Aha, thanks!

Here's the output:

sysctl kern.timecounter

sysctl kern.timecounter kern.timecounter.tick: 1 kern.timecounter.choice: TSC(-100) HPET(900) ACPI-fast(1000) i8254(0) dummy(-1000000) kern.timecounter.hardware: ACPI-fast kern.timecounter.stepwarnings: 0 kern.timecounter.tc.i8254.mask: 65535 kern.timecounter.tc.i8254.counter: 4775 kern.timecounter.tc.i8254.frequency: 1193182 kern.timecounter.tc.i8254.quality: 0 kern.timecounter.tc.ACPI-fast.mask: 4294967295 kern.timecounter.tc.ACPI-fast.counter: 976318787 kern.timecounter.tc.ACPI-fast.frequency: 3579545 kern.timecounter.tc.ACPI-fast.quality: 1000 kern.timecounter.tc.HPET.mask: 4294967295 kern.timecounter.tc.HPET.counter: 3457380201 kern.timecounter.tc.HPET.frequency: 14318180 kern.timecounter.tc.HPET.quality: 900 kern.timecounter.tc.TSC.mask: 4294967295 kern.timecounter.tc.TSC.counter: 1185842065 kern.timecounter.tc.TSC.frequency: 2695108768 kern.timecounter.tc.TSC.quality: -100 kern.timecounter.smp_tsc: 0 kern.timecounter.invariant_tsc: 1

sysctl kern.hz

kern.hz: 1000

Edit: I've now tried setting kern.timecounter.hardware to HPET, TSC, i8254, and ACPI-fast manually and rebooting after each (in /etc/sysctl.conf). None of the settings have been any better than the other. The instant I use something that takes a lot of bandwidth (I have a 100/10 connection) the clock goes shooting off into hyperspeed.

@SectorNine50:

Figure I might as well do 64-bit, just in case there is some sudden mass exodus away from 32-bit in the future…  ;)

You're probably safe with 32 bit up until Y2K38. ;) At that point, probably won't be possible to run 32 bit anymore. But I sure hope it isn't a sudden mass exodus in early 2038.  :P

You can probably run pfSense on those door stops, depending which model they are.

Steve

Hmm, well I'm glad you're up and running but I have no idea why it worked/didn't work.  ::)

Steve

You have a 150 host network set up peer-to-peer? Ouch, I feel for you. I'd start pushing for some form of central management. It would mean some up front time and effort, but on the back end your life would become much easier.
Perhaps block streaming sites for student computers, and less restrictive access to the teachers. Set up some form of request system to have a site unblocked with advance notice if the teacher needs it for a lesson. Teachers should know in advance when they have need for multimedia sites, it's why they keep lesson plans.
Me, i'm a little more hard boiled, I wouldn't bother with hearing complaints about streaming sites without a very good justification for needing them. I'd want to see a lesson plan requiring it.
Train your teachers how to download a youtube video so they can present it offline.
I'm harping on youtube and streaming media because they are total bandwidth hogs. Doing some back of the envelope calculations, consider youtube's minimum bandwidth requirements of 500 kbps and you are looking at 25 megabytes per minute. multiply that by a class size of 33 students and you are looking at 750 megabytes for just one minute of video. This is just for youtubes minimum video settings. That would eat up your bandwidth very quickly.

As for patches, you can get all of them from microsoft's support website, it's a pain to do so, but one download and a trip around the campus would cost you footwork, but gain you some bandwidth savings.

My thoughts, get centrally managed as soon as you can, so you can push updates out from a central server, and block media streaming websites as strictly as can be allowed.

i had the same issue the other day (but i point to openDNS) and i dont block it in my opendns portal.  i logged into another network that i manage that has openDNS and it worked fine and that network doesnt run pfsense.

after a few minutes if trying, facebook finally loaded, but it was strange.  this happens once every couple weeks. i am not on facebook that much to care, i just found it odd that it was not responding.

i found a tutorial that used mpd , freeradius +mysql in freebsd
in the end of this tutorial they give a solution for get the online list from freeradius (mysql query)  ;D
here we go ! ;D
http://www.freebsdonline.com/content/view/511/506/

also i have an other question  ???!  can i do same thing with pfsense as like as this guide for load balancing in large isp networks for pppoe server ?

thanks!  :)

Ok thanks

Virtualising the firewall, has (so far) stopped it from intermittently dropping all traffic. I have had one more instance of it stopping forwarding under proxy ARP. Have shifted it back to IP Alias and will see hot it goes.

Cheers
Sam

We have already tested that the remote system with squid will do the right kind of caching.  So that shouldn't be a problem.

The concern right now is how to manage all of the devices and vpn sounds like the right option because we need the pfsense box to do tunneling in scenarios where we are connected to 3g or behind someone elses firewall.

I am not clear on what you mean by mult-wan.  The pfsense will only be connected to one WAN connection at a time.  ie. it may only be 3g or only behind someone elses firewall or only directly connected to the internet.

I think I saw mention in the documents that bridge setup doesn't work in the 2.0 version of pfSense when using OpenVPN?  Can someone confirm this?

is there anywhere that shows how to setup pfsense to do that

Hello,

I got this in syslog:

Jun 27 07:28:19 root: rc.update_bogons.sh is sleeping for 33512 Jun 27 07:28:19 root: rc.update_bogons.sh is starting up. Jun 27 07:28:19 root: rc.update_bogons.sh is ending the update cycle. Jun 27 07:28:19 root: Could not download http://files.pfsense.org/mirrors/bogon-bn-nonagg.txt.md5 (md5 mismatch) Jun 27 07:28:18 root: rc.update_bogons.sh is beginning the update cycle. Jun 26 18:54:29 root: rc.update_bogons.sh is sleeping for 44603 Jun 26 18:54:29 root: rc.update_bogons.sh is starting up. Jun 26 18:54:29 root: rc.update_bogons.sh is ending the update cycle. Jun 26 18:54:29 root: Could not download http://files.pfsense.org/mirrors/bogon-bn-nonagg.txt.md5 (md5 mismatch) Jun 26 18:54:29 root: rc.update_bogons.sh is beginning the update cycle.

2.0.1-RELEASE (i386)
built on Mon Dec 12 18:24:17 EST 2011
FreeBSD 8.1-RELEASE-p6

found the two below links that may help:

http://forums.freebsd.org/showthread.php?t=17786
http://lists.freebsd.org/pipermail/freebsd-hackers/2009-July/029076.html

Thanks jimp.  Knowing for sure that it is not possible, I can come up with a workaround for my needs.  Just wanted to make sure that I was not just missing something.

@cmb:

Packages don't integrate well into the user manager permissions, no way to do that AFAIK short of granting access to all packages.

It's fixed on 2.1 :) both XML and php package files can be applied to user permission.
The only missing thing are packages permission files now.

I came up with the idea to provide Wireless Network Bridging to small business customers and hopefully some Government departments. The two departments I questioned today about any interest in the concept was very excited about it and wanted to know more.

I'm thinking of using ubiquiti equipment to provide Point To Multi-Point connections and bridging customer networks this way. I don't know how to fully implement this, but we're going to buy the equipment we think we need and do our own testing / discovery.

I'm under the impression that MPLS-VPN type connections are the way to go along with aggregation and TDMA to maximize the customer experience.

With in-country bridging on the island being so bloody expensive, I'm about to upset an handful of people and wouldn't want them to waste their pressure pills on nothing to cry about, or….die about.

Thanks, Jits.