P.S.: I also wanted to know it's this OS easier to run and maintain in comparison with - Slackware for example (Slackware in console mode without graphical interface )  Huh

Configuration is almost web gui only. As pfSense is a strip down version of FreeBSD it limits the need for upgrades. Security issue will be posted on http://blog.pfsense.org/

I have installed 2.0b4 for testing and here is /dev/lpt0. So in 1.2.3 the parallel Port is not included

perfect!

@jboard146:

Is there a usb nic that is known to work?

Also does the ubiquiti sr71 work? It is an atheros based card not sure which one.

I'm running 2.0 beta4 full install on an ALIX2 board.

I have a Trendnet TU-ET100C
    * Ethernet chipset: ADMtek ADM8511 "Pegasus II"

which works in 2.0 beta4

rk

It defaults to 10,000 on 1.2.3;  only in 2.0 does it actually vary (conservatively) according to the amount of system memory.  You can, of course, change the value.
For example, I have a Conroe-Celeron @ 1.2GHz w/ 1GB of ram and changed the default value to 500,000.  Bear in mind that I don't run any packages - just using it as a NAT router with an oversized state table & HFSC (main reason why I didn't go for SoC based stuff like Microtik or running Vyatta for that matter).

Running 3 torrents on one client, I managed a little over 130,000 states but the unit is holding up well:

I pull the cover off the firewall tomorrow and see if I see anything loose or burnt looking.
RC

Maybe you just expected to see em0 .. em7

Support for 3.0 USB is just now being added to FreeBSD-CURRENT so I doubt we will see that until 9.0 RELEASE which is off in the future.  So at the earliest pfSense 2.1 which is mid-late next year.

@dreamslacker:

You do not, by any chance, have the onboard raid enabled, do you?

yes you are might be  right i am helping someone to build it on remote location i did asked at the beginning if its set to ACHI or PATA/IDE but still didn't got yet a clear answer.

Thanks

I  repair my hard ( victoria  , hdd regenerator,Low level Format) and change Ide cable
funny function
THX for conversation!

Nov 4 10:45:38 sshd[6791]: Accepted keyboard-interactive/pam for admin from 192.168.0.2 port 41079 ssh2
Nov 3 21:28:34 last message repeated 14 times
Nov 3 21:28:21 last message repeated 31 times
Nov 3 21:27:50 kernel: arp: 192.168.0.2 is on rl1 but got reply from 00:20:ed:69:37:f1 on vr0
Nov 3 21:27:50 php: : Processing -
Nov 3 21:27:50 php: : Processing start -
Nov 3 21:27:50 php: : Processing vr0 - start
Nov 3 21:27:50 check_reload_status: rc.linkup starting
Nov 3 21:27:49 kernel: arp: 192.168.0.2 is on rl1 but got reply from 00:20:ed:69:37:f1 on vr0
Nov 3 21:27:49 kernel: vr0: link state changed to UP
Nov 3 21:27:31 last message repeated 6 times
Nov 3 21:27:17 kernel: arp: 192.168.1.1 is on vr0 but got reply from 00:30:4f:69:73:3b on rl1
Nov 3 21:25:54 php: : Processing -
Nov 3 21:25:54 php: : Processing start -
Nov 3 21:25:54 php: : Processing rl0 - start
Nov 3 21:25:54 kernel: rl0: link state changed to UP
Nov 3 21:25:54 check_reload_status: rc.linkup starting
Nov 3 21:25:52 kernel: rl0: link state changed to DOWN
Nov 3 21:25:51 kernel: rl0: link state changed to UP
Nov 3 21:25:36 login: login on ttyv0 as root
Nov 3 21:25:34 check_reload_status: check_reload_status is starting
Nov 3 21:25:34 php: : Resyncing configuration for all packages.
Nov 3 21:25:33 dhcpd: For info, please visit http://www.isc.org/sw/dhcp/
Nov 3 21:25:33 dhcpd: All rights reserved.
Nov 3 21:25:33 dhcpd: Copyright 2004-2008 Internet Systems Consortium.
Nov 3 21:25:33 dhcpd: Internet Systems Consortium DHCP Server V3.0.7
Nov 3 21:25:33 php: : Creating rrd update script
Nov 3 21:25:29 dnsmasq[578]: read /etc/hosts - 2 addresses
Nov 3 21:25:29 dnsmasq[578]: using nameserver 192.168.1.1#53
Nov 3 21:25:29 dnsmasq[578]: reading /etc/resolv.conf
Nov 3 21:25:29 dnsmasq[578]: compile time options: IPv6 GNU-getopt BSD-bridge ISC-leasefile no-DBus no-I18N TFTP
Nov 3 21:25:29 dnsmasq[578]: started, version 2.45 cachesize 150
Nov 3 21:25:29 dhcpd: For info, please visit http://www.isc.org/sw/dhcp/
Nov 3 21:25:29 dhcpd: All rights reserved.
Nov 3 21:25:29 dhcpd: Copyright 2004-2008 Internet Systems Consortium.
Nov 3 21:25:29 dhcpd: Internet Systems Consortium DHCP Server V3.0.7
Nov 3 21:25:28 kernel: rl1: link state changed to UP
Nov 3 21:25:27 kernel: pflog0: promiscuous mode enabled
Nov 3 21:25:26 kernel: Trying to mount root from ufs:/dev/ad2s1a
Nov 3 21:25:26 kernel: ad2: 9541MB <wdc wd100eb-00csf0="" 04.01b04="">at ata1-master UDMA100
Nov 3 21:25:26 kernel: IPsec: Initialized Security Association Processing.
Nov 3 21:25:26 kernel: Timecounters tick every 1.000 msec
Nov 3 21:25:26 kernel: Timecounter "TSC" frequency 1462510354 Hz quality 800
Nov 3 21:25:26 kernel: uhub1: device problem (STALLED), disabling port 1
Nov 3 21:25:26 kernel: unknown: <pnp0c01>can't assign resources (memory)
Nov 3 21:25:26 kernel: speaker0: <pc speaker="">at port 0x61 pnpid PNP0800 on isa0
Nov 3 21:25:26 kernel: unknown: <pnp0303>can't assign resources (port)
Nov 3 21:25:26 kernel: vga0: <generic isa="" vga="">at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Nov 3 21:25:26 kernel: sio1: port may not be enabled
Nov 3 21:25:26 kernel: sio1: configured irq 3 not in bitmap of probed irqs 0</generic></pnp0303></pc></pnp0c01></wdc>

