Packages wishlist?

[XIII]

yea but what about squid?
mostly interested in squid since I havent figured that one out yet

[jimp]

@XIII:

yea but what about squid?
mostly interested in squid since I havent figured that one out yet

you can edit the squid error pages, too, they're under:
/usr/local/etc/squid/errors/English  (Or whatever other language you want)

[joecr]

@XIII:

yea but what about squid?
mostly interested in squid since I havent figured that one out yet

I forgot to mention that you can also use Diagnostics | Execute command to edit files in your pfSense install.

[darklogic]

I would like to see a mail proxy package that would accept all incoming e-mail and scan it for spam, viruses, and grey list it. After it completes the following task, it would then release it to an internal mail server.

Something like the spamD package that dropped off the grid.

These days having proxy filtering I believe is a must have at the gateway level.

[jimp]

@darklogic:

I would like to see a mail proxy package that would accept all incoming e-mail and scan it for spam, viruses, and grey list it. After it completes the following task, it would then release it to an internal mail server.

Something like the spamD package that dropped off the grid.

These days having proxy filtering I believe is a must have at the gateway level.

A bounty was proposed for proxsmtp, which can do much of this, but the money was withdrawn before any progress could be made.

[tekkitan]

I'm surprised no one has mentioned Hatchet for log analyzing and visualization.

http://www.dixongroup.net/hatchet/

It runs via Perl and uses regex to create a nice interface for viewing logs as well as using SQLite to store the logs in a database for viewing whenever you may need them.

[serangku]

UNBOUND DNS, please …  :)

[tubaguy50035]

Some of you may not like this one, but it would be really cool to have a ventrillo server package.  It's not super intensive and would run just fine on the 6 year old box that runs pfsense.

[tommyboy180]

@tubaguy50035:

Some of you may not like this one, but it would be really cool to have a ventrillo server package.  It's not super intensive and would run just fine on the 6 year old box that runs pfsense.

Bad, bad, very bad idea.

[tubaguy50035]

But why!?  lol

[Supermule]

Just install VmWare and run the two things on the same physical box. Its a really bad idea to run some fucked up open like a hole in the ground software like Ventrillo in the same environment as your frontend FW.

Thats why hackers and spammers are having an easy time spreading their shit around the globe….

[tubaguy50035]

Yes I know.  Wishful thinking.

[antilog]

XenTools

[tommyboy180]

@antilog:

XenTools

Second that!

[Clouseau]

1. FusionPBX package

2. SSH tunnel management

3. SSH Key management (partly done via user key management)

4. SSH tunnel client GUI (SSHD is running ok but GUI missing totally)

[ToxIcon]

mail proxy package

MailScanner

MailScanner is an email virus scanner, vulnerability protector, and spam tagger.It supports ClamAV, and other anti-virus scanners. It uses SpamAssassin for highly successful spam identification, and is designed to handle denial of service attacks. It will detect password-protected zip files and apply filename checking to their content.

/FreeBSD/ports/i386/packages-7-stable/All/MailScanner-4.79.11.tbz

[DWAyotte]

My wish would be to have a real-time logging/debugging package similar to the Cisco stuff, where you can filter certain strings or combination of strings on the fly and see activity as it comes in/goes out and be able to change the level of detail very easily. This would help immensely with troubleshooting issues with greater ease and I think a lot of people would benefit from it.

I apologize if this was already mentioned, I didn't have time to read through all 18 pages…

[JorgeAldoBR]

Squid with Multiwan

Using an ACL you can classify requests

then using TCP_OUTGOING_ADDRESS you can select wich wan to output the request.

you can even do this - currently - using custom rules, but the when you do this with pppoe or dhcp connections the rules cannot be updated to reflect the new ip address..

i think patching the package would not be much hard…

[Visseroth]

Adding hardware monitoring via RRD graphs would be EXTREMELY handy, temps and HD smart status with some sort of email notification if possible. If nothing else just the RRD graphs.

[keeper 0]

Application Layer Packet Classifier

http://l7-filter.sourceforge.net/

:) :) :) :) :) :) :) :) :)