Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




168 posts

Master Geek


Topic # 77169 11-Feb-2011 20:26 Send private message

Hello all
I need some help deciding and setting up a firewall/QoS

So far I have setup structured cabling throughout the house also have a wireless router setup as an access point (DHCP dissabled)
modem is a Draytek Virgor 120 that is working as a PPPoA/PPPoE bridge and is fine

I am running pfsense 1.2.3 on an old p3 800
There is 5 computers 2 consoles and laptops connected most of the time.
The net seems to work as it should but i have lots of issues with games and some web sites eg youtube vids will not load.
Some games will connect BFP4Free and Trackmania work yet BF2 does not. I have tried to port forward but still will not work.
Also need to setup a traffic monitor so i can see and charge appropriately the internet usage as we keep busting the caps every month. 

I really dont care to much about the firewall side of things just need QoS as still on ADSL 

If anyone knows of a better solution or how to configure pfsense so i can use this setup it would be much appreciated.

Create new topic
6894 posts

Uber Geek

Trusted
Subscriber

  Reply # 438489 12-Feb-2011 01:00 Send private message

I am assuming you have it setup, where you pfsense box has 2 network cards one connected to the modem and the other to a switch, like:

Draytek > Pfsense > Switch > Wireless


I think Enabling upnp and NAT-PMP should help with many games, others you might need to alter the games config on each players machine so they use different ports (depends on the game).

pfsense has QoS / shaping iirc, so use that to lower the priority of p2p, large downloads etc and prioritise gaming... will probably involve quite a bit of trial and error.

pfsesne also seems to have various usage graphs.  What you probably want to do is in the dhcp settings change it so the known machines always get the same ip address, this is usually called "static dhcp by mac address". 



168 posts

Master Geek


  Reply # 438526 12-Feb-2011 10:03 Send private message

Ragnor: I am assuming you have it setup, where you pfsense box has 2 network cards one connected to the modem and the other to a switch, like:

Draytek > Pfsense > Switch > Wireless


I think Enabling upnp and NAT-PMP should help with many games, others you might need to alter the games config on each players machine so they use different ports (depends on the game).

pfsense has QoS / shaping iirc, so use that to lower the priority of p2p, large downloads etc and prioritise gaming... will probably involve quite a bit of trial and error.

pfsesne also seems to have various usage graphs.  What you probably want to do is in the dhcp settings change it so the known machines always get the same ip address, this is usually called "static dhcp by mac address". 


Yea thats how i have it all setup i cant find NAT-PMP i assume its automatic. The traffic shaper i find hard to understand fully yet. I have to load the ports and local ip for everrything and it just ends up trying to do to much i think. I have set the DHCP lease time to 30years or something.

I have the traffic monitor working now using BandwidthD.
Now i just have to work out why pfsense was shut down overnight... 

34 posts

Geek


  Reply # 438751 13-Feb-2011 06:59 Send private message

I have done this for my setup as well

ADSL router -> firewall nic1 -> firewall nic2 -> switch -> access point with 8db aerial

pfsense runs static mapped IP addresses for all the flatmates, where I have moved flatmate 1's addresses to 192.168.x.2x and flatmate 2's addresses to 192.168.x.3x. In doing this, I also set the hostname to a name starting with the flatmates name for easy identification - this is then resolved by bandwidthd by the hostname for the individual IP graphs.

bandwidthd graphs themselves are a bit deceptive out of the box, as its set to something like 8 days a week, 35 days a month, etc, so easiest to do a screen cap of the figures at the end of your billing month or delete the log files outright, so that you can moniitor within your monthly cap. Theres still a few teething issues with the likes of the software not changing the logs at midnight, etc, so I just work on the monthly graph only, but this is still easy enough to pick up the heavy downloaders in a matter of minutes :)

Create new topic



Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when new jobs are posted to our jobs board:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »

Trending now »
Hot discussions in our forums right now:

Fecked up religious people strike again :-(
Created by Mark, last reply by TheUngeek on 23-May-2013 14:28 (38 replies)
Pages... 2 3


Cannabis is illegal yet we have really strong 'legal highs' ?
Created by qwerty7, last reply by SepticSceptic on 23-May-2013 14:23 (68 replies)
Pages... 3 4 5


Xbox One
Created by DjShadow, last reply by networkn on 23-May-2013 14:45 (38 replies)
Pages... 2 3


A new project coming to Geekzone
Created by freitasm, last reply by SaltyNZ on 23-May-2013 14:45 (267 replies)
Pages... 16 17 18


Truenet Article - VoIP in New Zealand ----- Based on what Mr Butt ???
Created by maverick, last reply by maverick on 23-May-2013 14:28 (17 replies)
Pages... 2


HTC One (2013) owners' discussion
Created by Dingbatt, last reply by jaffanz on 23-May-2013 14:31 (1540 replies)
Pages... 101 102 103


"igov" online passport renewals
Created by Linuxluver, last reply by profrink on 22-May-2013 22:22 (29 replies)
Pages... 2


Orcon, Is this for real or a scam??
Created by old3eyes, last reply by DarthKermit on 22-May-2013 19:12 (29 replies)
Pages... 2



Geekzone Jobs »
Most recent NZ jobs in technology:

Senior Java Developer
Posted 23-May-2013 14:28

Project Coordinator
Posted 23-May-2013 14:28

Intermediate .Net Developer
Posted 23-May-2013 14:28

Data Analyst
Posted 23-May-2013 14:28

Front-end Developer
Posted 23-May-2013 14:28

Business Analyst | ERP | Intermediate
Posted 23-May-2013 14:28

UX/Interaction Designer
Posted 23-May-2013 13:28


Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.