Great to hear that. Good progress has been made on the traffic shaper. Now can we put together a bounty to extend captve port to be multi-wan and multiple interface?
I'd go with rsync over SSH. Rsync will allow you to keep the webserver updated with changes on the fileserver and as you should be using SSH to admin it anyway you're not opening up any new holes.
Doesn't matter if it's in the GUI for me, personally. If the support was there, I was just going to modify /etc/inc/interfaces.inc to add the lines. No big deal.
Generally the WAN port will have a real ip and so any packets with private ip addresses will be unwanted (forged/part of attack etc) so by default all rfc1918 packets should be blocked.
Having posted a similar statement in the past myself gave a reply in which someone suggested to pick another theme when using IE.
In System: General Setup use the theme: pfSense if you have to work with IE.
Sorry guys. My mistake. In our subnet the lowest IP (and also the highest) number cannot be assigned to the router gateway. I have changed the gw IP's from xx.xx.80.192 to xx.xx.80.193 and everything goes OK now.
Have a look at the states table and see if they are all originating from one LAN IP. I had an issue with some sort of DoS program on a machine that one morning started sending out thousands of requests to weather.com. Tied up the entire state table. I pulled that machine and all was back to normal.
