Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




266 posts

Ultimate Geek
+1 received by user: 18


Topic # 77169 11-Feb-2011 20:26 Send private message

Hello all
I need some help deciding and setting up a firewall/QoS

So far I have setup structured cabling throughout the house also have a wireless router setup as an access point (DHCP dissabled)
modem is a Draytek Virgor 120 that is working as a PPPoA/PPPoE bridge and is fine

I am running pfsense 1.2.3 on an old p3 800
There is 5 computers 2 consoles and laptops connected most of the time.
The net seems to work as it should but i have lots of issues with games and some web sites eg youtube vids will not load.
Some games will connect BFP4Free and Trackmania work yet BF2 does not. I have tried to port forward but still will not work.
Also need to setup a traffic monitor so i can see and charge appropriately the internet usage as we keep busting the caps every month. 

I really dont care to much about the firewall side of things just need QoS as still on ADSL 

If anyone knows of a better solution or how to configure pfsense so i can use this setup it would be much appreciated.

Create new topic
7740 posts

Uber Geek
+1 received by user: 307

Trusted
Subscriber

  Reply # 438489 12-Feb-2011 01:00 Send private message

I am assuming you have it setup, where you pfsense box has 2 network cards one connected to the modem and the other to a switch, like:

Draytek > Pfsense > Switch > Wireless


I think Enabling upnp and NAT-PMP should help with many games, others you might need to alter the games config on each players machine so they use different ports (depends on the game).

pfsense has QoS / shaping iirc, so use that to lower the priority of p2p, large downloads etc and prioritise gaming... will probably involve quite a bit of trial and error.

pfsesne also seems to have various usage graphs.  What you probably want to do is in the dhcp settings change it so the known machines always get the same ip address, this is usually called "static dhcp by mac address". 



266 posts

Ultimate Geek
+1 received by user: 18


  Reply # 438526 12-Feb-2011 10:03 Send private message

Ragnor: I am assuming you have it setup, where you pfsense box has 2 network cards one connected to the modem and the other to a switch, like:

Draytek > Pfsense > Switch > Wireless


I think Enabling upnp and NAT-PMP should help with many games, others you might need to alter the games config on each players machine so they use different ports (depends on the game).

pfsense has QoS / shaping iirc, so use that to lower the priority of p2p, large downloads etc and prioritise gaming... will probably involve quite a bit of trial and error.

pfsesne also seems to have various usage graphs.  What you probably want to do is in the dhcp settings change it so the known machines always get the same ip address, this is usually called "static dhcp by mac address". 


Yea thats how i have it all setup i cant find NAT-PMP i assume its automatic. The traffic shaper i find hard to understand fully yet. I have to load the ports and local ip for everrything and it just ends up trying to do to much i think. I have set the DHCP lease time to 30years or something.

I have the traffic monitor working now using BandwidthD.
Now i just have to work out why pfsense was shut down overnight... 

34 posts

Geek


  Reply # 438751 13-Feb-2011 06:59 Send private message

I have done this for my setup as well

ADSL router -> firewall nic1 -> firewall nic2 -> switch -> access point with 8db aerial

pfsense runs static mapped IP addresses for all the flatmates, where I have moved flatmate 1's addresses to 192.168.x.2x and flatmate 2's addresses to 192.168.x.3x. In doing this, I also set the hostname to a name starting with the flatmates name for easy identification - this is then resolved by bandwidthd by the hostname for the individual IP graphs.

bandwidthd graphs themselves are a bit deceptive out of the box, as its set to something like 8 days a week, 35 days a month, etc, so easiest to do a screen cap of the figures at the end of your billing month or delete the log files outright, so that you can moniitor within your monthly cap. Theres still a few teething issues with the likes of the software not changing the logs at midnight, etc, so I just work on the monthly graph only, but this is still easy enough to pick up the heavy downloaders in a matter of minutes :)

Create new topic




Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





Trending now »

Hot discussions in our forums right now:

American legal jurisdiction in New Zealand
Created by ajobbins, last reply by ajobbins on 20-Oct-2014 22:53 (22 replies)
Pages... 2


Another Trade Me competitor: SellShed
Created by freitasm, last reply by mattwnz on 20-Oct-2014 15:16 (22 replies)
Pages... 2


Why would Suresignal calls be worse quality than non-Suresignal calls from the same location?
Created by Geektastic, last reply by gzt on 20-Oct-2014 23:43 (39 replies)
Pages... 2 3


Picture resizing on the forum
Created by Jase2985, last reply by freitasm on 18-Oct-2014 13:32 (13 replies)

Internet question...
Created by Geektastic, last reply by Geektastic on 17-Oct-2014 22:59 (40 replies)
Pages... 2 3


Why do people keep thinking National are doing a great job?
Created by sxz, last reply by Geektastic on 20-Oct-2014 23:05 (156 replies)
Pages... 9 10 11


Just bought a TiVo online. No wireless adaptor. Will a standard one work? Or do I need the TiVo one ?
Created by Limerick, last reply by graemeh on 20-Oct-2014 16:03 (11 replies)

iPad Air 2 and iPad Mini 3. Gonna get one?
Created by Dingbatt, last reply by alexx on 20-Oct-2014 13:34 (45 replies)
Pages... 2 3



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.