Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Packages wishlist?

    Scheduled Pinned Locked Moved pfSense Packages
    661 Posts 384 Posters 1.5m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      biggsy
      last edited by

      @rcfa:

      Actually a forum wishlist: make sub-sections for each package under the Packages section.

      I would like to see that too.  Maybe as part of updating SMF?

      Having a subsection in the forum would also make it a bit easier to get a feel for the stability of packages.

      1 Reply Last reply Reply Quote 0
      • D
        dhatz
        last edited by

        @biggsy:

        @rcfa:

        Actually a forum wishlist: make sub-sections for each package under the Packages section.

        I would like to see that too.  Maybe as part of updating SMF?

        Having a subsection in the forum would also make it a bit easier to get a feel for the stability of packages.

        I guess that creating a sub-forum for each and every pfSense package might be a bit too much, but perhaps a sub-forum for the "tier-1" packages (snort, squid, haproxy/varnish etc) or for 4-5 main "categories" ids/ips (snort etc), proxy/rev.proxy (squid, haproxy, varnish), monitoring (zabbix, nrpe), L7 filtering (squidguard, dansguardian), routing (openbgp, quagga) etc

        1 Reply Last reply Reply Quote 0
        • S
          SIPpyCup
          last edited by

          • privoxy (loop back content filter)

          privoxy is offered in an adblock/pornblock/virus/filter how to in the forum
          http://forum.pfsense.org/index.php/topic,57916.0.html

          • PBX in a flash

          imho more attractive than merely freeswitch

          there are numerous threads on pbx in a flash forums on how to install with pfsense.  It would be easier as a package

          1 Reply Last reply Reply Quote 0
          • S
            SIPpyCup
            last edited by

            Track Me Not

            currently released as a browser extension for firefox and chromium

            it's a "counter intelligence" interweb tool that is not only for the tinfoil hatter club

            http://cs.nyu.edu/trackmenot/

            1 Reply Last reply Reply Quote 0
            • S
              SIPpyCup
              last edited by

              export settings to one/all of

              http://s3.amazon.com
              http://joynet.com
              http://dreamhost.com/cloud/

              As part of the AWS Free Usage Tier, you can get started with Amazon S3 for free. Upon sign-up, new AWS customers receive 5 GB of Amazon S3 standard storage, 20,000 Get Requests, 2,000 Put Requests, and 15GB of data transfer out each month for one year.

              additionally amazon customers receive free 5 GB storage s3 (not in addition to the free tier, but also not limited to one year of freeness) and separately 5 FB storage clouddrive

              (there's also a free year of EC2 in which one may run PBX in a Flash until it's a package for pfSense) ;)

              1 Reply Last reply Reply Quote 0
              • S
                SIPpyCup
                last edited by

                XMPP server  (Jabber)

                I would prefer either/both

                http://prosody.im

                http://tigase.com
                http://tigase.org

                and a gui for managing server extensions

                some guru way to discourage protracted non-OTR encrypted conversations?

                http://otr.cypherpunks.ca

                1 Reply Last reply Reply Quote 0
                • S
                  SIPpyCup
                  last edited by

                  SIPsorcery  (it doesn't do RTP)

                  http://sipsorcery.com
                  http://sipsorcery.codeplex.com/

                  If you wanted to add more VoiceGateways to your Obihai (or other ATA) this would be one option, and less costly self hosted.  Aaron has made the source f/OSS.  (I never use googlevoice or other google properties; to cut down on headaches don't try to maintain GV functionality)

                  1 Reply Last reply Reply Quote 0
                  • D
                    dhatz
                    last edited by

                    Given the some of the recent feedback regarding problems with using BGP under pfSense, based on this discussion at the freebsd-net mailing list, it seems that bird might be the answer …

                    http://www.freshports.org/net/bird/
                    http://bird.network.cz/

                    1 Reply Last reply Reply Quote 0
                    • Z
                      zenny
                      last edited by

                      HAProxy-devel also supports SSL, but is not ready for production and also SNI could be an issue.

                      So I request a package for Stud (https://github.com/bumptech/stud) is a lightweight and easy to configure proxy which can coexist with HAProxy to support SSL and SNI for production servers. Thanks!

                      1 Reply Last reply Reply Quote 0
                      • Z
                        zenny
                        last edited by

                        Since Snort is single-threaded, wouldn't it be nice to include a package for suricata (http://suricata-ids.org/) which supports mutli-threaded processing?

                        Ref: http://workshop.netfilter.org/2013/wiki/images/1/1f/Eric_Leblond_IDS-suricata.pdf

                        1 Reply Last reply Reply Quote 0
                        • rcfaR
                          rcfa
                          last edited by

                          @zenny:

                          Since Snort is single-threaded, wouldn't it be nice to include a package for suricata (http://suricata-ids.org/) which supports mutli-threaded processing?

