I think you might want to try using traffic shaper tool.  I ran in to something like this.  I limited the torrent traffic to 60% of my 3 GB dsl line.  This resolved the issue I was having with torrent traffic killing my network.
RC

1.0.1 is not supported.
–> Update to 1.2

You just need to setup a rule on OPT1 that allows traffic. No need to do any NAT rules.
If you're not sure on how to achieve that:
please post screenshots of the rules you have right now and i can tell you what you need to change.

Not sure, I'm not a programmer (and you've still not said what software you're using that's doing this) so I couldn't say how it's worked out.  It may well be falling back to the global broadcast address because it's intended route fails, but it's all speculation on my behalf.

thanx for the hints. i will dig into it on the weekend.

actually i was wondering, cause the problems started to rise after upgrading to pf 1.2rc3.

i will play a bit around and post the results

greets

cc

I would add the freeNas box to the nework.  If you are using MS active directory I would tie the server into the active directory.  Apply permissions as necessary.  you would be fine from there.  I be glad to work with you.  Send me a private email and we can discuss.

Ok!

I was looking for the CARP tutorial. Finally, I discovered that my problem was that I can't see this tutorial with IExplore 7. I tried this in two different machines, having the last version of FlashPlayer.

However it looks pretty using Firefox …

?

Regards,

Josep Pujadas

ok great, after some research PPTP is not really secure and I need access from NATed client.

OpenVPN is configured and working fine!

Thanks a lot! ;)

For fileserver there is nothing like freenas.org

Well Freenas is a very nice product but it is not as fast as Linux.
This is a fact as samba is notorius slow on FreeBSD and there, read the latest samba entry in UPDATING.

well here it is
Bug #4715 (https://bugzilla.samba.org/show_bug.cgi?id=4715) is NOT
  fixed yet, although it won't core dump smbd process any more. Still,
  access to the shares other than UFS is not guaranteed.

if you read the thread of the bug i do not think this issue is going to be solved soon.
Samba team say FreeBSD is in error and the other way arround.

So on high performance samba servers FreeBSD is not the best choice!

Try disabling ACPI: http://devwiki.pfsense.org/BootOptions

I have read about some other funny issues in other threads that went away when disabling acpi.

ok. sory for the reading mistake.

damn it, just tried my another machine and it works fine. seems like some incompatibility between an older card and the card or switch on the pfsense box.

The one thing that limits the width is the theme. You could create a theme that uses the full size of the screen  but I think that the tables are limitted to fixed sizes as well. Without at least modifying the theme the answer is no.

upupup!

@gmckinney:

@foomanjee:

Yeah, firewalls were on 1950's, then today I upgraded them to 2950's, since I knew I was going to have to run snort, and I was moving more traffic over..

Will check out that link - thanks.

Side note - snort sure does like blocking Akamai :(

If you are running in a production environment you may also want to checkout:

http://www.freebsd.org/cgi/man.cgi?query=pae&sektion=4

Just a suggestion….

gm...

Kind of need the kernel sources for that..  Do you guys have the pfsense kernel file up anywhere? (pfSense_SMP)

Search, it has been answered before  ;)

The easiest thing is to download, modify and reupload the config but this will force a reboot.

You may want to make use of the search function to find other discussions on this point ;)

@nicolas_thon:

Dear All,

As I have one Multiple Serial PCI Card to extend on Serial on pfSense Box, but I dont know how to make the card work on the box.
Anyway can anyone give me any solution to working on this.

Thanks In Advance.

What kind of Hardware is it? Is it supported by FreeBSd-6.2? Take a look here: http://www.freebsd.org/releases/6.2R/hardware-i386.html#SERIAL so see if it is supported …