@wallabybob: I can't find an answer to my question asking if you have a VLAN capable switch. If you don't have a VLAN capable switch, then you have to configure your ATA to VLAN tag its interface if you are expecting it to work on VLAN 11. I have no idea if that configuration is possible. Like i said in an earlier post: @krisken: Is the switch correctly configured? it isn't a switch with vlan support, just a normal switch.  The only reason why i want to set it up with vlans is that the ip management is easier for me, and within a few months i want to set up a switch with vlan support. Well … i tought that it was possible like i did it.  So the only solution to make sure that i can create a new ip range for disks, servers, voip, ... stuff is buy a switch with vlan support, add a new nic for it (not possible) or set pfsense as 10.0.0.1/8.  Bummer :-)

We know. There was a snap up yesterday but it was removed. Be patient, a new one is building now. :-)

Puuh, great ;-) Thank you very much for this explaination!!

I have changed the version numbering to unbound version number_pkg version number for example 1.4.8_130. Thanks @jimp for the inspiration :)

Checked my aliases and filter rules and none had this port range. I updated to the last snapshot and the message is now gone weird…

Fixed here also. No more locks. Thanks for the work :)

What's odd is that code hadn't changed since 2005 (in either case) so I'm not sure how that ever worked. I committed a fix, hopefully it does the trick.

Seems like it ;)

I have the same issue. Is there a work around available, or is there a way to contact the maintainer of the package ? I did manually download mysql51-client.tbz but the snort package needs really modification.

@singerie: /28 is .0 for the subnet, and .16 for the broadcast :) (…) Of course, you are right ;-)

No blocker of any kind interfering? try other browser/pc if possible. tested here to be sure: 2.0-RC1 (i386) built on Mon Feb 14 03:24:30 EST 2011 on FF 3.6.13

Interesting, What does 40Mbit/s just at once without waiting for something to come back?… Seems like a (deliberately) misbehaving app, i.e. something nasty maybe? Windows PCs on the LAN? I would turn on logging and see what packets are getting blocked or what packets are destined for pfSense itself.

Is multicast traffic from SSDP: http://www.iana.org/assignments/port-numbers http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://en.wikipedia.org/wiki/Simple_Service_Discovery_Protocol

Ahh.. perfect.  Thanks

You might want to open a new topic and start with config of your queues/rules and networks involved, and describe better what you are trying to do: block stuff, no shaper needed; or shape them.

See here for hybrid auth explanation: http://www.netbsd.org/docs/network/ipsec/rasvpn.html#hybrid This is how I understand it: in mutual RSA mode client and server have certificates issued by the same CA and only clients that have certificates can connect to the server; in hybrid RSA mode only server has a certificate and it accepts connections from any clients, because client does not have certificate. Hybrid is kind of like SSL you can go to any https website and traffic between you and server will be encrypted, but server has no idea who you are.

@SpaceBass- Did you ever come across a resolution to this issue?  I too have an AT&T Microcell that just doesn't want to function behind my pfSense. Update: It seems that my Microcell is now working.  Two changes have occurred that may be related: 1) I enabled Traffic Shaping; and 2) I set up an IPSec Site-to-Site VPN.

Yeh i can see that I just bought a Atheros 5213A 802.11 a/b/g AR5BMB-44 Mini PCI Card. See what happens.. @jimp: I'd stick to ath if you want to be sure it will work properly all around though.