What do you want to see in the pfSense package system?
-
samba server
-
First , i just want to thanks all freebsd & pfsense commiters & developers because pfsense & freebsd are hudge, I install it many times for entreprises and for myself but …
- When a package is "stable" or released please do not erase it 4 month later...
For example : The snort 2.6 package was very well working for me few month ago .... but there is no 2.6 snort anymore in the package system. I don't want to install 2.7 myself and add 2.8 files for each installation. Why have we a web interface ? ( for newbies ...i know :) ) I prefer an old version well working than a recent one that does not work or need manual adds. A versionning of packages releases could be very usefull for developers and users.
- What i very would like is that PFsense could support official packages as (most usefull packages) : squid, squidguard & snort and others. I hope in the future, they will be integrated by defautl into pfsense but desactivated by default because of licence and/or installation platform ( soekris VS Quad core Xeon ..) and disks capacities ….
Any comments are welcome, sorry for my "working" english
Best Regards
Nicolas -
- When a package is "stable" or released please do not erase it 4 month later…
For example : The snort 2.6 package was very well working for me few month ago .... but there is no 2.6 snort anymore in the package system. I don't want to install 2.7 myself and add 2.8 files for each installation. Why have we a web interface ? ( for newbies ...i know Smiley ) I prefer an old version well working than a recent one that does not work or need manual adds. A versionning of packages releases could be very usefull for developers and users.
Not that i know the snort story, but if it contains security holes or other bugs it should be fixed. If it's only enhancements it should be left alone.
Another reason would of course be the underlying version of FreeBSD.- What i very would like is that PFsense could support official packages as (most usefull packages) : squid, squidguard & snort and others. I hope in the future, they will be integrated by defautl into pfsense but desactivated by default because of licence and/or installation platform ( soekris VS Quad core Xeon ..) and disks capacities ….
As pfSense is a spare time project there is a limit to the amount of code the dev's can support. Next there is the hole license issue bsd vs gpl and last but not least the packages system gives the freedom to do what you want with it as a user.
-
samba server +1
-
Can adzapper be in the package
adzapper
http://forum.pfsense.org/index.php/topic,12737.0.html
-
replacement for dnsmasq, something suitable for larger networks, I've the tinydns package but sometimes it makes my network goes awry, loss of internetconnectivity, maybe a wrong configuration, what I'd like to see is a full package tinydns with caching and forwarding.
-
popfile
http://getpopfile.org/
-
An HTTPD folder to upload files via the GUI like with the TFTP package, only for LAN access of course. There are newer VoIP phones that support only HTTP(S) instead of (T)FTP for their config files.
-
Now that I've had a chance to play with FreeRadius a bit I'l like to see some more functionality in FreeRadius. You have to user the terminal to access the logs for it or make any significant configuration changes.
-
Oh! Thought of one more thing that would be neat…... How about a way to view traffic per IP in real time? Well with reason, 1 to 3 sec refresh but to see where all the traffic is going without waiting on a graph refresh?
-
Good afternoon :)
-to view traffic per IP in real time (Visseroth)
-Block all ports outgoing or incoming, vnc connections, updates of windows and all ports (except 80,https and 53)Thanks for the heads up :)
jigp
Davao City -
I wanna see in real time graps traffic by ports and hosts
darkstat and bandwichd doesnt helps me.,..
-
I wanna see in real time graps traffic by ports and hosts
darkstat and bandwichd doesnt helps me.,..
ntop?
-
Is it possible to update HAVP to the latest version 0.90?
And what about Dansguardian with AntiVirus content filter and with user group filtering like squidguard?Thanks.
Kind regards
Ernie
-
-would love to see a stat system that tracks daily and monthly totals indefinatly for a specified interface (wan). it should also have and option for the user to specify first day of the month and ideally alarm out via email or other option. there are a couple widgets that do it, but the best app ive seen is for windows called bitmeter2
-as others have mentioned samba support (as simple as being able to mount and share a single directory with no password/user requirements) and a blacklist for ips/domains would be great too!
-
I suppose this is in the wrong forum but here goes:
I'm running pfSense on a stand-alone PC with Snort IDS. Every once in a blue moon, Snort will fail to start after an Emerging Threats or Snort rules update is completed. Because of that, I check the pfSense dashboard frequently to insure Snort (or other packages, for that matter) are running. My question is this: Is there a way to create a helper program that sends package status information to computers on the LAN side of things? For example, I have both Windows 7 RC1 and Mac OS X running on my LAN. It'd be nice to have a small icon in the taskbar (in Windows) or the menu bar (Mac OS X) which graphically shows Snort (or whatever package) is up and running. Can this be done?
A second somewhat related "feature" I'd like to see is a program that passes hardware information (i.e., CPU temps, fan speeds, etc.) to LAN computers.
Forgive me for asking if this has been addressed before. I did do a cursory search and found no reference to the friendly requests above.
Thanks for your time.
-
I'd love to see a package for ospfd. here I get a firewall running with ospfd, manually set up via the command line.
If interested, I can easily contribute the list of packages from the bsd distribution I had to add, and work on the php page for setting the parameters.
there is only a thing that can be a problem for the ospf routing daemon as well as the bgpd routing daemon: when one of these two packages is installed, we must disable the fact that entering the default gateway on the general setup screen is mandatory: in some installations, the default route MUST be provided via ospf or bgp
-
What about email attack notification?
-
LAYER 7 INSPECTION!!!
Thereby you can block traffic at packet level, based on packet content instead of header content… :)
Then you do not need port blocking, based on the fact that you do not need source, destination or anything other than content.....:)
Furthermore, you can route specific content to specific hosts on thye internal network. One of the good things with ISA 2006.
You can then have multible webservers among other things on the same inbound port...
-
Its on 2.0 right?
