Just for information:

If your squid does not filter httpS traffic then squidguard cannot block httpS.

In general the "transparent" option on squid only filters http (port 80). If you want to filter httpS (port 443) you need to run squid in non-transparent mode and put proxy configuration into the client's browsers.

I know there is a new squid 3.x package which allows to filter httpS in transparent mode but you didn't mention what squid environment you use.

@xbipin:

tried, it works well but some issues. after i enter a spoofed mac id, it gets implemented and pppoe reconnects and uses the new mac id and everything well but once i goto that spoofed mac id field and remove it and apply again, pppoe reconnects but under ppp tab etc it still keeps showing the spoofed mac id, not the original one, now i tried to do a trace from console to see what amc id its suing for the new connection but wasnt able to as my console hangs, this happens to me a couple of times when i see AT OK in console randomly, so i wasnt able to see is the original mac id being used or no but after a reboot the gui starts showing the original mac id so it might just be a gui bug but in general mac spoof works fine now, thanks

The only way to restore original MAC is rebooting (or filling it manually), since we do not keep this information anywhere.

well it seemed to stop doing that after I removed opt3, the usb ethernet adapter

however I have a new problem.

I am only maxing wan1 right now, but if I check the gateways they are all high latency for some reason

opt1 has no load, and yes it's a cable line, but it didn't use to do that.
opt2 is dsl and it's not related.

How can they all be showing the same high ping?

here is my routing

also in the firewall rules ->lan there is a rule for the balance of course.
I had no issues with this in pfsense 2.0.

VMTools package for 2.1 is broken as well for since several weeks. When u click install, it will run some commands for like a sec or 2 and says the package is installed.. but the fact is nothing gets installed.

Sorry about that, I was trying to use radius (Microsoft IAS in Server 2003) to authenticate users to the GUI. I know in previous versions 2.02 and 2.01 when I set this up, my IAS server would pass authentication but then I would not have access to any web pages because the user didn't exist in the local database of Pfsense. I was using the work around of adding the user to the local database as well that way I could get access to all the pages I needed but this seemed like double work.

I wanted to see if this issue was resolved in 2.1RC0 but when I set it up it didn't work. I don't even see a authorization request attempt on my Windows 2003 server looking at the logs. I have configured authorization through Active Directory using LDAP but my preference would be radius if possible that way I could do some accounting.

Looks like it's not enabled.

I just pushed a fix for that so it will refuse an alias called "block".

For 2.0-REL and 1.2-REL we did push a specific RC out to the mirrors but still had snapshots labeled with the same RC label running so there really wasn't a point in doing so. No RCx was the same as someone else's RCx, it's always been build date that's significant. The only time that's been any different is in the 1.0.x days when there weren't automatic snapshots.

I put search.php back. Cleaning up 9 years of crud that's accumulated there in the process of moving the site and missed some things.

Have you tried to use the ue0 interface?

Steve

Don't know. The question is, do I need to know from which groups a line has been removed?
An e-mail like 'WAN' has packet loss and is removed from all gateway groups would be sufficient (to me, at least) - then, the limit would work, as well, I guess.

The other possibility would be to maybe set a variable about which line thast message was sent and if the next error is the same type of error for the same line not send it again.. or something alike..

Like it's done now the whole e-mail notification is pretty much useless to me as it literally generates hundreds of e-mails and even brings the firewall to a point where I'm no longer able to log in.

All graph are broken on my system.

2.1-RC0 (amd64)
built on Sat May 25 08:57:31 EDT 2013
FreeBSD 8.3-RELEASE-p8