Anti Virus For PFSENSE

havp, antivirus is a solution used to set up points and shooting considerably. When the installation is complete, only a few settings, change the tab of the HTTP proxy has (Services> Anti-virus).
Sets the description value. Check Enable to enable scan
Specifies the execution mode of the parent of the Squid in proxy mode.
Proxy port of the connection port. Squid is a must have different port 3125

Some of the other policy settings, including the logging file type, you want to scan, There, shows the arrangement for Cerberus in Figure
HTTP proxy settings of the anti-virus
HTTP proxy settings of the anti-virus Figure 2011:
And, again some 2012 inches Figure

Via HTTP proxy settings in the Anti-Virus for, Anti-virus for more than HTTP proxy settings Figure 2012:

There are also some small configuration under the order to cope with the frequency of the log of the Settings tab and update. Figure 12 shows how Cerberus has been set.

When you save the settings, scan engine ClamAV Noto havp proxy, you can see that it is running at the bottom of the page on the General tab.

execution of the ClamAV Noto havp, Noto is up and running ClamAV havp: 13 Figure

(It takes about 10 minutes), you can use the simulation of a secure file that the virus has been provided by the Eicar.org, to test the installation will be fully updated at a time.
Eicar.org virus test file, Eicar.org of test virus file
Only two of the test file has been recognized as a threat. COM extension archive files without scanning, the embedded, emphasized the need for another anti-virus software on each host machine, but have not been tested.

Anti-Virus are currently running.

That's it for this series. Next time, we will continue to convert UTM to set up content filtering and much more. source

Multi wan Load balancing on pfsense

step by step setting multi wan 2 isp on pfsense

*** Welcome to pfSense 1.2-RC3-pfSense on pfsense ***

LAN * -> fxp0 -> NONE

OPT1 (OPT1) -> fxp1 -> NONE
OPT2 (OPT2) -> fxp2 -> NONE
WAN * -> fxp3 -> NONE
OPT3 (OPT3) -> fxp4 -> NONE

pfSense console setup
***********************
0) Logout (SSH only)
1) Assign Interfaces
2) Set LAN IP address
3) Reset the password webConfigurator
4) Reset to factory defaults
5) Reboot the system
6) Halt system
7) Ping host
Shell
9) PFtop
10) Filter Logs
11) Restart webConfigurator
12) pfSense PHP shell
13) Upgrade from console

Enter an option:

Furthermore, the processes carried out are:

1. Setting the LAN to get into the WEB Admin with option No. ways. 1 (Assign Interfaces)

Capable VLAN interfaces:

fxp0 00:50:8 b: 9a: da: 9a (up)
fxp1 00: d0: b7: 15:56: fa

fxp3 00: d0: b7: 15:54:05 
fxp2 00: a0: c9: b3: a2: 4
d(up)
0: d0: b7: 15:66: ec
fxp4 
0

Enter the parent interface name for the new VLAN (or nothing if finished): fxp0

Enter the VLAN tag (1-4094): 1

Then fill the NIC who detected / subsequent written like the above, for example VLAN: VLAN = fpx1 or wl01. Or leave with an empty value and press enter.

Furthermore LAN settings

Enter the LAN interface name or 'a' for auto-detection: fxp0

Enter the WAN interface name or 'a' for auto-detection: ^

WAN settings for interchangeable we passed at first because of interchangeable settings via the Web Console if you eat it sdh completed in the setting. For that we just leave with an empty value and press enter.

2. Setting LAN IP Address. Choose 2) Set LAN IP Address

Enter the new LAN IP address: 10.1.2.1

Subnet masks are Entered as bit counts (as in CIDR notation) in pfSense.
e.g. 255.255.255.0 = 24
255.255.0.0 = 16
255.0.0.0 = 8

Enter the new LAN subnet bit count: 24

Do you want to enable the DHCP server on LAN [y | n]? n

IP Address = 10.1.2.1, Subnet Mask = 24 (255.255.255.0) and to my morbidly DHCP is enabled.

Dr. I usually experience we will be confused network cards which one recognizable as a LAN Because there are poly-NIC. For that I am doing testing in turn connect with existing NIC and ping to the LAN network. Choose the console CLI pd no 8 (Shell) and do a ping to another PC on the LAN. After putting up signs in the know on the NIC.

