@Dortje: Thats why i wrote option 2. USB drives with 1GB+ space are very cheap, and should have more than enough space for saving the package files and configurations. Wouldnt that be a practical solution? The idea is basically that if you've got a USB drive that large, then you are able to install pfSense directly on to the USB drive. Most motherboards support booting from USB drives, so it is likely that you will not run into a problem with that. Like Scott said, it would just be too much work to install only packages on a USB drive in the cdrom platform.

Ok, thanks. Cheers, Manuel

in principle yes the shaping of there traffic is a more static matter but the pppoe server will work fine i would think

This is normal the FTP helper does all of the work on behalf so it comes from the firewalls ip.  This has been covered before in the forum.

@goofyfoot: can i set up read only accounts or can i allow users to view log files of sites hit and network traffic by authentication w/o giving them rights to configure anything? Not at the moment.  No ETA when these features will appear, they exist in HEAD but not completely refined as of yet.

DD-WRT support DHCP relay and i was playing with this option also. on pfsense i have denied unkown users to get a lease from dhcp and i have connected the pfsense LAN side to the campus network DHCP forwarder is set on dd-wrt routers to forward dhcp requests to pfsense. routers are connected to campus network from their LAN side Now when a registred wireless user connects to ddwrt router, it gets a dhcp from pfsense. but if it's not a registred user, it get an IP from the university DHCP after 1 minute : so no captive portal authetication and no security and when a PC connects to campus network, sometimes it doesn't get its IP quickly. this is not a real problem, i think there are some additionnal setup to do with university network and routers.

@sullrich: Must have been removed.  I'll look at restoring it soon. I marked it as 2.0 cause it was broke.  I don't recall what the issue was, but it certainly doesn't work in HEAD (although I think that might be a package manager issue). -Bill

Thx for the fast reply. I`ve made this setup and i will monitor if it will happen again. thx again

Here's an updated version. #!/bin/sh PROGS_TO_TEST_FOR="make top ls script screen cvs cvsup" for processing in $PROGS_TO_TEST_FOR; do         CPUUSAGE=`ps awux | grep $processing | grep -v grep | awk '{ print $3 }' | tail -n1`         CPUUSAGEB=`echo 100 \* $CPUUSAGE | bc`         RUNNINGCMD=`ps awux | grep $processing | grep -v grep | awk '{ print $11 }' | tail -n1`         PID=`ps awux | grep $processing | grep -v grep | awk '{ print $2 }' | tail -n1`         if [ $CPUUSAGEB -gt 30 ]; then                 echo "$PID $RUNNINGCMD using more than 30 cpu. restarting"                 kill $PID                 exec $RUNNINGCMD         fi done

It only counts in/out traffic at one interface and as you only view one of the interfaces you shouldn't see traffic in the graph from another interface. However I haven't tested this yet. Maybe you can do some tests to verify your suspicions?

Someone needs to create a pfsense package for you to use it.  Anything else is unsupported. I suggest posting a bounty if this is something your willing to fund.

Thanks a lot for the tip.  Will do. Hank

No rush…I just thought maybe others were seeing the same thing. I'll check back in periodically to see if there are any updates.

forgot to mentoin that im using 1.0.1 version freshly installed in vmware… any other info needed? btw, i have one more question, is it possible to do 1:1 mapping using ip from pppoe client?

@sullrich: Reinstall via a recent snapshot.  We now have a cron job handler item that ensures check_reload_status is running. Yes, a reinstall is required to get the new entry. Thank you, I'm on my way to install it.

You always should try these kind of things from externally. especially such crappy protocols like ftp  ;)

The symlink from /cf/conf to /conf has been damaged. Recreate the symlink and it will function again.

Just look at http://granados.sourceforge.net/ You have to learn C# or VB.NET before of course but if you alreay know some C/C++/java coding it won't be difficult to master C# ;-) You can do a lot of thing with that free editor (Visual Studio clone): http://www.icsharpcode.net/OpenSource/SD/