What do you want to see in the pfSense package system?

[jan.gestre]

replacement for dnsmasq, something suitable for larger networks, I've the tinydns package but sometimes it makes my network goes awry, loss of internetconnectivity, maybe a wrong  configuration, what I'd like to see is a full package tinydns with caching and forwarding.

[mishou]

popfile

http://getpopfile.org/

[Yallingup]

An HTTPD folder to upload files via the GUI like with the TFTP package, only for LAN access of course. There are newer VoIP phones that support only HTTP(S) instead of (T)FTP for their config files.

[Visseroth]

Now that I've had a chance to play with FreeRadius a bit I'l like to see some more functionality in FreeRadius. You have to user the terminal to access the logs for it or make any significant configuration changes.

[Visseroth]

Oh! Thought of one more thing that would be neat…... How about a way to view traffic per IP in real time? Well with reason, 1 to 3 sec refresh but to see where all the traffic is going without waiting on a graph refresh?

[jigpe]

Good afternoon :)

-to view traffic per IP in real time (Visseroth)
-Block all ports outgoing or incoming, vnc connections, updates of windows and all ports (except 80,https and 53)

Thanks for the heads up :)
jigp
Davao City

[SniZ]

I wanna see in real time graps traffic by ports and hosts

darkstat and bandwichd doesnt helps me.,..

[GruensFroeschli]

@SniZ:

I wanna see in real time graps traffic by ports and hosts

darkstat and bandwichd doesnt helps me.,..

ntop?

[ernie49]

Is it possible to update HAVP to the latest version 0.90?
And what about Dansguardian with AntiVirus content filter and with user group filtering like squidguard?

Thanks.

Kind regards

Ernie

[Zorac]

-would love to see a stat system that tracks daily and monthly totals indefinatly for a specified interface (wan).  it should also have and option for the user to specify first day of the month and ideally alarm out via email or other option.  there are a couple widgets that do it, but the best app ive seen is for windows called bitmeter2

-as others have mentioned samba support (as simple as being able to mount and share a single directory with no password/user requirements) and a blacklist for ips/domains would be great too!

[Roodawakening]

I suppose this is in the wrong forum but here goes:

I'm running pfSense on a stand-alone PC with Snort IDS. Every once in a blue moon, Snort will fail to start after an Emerging Threats or Snort rules update is completed. Because of that, I check the pfSense dashboard frequently to insure Snort (or other packages, for that matter) are running. My question is this: Is there a way to create a helper program that sends package status information to computers on the LAN side of things? For example, I have both Windows 7 RC1 and Mac OS X running on my LAN. It'd be nice to have a small icon in the taskbar (in Windows) or the menu bar (Mac OS X) which graphically shows Snort (or whatever package) is up and running. Can this be done?

A second somewhat related "feature" I'd like to see is a program that passes hardware information (i.e., CPU temps, fan speeds, etc.) to LAN computers.

Forgive me for asking if this has been addressed before. I did do a cursory search and found no reference to the friendly requests above.

Thanks for your time.

[rpiola]

I'd love to see a package for ospfd. here I get a firewall running with ospfd, manually set up via the command line.

If interested, I can easily contribute the list of packages from the bsd distribution I had to add, and work on the php page for setting the parameters.

there is only a thing that can be a problem for the ospf routing daemon as well as the bgpd routing daemon: when one of these two packages is installed, we must disable the fact that entering the default gateway on the general setup screen is mandatory: in some installations, the default route MUST be provided via ospf or bgp

[simby]

What about email attack notification?

[Supermule]

LAYER 7 INSPECTION!!!

Thereby you can block traffic at packet level, based on packet content instead of header content… :)

Then you do not need port blocking, based on the fact that you do not need source, destination or anything other than content.....:)

Furthermore, you can route specific content to specific hosts on thye internal network. One of the good things with ISA 2006.

You can then have multible webservers among other things on the same inbound port...

[jigpe]

Its on 2.0 right?

[belikeyeshua]

Squid 3.1 would be nice.

[jan.gestre]

EMail Inspector (IMSpector for email) would be great!

[Burken]

New version of IMSpector.

[sourcenaut]

inline snort would be the only thing I want

adding a l7 filter if possible, would also be good

[mgc6288]

I would love to see a spam filtering option…