Install squid Block all outbound access via the firewall to 80/tcp and 443/tcp Configure squid to block access to www.orkut.com

Check the snapshot server in a bit and the new ISO should include the changes.

Can you post a specific URL to try?

With emphasis

@Cry:

If you are really limited to only a few rules then you need to sit down with somebody with a clue, explain your network and your concerns and work with them to highlight your top risks.  From there they can help you identify the most appropriate rules for you.

You'll need diagrams, details of applications and operating systems (including versions and patch levels), what the network is used for (web browsing, email, etc) and what your concerns are.

Re-read the last sentence in my previous post though before you go wasting your time.

I enabled the OpenNTPD service yet it does not display under "Status: Services".

I used the command "ps -aux" and found;

_ntp  91800  0.0  0.2  1344  1056  ??  S    8:50AM  0:00.07 ntpd: ntp engine
root  91801  0.0  0.2  1376  1052  ??  Ss    8:50AM  0:00.00 ntpd: [priv] (nt

So, appears to be running.

PM

hi,
i managed to do the pppoe the first time, every thing is going well except my clients cant connect to their hotmail or msn massenger, did any body have this problem and had it solved, if so please help me solve mine.

many thanks in advance

Also see the Full Install tuning section located here: http://devwiki.pfsense.org/Tuning

@cmb:

ping 69.64.6.1 (just an IP on the Internet I know responds to pings)

What's the Easiest IP address to remember to test connectivity? Why 4.2.2.2 of course :)

now http://blog.pfsense.org  :)

That's the place to watch for news, updates and other info. A must-read for all users.

Also, subscribe to the announcements list. email announce-subscribe@pfsense.com to subscribe. We've done a poor job of announcing releases there, but will do so going forward.

I've installed pfSense numerous times and never seen that. My guess would be a corrupt file. Since your running the embedded version it would be easy enough to flash another compact flash card, using another box or live cd, restore your config to the compact flash card. Then just swap the card out. Downtime would be just the time it takes for the box to boot.

Sounds good, Heiko and anyone else interested I started up a Bounty.  Please go there and give your input and post your amount and I'll update the subject with the values total.

Check it out here: http://forum.pfsense.org/index.php/topic,6024.0.html

In addition, if anyone here decides to work on it, I'd be more than happy to test and/or assist.

I

@Perry:

Just to be sure. Did you add a rule on lan2 like the default rule on lan

There is no smiley hitting his head with his hand ;-)

That was the point, that solved the problem, thank you!

Buffers are smaller on 10 megabit.  100 or gigabit will show better performance.

Check duplex as well.

@dear arno:
you success to  use pfsense pptp sever + windows IAS (radius server), plain windows xp vpn client - it works perfect since installed .

but I got problem:pptp server with radius
1.enable pptp server with local aaa,that's all ok!
2.only change aaa from local to radius server(such as evolynx radius server),success to in ,and get subnet ip,it seems all ok,but problem comes:can not ping any ip ,public ip(such DNS ,gateway of wan) and LAN ip of pfsense.(Tips:that's can ping when AAA with local,firewall peimit any IP any protocol).
3.return aaa to local,all become ok.
only change just local or radius server. Pfsense exist bugs on working with radius server or I wrong configuration? I NO IDEAR ?WHAT'S WRONG?can you help me?
thanks
yours yasian
my email: yasian@163.com