@ptt: You can do this, using "Limiters" http://doc.pfsense.org/index.php/Traffic_Shaping_Guide#Limiter Limiters work great.  I use these to keep people on my guest wifi from using more than 2/2, and people on my main connection from using more than 20/20.

Hmm, normally :) i didn`t have any drive inside, just usb pendrive. I"ve booted from another pendrive with memstick image couse my terminal does"t have odd

Please post the details of your Windows Update / squid settings. I followed a pfsense doc somewhere on caching Windows updates in squid and saw the same thing you're describing. I ended up scrapping squid for other reasons but I may try it again at some point.

@nexusN: Ya, as you have mentioned for those who actually want an all-rounded-box can pick ClearOS instead, yet another capable package with everything available. While for pf what I like it the most is it is purely a firewall software without anything redundant, instead of adding those unused server functions I do prefer a neat, professional and efficient routing unit with it. @Supermule: Freenas works quite opposite of PfSense….Freenas requires a lot of memory to perform. On bigger systems its not quite uncommon they ask for 192GB ram to run a NAS in an Enterprise setup.... I dont find that in terms with PFSense's way thinking and the hardware requirements... As I said, it would be nice to have 2 versions of pfSense. I am NOT talking about implementing freeNAS with pfSense in a busniness environment, but in a home environment. It would be perfect to cut of one more server. One "enterprise" version (the current pfsense :) ) and one version for home users. We all know that it is not recommended to combine a firewall with a NAS in same server, but in a home environment its no problem :) virtualization is ofc an option, tho the hardware requirements would exess the "server you have in your home".

thanks guys! i changed to 192.168.0.202/30 and that fixed the issue makes sense not sure why the isp gave me the wrong info but it works now

Yeah your going to want to look here for your answers http://technet.microsoft.com/en-us/library/ff793419.aspx KMS Activation Spells out the default port of tcp 1688 and then section 2 lists what records your dns server must have.

The problem with those test sites is that they all run some java client or some other very high level code that consumes massive system resources in order to display a shiny graph and a 'speedometer'.  >:( The machine I'm writing this on is quite capable of saturating my WAN connections but it can't keep up with the java front end hence it always shows something completely unrealistic. Steve

Squid is first, havp is set as parent for squid

While using Opendns do not forget to block access to outside dns servers from hosts you do want to restrict access.

First step is to assign these ips on firewall -> virtual ips, than change outbound nat (firewall -> nat ) to manual and create your own outbound nat rules to match server with ips.

Not there, no, but if you make an alias with a recognizable name and document it there, then use the alias in that box, it may make more sense later.

I figured it out. You have to login using the "root" account with the same password as the "admin" account. Then it works fine.

It's been a couple of days without incident. So it looks like there's some incompatibility issues with the stock scsi raid in the 345s. The 6i is working fine though.

if you create an url that returns this ip list, then you can create an url or url_table alias and apply it to a rule.

Even if you could copy the log files to Linux, you'd be missing the "clog" binary to read them. Setting up a syslog server on your LAN is a good idea, so the logs are automatically copied over the network as they happen in a standard format.

Are you running it on Internet explorer? If so, change to a supported browser like google chrome or firefox. If not, did you changed any gui permissions do admin user?

Unfortunatelly I have still same problem. This time WAN1 went down and I have to reboot Firewall. I cannot post log about WAN1 failure because this happened at weekend and when I was in office logs about WAN1 failure was already "flooded away" by dhpc- & arping-logs. Some idea? cu Floh

Thx for answering!! My first concern is actually with the network configuration. Should I go with option 1 (the image above) or option 2? In option 2, the public network is connected directly on firewall (pfSense). What would be easier to configure? I'll use Router1 just for routing. Option 2: [image: m1.jpg]

@stephenw10: Tunable name should be: dev.cpu.0.cx_lowest I wouldn't worry about the firewall values unless you have a specific problem. Steve Thanks for the clarification ;D