@No1451:

Now, I'm seriously new to this, since it has no video output how do I go about performing initial setup? I did notice that it has a serial port(I'm fearing this is how I perform the setup), but I lack any machine that actually HAS a serial port. All my computers are running enthusiast hardware, old standards die quickly for gamer hardware.

How does one go about this? Can I install on another machine to my HDD/CF card and then migrate the install or would that cause issues?

There are 2 choices:

1)  HDD full install.  You need a 2.5" PATA drive for this.  Do a full install on another machine but select the 'Embedded Kernel' when prompted.

2)  Embedded install on a CF card.  You need a serial port on another computer (I recommend getting a cheap USB to serial adapter).
Use physdiskwrite to write the image to the cf card and plug it in.
Then hook up the serial ports on both sets via a Null modem cable.
Fire up putty on the pc you're using to configure the box.  Settings are: (COM1 typically) 9600/8/N/1.
Once you've done the basic configuration (set the interfaces & IPs), you can proceed to do the rest of the work via the WebGUI.

@lpallard:

This thread is getting very interesting, at least IMO..

I might be overthinking this (my normal behavior) but..

the E5400 series might have more power per watt and therefore process faster at high power VS the atoms being lower power and slower but really, at idle, how is the difference?

The E5400 might process twice as fast at high power and idle the rest of the time, but if it idle at 2, 3 or even 4 times more power than the atom at peak processing, the E5400 would not be acceptable right?

You're not wrong in that respect - which is why I said it's not happening on a low throughput pfsense box.  However, if you do run stuff like Snort or IPSEC then (throughput aside) it would be much more evident.

I just get irritated by the stupid hoohah over the alleged power efficiency of the Atoms.

@clarknova:

Colour me impressed. I've seen much worse figures with realtek NICs, but obviously some are better than others. I think 10/100 vs gigabit hardware makes a big difference (in CPU usage) with that brand too, from what I've read.

Yep.  Realtek PCIe GBe NIC (RTL8111).  I'm not sure why anyone would choose the likes of the 8139 when Pro/100VE cards are available for the same price (sometimes even less if you find a bargain bin clearance unit) but there you have it.
TBH, I was suitably impressed too.  I was expecting the throughput to hover at about 200Mbps or slightly less with that kind of setup.

Edit:  The last letter for the 8111, I've found, makes for quite a bit of difference.  The 'B' and 'C' revisions are surprisingly quite decent as long as they don't crap out (I've had the unit on my D945GCLF2 die on me).  The 'D' revision is just plain horrible.

Even in Windows 7, the first few revisions of drivers supporting the 8111D usually gives a BSOD in odd scenarios.
It doesn't crap out when I'm pushing large files at 100MByte/s over the network.
It doesn't crap out during normal surfing.
However, the moment I stop streaming a video file over the network from a file share, I'm greeted by a BSOD.

Too slow, amigo!


thx