3. Furthermore, we can set through the Web Console access with http://10.1.2.1 address.

Username: admin

Password: pfsense (default)

4. Setting the WAN's Address to the ISP

Next click the Interfaces -> WAN IP Address settings for an ISP

IP Address: 202.155.73.42/28

Gateway: 202.155.73.41

Click Save

Next click the Interfaces -> OPT1 for setting the IP Address the ISP 2 (Speedy)

Enable options OPT1: ON

IP Address: 192.168.1.100

Gateway: 192.168.1.1

Click Save

5. Setting DNS

Click on System -> General Setup

DNS1: 202.155.0.20 (provider-a)

DNS2: 202.134.0.155 (provider-b)

6. DNS Settings Path Route

Click on System - Static Route -> +

WAN: Indosat

Interfaces: WAN

Destination Network: 202.155.0.20/32

Gateway: 202.155.73.41

OPT1: Telkom Speedy

Interfaces: OPT1

Destination Network: 202.134.0.155/32

Gateway: 192.168.1.1

The result is like the following:

Click the button Applay Changes

7. Setting Load Balancer

Click on Services -> Load Balancer -> +

Name: Balancer

Type: Gateway

Behavior: Load Balancing

Monitor IP: Other -> eg the contents with DNS: 202.155.0.20

Interfaces Name: WAN

Click Add to poll

Continue filling the ISP IP monitor to 2

Monitor IP: Other -> 202.134.0.155

Interfaces Name: OPT1

Click Add to poll

Click Save

TIPS:

To maximize employment, IP Monitor IP Address should be sought across the ISP's router there dr router position in the fastest and closest office who should not encounter problems with the IP and DNS. Can be in the know with melakukn trace route to the ISP's DNS

The results such as the following fig

8. Setting Firewall Rules

Click Firewall -> Rules

Next do the following configuration:

A. Setting the LAN

Action: Pass

Interface: LAN

Protocol: TCP

Source: Type = LAN Subnet

Destination: Type = any

Gateway: Balancer

Click Save & Apply Changes

B. WAN Settings -> Link Indosat

Action: Pass

Interface: WAN

Protocol: TCP

Source: Type = LAN Subnet

Destination: Type = WAN Address

Gateway: 202.155.73.41

Click Save & Apply Changes

B. Setting OPT1 -> Link Speedy

Action: Pass

Interface: OPT1

Protocol: TCP

Source: Type = LAN Subnet

Destination: Address Type = OPT1

Gateway: 192.168.1.1

Click Save & Apply Changes

This documentation only describes the basic settings in pfsense dr Load Balancing. Many more who could do with functions of a firewall, routing, aliasing, grout, incoming balancing, bandwidth management. This information can dig pd www.pfsense.org website.

source : konfigurasi-loadbalancing-pfsense

Configure SquidGuard On Pfsense

What is a squidGuard
SquidGuard is a URL redirector used to use blacklists with the proxy software Squid. There are two big advantages to squidguard: it is fast and it is free. SquidGuard is published under GNU Public License.

SquidGuard can be used to
limit the web access for some users to a list of accepted/well known web servers and/or URLs only.
block access to some listed or blacklisted web servers and/or URLs for some users.
block access to URLs matching a list of regular expressions or words for some users. enforce the use of domainnames/prohibit the use of IP address in URLs.
redirect blocked URLs to an info page.
redirect banners to an empty GIF.
have different access rules based on time of day, day of the week, date etc. 

Installation

    Open Packages list: click System > Packages
    Install the Squid package, if it is not installed.
    Configure Squid package.
    Install SquidGuard package.

Configure the SquidGuard Package
Blacklist
Blacklists are optional, but often useful for allowing access to certain types of sites.
SquidGuard comes with a small blacklist basically for testing purposes. In production you don't want to use them. A better way is to start with one of the blacklist collections listed (alphabetically) below.

