Packages wishlist?

[bibi]

Hello everybuddy
First sorry for my english.
Second pfsense it's bryliant projekt.
Therd i have small network (wireless network with 200 users) and I have very offen problems when some of my wirelles link is broken because i work 200 kilometers from place wher i have this network and it was verry helpfull for me if sombody public packages to monitor network and send SMS when maybe ping is lost or some services are stop
Thank You for all
Greetings

[Perry]

Hello everybuddy
First sorry for my english.
Second pfsense it's bryliant projekt.
Therd i have small network (wireless network with 200 users) and I have very offen problems when some of my wirelles link is broken because i work 200 kilometers from place wher i have this network and it was verry helpfull for me if sombody public packages to monitor network and send SMS when maybe ping is lost or some services are stop
Thank You for all
Greetings

Do you have a diagram….. i was thinking about SNMP to watch over things.
But never the less you could start a Bounty for your packages.

[bibi]

I was thinking about sms to inform when somthing is broken because even if You are on hollidays you have mobile in your pocket all the time but laptop with internet conection very rare, so this sms can alarm you that somthing is wrong and you can fix problem very fast (find some internet caffe) or call to home and tell sombuddy what he can do to fixit. About the bounty sorry but I am only PLC programmer and have a basic know how about networking, so i must use somthing ready.
Grettings

[dvserg]

May be e-mail notification and mobile mail-agent solved you problem?
For example: cron executed every 1…10 minute task, what check you services and if alarm - sent e-mail notification. Need find script or program what can do services checking

Internet2SMS services very specific and get of pay in moust times.

[wolfgang_schipper]

I agree,
the HTTP Antivirus-Function should be a basic part of a firewall.

[sanjay_arora]

Hello all

I have spent a couple of hours on these forums, for the first time after almost a year of install of my pfsense box…not a good community member, I'm afraid  :(

However, since after changing my firewall distro more than a few times, I have decided on pfsense and will now be putting in a few bounties, to see if I can get a few things I want incorporated.

Here are my views:

• A firewall gateway distro should remain a firewall gateway distro and run as few applications as possible.
• That said, one cannot ignore the smaller SME users like myself, who have only one machine running 24/7 and thats the pfsense box, hence the need for some applications.
• However, since security is a firewall's main job & routing the gateway's main job....these two should not be compromised, if at all possible and extended wherever possible.
• I would vote for all packages that don't need incoming port access from the WAN. One can have time server, transparent proxies of all kinds (outgoing), caching dns server, ftp server for Lan clients and so on.
• But what I would really like to see all kinds of IDS, IPS, Load-sharing, Load-balancing, reporting on various usage stats from a users point of view that a normal small office cannot dedicate more than one computer to. E.g. today we have snort but nothing to analyse its input say snort sam or squill or acid, we have squid but no dansguardian like package, an improved IMespector proxy.
• Having said all that, I don't think that a mail server or any other server that accepts incoming connections from outside should be put on a perimeter firewall. If you are big enough to have run your own domains then you should invest in a DMZ machine and then offload as many applications to it from the main pfsense box, as you can. But then again, you can have a DMZ in main office & a hybrid pfsense server in branches. After all you are the one footing the bill for any problems arising out of an implementation decision.
• I think the direction of the project is very right but the community really needs to create a method for maintainence of old packages in addition of creation of new packages.

I hope I have not put the reader to sleep  ;D

With best regards.
Sanjay.

[pfloyd]

Hello, I'd like to see a speed test for the WAN port. If I get an idea to check the speed from my ISP I hook my laptop up directly to the cable modem and use dslreports.com/stest a couple of times, then hook everything back up. It would be quicker for my users and perhaps safer for my laptop if there were a function to cut off all my LAN traffic, perform some kind of speed test, re-enable the LAN and post the results on screen or in a log.
Thanks,
Vinc Duran

[SourceFinder]

I would very much like IPS (Intrusion Protection System) and, when secure enough, possibilities for an internet http- or e-mailproxy. This should make pfsense a more complete competition for the commercial solutions.

