@sparkman123 said in Pkg upgrade or pkg delete/install:
Thank you for the info.
I think it should be pointed out that I'm not the first to try to use dante- there's this post, this one and this tutorial. If you do a forum search you'll find quite a few hits on other posts.
The utility I'm installing is dante, or sockd, which is a fairly well fleshed out distro (it has its own freebsd manpage). I'm also installing a small number of support packages, so that limits the potential performance degradation vector.
Finally, I'm doing all my testing on a VM for weeks prior to rolling it out on bare metal.
Your initial point is correct though- dante and its supporting libs are not supported by pfsense out of the box and thus could cause problems.
But not all packages are created equal- some pose more risk than others. Case in point, before I settled on dante, I looked at another socks proxy, SS5. While it is in the freebsd packages library it is not nearly as well documented and does not appear to be as well vetted as sockd. It is my judgement that sockd poses less of a risk than SS5.
Others are free to come to their own conclusions, however. Some might not want to take any risk at all. If the need for functionality outweighs the risk my suggestion would be to look through the code of a package, read its documentation and see how many others have posted/played with it before coming up with a final decision.
Just wanted to be sure you were aware of the risks. When folks post it is sometimes hard to determine their "skill level" with pfSense and firewalls in general. So I tend to start with the more elementary things first and move up from there depending on my perception of the poster's skills. We get all kinds here ... . More than once folks have come here asking why they can't get pfSense to install under Windows. They actually think it is just some application you install like Microsoft Office or something ... .
Sounds like you are aware of the risks and willing to accept them.