Packages wishlist?

kevross33 · Oct 28, 2011, 9:14 AM

A mentioned. http://community.smoothwall.org/forum/viewtopic.php?f=26&t=26030

It would be more useful to have a default of resolving any malware domains as 127.0.0.1 to internal machines resolve themselves and don't get anywhere but with the option of putting in your own one (and perhaps any malware listening posts - I don't know if ET one is running yet though I can have word with Matt Jonkmann to find out & its IP if it is). Being able to put your own IP in too would be good in case you wanted to setup your own internal sinkhole to identify machines infected and perhaps determined what they are infected with (i.e if domain is a CnC and machine contacts it and then resolves your own fake server setup to log all HTTP requests and other services).

DNS blackholes are becoming increasingly popular though in organisations as part of a malware defense. http://isc.sans.edu/diary.html?storyid=9037

jimp · Oct 28, 2011, 12:36 PM

@kklouzal:

Silly question, i came back in hopes nobody read it and I could edit the post but that didnt happen :)

How about adding magic jack support?? :D

MagicJack is just SIP. They just don't make it easy to find your credentials, from what I've seen. Google around for more info, but there isn't anything special about it. Certainly nothing warranting a package all of its own.

serialdie · Oct 28, 2011, 1:24 PM

I second that jimp. In any case dump magicjack they simply suck. Install the freeswitch pkg and take control of your own telco.

anagh · Nov 18, 2011, 7:27 AM

dns blacklist
https monitoring to block ultrasurf

pfsense 2.0

ipv6kid · Nov 21, 2011, 4:52 AM

I would like to be able to have the option of enabling CAPTCHA challenges to the WebGUI login. Maybe Re-CAPTCHA: http://www.google.com/recaptcha

ber1teguh · Nov 23, 2011, 10:22 AM

I would like to see reporting as one of the main features. This should be able to generate reports on any aspect of pfsense as well as scheduling and send the reports by email automatically.
I know there is a mailreport package and it's a good one. But good can always be better. For example, mailreport can send you email report contains rrd graphs only, there is no way to customized the email body itself. Even the rrd graphs are only attached to the email and not embedded in the body.
I would like to be able to create custom mail report with my own signatures if that's possible.

maverick_slo · Jan 11, 2012, 2:55 PM

Hello!

Hope it hasn`t been answered yet or wished :)

Feature 1: When machine reboots it would be nice if it could send an email after all connections are UP (WAN)
Feature 2: When PPPoE WAN disconnects and later when it connects back option to send an email
Feature 3: Logs viewer: instead of 50-2000 limit display whole log and subpages to browse the log
also to be able to select month,day, protocol and individual interface and then display log after selection has been made
Feature 4: Firewall log: color interfaces (WAN red, LAN green) to quickly distinguish between interfaces
Feature 5: I`ve heard that Dansguardian and ClamAV is coming to pfSense great to know :)

That would be it, otherwise this is overall great product!

jimp · Jan 11, 2012, 3:17 PM

@maverick_slo:

Feature 1: When machine reboots it would be nice if it could send an email after all connections are UP (WAN)

Eventually there will be a more full-featured notification system in the GUI to let people define events and what to send and such.

@maverick_slo:

Feature 2: When PPPoE WAN disconnects and later when it connects back option to send an email

May not be too hard, but see above.

@maverick_slo:

Feature 3: Logs viewer: instead of 50-2000 limit display whole log and subpages to browse the log
also to be able to select month,day, protocol and individual interface and then display log after selection has been made

That isn't likely to happen. If you need the logs, it's easy to export them via syslog to another box. Keeping all of the logs would require a lot of changes to the code and syslog setup and would break embedded installs, among other things. There are plenty of good third-party log parsers/syslog collectors that already let you drill-down with queries like that.

@maverick_slo:

Feature 4: Firewall log: color interfaces (WAN red, LAN green) to quickly distinguish between interfaces

Probably not hard to implement, but not something there is a lot of requests for. It would be really easy to end up making the logs ugly and hard to read rather than making things better.

marcelloc · Jan 11, 2012, 5:55 PM

@maverick_slo:

Feature 5: I`ve heard that Dansguardian and ClamAV is coming to pfSense great to know :)

Clamav is already there, see HAVP package.

maverick_slo · Jan 11, 2012, 7:48 PM

Awsome!

Number 1 and 2 are really useful features I really hope to be added someday :)

andrew0401 · Jan 13, 2012, 12:10 PM

How about fetchmail - I know it was looked at some years ago.

Andrew

eggsegg · Jan 16, 2012, 10:14 AM

request +ipguard Packages about arp

http://deeperm.org/ipguard/
thanks

sm00ph · Jan 24, 2012, 9:50 PM

I was advised to post this to the package wish list (hopefully I am in the right place):

About a decade ago there was an application written for Linux called peep. It took processes and put sound to them so that you didn't have to load/view a monitoring application to ascertain the state of your network devices, such as a firewall.
Has anyone given any thought to creating a package for pfsense to utilize this application?

I am new to this forum. I searched on the subject and hand and came up empty so I decided to start a new topic.
If I have opened a discussion that already has a thread, I apologize.
If I am opening this subject in the wrong context, again I apologize.
Please advise.

Supermule · Jan 24, 2012, 9:54 PM

I second that!!

@ber1teguh:

I would like to see reporting as one of the main features. This should be able to generate reports on any aspect of pfsense as well as scheduling and send the reports by email automatically.
I know there is a mailreport package and it's a good one. But good can always be better. For example, mailreport can send you email report contains rrd graphs only, there is no way to customized the email body itself. Even the rrd graphs are only attached to the email and not embedded in the body.
I would like to be able to create custom mail report with my own signatures if that's possible.

rahulmkhj · Feb 7, 2012, 2:57 PM

Hello Everyone!

Can we (or do we already) have a package to log URL History of all users/IPs? I need it very badly.

Thank you,

Rahul..

marcelloc · Feb 7, 2012, 4:03 PM

Yes,

squid proxy + lightsquid.

But you must configure proxy settings on client browsers to force all urls including https going to squid.

this tutorial shows 3 options on how to setup automatic detect proxy settings.
http://blog.ninjatek.co.za/2010/11/proxy-autodetection-using-pac-file-and.html

rahulmkhj · Feb 7, 2012, 4:12 PM

@marcelloc:

Yes,

squid proxy + lightsquid.

But you must configure proxy settings on client browsers to force all urls including https going to squid.

this tutorial shows 3 options on how to setup automatic detect proxy settings.
http://blog.ninjatek.co.za/2010/11/proxy-autodetection-using-pac-file-and.html

Thanks for your reply.

I know about squid, but that'll proxy all of the requests. While I want to use Public IP on LAN side & advertise user's real IP to the internet (fully transparent). That is (i think) not possible with squid package?

marcelloc · Feb 7, 2012, 4:20 PM

if possible only in transparente mode, so no https support for it.

nickod · Mar 9, 2012, 3:25 AM

+1 apcupsd

ilium007 · Mar 12, 2012, 5:24 AM

Followed this apcusbd guide last night - worked perfectly !

http://forum.pfsense.org/index.php?topic=19313.0