Apart from the fact that what you want to do is completely illegal.. the answer is yes its possible.

There may be other ways to do it (squid for example) but this is simple to do with a RADIUS server.

@bmatic586:

great. i ordered from netgate.

Netgate is an excellent place to get them. I just wish they would start carrying the new PC Engines enclosure. They have a nice custom one with side antenna mounts, but the new PCE one has front antenna mounts (it's wider), and you don't have to pull the board to swap the PC Card.

If you are using static IPs , you can create 2 Alias, 1 with your 8 heavy users, and the other with the 12 users. Then use "Policy Routing".

http://doc.pfsense.org/index.php/What_is_policy_routing%3F

http://doc.pfsense.org/index.php/Aliases

http://doc.pfsense.org/index.php/Multi-WAN_2.0#Firewall_Rules

Yes this is all on alias form

Hi stephenw10 ,

thank you for your reply.

I've understand and find (ty Google) how to change the monitor IP, in "Advanced" "Routing" !

Is it a way to have PfSense automatically trying to renew/release and so getting back the Gateway up automatically ? In fact I would like to have PfSense automatically do "renew/release" effect on the WAN Interface when my Monitor IP isn't accessible !

If somebody can help me …

Thanks in advance, and thanks again stephenw10 !

Sincerely,
Alex.

Go to Firewall-> Rules -> OPT1 tab

Add a rule to:

Allow
Any Protocol
Source subnet: OPT1 subnet
Destination: Any

Excellent!  :)

Steve

Not sure on the extracting bit but if you have Squid you should be able to at least block something with a few ACLs. There are various sites which details different ACLs on how to do this.
The only problem is the handling of https in the current stable squid package.

http://www.buttonclicker.com/2010/06/04/block-facebook-chat-using-squid-acl/
http://www.geekride.com/block-gmail-chat-gtalk-google-talk-squid-proxy/

One suggestion, but this would require some work, is to have some external process that monitors the usage of each user. When they reach their cap, this process should then send a disconnect to RADIUS which disconnects the user.
But before it does the disconnect it should switch the users class(room in this example) and this class will have the relevant attributes required to shape the user to the require speed. So when the user reconnects the new speeds are sent to pfSense for shaping.

It more depends on your through put. Personally I have never had a good experience with any low end budget router. I am running a ALIX board which is much more stable. I always found the budget routers to crash.

Apologize for the delay, was out of town.

Yes you would, I am not sure though as I do not know anything about your BMU.

Well so how would I hand out my public IP's to my customers if the setup is like this:

pfsense –--> BMU ----> routerboard ---->sectors
                                              -
                                              - to other towers with routerboards?

@dshafirov:

The rest "make config && make package" is unknown territory.  And I'm reading the man pages and googling.  Any further hints would be appreciated.

This is used only when compiling packages from ports.

We can't change the legal message from Intel. The license files are in the repo (See here) but something must have left them off the iso, probably somewhere in there it excludes the share portion of the build.

Ah, good suggestion but I have sorted it now.
I'm not sure it would have worked though since I twice restarted to whole box (you can see the gaps in the RRD graph) and that just made it worse!
It turns out I had left another computer on with multiple copies of the dashboard open that I had forgotten about. Interesting that the connection survived a reboot.
However would you not expect to be able to see the system load using top -SH?  :-
Is there some other tool I could use in future to diagnose something like this?

Steve

Found the culpit.

If you "Enable UPnP & NAT-PMP" it will broken miniupnpd.

So miniupnpd cannot support it.  ::)

Yes, use search

This question has been covered quite a lot