    MESD blacklists - They are freely available.
    Shalla's Blacklists - Free for non commercial/privat use. (Recommended)
    more..  Configure a Professional firewall using pfSense

Downloading blacklist:

1. Open General Settings tab in SquidGuard package GUI, found at   Services > Proxy Filter.
2. Check Blacklist to enable the use of blacklists
3. Enter blacklist url in the field Blacklist URL.
4. If your firewall is itself behind a proxy, enter the proxy informaion in Blacklist proxy (this   step is not         necessary for most people)
5. Click Save
6. Navigate to the Blacklist tab inside of Squidguard
7. Click the Download button.
8. Wait, while blacklist will downloaded and prepared to use(10-35 min). Progress will be displayed on that page as the list is downloaded and processed.

 original post
Tunning Performance Proxy : Lusca
Configure_the_SquidGuard_Package

Install Lusca Cache di Pfsense

Linux Distribution Guide

Introduction-Linux Distribution Guide

This is a brief guide to the world of Linux distributions, primarily aimed at individuals who are new to the Linux scene, and who are thinking about taking the plunge and trying Linux for the first time.  To set the scene, let's start with a very brief history of the origins of Linux.The Linux kernel was started by Linus Torvalds in 1991, who was at the time studying at the University of Helsinki.  Linux was originally intended to be a replacement for Minix, an operating system designed for educational purposes.   One of the most important decisions ever made by Linus was the licensing agreement that the kernel was released under, the GNU General Public License (GPL).  Using the GPL meant that the programming code was freely-distributed and available to the general public.  This in turn encouraged thousands of developers to submit their own contributions to the code.  It is estimated that 1.5-2% of the kernel has been written by Linus Torvalds. 
What is a Linux Distribution?
If you follow the IT press, you probably have heard of some Linux companies such as Red Hat, Mandriva, SuSE, and Debian.  These are all organisations that have created their own 'distributions' (often known as distros) of Linux.
A Linux distribution is more than just the kernel itself.  A typical desktop Linux distribution consists of various software components including the Linux kernel, the GNU toolchain, and a collection of free and open source software, such as office suites, email clients, web browsers, instant messaging, graphics editors, video players and more.  This software is released in both binary and source code form, the former of which is code that the computer can understand, the latter what humans can read.  Having the source code released under a GPL license means that other developers can legally modify the software, thereby providing a mechanism where the community can contribute to the development of the software components.  With most distributions there is often some proprietory software included where the source code may not be released.  This may be due to patent and licensing restrictions.
There are in excess of 700 linux distributions available, of which more than half currently are being actively developed.  However, try not to be daunted by this vast number.  This huge number is partly a reflection of the fact that there is no barrier preventing an individual or organisation from creating their own distribution.  Many distros were started simply because an individual felt that none of the existing distros met his specific requirements.  Furthermore, many of the distros are derived from one of the 'major' distros, sharing the same base, even sometimes being released at the same time.  To illustrate, let's take the popular Debian distribution.  The following distributions are all based on Debian:

General Purpose:
Finnix, Freespire, Linspire, Simply GNUstep, Symphony OS, Ubuntu (see list below), and Xandros.
Live CD:
Arco-Debian Linux, Big Linux, CÃ tix, DeveLinux, Dreamlinux, Elive, Kanotix, Knoppix (see list below), Morphix, Parsix, and sidux.
Security: Adamantix
Mini: Bonzai Linux
International:
Amber Linux, Bayanihan Linux, BeatrIX Linux, LinEx, Loco Linux, NepaLinux, PingOO, Sun Wah RAYS LX, Tuquito, and Trisquel.

Additionally, some of these 'derived' distros have themselves also spawned a whole raft of other distributions. 

