What do you want to see in the pfSense package system?

[czappi]

Hi

I hope the freenas package work that was fine.  :)

[rsw686]

The package system as it stands is good, however the lack of documentation hinders development of additional packages by outsiders. I've found some documentation but nothing thats complete. Also some of the xml tags are confusing and not self explanatory.

For example

custom_add_php_command

When does this command run. I read something that stated it runs after the package install, however it also runs when changing the settings on a package. So when is this section useful when using the custom_php_install_command and custom_php_resync_config_command fields. Seems it would just duplicate things.

[sullrich]

php_add is run after a item is changed in the gui.

resync runs on bootup, etc so that the rc.d files are setup from a fresh state (bootup).

Yes the docs are hurting.  We hope to get them in better shape very soon.

[hoster]

Hi,

it would be nice to implement a timelimitpackage.
I need to give users or Ip addresses access on a given hour.

For example: (Ip address 1) on Monday-Fryday  between 9:00 and 11:00 pm
                  (Ip address 2) on Saturday between 2:00-3:00, and so on

greetings, hoster :)

[DarkX]

trackerd(tracks MACs to IPs) would be nice
http://freshmeat.net/projects/trackerd
integrates into snortsam/snort or stand alone

[tdi]

Quagga/ospfd

[ellisgl]

Routing protocols - OSPF - RIP
64 Bit support..

T1, T3 card support (digium and zapata, etc)
BCP (http://www3.ietf.org/proceedings/99nov/slides/pppext-bridge-99nov/)

[ben.suffolk]

HI,

I'd quite like to see squidGuard for automatic URL filtering. With the ability to have the rules auto synced via rsync to squidguard.mesd.k12.or.us::filtering or similar.
Regards

Ben

[sanjay_arora]

Hello

I would like some way (don't know if any package/script does this) to create an iso file of my pfsense install, so that when I boot with a CD created with that install, all the packages, rules, configurations etc. of my original configurations are pre-installed and when I install pfsense from that CD it simply recreates my original pfsense machine with no question asked.

Also, I would like to see pfsense store two-three copies of its configurations, so that if it loses its configuration file due to some sudden power-failure it can simply restore the configuration from the backup instead of giving a configuration file not found error and requiring a reinstall in some cases and configuration restore in some.

I would even place a bounty on it. Can someone tell me what needs to be done?

With regards.
Sanjay.

[cmb]

@sanjay_arora:

Also, I would like to see pfsense store two-three copies of its configurations, so that if it loses its configuration file due to some sudden power-failure it can simply restore the configuration from the backup instead of giving a configuration file not found error and requiring a reinstall in some cases and configuration restore in some.

This is already fixed in 1.2. Both the issues that caused config corruption, and a backup config now exists as well.

@sanjay_arora:

I would like some way (don't know if any package/script does this) to create an iso file of my pfsense install, so that when I boot with a CD created with that install, all the packages, rules, configurations etc. of my original configurations are pre-installed and when I install pfsense from that CD it simply recreates my original pfsense machine with no question asked.

That's much more difficult, as build machines require files that don't exist in the actual installs. It's easy enough to install and restore your config (which also reinstalls your packages), and difficult enough to do this, that there wouldn't likely be any developer interest.

[sanjay_arora]

That's much more difficult, as build machines require files that don't exist in the actual installs. It's easy enough to install and restore your config (which also reinstalls your packages), and difficult enough to do this, that there wouldn't likely be any developer interest.

Hmmm…well actually the idea was to recover from problems using a non-technical user especially in a geographically distant location, say  an accountant or clerk, who simply puts in a cd in a pfsense system which is configured to boot first from a cd drive.....choose 99, take the cd out, reboot and voila the system is back in its required state. I actually had to travel to a nearby city when I could not get a remote loginwith a SME client who did not have the vaguest idea of what a KVM switch was, nor could afford it.

However, I would not mind using the complete build system to create a customised cd for every pfsense box that I install. I am a BSD virgin....so what skills would be needed for doing this and how complicated is the job of creating a bsd box that would buils a pfsense iso with required configurations & packages. Such a system can import the system backup file and build the configurations and then generate an iso file.

With best regards.
Sanjay.

[IsNoGood]

Well first post, so be gentle thanks

I'm looking into moving from ipcop to pfsense, some might say grow up, one thing that I seen and use that help me a lot over the years are
MC, Midnight Commander, did try to get a .tbz version, but kind of lost right now all BSD is new to me, and I get errors when I try to install, having a one version of MC in the add on system will be help for me to get better understanding of the BSD system.

On more thing that I'm missing is a version ULR filter the one in ipcop is from ( http://www.urlfilter.net/ ) works well

Thanks for your time, and a cool trunk of software

[Cry Havok]

@IsNoGood:

On more thing that I'm missing is a version ULR filter the one in ipcop is from ( http://www.urlfilter.net/ ) works well

You can achieve something similar with Squid and blacklists.

[ugur]

maybe av with quid.

[Joedirt]

I would like to see pfsense handle hostheaders and nat them to the right internal server.

[jhon10ba]

It would be perfect to have a package with the administration Mysql with graphics in PHP to integrate with the radius.

[si_faisal]

samba server

[Guest]

First , i just want to thanks all freebsd & pfsense commiters & developers because pfsense & freebsd are hudge, I install it many times for entreprises and for myself but …

• When a package is "stable" or released please do not erase it 4 month later...

For example : The snort 2.6 package was very well working for me few month ago .... but there is no 2.6 snort anymore in the package system. I don't want to install 2.7 myself and add 2.8 files for each installation. Why have we a web interface ?  ( for newbies ...i know  :) ) I prefer an old version well working than a recent one that does not work or need manual adds. A versionning of packages releases could be very usefull for developers and users.

• What i very would like is that PFsense could support official packages as (most usefull packages) : squid, squidguard & snort and others. I hope in the future, they will be integrated by defautl into pfsense but desactivated by default because of licence and/or installation platform ( soekris VS Quad core Xeon ..) and disks capacities ….

Any comments are welcome, sorry for my "working" english
Best Regards
Nicolas

[Perry]

• When a package is "stable" or released please do not erase it 4 month later…

For example : The snort 2.6 package was very well working for me few month ago .... but there is no 2.6 snort anymore in the package system. I don't want to install 2.7 myself and add 2.8 files for each installation. Why have we a web interface ?  ( for newbies ...i know  Smiley ) I prefer an old version well working than a recent one that does not work or need manual adds. A versionning of packages releases could be very usefull for developers and users.

Not that i know the snort story, but if it contains security holes or other bugs it should be fixed. If it's only enhancements it should be left alone.
Another reason would of course be the underlying version of FreeBSD.

• What i very would like is that PFsense could support official packages as (most usefull packages) : squid, squidguard & snort and others. I hope in the future, they will be integrated by defautl into pfsense but desactivated by default because of licence and/or installation platform ( soekris VS Quad core Xeon ..) and disks capacities ….

As pfSense is a spare time project there is a limit to the amount of code the dev's can support. Next there is the hole license issue bsd vs gpl and last but not least the packages system gives the freedom to do what you want with it as a user.

[bombording]

samba server +1