                          Ref: http://workshop.netfilter.org/2013/wiki/images/1/1f/Eric_Leblond_IDS-suricata.pdf

                          Looks like a great one. I also think the non-proprietary nature would make it a better fit, and with more and more GPU-power, CUDA support could make quite a difference in CPU load and allow for better utilization of existing hardware.
                          Also, Snort, over the past, seems to have been rather fickle, and quite the resource hog. Anything that's more efficient and less picky or easier to configure would be a good step forward.

                          1 Reply Last reply Reply Quote 0
                          • X
                            xbipin
                            last edited by

                            would love to have freeswitch

                            1 Reply Last reply Reply Quote 0
                            • rcfaR
                              rcfa
                              last edited by

                              @xbipin:

                              would love to have freeswitch

                              +1

                              1 Reply Last reply Reply Quote 0
                              • rcfaR
                                rcfa
                                last edited by

                                A STUN server package would also be VERY useful.

                                http://sourceforge.net/projects/stun/

                                Basically, as "low end" hardware gets more powerful, pfSense would be very useful to evolve into a "network border server" in addition to being a firewall router.

                                Tons of services that need to be available from the public net, and that one may not want to puncture the protective wall, could simply run on the firewall device: STUN, OwnCloud, FreeSwitch/Asterisk/PBSinAFlash, Suricata/Snort, privoxy/trackmenot/TOR, etc.

                                If we don't want a totally cluttered environment, at some point it may make sense to have "official" packages, which are fully integrated and tested to cover certain aspects of a network border server.

                                1 Reply Last reply Reply Quote 0
                                • Z
                                  zenny
                                  last edited by

                                  @rcfa:

                                  A STUN server package would also be VERY useful.

                                  http://sourceforge.net/projects/stun/

                                  Basically, as "low end" hardware gets more powerful, pfSense would be very useful to evolve into a "network border server" in addition to being a firewall router.

                                  Tons of services that need to be available from the public net, and that one may not want to puncture the protective wall, could simply run on the firewall device: STUN, OwnCloud, FreeSwitch/Asterisk/PBSinAFlash, Suricata/Snort, privoxy/trackmenot/TOR, etc.

                                  If we don't want a totally cluttered environment, at some point it may make sense to have "official" packages, which are fully integrated and tested to cover certain aspects of a network border server.

                                  To complement stun, STUN-over-TCP (http://sourceforge.net/projects/stunovertcp) would be a good combination with Vovida STUN (http://sourceforge.net/projects/stun/).

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    mystycs
                                    last edited by

                                    ziproxy!

                                    http://ziproxy.sourceforge.net/download.html

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      Derf
                                      last edited by

                                      portspoof could be a nice addition

                                      https://github.com/drk1wi/portspoof

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        Topper727
                                        last edited by

                                        I wish Snorby would be as a package.  I have setup on another machine it is very handy.  I don't want to have to run 2 machines to do this.  I have enough CPU for both in firewall machine

                                        Dell 2950 g3 server
                                        Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
                                        Current: 2000 MHz, Max: 2667 MHz
                                        8 CPUs: 2 package(s) x 4 core(s)
                                        8152 MiB and 600meg 10k drive
                                        Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

                                        1 Reply Last reply Reply Quote 0
                                        • L
                                          lindsay
                                          last edited by

                                          @rcfa:

                                          @zenny:

                                          Since Snort is single-threaded, wouldn't it be nice to include a package for suricata (http://suricata-ids.org/) which supports mutli-threaded processing?

                                          Ref: http://workshop.netfilter.org/2013/wiki/images/1/1f/Eric_Leblond_IDS-suricata.pdf

                                          Looks like a great one. I also think the non-proprietary nature would make it a better fit, and with more and more GPU-power, CUDA support could make quite a difference in CPU load and allow for better utilization of existing hardware.
                                          Also, Snort, over the past, seems to have been rather fickle, and quite the resource hog. Anything that's more efficient and less picky or easier to configure would be a good step forward.

                                          +1 from me

                                          Fiberline 500/500Mbps
                                          Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz

                                          1 Reply Last reply Reply Quote 0
                                          • L
                                            lindsay
                                            last edited by

                                            @rcfa:

                                            Actually a forum wishlist: make sub-sections for each package under the Packages section.
                                            It's pretty hard to browse all relevant threads relevant to a particular package, it would be easier to have these threads grouped.
                                            That would also make it easier for maintainers to have a quick look if there's activity, and for users to see if a package is alive.

                                            • 1 from me too as i was ordering a adtrap wich do not work.
                                              And to ship it back again is like ordering a new

                                            Fiberline 500/500Mbps
                                            Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.