List of Distribtions based on Knoppix: Barnix, Bioknoppix, ClusterKNOPPIX, Clusterix, Condorux, CosmoPBX, Damn Small Linux, Danix, Dappix, DCC/Live, Dinux, distccKNOPPIX, DistccPPCKnoppix, emKnoppix, FCCU GNU/Linux Forensic Boot CD, eduKnoppix, Feather Linux, FREEDUC, GIS-Knoppix,  grml, Instant-Grid, Julex, Kazit, KernelKit, knopILS, Knoppel, Knoppix 64, Knoppix-Mib, Kalango, Knosciences, Kuliax, Kurumin, Lin4Astro, Local Area Security Knoppix, Linux Live Game Project, Luit Linux, Medialinux, Mentoppix, Musix, Myrinix, NordisKnoppix, OGo Knoppix CD, Overclockix, PaiPix, ParallelKnoppix, Parsix, Paipix, Penguin Sleuth Bootable CD, Quantian, ROSLIMS, Shabdix, SLYNUX, StreamBOX-LiveCD, Toophpix, Vigyaan, Vital Data Forensic or Rescue Kit (FoRK), Xarnoppix, Xfld, ZoneCD

List of Distributions based on Ubuntu: Edubuntu, Kubuntu, Xubuntu, Ubuntu CE (all official derivations); andLinux, Elbuntu, Fluxbuntu, gNewSense, Gnoppix, Hiweed, Impi Linux, Linux for Clinics, LinuxMCE, nUbuntu, Scibuntu, Uberyl, Ubuntu Lite, Ubuntu Stunio, and XUbuntu.

Phew! As you can see, over 100 distributions are based on Debian alone! 

Take a look at the Linux distro timeline below (clicking on the graphic will make it readable).  This timeline gives you an accurate representation of when distros were launched, and when other distros were spawned from their parent distribution.

Configure a Professional firewall using pfSense

The guide will take you through the setup of the pfSense firewall with one WAN interface, one LAN interface and one Opt1-WiFi Interface.

This guide was written for Linksys, Netgear, and D-link users with no firewall or router experience. No experience is needed with FreeBSD or GNU/Linux to install and run pfSense. When you are finished, management of pfSense will be from a web interface just like any of the SOHO firewall/router appliances.pfSense is a web-based firewall project that is similar, in terms of functionality, to the software in firewall appliances sold by Linksys, Netgear and D-Link. pfSense covers all the basic requirements offered by those appliances but offers so much more--in fact, it is really in a class by itself since it would be very difficult to find a commercial alternative that would provide what pfSense has to offer (or, anything cheaper than $2,000–$5,000).As mentioned above, in this article I will explain how to setup the pfSense firewall with one WAN interface, one LAN interface and one Opt1-WiFi Interface. This set-up allows you to offer wireless Internet to the surrounding community. The WiFi subnet will not be able to access the LAN: it will be able to connect to the Internet only. You can choose to eliminate the Opt1-WiFi setup: this will leave you with a firewall more similar to the "conventional" 
appliances.One of the very unique uses for your new firewall could be to offer wireless Internet to your neighbors at a reduced costOne of the very unique uses for your new firewall could be to offer wireless Internet to your neighbors at a reduced cost. This connection can be via an encrypted access point, where the network key is only given to approved users, or an open access point where you control access to the Internet with the captive portal function built in to pfSense. A portal landing page will be presented whenever a user tries to connect to the Internet at the beginning of the session. Each user will need to have their user name and password entered into the firewall in advance of the first connection.
There are many advanced features that pfSense can offer with one-click installation which are listed at the end of this article. See the pfSense's web site. There is an active user forum and an pfSense Wiki.

pfSense Firewall Configuration

pfSense Firewall Configuration

ou will be presented with the setup wizard for pfSense. Before proceeding with the wizard make sure you have all the information you will be needing handy. Sollos likely will have provided you with a :
Your DNS servers (either from your network server or from your ISP)IP settings for your  broadband provider. If this is ADSL it may be PPoE, if it is Cable it may simply be left at DHCP or if it is a T1 or a variety of other services including ADSL and Cable it may be a Static address. You need to have all these details ready so you can configure then in pfSense.
If you have a second WAN connection, you will want to know the same information for that connection.
You need to know what you want to have as your private LAN IP space. By default this is 192.168.1.x, but you will want to change this. We will likely have provided you with the network range we want you to implement so please use that information.
The following video will configure the LAN with 192.168.23.x and choose DHCP for WAN1 with no WAN2.
Traffic Shaper in pfSense Firewall

