Whoops! Good reason not for me to be trying to find solutions to my problems late at night ;D

None of the packages like snort will be included on the livecd. This has been discussed before.

Well, those are fresh installs. What else could there be to configure besides setting WAN to PPPoE and putting in username and password? The logs are quoted from system log. Are there any more detailed logs? BTW, a test install of IPCop works well on the same line (but not at the same time of course). I used the shell but couldn't find the config files for mpd. Also a tail -f on the logs gives me garbage. Not familiar with BSD, so what would be a way to watch them? Quite some question. Thanks for answers.

@hchady: does pfsense runs any STP protocol ? comcast is not compatible with STP Only on bridges.

haha yah I was editing my post when u posted thanks very much for your help!!

@Dortje: Thats why i wrote option 2. USB drives with 1GB+ space are very cheap, and should have more than enough space for saving the package files and configurations. Wouldnt that be a practical solution? The idea is basically that if you've got a USB drive that large, then you are able to install pfSense directly on to the USB drive. Most motherboards support booting from USB drives, so it is likely that you will not run into a problem with that. Like Scott said, it would just be too much work to install only packages on a USB drive in the cdrom platform.

Ok, thanks. Cheers, Manuel

in principle yes the shaping of there traffic is a more static matter but the pppoe server will work fine i would think

This is normal the FTP helper does all of the work on behalf so it comes from the firewalls ip.  This has been covered before in the forum.

@goofyfoot: can i set up read only accounts or can i allow users to view log files of sites hit and network traffic by authentication w/o giving them rights to configure anything? Not at the moment.  No ETA when these features will appear, they exist in HEAD but not completely refined as of yet.

DD-WRT support DHCP relay and i was playing with this option also. on pfsense i have denied unkown users to get a lease from dhcp and i have connected the pfsense LAN side to the campus network DHCP forwarder is set on dd-wrt routers to forward dhcp requests to pfsense. routers are connected to campus network from their LAN side Now when a registred wireless user connects to ddwrt router, it gets a dhcp from pfsense. but if it's not a registred user, it get an IP from the university DHCP after 1 minute : so no captive portal authetication and no security and when a PC connects to campus network, sometimes it doesn't get its IP quickly. this is not a real problem, i think there are some additionnal setup to do with university network and routers.

@sullrich: Must have been removed.  I'll look at restoring it soon. I marked it as 2.0 cause it was broke.  I don't recall what the issue was, but it certainly doesn't work in HEAD (although I think that might be a package manager issue). -Bill

Thx for the fast reply. I`ve made this setup and i will monitor if it will happen again. thx again

Here's an updated version. #!/bin/sh PROGS_TO_TEST_FOR="make top ls script screen cvs cvsup" for processing in $PROGS_TO_TEST_FOR; do         CPUUSAGE=`ps awux | grep $processing | grep -v grep | awk '{ print $3 }' | tail -n1`         CPUUSAGEB=`echo 100 \* $CPUUSAGE | bc`         RUNNINGCMD=`ps awux | grep $processing | grep -v grep | awk '{ print $11 }' | tail -n1`         PID=`ps awux | grep $processing | grep -v grep | awk '{ print $2 }' | tail -n1`         if [ $CPUUSAGEB -gt 30 ]; then                 echo "$PID $RUNNINGCMD using more than 30 cpu. restarting"                 kill $PID                 exec $RUNNINGCMD         fi done

It only counts in/out traffic at one interface and as you only view one of the interfaces you shouldn't see traffic in the graph from another interface. However I haven't tested this yet. Maybe you can do some tests to verify your suspicions?

Someone needs to create a pfsense package for you to use it.  Anything else is unsupported. I suggest posting a bounty if this is something your willing to fund.

Thanks a lot for the tip.  Will do. Hank