[brianw]

@billm:

@Cojo:

I would just love to see a package with LCDproc so i can output used bandwidth, Memory and CPU usage, States and so on.

This has been discussed before somewhat…we'll need some supported LCD's to develop and test this on.

--Bill

I could send a CrystalFontz 20X4 Serial Display. I would not need this returned either. It would be awesome to get support for these in pfSense. I may even be able to purchase one of these, if it can be returned to me after getting it all working. Getting the buttons to do various things, all configured through the web gui would be a sweet bonus.

brianw

[mrsense]

1. I would like to be able to see if package is running (or stopped) right from package's main page.

2. I would like snort create alias for each category (snort-attack-responses, snort-backdoor) and add offenders to corresponding aliases.  That way I could create my own rules (and schedules).

my2c

[dvserg]

There is in project need in package squidGuard?
ps I already sent sources to CoreTeam.

[JorgeAldoBR]

Make FreeRadius package able to send WISPr attributes…

Even if pfSense cannot use them currently, it will in the future and some people have a setup like mine, with pfSense and Monowall

[ntsux]

(Didn't know where to place this message, but this thread kinda seems appropriate.)

Is there a way to (a la "Check Point") have a GUI tool to FILTER through the firewall rule logs for key elements such as:

• source IP
• Destination IP
• Rule # (in the policy)
• Network Service(s) in use (eg.  HTTP, or TCP 80)
• Source Port (of the TCP session)
• date, time
• Listening NIC
• (perhaps some reference to a VPN that is in use)

… 'cuz that'd be just awesome!

Thanks, in advance,

NT Sux

[Nil Einne]

@naivula:

A non-spooling p910nd style print server.

Since pfsense is the only box that is on 24/7 in my small office, it would be nice to have a printer attached to it.
Can anyone make a package out of this: http://etherboot.sourceforge.net/p910nd/  ?

I'd also be very interested in something like this

[Guest]

Hi

I would just love to see a LinuxVirtualServer package with CARP an a real time monitoring utility for servers.

I've found a chineese tutorial for freebsd6.1 that i translate in english.
I gonna try it in a few days. I hope it will work fine  ;D on pfsense too.
Now i just want to know if this could enter the package wishlist  :P ?

Sorry for my poor english.

Thanks in advance.
Nicolas

[Antioxidan]

Hey :-)

I'm looking for an Montitoring System on PfSense ala Nagios or IPMonitor.

Is there any possibility?

Greetz

[gthornock]

I see that this has been requested a few times, but I'd like to add one more request for DansGuardian.

[sullrich]

@Antioxidan:

Hey :-)

I'm looking for an Montitoring System on PfSense ala Nagios or IPMonitor.

Is there any possibility?

Greetz

We have a zabbix agent in packages.

[mrzaz]

I'm very interested in trying to get a good SIPproxy/Server into pfSense
and the following looks quite promising as it seems to be very
lightweigh, scalable and adaptable and powerful.

http://www.openser.org/mos/view/Features/

I'm going to make a small study if it's feasible to adapt it for
pfSense but I know it's a big undertaking to get it integrated
and i'm doubting my skills to do it.

some highlights

• robust and performant SIP (RFC3261) Registrar server, Location server, Proxy server and Redirect server
• small footprint - the binary file is small size, functionality can be stripped/added via modules
• plug&play module interface - ability to add new extensions, without touching the core, therefore assuring a great stability of core components
• authentication, authorization and accounting (AAA) via database (MySQL, Postgress, text files), RADIUS and DIAMETER
• digest and IP authentication
• load balancing with failover
• multiple database backends - MySQL, PostgreSQL, flat files and other database types which have unixodbc drivers

just to name a few.  See full featurelist in the link above.

Comments anyone ?

[eri--]

It has even ready web interfaces so you can actually customize for pfSense easily if you need it.