What do you want to see in the pfSense package system?
-
I suppose this is in the wrong forum but here goes:
I'm running pfSense on a stand-alone PC with Snort IDS. Every once in a blue moon, Snort will fail to start after an Emerging Threats or Snort rules update is completed. Because of that, I check the pfSense dashboard frequently to insure Snort (or other packages, for that matter) are running. My question is this: Is there a way to create a helper program that sends package status information to computers on the LAN side of things? For example, I have both Windows 7 RC1 and Mac OS X running on my LAN. It'd be nice to have a small icon in the taskbar (in Windows) or the menu bar (Mac OS X) which graphically shows Snort (or whatever package) is up and running. Can this be done?
A second somewhat related "feature" I'd like to see is a program that passes hardware information (i.e., CPU temps, fan speeds, etc.) to LAN computers.
Forgive me for asking if this has been addressed before. I did do a cursory search and found no reference to the friendly requests above.
Thanks for your time.
-
I'd love to see a package for ospfd. here I get a firewall running with ospfd, manually set up via the command line.
If interested, I can easily contribute the list of packages from the bsd distribution I had to add, and work on the php page for setting the parameters.
there is only a thing that can be a problem for the ospf routing daemon as well as the bgpd routing daemon: when one of these two packages is installed, we must disable the fact that entering the default gateway on the general setup screen is mandatory: in some installations, the default route MUST be provided via ospf or bgp
-
What about email attack notification?
-
LAYER 7 INSPECTION!!!
Thereby you can block traffic at packet level, based on packet content instead of header content… :)
Then you do not need port blocking, based on the fact that you do not need source, destination or anything other than content.....:)
Furthermore, you can route specific content to specific hosts on thye internal network. One of the good things with ISA 2006.
You can then have multible webservers among other things on the same inbound port...
-
Its on 2.0 right?
-
Squid 3.1 would be nice.
-
EMail Inspector (IMSpector for email) would be great!
-
New version of IMSpector.
-
inline snort would be the only thing I want
adding a l7 filter if possible, would also be good
-
I would love to see a spam filtering option…
-
-
Support for 3g modems as secondary wan (HSDPA/UMTS/EDGE/GPRS/GSM)
(If anyone knows how please tell me :)) -
Is already in 2.0
(and at least partially working from what i read) -
web Server ;D
-
I would like to see network storage in Pfsense to store music and movies is that possible it would solve problems .
-
A better traffic accounting system. For example bandwidthD does not give any options to look at certain times, or to go back 3 days to check an IPs usage on that day.
eg. I would like to be able to check down to the hour over any IP over all the logs. Possibly use drop down boxes to pick if you want to check its total usage since logs started, or monthly, weekly, daily, hourly. And have drop down boxes that react to these options to give you a way to input which month/week/day/hour/IP you want to check. -
OTP - One Time Password
TFA - Two Factor AuthenticationNow that the whole user and certificate management is in 2.0, some nice OTP and TFA would not harm.
Yubikey is only a few dollars. http://www.yubico.com/products/yubikey/
I wonder how difficult it would be to integrate its radius server.
http://code.google.com/p/yms/source/browse/branches/RADIUS_on_Premise/readme.txt
-respectively now new only these two:
http://code.google.com/p/yubikey-val-server-php/ - which should be easy to implement.
http://code.google.com/p/yubikey-ksm/ - a bit harder. a data base is needed (mysql or postgres)http://code.google.com/p/yubikey-ksm/wiki/Installation will tell more
-
Unbound DNS!
-
A better accounting and reporting solution than Ntop.
Untangle's reporting is quite intuitive:
http://www.untangle.com/Reports/Screenshots
http://www.untangle.com/Video/reports -
http://udpxy.sourceforge.net/
