Hi @Wash
  First of all thanks , i think you have been my linux go to guy , Ok lemme look at the aliases i think i get what you are saying , actually makes sense , as for the shaper , this is what i do , usually the usage get ridiculous nothing is working and i have some services being accessed from outside (internet) so what ill do is put everyone on a 1 MB ,my servers don't go through the pfsense so they get the rest of the bandwidth so there access is managed and the naughty boys soon enough will go back to working till i can actually see they are barely hitting 800 Kbps (tough love right there) and will disable the rule and sanity is restored.

GG


On Thu, Sep 12, 2013 at 12:17 PM, Odhiambo Washington <odhiambo@gmail.com> wrote:


On 12 September 2013 10:10, geoffrey gitagia <ggitagia@gmail.com> wrote:
Hi All
   i am running a pfsense firewall , i have one little (from my point of view) issue , i have 2 users taking almost 60% of my bandwidth (both web designers so they kinda like need it but am sure they are abusing ). i have setup squid on transparent mode and everytime i try to use the traffic shaper  (they used to work) to limit the whole system to like 1 mb , some how the system finds a way after a while to burst the speeds , so my question is 

1. can i limit this 2 guys to a bandwidth set ... wanganane na ka 512 Kbps 
2. Whats cutting with my shaper? can i use it to limit instead of blocking?
3.

--
GG


Penalty Box

If you have one or more hosts on your network that are using most of the bandwidth you can place them in a "penalty box" to limit their usage to a certain percentage of available bandwidth. As in the previous setting if you need to list more than one host you will need to create an alias.

So now what I am saying is that you need to understand about Aliases in pfSense and work with them.

1. Yes - use Penalty box

2. Shaper is not supposed to be used for blocking. How is your implementation of the shaper?


--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
"I can't hear you -- I'm using the scrambler."

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke



--
GG