(1) Is pfSense, coupled with Snort IDS, the best open source firewall/IDS/IPS in the world?

That's pretty much a personal view and cannot be answered globally.

(2) Is pfSense on par with commercial firewall appliances, including Cisco ASA, Cisco Sourcefire, Fortigate, SonicWall, etc?

pfSense is considered to play in that area you mentioned. At least, AFAIK.
General rule of thumb: when you're happy then it's the right product for you.

Or your house or your office yes.. It can provide firewall/router services to multiple devices not just 1… But sure if you want to use it for just 1 you could do that.

Yes stupidity offends me ;)

If you would like to actually talk security I am all up for it - but what does offend me is tinfoil hat conspiracy nonsense..

Some guys on youtube ;)  Yah Yah - great resource for security nutjobery… Conspiracy Clowns as well...

Kali is a pentest distro.. It comes with tools for pentesting.. Can be used good or bad.. who's to say the NSA doesn't have backdoor in that... Be a good place to spy don't you think ;)

If you actually have some security questions related to pfsense or anything for that matter happy to discuss..

Probably some service that is not consuming data fast enough(ie overloaded) or is stuck

https://blog.tyk.nu/blog/fun-with-freebsd-listen-queue-overflow/

It currently requires RDMA where you can control the timing and target memory. Not to mention non-ECC memory and memory that is affected by rowhammer.

I don't use ECC, but my DDR3 in unaffected by rowhammer. Validating both by research and using memtest rowhammer mode

Most high end NICs that are not doing RDMA are going to DMA interrupt coalesce and not let you choose where to write to memory. I am not sure how applicable this attack actually is.

Este não é um fórum de suporte.

Esta é uma seção em inglês

Vá aqui https://forum.pfsense.org/index.php?board=12.0

He already reposted his question in General Questions yesterday.

This isn't a support forum.

Try General Questions, or Cache/Proxy for squid issues, or pfBlockerNG for pfBlockerNG issues.

Yeah depending on which ones you get…  The netgear nighthawk modem has

http://www.netgear.com/landings/nighthawk-mr1100-mobile-router/

Max 1 Gbps download speeds, and 150 Mbps upload speeds
• LTE CAT 16, 4-band CA and 4x4 MIMO
• Up to 4X Carrier Aggregation and support
for LAA in future firmware upgrades
• LTE/4G Bands: 1, 2, 3, 4, 5, 7, 12, 29, 30, 66
• 3G Bands: 2, 4, 5

Do that with POS usb modem ;)

@Harvy66:

https://github.com/F-Stack/f-stack

Cross platform DPDK framework

It’s really libuinet (which is the FreeBSD stack in userspace) over DPDK (.vs netmap).

Thanks. I truly appreciate it. Maybe I was googling the wrong thing. But thank you so much

sounds like your user may have the 'deny config write' privilege preventing it from making changes.

Thanks KOM, I'm going to post the topic in that forum.

Regards,