.0#Firewall_Rules

Yes this is all on alias form

Hi stephenw10 ,

thank you for your reply.

I've understand and find (ty Google) how to change the monitor IP, in "Advanced" "Routing" !

Is it a way to have PfSense automatically trying to renew/release and so getting back the Gateway up automatically ? In fact I would like to have PfSense automatically do "renew/release" effect on the WAN Interface when my Monitor IP isn't accessible !

If somebody can help me …

Thanks in advance, and thanks again stephenw10 !

Sincerely,
Alex.

Go to Firewall-> Rules -> OPT1 tab

Add a rule to:

Allow
Any Protocol
Source subnet: OPT1 subnet
Destination: Any

Excellent!  :)

Steve

Not sure on the extracting bit but if you have Squid you should be able to at least block something with a few ACLs. There are various sites which details different ACLs on how to do this.
The only problem is the handling of https in the current stable squid package.

http://www.buttonclicker.com/2010/06/04/block-facebook-chat-using-squid-acl/
http://www.geekride.com/block-gmail-chat-gtalk-google-talk-squid-proxy/

One suggestion, but this would require some work, is to have some external process that monitors the usage of each user. When they reach their cap, this process should then send a disconnect to RADIUS which disconnects the user.
But before it does the disconnect it should switch the users class(room in this example) and this class will have the relevant attributes required to shape the user to the require speed. So when the user reconnects the new speeds are sent to pfSense for shaping.

It more depends on your through put. Personally I have never had a good experience with any low end budget router. I am running a ALIX board which is much more stable. I always found the budget routers to crash.

Apologize for the delay, was out of town.

Yes you would, I am not sure though as I do not know anything about your BMU.

Well so how would I hand out my public IP's to my customers if the setup is like this:

pfsense –--> BMU ----> routerboard ---->sectors
                                              -
                                              - to other towers with routerboards?

@dshafirov:

The rest "make config && make package" is unknown territory.  And I'm reading the man pages and googling.  Any further hints would be appreciated.

This is used only when compiling packages from ports.

We can't change the legal message from Intel. The license files are in the repo (See here) but something must have left them off the iso, probably somewhere in there it excludes the share portion of the build.