Cara Install Lusca Cache di Pfsense

install lusca-cache di pf-sense

langka pertama anda harus install dulu squid stable, saya gunakan versi 2.7 bukan versi 3. setelah selesai menginstall squidru 

langka kedua menginstall lusca-cache  pada pf-sense. install  lusca-cache ini beda dengan cara yang pertama ketika anda menginstall squid pertama anda harus masuk dulu ke diagnostic > command 

copy paste likn ini di comand 

fetch http://pfsense-cacheboy.googlecode.com/svn/trunk/script/package.sh && chmod +x package.sh && ./package.sh

 clik execute 

langka ketiga anda menuju sytem>package istall lusca-cache dan tunggu sampai selesai jangan sampai di op stop atau di refresh browser anda atau akan terjadi error pada sytem anda.

selanjutnya anda test proxy anda bekerja apa tidak dengan mengetikan ip pfsense lan anda dengan port default 3128 contoh http://180.247.54.117:3128 atau anda bisa menggunakan whatismyip.com

sumber wiki Pfsense_Lusca

Cara Install Pfsense di PC

berikut cara install pfsense pada pc-personal computer untuk kebutuhan router, proxy, dns dan masik banyak yang lainya

perlu diketahui bahwa pfsense ini memiliki beberapa keunggulan yang mungkin tidak di miliki oleh microtik, sy saran untuk mecobanya dan rasakan bedanya

Langkah pertama, instal kartu Video, Keyboard, drive CD-ROM, hard Disk IDE hard, 128MB ram atau lebih dan interface Jaringan setidaknya tiga di mesin target Anda.

Jangan menginstal perangkat keras yang tidak perlu seperti modem karena pfSense tidak dapat menggunakannya !!!

Setup hardware untuk instalasi diuji Pentium Pro 200, 128MB ram EDO, Floppy 1,4 MB, VGA Trident, 4 Realtek 8139D kartu PCI, ATAPI CD_ROM 24X, 2 IDE drive 1GB. Seperti yang Anda bisa melihat itu cukup sistem lama tapi itu semua masih bekerja dengan cukup baik. Pfsense juga diinstal pada 4100 Dimensi DELL 800MHz tanpa masalah.
Berikutnya, download Snapshot ISO arus dari
http://snapshots.pfsense.com/FreeBSD6/RELENG_1_2/iso/pfSense.iso.gz
Begitu download selesai uncompress file dan membakar CD atau booting flasdisk
Mengatur BIOS untuk boot dari CD/fd dan kemudian memasukkan CD/fd ke dalam drive.
Reboot komputer dan menonton FreeBSD 6.2 sistem operasi boot mesin Anda.Jangan khawatir jika Anda tidak dapat menangkap segala sesuatu yang bergulir dengan karena Anda dapat melihat semua itu saat boot selesai dengan menekan LOCK Gulir pada keyboard Anda dan menggunakan Page UP / tombol DN.Proses boot harus berhenti dan meminta Anda untuk mengkonfigurasi antarmuka jaringan. Jika Anda berhasil membuat yang jauh sisa instalasi, kemungkinan besar, akan berhasil.
Jawaban ke prompt pertama meminta untuk setup virtual Antarmuka / Lan dengan mengetik n.
Sekarang akan meminta Anda untuk memilih interface LAN. Ini adalah antarmuka yang Anda akan melampirkan ke saklar Ethernet jika lebih dari satu komputer akan mengakses pfsense untuk sampai ke internet. Untuk memilih antarmuka ini menggunakan prosedur yang otomatis dengan mencabut semua kabel antarmuka dari semua interface jaringan pfsense tersebut. Ikuti instruksi pada layar dan kemudian melampirkan komputer melalui kabel Ethernet ke port LAN. Tandai interface ini sebagai interface LAN.
Berikutnya akan meminta Anda untuk memilih port WAN.Dalam konfigurasi dual port Wan Wan adalah wan utama. Jika Anda belum mengatur DSL / modem CABLE / router belum pilih interface dengan menetapkan nama antarmuka seperti yang ditunjukkan pada layar. Interface ini dapat diubah di kemudian hari.
Kemudian pilih port OPT1 menentukan nama dari interface berikutnya seperti yang ditunjukkan pada layar. Port OPT1 akan menjadi pelabuhan sekunder Wan Anda. Bahkan jika Anda memiliki interface yang lebih mengkonfigurasi tekan enter pada permintaan antarmuka berikutnya untuk mengakhiri konfigurasi.
Pfsense akan mulai untuk memuat dan mengkonfigurasi dirinya sendiri. Dengan sedikit keberuntungan, Anda akan melewati titik di mana pfsense mengkonfigurasi antarmuka WAN. Ini adalah tempat menyela diuji dan jika hardware Anda sudah diatur dengan benar, atau jika Anda memiliki komputer baru, ia akan angin melalui dan tiba di halaman pfSense Console Setup. Di sini Anda akan menginstal pfsense ke hard disk Anda dengan memasukkan 99. Jika Anda tidak membuat ke halaman ini Anda memiliki masalah kompatibilitas hardware dengan sistem operasi FreeBSD.
Instalasi sangat menyakitkan, kirim ke format dan membuat partisi baru jika Anda ingin semuanya dibersihkan, dan setelah selesai Anda akan melihat memuat FreeBSD. Loading akan memakan waktu. Kali ini dapat digunakan untuk menentukan bagaimana Anda akan menghubungkan port wan pfsense ke internet.

