I haven't found any that are that similar. PFSense is far better than any commercial SOHO firewall. In fact it rivals all commercial offerings in my mind. I've seen both WatchGuard and SonicWALL top of the line models crumble under a 20mb load that was a couple years ago. Cisco PIX is stable but far less intuitive than PFSense.

Areas where PFSense excels beyond other commercial firewalls.

Intuitive GUI
Feature Rich
Simple to Upgrade
Best backup and restore
Backup file is intuitive relatively easy to modify manually.
Commercial Support is available and high level.
Developers are generous and will respond to ideas, and questions.
Customizations and new features are in reach even for the modest budget with a bounty.
Leverages the power, security, stability, and maturity of the FreeBSD operating system.

For those that are anxious to use DNS-O-Matic now with PFSense 1.2 RC3 see the following instructions:
http://forum.pfsense.org/index.php/topic,7311.msg41445.html#msg41445

Why am I the only person seeing this issue on my pfsense box with heavy torrent traffic? Now i get wireless disconnects after buffer space unavailable…

Jan 7 23:34:15 hostapd: ath0: STA 00:0e:8e:15:95:0f IEEE 802.11: associated
Jan 7 23:34:12 hostapd: ath0: STA 00:0e:8e:15:95:0f IEEE 802.11: deassociated
Jan 7 23:34:12 hostapd: ath0: STA 00:0e:8e:15:95:0f IEEE 802.11: deauthenticated due to local deauth request
Jan 7 23:33:09 last message repeated 2 times
Jan 7 23:31:09 last message repeated 2 times
Jan 7 23:29:09 hostapd: ath0: STA 00:0e:8e:15:95:0f WPA: group key handshake completed (RSN)
Jan 7 23:28:09 hostapd: ath0: STA 00:0e:8e:15:95:0f WPA: group key handshake completed (RSN)
Jan 7 23:27:15 hostapd: ath0: STA 00:0e:8e:15:95:0f WPA: pairwise key handshake completed (RSN)
Jan 7 23:27:15 hostapd: ath0: STA 00:0e:8e:15:95:0f IEEE 802.11: associated
Jan 7 23:27:12 hostapd: ath0: STA 00:0e:8e:15:95:0f IEEE 802.11: deassociated
Jan 7 23:27:12 hostapd: ath0: STA 00:0e:8e:15:95:0f IEEE 802.11: deauthenticated due to local deauth request
Jan 7 23:26:09 hostapd: ath0: STA 00:0e:8e:15:95:0f WPA: group key handshake completed (RSN)
Jan 7 23:26:33 miniupnpd[67069]: sendto(udp_notify): No buffer space available

A client is attempting to FTP to a server and the server is not available.

I've just commited a new mpd which contains his changes.  Please check the snapshot server in about an hour or two from now.

hi

i volunteer to test it on 4 different servers if any developer willing to work on it

hadi57

Here is the dump, Sorry to be in wrong thread, is it possible to move these posts to the openvpn thread?


I would imagine that its a hard coded limit.  I don't think anyone has gotten anywhere near this number considering that this is the first that I am hearing of such a large deployment consideration.

Really don't know how well this is going to work.  These really are unchartered waters.  And considering that when you make changes to PPTP it disconnects the client(s), I wouldn't see any difference on the PPPoE side as well.  If you are serious about this large of a deployment I would definitely do some type of test before going live.

Might have been a leftover arp cache problem

In the future try clearing the arp cache on any neighbor devices, switches, routers, etc.

Soekris 4801 is too slow to work with wireless cards and multiple wans. Once traffic goes up on the wireless, the CPU interrupt usage goes sky high and nothing else gets done. Look at the new ALIX boards.

This is from experience. I want to get rid of my net 4801 board for this reason.

You are going to want to stick with the FreeBSD 4 series of m0n0wall in this case (1.2).

@qzvt:

and i don't understand you say that

Did you search?!?

Somebody asked this a while back…
http://forum.pfsense.org/index.php/topic,5056.0.html

thanks
Will move to the packages forum.

The links i use

http://www.freebsd.org/cgi/ports.cgi?query=darkstat&stype=all

ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All/

Post the output of 'top' run from a command line.

Minor point - pfSense is FreeBSD based, not Linux.

Proxy - install Squid - this will also allow you to block domains

Bandwidth shaping - pfSense can do this too (Firewall -> Traffic Shaper)

When you say you want "direct control" of the linksys - consult the linksys documentation.  According to what you've posted the pfSense host is behind that, so has nothing to do with it.

IP Redirect - Firewall -> NAT -> Port Forward

If in doubt, read the documentation ;)

This is not as simple as you think.  FreeBSD does not have multi-homing by default.  Please search the forum, this has been covered in great detail and will not be fixed until FreeBSD receives multi-homing bits which is in progress.