I fixed up a couple things on the builder and started a new package run. Hopefully it will be OK this time. Give it a few hours (or just try it tomorrow) and see if it still does this.

Then fix your software that generates passwords :-)

We are bound by limitations of the underlying software we use in many cases.

In 2.1 we would like to have PPTP and other areas all using the user manager and not their individual user databases, but there are still some reasons that won't work in 2.0

For one, the user manager only stores the encrypted version of the password, and some things like the mpd daemon used for PPTP require the password in plain text as things are now.

What snapshot date? And which tab? Or just the main page of NAT?

I can't replicate it here on a snap from today.

The updates are not digitally signed right now since the builds are under development.  You need to go to the update settings, and tick the setting allowing the updater to install non-signed updates.

You can't encrypt the cert there, but when you use the OpenVPN client export package you can password protected the pkcs12 file then.

You can use easyrsa and then import all of the certs by hand, but that would be a bit tedious.

dd, physdiskwrite/physgui, image writer for windows, whatever you want.

I use ISO images more since I do a lot of development work with VMs more than physical hardware, but so many new systems are shipping without CD drives that the USB stick images will be very handy for more and more people using physcial hardware.

In either case (iso or memstick image) if you are booting from USB, such as a USB DVD-ROM, you may need to press the boot menu option that says it's for use in booting from USB. This sets an increased boot delay that will allow the system to catch up and detect USB media before trying to mount it.

pfSense won't cut off any active connection state. There are timeouts for connections, but they are idle timeouts (no traffic at all that matches the state) – an active connection wouldn't be touched.

As wallabybob mentioned it may be something on your ISP end if your DHCP lease is that short, or it could also be something on the PC that is doing the actual download.

Thanks a lot !

ahh many thanks!!!
so sorry - i am blind :)

if you are trying to block and not to limit the bandwidth of those p2p apps why not just create a firewall rule to allow only specific ports. :)

squidGuard-1.4_3 worked fine for me with Jan 6th upgrade.

Finally got around to trying that alternative method and it worked, finally able to enjoy proper torrenting speeds once again, thank you all for your help!

++1

at command or shell then install snort

pkg_add -r http://ftp.riken.go.jp/pub/FreeBSD/ports/packages/databases/mysql-client-5.1.53.tbz

pkg_add -r http://www.koksek.ru/pub/FreeBSD/ports/i386/packages/databases/mysql-client-5.1.53.tbz

updating emergingthreats rules

for those with the update problem just edit your

snort_check_for_rule_updates.php

$emergingthreats_filename_md5 = "emerging.rules.tar.gz.md5";

/*  download md5 sig from rules.emergingthreats.net/open/snort-2.8.6/ */

$image = @file_get_contents("http://rules.emergingthreats.net/open/snort-2.8.6/emerging.rules.tar.gz.md5");

download_file_with_progress_bar2("http://rules.emergingthreats.net/open/snort-2.8.6/emerging.rules.tar.gz", $tmpfname . "/{$emergingthreats_filename}", "read_body_firmware");

this work for me

Seems high to me but it would depend on the number and type of your interfaces (gigabit interfaces probably have larger receive buffer rings and hence preallocate more mbufs for received frames than 10/100 interfaces).

My 2.0 snapshot system with interfaces vr0, rl0, ral0, run0 and 256MB memory and an uptime of between 4 and 5 days shows mbuf usage of 176 /525. It show mbuf usage of 170 /390 after uptime of 15 hours.

I suggest you watch mbuf usage from reboot and at (say) 12 hour intervals.

With the 8th release I am stuck with this issue:

Removing package... Starting package deletion for postfix-2.7.2,1...done. Removing Postfix Forwarder components... Menu items... done. Services... done. Loading package instructions... Deinstall commands...

and it never come back.

Thanks Pierre,

I guess I will have to change my community string.

Blessings,

BvB

opps, now its fixed.    :)