You can create limits on a per-rule basis.  When editing the rule (or creating a new rule) check out the Advanced buttons and there are a number of fine-grained options for limiting.

Not atm and afaik it's only a maybe for 1.3

When I managed to figure out what the problem was, and it's not pfsense  8) My nokia N810 uses wifi power saving which it set to maximum by default. There is a know issue with connecting to Atheros based wifi cards. Setting the power saving to intermediate solved the problem. I also have a Fonera, which has the same Atheros chipset as my wifi card in my pfsense firewall, and it too has the same problems.

If you ever find an open source project that provides reliable WAN acceleration, let us know. It's something we may be interested in implementing in the future.

@valnar: Does pfsense work with NAT-T?  That was a deal breaker for me. 1.3 will.

Did you even read the thread i posted??? I replace syslog by syslog-ng, work great. i have made a script who send the logs by e-mail, and rotate the log. the logs are stored on the pfsense hdd, and i think, they could be sent in external hdd or similar.

These days, top uses the sysctls I mentioned, so if you want to see how top uses the sysctls, you just have to read the C code. I was looking on a 6.3-RELEASE i386 machine to try to get as near as possible to pfSense. If I have missed anything from my answer or it's inaccurate, do correct it.

when you did all of this under nat did you turn off Advance outbound Nat and then set static ports to on? that is what i had to do to get linksys and cisco phones to work with my Voip

Squid is a terrible reverse proxy, varnish is a better one.  There is some interest in a package for it, but nobody's stepped up to work on one yet.  Perhaps you should consider a bounty project for a varnish package.

I have the same Optional interface ping problem… http://forum.pfsense.org/index.php/topic,9834.0.html

http://ex-parrot.com/~pdw/iftop/ Iftop is nice ..  real time traffic monitoring/graphing. I installed it on pfsense 1.2 by downloading the binary package for iftop from a freebsd 6.2 mirror somewhere [image: iftop_normal.png] its not a gui app though, have to use it from ssh or console

@cmb: That's actually exactly what I was talking about in our dev IRC channel yesterday. Its logging sucks, its functionality is weird, it just seems to be a general PITA. I'm strongly considering replacing it with FreeBSD's stock ntpd (which I believe is ISC's). It is, and I for one would be grateful if that happened.  I'm too used to being able to set iburst and know that within a couple of minutes of booting up my clock will be synced.

Sweet, Dynamic dns works. Thank you all for your input. Regards, Fred

And does the radius-function work? ??? And does anyone knows a manual in cooperation with microsoft 2003 server? Thnx,

It doesn't get all the blog posts, just release announcements and anything else major. I don't believe it's archived anywhere. If you want email notification of blog posts, this looks like it should do just that: http://www.rssfwd.com/

I had the bridging well done because i could get an ip with my laptop,but pfsense took ages to get an ip and only today i manage to do it.

@GREG3f: Is 1.3 available now?  If not, is there an ETA? It'll be available for testing purposes in a month or less, but won't be a final, stable release until 2009. Though a lot of our users have been running beta versions since the very early days. Once it hits beta, we will be willing to provide commercial support on it with the caveat it may not be as stable as 1.2 yet. No clue and not going to guess when it might hit beta.

Thanks for the reply sai, will there be anything special I will have to do for setup on the pfsense box?