post/share your working pfsense box here!

[makasapot]

---

@dab_s_bad

mangayo ku nimu ug list of ports kana sa browsing gani, panghatag be. Naa website nga dili lng kay nggamit sa port 443 ug port 80 tcp sockets. . .

[Fern]

just installed pfsense sa amung extra computer

im still a beginner pa

specs:

i5 650 (dual core ni cya)
2gig ddr3 1333mhz ram
DHP55 intel board
80gig WD HDD

- im testing it right now for only one client sa lan
- nag test ko sa firewall rules and created an "upload and download limiter" and it works

- hopefully ma taod ni nako as our main router sa amung Goverment office. amg testing2x sa ko ani

PS:
please help me how to block torrent ports... kay murag ki wala na sa recent update ang layer 7 firewall.

I had Pfsense running in our building na here are the specs of my internet:

14 mbps fiber PLDT with static IP
as of this moment i am counting 80 clients connected

in the Firewall rules i gave 6mbps download and 2 mbps upload speed (ok ra ba ni nga allocation?)

i appreciate if anyone here can also advice what to add sa akong beggineer set up... please let me know.
ask pud ko help how to control the torrent users.

[dab_s_bad]

funny question ^_^

anyways..., the allocation you mentioned is 'fine' BUT will depend on the users end (client) and the admin (high management).
if for the clients sake, mu-ingon gyud na silag gamay ra
for your sake, mu-ingon basin kag OK rana siya ^_^

you forgot to mention your real upload speed?

lisud gyud ka-ayo i-satisfy all things for end-users vs admins/management

imo gisulayan ang "ilang" recommendation nga block 80/443?
or..., if you like, try just allow only web browsing and all things blocked? like only allow 80/443 + your limiter?

[Fern]

funny question ^_^

anyways..., the allocation you mentioned is 'fine' BUT will depend on the users end (client) and the admin (high management).
if for the clients sake, mu-ingon gyud na silag gamay ra
for your sake, mu-ingon basin kag OK rana siya ^_^

you forgot to mention your real upload speed?

lisud gyud ka-ayo i-satisfy all things for end-users vs admins/management

imo gisulayan ang "ilang" recommendation nga block 80/443?
or..., if you like, try just allow only web browsing and all things blocked? like only allow 80/443 + your limiter?

Sakto kaayu ka sir dad_is_bad.

lisod kaayu i satisfy ang my users especially for their "Need for Speed".
But i feel very happy that Pfsense router/firewall doesn't freeze up and very superior than the normal router appliance. especially serving almost 100+ users/clients. no more hastle of restarting the router


PS: the reason why i limit the upload speed sa mga clients kay i am very paranoid about the torrent seeding.
our pldt fiber has a 14 mbps speed with an upload of more or less 9 mbps.

[dab_s_bad]

kalu-oi sa 'ordinary' router..., with 100+ users..., matuk-an gyud ang router ana nyahahahahaaaaa!
overkill rasab ka-ayo imo i5 ana for pfSense , PERO!, kung mag "VPN" naka, then diha na magamit some features ana imo proc for pfSense ^_^ but I believe it will still sleep ALWAYS


pwede ani, himo kag 2mbps nga "upload" limiter (whatever you wish it to have..., lesser? ), dayon, himo kag duha ka floating rule for port 80 ug port 443 pero inverted ang matching then add-in here the upload limiter.

kung sa binisaya pa ^_^, walay limit basta 80/443 pero kutob ra 2mbps kung sa uban klaseng ports para sa upload...

[Fern]

kalu-oi sa 'ordinary' router..., with 100+ users..., matuk-an gyud ang router ana nyahahahahaaaaa!
overkill rasab ka-ayo imo i5 ana for pfSense , PERO!, kung mag "VPN" naka, then diha na magamit some features ana imo proc for pfSense ^_^ but I believe it will still sleep ALWAYS


pwede ani, himo kag 2mbps nga "upload" limiter (whatever you wish it to have..., lesser? ), dayon, himo kag duha ka floating rule for port 80 ug port 443 pero inverted ang matching then add-in here the upload limiter.

kung sa binisaya pa ^_^, walay limit basta 80/443 pero kutob ra 2mbps kung sa uban klaseng ports para sa upload...

will do that in monday inig abot nako sa office.

this network policing is so fun.

[makasapot]

@ boss Fern
unsa d i buhaton sa mga users nga netlimiter mn jud?

[makasapot]

highest comment gikan sa customer nku kay "walay lag diri" puksit!!!

[makasapot]

kalu-oi sa 'ordinary' router..., with 100+ users..., matuk-an gyud ang router ana nyahahahahaaaaa!
overkill rasab ka-ayo imo i5 ana for pfSense , PERO!, kung mag "VPN" naka, then diha na magamit some features ana imo proc for pfSense ^_^ but I believe it will still sleep ALWAYS


pwede ani, himo kag 2mbps nga "upload" limiter (whatever you wish it to have..., lesser? ), dayon, himo kag duha ka floating rule for port 80 ug port 443 pero inverted ang matching then add-in here the upload limiter.

kung sa binisaya pa ^_^, walay limit basta 80/443 pero kutob ra 2mbps kung sa uban klaseng ports para sa upload...

about sa invert match sa destination ba dili d i para ra na sa destination address? pwede pud d i na sa port? port 443 and 80 invert match naa mn gehapon ni sulod sa queue anang 443 and 80 unya ang gebuhat browse lng sa youtube unya daku sia ug bandwidth ge consume. https://forum.pfsense.org/index.php?topic=112879.0

[Fern]

@ boss Fern
unsa d i buhaton sa mga users nga netlimiter mn jud?

mga badlungun kaayu ang mga users users... grabeh mu torrent. i already reported it to our it manager. but wala man action nga i policy na sa company ang pag not download using torrent. basin ma cotrahan amu dept sa other dept

so i was thinking of limiting lang para we can have an excuse that ni hinay ang net kay daghan nag download :O