sumber : http://www.pfsense.com 
jika anda mengalami kesulitan install pfsense bisa comment disini

Tunning Performance Proxy : Lusca

Tunning Performance Proxy : Lusca
Hotspot captiveportal Logout popup window : - Counter waktu koneksi - Menampilkan Informasi :

1. username

2. bandwidth up / down,

3. MAC address,

4. IP address,

5. client yg telah konek saat mulai login,

6. url yg dituju.

C. Penambahan fitur squid utk Memblok : url berpotensi merusak dan yg mengandung virus conficker, sesuai www.malwarepatrol.net, serta penambahan "safesearch" di beberapa search engine.
D. Bandwidth Limiter dengan Squid ZPH (Zero Penalty Hit) berlaku utk semua user yang melalui CP, "allowed IP" address dan "allowed mac address". Untuk mengaktifkan fitur bandwidth limiter wajib mengaktifkan captiveportal, walaupun tidak menggunakan login page.
E. Traffic Shapping dan list port dalam bentuk alias untuk Game Online.
F. Penyempurnaan safesearch pada squidGuard http://forum.pfsense.org/index.php/topic,26862.0.html
Persyaratan : Pfsense beta5 snapshot 32 / 64 bit februari atau pfsense 2.0 dengan paket yang wajib diinstall :


1. Lusca-cache http://code.google.com/p/pfsense-cacheboy/wiki/Pfsense_Lusca
2. backup
Untuk hasil terbaik, rekomendasi paket lain yang diinstall :
1. lightsquid
2. squidGuard
Hardware minimal : Intel P4 RAM 1GB, dengan HDD 80GB, 2 NIC Recommendasi : Dual Core, 2GB, 2HDD SATA.
Topologi : ADSL --(WAN) -- pfsense --(LAN) --- Switch --- akses point /client
Cara Penggunaan : Download PFsense 2.0 www.pfsense.org
Instalasi awal lihat di http://forum.pfsense.org/index.php/topic,18932.0.html
1. Install dari package manager : --> 1. squid 2. squidGuard , lalu Install lusca chuddy sesuai dengan petunjuk http://code.google.com/p/pfsense-cacheboy/wiki/Pfsense_Lusca
Setting proxy server
- proxy interface LAN
- Allow users on interface : v
- Transparent proxy : v
- Log store directory : /var/squid/log
- Transparent X-Forward : v
- Disable VIA : v
- Use alternate DNS-servers for the proxy-server : 127.0.0.1
- Custom Options :

zph_mode tos;zph_local 0x04;zph_parent 0;zph_option 136;

Proxy server: Traffic management --> disable dellay pool
Untuk menambah extra HDD khusus untuk proxy, supaya lebih garang, bisa mengikuti tutorial di http://doc.pfsense.org/index.php/Local_Disk_Storage_on_Embedded_(soekris)
Setting squidGuard

Blacklist : v

Blacklist URL : http://squidguard.mesd.k12.or.us/blacklists.tgz

Common ACL : Target Rules -- > Default access : allow, yang lain terserah kebutuhan...

