Packages wishlist?

SPITwSPOTS

I would like to be able to install Ubiquity's Air Control software. Air Control runs on a web server and allows you a way to monitor and control various ubiquity CPE and access points. I am sure that there are many WISPS using Pfsense and Ubiquity is quickly becoming a leader in low cost wireless. Air Control requires Java and Tomcat. It looks like it can be installed on free BSD but it is somewhat out of my realm of expertise.

Please let me know if I should post in another group.

favs

I'd like something like imspector but that would really work or something simple to block IM and webmessengers

hbc

I would like a package for LLDP support.

There exist some projects that already work:

http://openlldp.sourceforge.net/
https://trac.luffy.cx/lldpd/
http://blinkenlights.nl/software/ladvd/

the_true_way

Pls fix the squid web Proxy and guard pakages they are not mpre avilable in embeded systems :(

piman

@the_true_way:

Pls fix the squid web Proxy and guard pakages they are not mpre avilable in embeded systems :(

you can still try this manually: use http(s)://your_pfsense/pkg_mgr_install.php?id=squid

piman

I have build a redundant solution with two embedded soekris devices. I want to be able to connect from one to the other over te console port, so I want to use "tip" http://bama.ua.edu/cgi-bin/man-cgi?tip+1. Good idea for a package? Anyone another solution?

the_true_way

@piman:

@the_true_way:

Pls fix the squid web Proxy and guard pakages they are not mpre avilable in embeded systems :(

you can still try this manually: use http(s)://your_pfsense/pkg_mgr_install.php?id=squid

oh thank U verymutch!!!!! ididnt know this!! Butt is this operation with e GUI oder With my HTTP Browser? and how cann i Uninstall it ?

Thank u very Much

XIII

I see quite a few people wish to modify the error pages provided by HAVP and squid, is it possible to create a package that does this automatically, where the user uploads the file they want to use and specify what its replacing? How difficult would it be?

andrewp

I'd wish to have RTSP Proxy (ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/7.2-RELEASE/packages/net/osrtspproxy-2.0_1.tbz) as a pfSense package that can be installed as a transparent proxy.

Proxy uses UDP ports in the range of 6970 - 32000 for incoming connections. It would also be good to modify proxy source code so it can control firewall and dynamically open these ports for incoming UDP Data/Control connections.

-andrewp

netmethods

I think this is the correct place to post this…

I have a (great) idea for a package... I'd do it my self, but I don't know how and I don't have the time right now to figure it out. I think it would very helpful and lots of people would use it... to be honest, I can't believe someone didn't already make it!

We have SSL, IPSec and PPTP VPN access, but what I haven't seen is something like SSL-Explorer (http://sourceforge.net/projects/sslexplorer/) where you can give access to applications and network shares over a Java based SSL web application allowing to keep your server secure. I realize that Barracuda bought out 3sp/SSL-Explorer, but there have been several branches of it like Adito or OpenVPN ALS (http://sourceforge.net/projects/openvpn-als/). I've used SSL-Explorer a little and found it very easy to use from both the admin and end-user sides. It's cross platform compatible and should load on any OS. Having a package like this would also help compete against several vendors out there... I know SonicWALL's SSLVPN has somewhat similar features in that you can publish some types of applications as well as shared folder.

All this being said, anyone interested in making a package out of this? I don't have any funds to put toward this at this time, but I'm willing to help out where I can if someone else thinks this would be useful.

-Jay

jimp

openvpn-als requires to run Java on the server side, which is a very high requirement to ask of a firewall. It would not be a small undertaking by any means, but someone might do it for a bounty.

netmethods

After reading into ALS more, it doesn't sound like that great of an idea since of all the current issues and lack of support…

Another open source project that looks good is Bro Intrusion. It seems to be pretty popular, is there no interest in making that a package?

jimp

There is, since Bro IDS is BSD licensed it's much better for inclusion since we're a BSD licensed project.

That may happen in the near future, actually, but I'm not sure of the timeline.

joecr

@XIII:

I see quite a few people wish to modify the error pages provided by HAVP and squid, is it possible to create a package that does this automatically, where the user uploads the file they want to use and specify what its replacing? How difficult would it be?

On 1.2.3-RELEASE & possibly earlier, I started using pfSense with that version, you can go to Diagnostics | Edit File & edit files on the server. Also if you have enabled SSH on the pfSense box you can ssh in & modify files directly on the server.

XIII

yea but what about squid?
mostly interested in squid since I havent figured that one out yet

jimp

@XIII:

yea but what about squid?
mostly interested in squid since I havent figured that one out yet

you can edit the squid error pages, too, they're under:
/usr/local/etc/squid/errors/English (Or whatever other language you want)

joecr

@XIII:

yea but what about squid?
mostly interested in squid since I havent figured that one out yet

I forgot to mention that you can also use Diagnostics | Execute command to edit files in your pfSense install.

darklogic

I would like to see a mail proxy package that would accept all incoming e-mail and scan it for spam, viruses, and grey list it. After it completes the following task, it would then release it to an internal mail server.

Something like the spamD package that dropped off the grid.

These days having proxy filtering I believe is a must have at the gateway level.

jimp

@darklogic:

I would like to see a mail proxy package that would accept all incoming e-mail and scan it for spam, viruses, and grey list it. After it completes the following task, it would then release it to an internal mail server.

Something like the spamD package that dropped off the grid.

These days having proxy filtering I believe is a must have at the gateway level.

A bounty was proposed for proxsmtp, which can do much of this, but the money was withdrawn before any progress could be made.

tekkitan

I'm surprised no one has mentioned Hatchet for log analyzing and visualization.

http://www.dixongroup.net/hatchet/

It runs via Perl and uses regex to create a nice interface for viewing logs as well as using SQLite to store the logs in a database for viewing whenever you may need them.