Pfsense
i'm lovin' it ©

Even with the new users and groups features of 2.0, for some of the other features I am working on, I will need to have a second users/groups page for radius, which I was trying to avoid.

Thanks a bunch.  I had some filters in the routers that were using this bit, but the state tables may be the way that pfSense deals with it, meaning that I don't need to.  I'll need to take a closer look at the old filters.  I moved away from doing this in the routers due to size limitations and the difficult procedures required to backup then up every time any change to the configuration is made.

Ok, excuse me but I'm a newbie in this forum.
If I start a bounty the result is for me or for all pfcomunity?
Like public administration I can't start a bounty but I'll can try whit my old customer.

Thanks for all

bye

@mhab12:

Sounds like you'll likely have to start a bounty to see this completed.  You might also ask around in the package forum.

Thx for you work!
I analyse you updates.

ps
Possible good idea create packages posts in Packages area. I read this area frequency other.

Maybe its because the picture you are trying to use is too large! I think there is a size cap although not stated on this forum - just a thought.

@cmb:

Sounds good to me, though I don't think it would require its own section. Feel free to start such threads on the bounty board.

Slightly disagree here.
I am a big fan of keeping things separated that don't belong together, this means I would opt for a separate "Training bounty" section in the forum.
It is way easier to find (especially for beginners stopping by) and it might catch some additional commercial user$.

There's a lot of information on how to add FreeBSD packages of your own choice in the packages forum.

Most security devices which allow console via serial can easily have their passwords changed and accessed.  Even Cisco.

Here is an alternative.

http://www.topmic.com/lock-c908.html

Now your device is locked down from serial access.

Now someone can still take the device and get the drive out but at that point you have much bigger security issues.

;D

Ok thanks Chriss.

Best regards

@miikaaa:

What I'm missing is an advanced choice that not configure any default and automatic rules.
I want to set up all my rules and NAT by my self for all interfaces.

You can.  Delete the default rule on LAN, enable Advanced Outbound NAT. The only exception would be PPTP and IPsec auto added rules, which will be optional in 2.0. You can remove two lines in filter.inc to remove those.

@miikaaa:

I'm a fan of the deny all inbound and outbound and then configure exact what to allow, and not to use the default allow all outbound for all interfaces.

You and me both, but people would scream like mad if we went with anything other than the current default.

some donations are highly appreciated ;)