You absolutely true. 128mb for embedded version is more than enough. net4801 has slow cpu with very small amount of cache - thats the problem. If i compare my two systems - one with PII CPU/300mhz/512kb/128mb and net4801/266mhz/16kb/128mb - with first one i can get ~80-90mbps troughput, with second - just only ~20mbps, with 100% cpu utilization.

@yacine: Hi, I tryed to install pfSense-1.0.1-Embedded.img.gz on Nexcom 1041c and 1045 CF and both failed with error : ad2: FAILURE - READ status=51 <ready,dsc,error>error=10 <nid_not_found>LBA=254975</nid_not_found></ready,dsc,error> This is not pfSense-Problem, but a FreeBSD-Problem … but I had a Server running with FreeBSD on a Compact-Flash with this message for over a year. @yacine: This message appear each time the system need to read/write to CF ! But weird pfsense boot and seem to be usable  ??? It should be usable, yes. @yacine: On both CF is seen as IDE secondary master (ad2) and I suspect it must be on ad0 (IDE primary master) to make pfsense happy ??? I think pfSense uses ufs-label and mounts /dev/ufs/pfSense in /etc/fstab it doesn't matter if its ad0 or adN. Very seldom you have to adjust /boot/loader.conf or use boot0cfg to switch to a different drive … Tom Müller-Kortkamp

Thanks for the reply, the pfSense box is in place now ;) I havent tested it really but it does seem fast, am also getting a solid 5ms latency when playing CSS too! Cant complain at that :)

It's not a good idea to do the trafficshaping at the lan side of the balancer. If you are entering the bandwidthlimits of the ADSL+CABLE it still can happen that you send out too much traffic to one of the lines where the other one is not fully loaded (connections are distributed round robin). This will lead to overloading one of the lines and result in bad quality of the link. IF you want to do that right you have to have a trafficshaper for each line and a balancer behind it. Not a nice solution, I agree, but hopefully we'll have some nicer integrated multiinterface trafficshaping at some point.

You don't.  Support has not been merged to the RELENG_* branches.

For the record, it was magically solved after flashing the motherboard bios

Too bad for me, it's a DELL 2950 with 2 integrated Broadcom and i add a Dual intel. I found : "Not all NICs support 802.1Q VLANs - look for VLAN_MTU and VLAN_HWTAGGING options for your NIC in ifconfig. man vlan provides further info. I found though that my adapter (bce0) was not listed in man vlan but it did support the necessary options and worked with VLAN tagging." So i should work no ?

FAQ. http://snapshots.pfsense.com/FreeBSD6/RELENG_1_2/updates/pfSense-Full-And-Embedded-Update-1.2-RC1.tgz

Btw, these negative calcru messages never had any bad effect on my installation, they have just been spamming the system logs a lot as they appeared several times a second.

This page might help http://wiki.pfsense.com/wikka.php?wakka=Tuning

@samer79: can you please specify the model number of the quad port intel NIC Just click here, you will have all informations that i have : http://cgi.ebay.com/ZNYX-zx346Q-Quad-4-ports-Ethernet-10-100Mbs-PCI-Card_W0QQitemZ320137404934QQihZ011QQcategoryZ51195QQssPageNameZWDVWQQrdZ1QQcmdZViewItem I haven't buy them on ebay … but on a oldish server.

We don't support any kind of USB modems. Only ethernet type of interfaces are officially supported.

According to http://forum.pfsense.org/index.php/topic,25.0.html, the DM9102 chipset is supported. I didn't wan't to disable that interface (it's onboard) but given i can't find the problem, i'll have to try with another NIC.. I'll let you know.

jaw drops to floor Lucky…..... I only have ONE 860 and it doesn't even have a RAID controller. (Not used for pfSense either) It's got a Xeon 3060 though :) Well, I guess if that's what you need, that's what you get!

well thats cool im going to use http://www.demarctech.com/store/catalog/product_info.php?products_id=171 so i shouldnt have any issue.

I think I found how to do it, using an Expect script.  I haven't tried it yet 'cause I don't have the pfsense machine close, but I will as soon as I can boot it up. Here is the script: http://bash.cyberciti.biz/security/sshlogin.exp.php This script is executed from a remote host, on which expect is installed.  I'm just beginning with expect, so I hard-coded all my values in the script.  I know this exposes the firewall root password in a file, but I think I can live with that until I find a better way to be alerted when a drive fails. #! /bin/bash RETVAL=0 /home/user/expect_amrstat > /home/user/expect_degraded grep Degraded /home/user/expect_degraded >dev/null RETVAL=$? if [ "$RETVAL" = 0 ]; then         echo "Array degraded on firewall"  |mail -s "Array Degraded" me@mydomain.com fi The script /home/user/expect_amrstat simply runs amrstat on the firewall and outputs the result.