2. Aktifkan DNS forwarder (terlebih dulu masukkan IP DNS pada System:General Setup)

atau bisa menggunakan unbound DNS

Jika memasang paket unbound DNS, pastikan set : Enable Unbound dan Services: DNS forwarder disable

- network interface : pilih loopback dan LAN.

- Enable DNSSEC

- Private Address support

- Register DHCP static mappings

DHCP server, masukkan

dns server dan gateway : IP sisi LAN dari pfsense.

3. Update Paket File silakan download di sini http://pfsense-zph.googlecode.com/files/pfsense.bak.12feb.tgz
Kemudian melalui package manager install "BACKUP"
Diagnostic -- > Backup File/Dir -- > browse masukkan file pfsense.bak.tgz (file yg telah didownload) ---> upload --- > restore ...
4. Aktifkan captiveportal. "Enable logout popup window" dan "Enable per-user bandwidth restriction" isi BW upload dan downloadnya .. Kosongkan "Logout page contents"
Untuk WARNET, jika menginginkan PC client tidak mau ada halaman login, maka masukkan IP atau MAC addressnya ke allowed IP / MAC, lengkapi dengan pengaturan banwidthnya. Lakukan juga untuk PC billing
Setelah itu restart squid dan captiveportal atau dng reboot system.
5. Traffic shapper dan Rule firewall : (butuh 3x restore dan reboot) 5.1. Rule firewall ---> http://pfsense-zph.googlecode.com/files/filter-config-pfsense.xml WEBGUI: Diagnostic -- > Backup/Restore Restore configuration Restore area --> firewall rule Reboot
5.2. Traffic Shapping --> http://pfsense-zph.googlecode.com/files/shaper-config-pfsense.xml WEBGUI: Diagnostic -- > Backup/Restore Restore configuration Restore area --> Traffic shapper Reboot
5.3. alias utk game online -- > http://pfsense-zph.googlecode.com/files/aliases-config-pfsense-game-online.xml WEBGUI: Diagnostic -- > Backup/Restore Restore configuration Restore area --> alias Reboot
6. Setiap kali install ulang paket lusca / squid / squidGuard ataupun update snapshot, pastikan setelah itu update patch-nya lagi Silakan cek kalau youtube masuk proxy seharusnya di traffic graph akan menembus batas kecepatan dari captiveportalnya. (lihat di gbr) Tampilkan Status: ---> Queues untuk melihat bahwa traffic shapping bekerja ..
pengujian lain :
tcpdump -nvi re0 | grep 'tos 0x4'
re0 bisa disesuaikan dng interface LAN, misal xl0, rl0, dsb ...
ketik ipfw list
perhatikan yg muncul adalah list dari rule
lalu ketik ipfw pipe show
perhatikan yg muncul adalah list dari pipe

apa itu pfsense

apa itu pf sense

pfsense merupakan distro linux turunan free bsd, "akan tetapi disesuaikan untuk digunakan sebagai firewall dan router. Selain menjadi, platform yang kuat fleksibel firewall dan routing, itu termasuk daftar panjang fitur terkait dan sistem paket yang memungkinkan upgrade lebih lanjut tanpa menambahkan  dan kerentanan keamanan potensial untuk distribusi dasar. pfSense adalah proyek populer dengan lebih dari 1 juta download sejak awal, dan terbukti dalam instalasi yang tak terhitung jumlahnya mulai dari jaringan rumah kecil melindungi PC dan Xbox untuk perusahaan besar, universitas dan organisasi lainnya melindungi ribuan perangkat jaringan."

dengan tampilan yang sederhan dengan web gui administrator memudahkan kita mengoprasikan pfsense, meskipun kita yang baru belajar routing dan firewall pada jaringan local ataupun internet. dan di ingat pfsense adalah opensource alias GPL GNU, sebuah software yang layak digunakan sebagai alternatif router, firewall, load balancing, ataupun web proxy dan masih banyak lagi fitur yang diberikan ole PFSENSE dengan cuma-cuma alias gratis-tis.silahkan comment dan tunggu artikel tentang pfsense selanjutnya