Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Packages wishlist?

    Scheduled Pinned Locked Moved pfSense Packages
    661 Posts 384 Posters 1.5m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      Topper727
      last edited by

      I wish Snorby would be as a package.  I have setup on another machine it is very handy.  I don't want to have to run 2 machines to do this.  I have enough CPU for both in firewall machine

      Dell 2950 g3 server
      Intel(R) Xeon(R) CPU E5430 @ 2.66GHz
      Current: 2000 MHz, Max: 2667 MHz
      8 CPUs: 2 package(s) x 4 core(s)
      8152 MiB and 600meg 10k drive
      Pfsense 2.4 .. Hoping to get the phpvirtualbox going again.

      1 Reply Last reply Reply Quote 0
      • L
        lindsay
        last edited by

        @rcfa:

        @zenny:

        Since Snort is single-threaded, wouldn't it be nice to include a package for suricata (http://suricata-ids.org/) which supports mutli-threaded processing?

        Ref: http://workshop.netfilter.org/2013/wiki/images/1/1f/Eric_Leblond_IDS-suricata.pdf

        Looks like a great one. I also think the non-proprietary nature would make it a better fit, and with more and more GPU-power, CUDA support could make quite a difference in CPU load and allow for better utilization of existing hardware.
        Also, Snort, over the past, seems to have been rather fickle, and quite the resource hog. Anything that's more efficient and less picky or easier to configure would be a good step forward.

        +1 from me

        Fiberline 500/500Mbps
        Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz

        1 Reply Last reply Reply Quote 0
        • L
          lindsay
          last edited by

          @rcfa:

          Actually a forum wishlist: make sub-sections for each package under the Packages section.
          It's pretty hard to browse all relevant threads relevant to a particular package, it would be easier to have these threads grouped.
          That would also make it easier for maintainers to have a quick look if there's activity, and for users to see if a package is alive.

          • 1 from me too as i was ordering a adtrap wich do not work.
            And to ship it back again is like ordering a new

          Fiberline 500/500Mbps
          Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            this script may help you undestanding how to install it on freebsd.

            Most of this are already done on snort package
            https://github.com/shirkdog/snorby-bsd/blob/master/snorbyInstall.sh

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • R
              Roman513
              last edited by

              strongSwan!

              1 Reply Last reply Reply Quote 0
              • jimpJ
                jimp Rebel Alliance Developer Netgate
                last edited by

                @Roman513:

                strongSwan!

                Keep an eye on 2.2 for that.

                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • E
                  exograpix
                  last edited by

                  Any antivirus solution for squid-dev or installation wayout.

                  Thanks

                  1 Reply Last reply Reply Quote 0
                  • T
                    Trylen
                    last edited by

                    A bandwidth monitor that allows you to keep track of Data Caps. Kind of like Traffic Accounting in IPCop.

                    1 Reply Last reply Reply Quote 0
                    • T
                      twau
                      last edited by

                      I would love a package that could remove spikes from RRD graphs. Cause sometimes when I reboot pfSense I get really high spikes on the graphs that is not normal, and it destroys the whole graph.

                      Some links about this matter:
                      https://github.com/mhagander/rrdclean
                      http://acktomic.com/2007/08/31/removing-spikes-from-rrd-databases/
                      http://www.serveradminblog.com/2010/11/remove-spikes-from-rrd-graphs-howto/

                      Intel® Core™ i3-3220T | Intel® Desktop Board DQ77KB | Corsair Vengeance 8GB DDR3 | Fractal Design Node 304

                      1 Reply Last reply Reply Quote 0
                      • K
                        kilko
                        last edited by

                        My Whishlist:

                        Simple "ifdown" package - reboot.  (if not able to ping a given host, reboot pfsense)

                        ..or can this be done with cron and a command directly on the box itself ?

                        1 Reply Last reply Reply Quote 0
                        • GruensFroeschliG
                          GruensFroeschli
                          last edited by

                          Why the hell would you want to reboot your pfSense???

                          We do what we must, because we can.

                          Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                          1 Reply Last reply Reply Quote 0
                          • K
                            kilko
                            last edited by

                            @GruensFroeschli:

                            Why the hell would you want to reboot your pfSense???

                            Let my just state: that pfsense is unbeatable stable (for the price and functions available) and have been running for months and (would be years..) but my ISP is making "hiccups on the cable" which makes the traffic suddenly stop flowing..  Read more if you like here; http://forum.pfsense.org/index.php/topic,69879.msg381954.html#msg381954

                            I have 3 Reason:

                            1. When doing a controlled reboot all data /traffic etc is saved.
                            2. When my ISP is doing some upgrade/"fixing".. I sometimes reboot the cable modem.. and sometimes I have to reboot pfsense too, to get internet running again.
                            3. When I'm not home - and internet stoppes working, my system will try to get online again automatically. (and people don't have to start calling me ;-))

                            1 Reply Last reply Reply Quote 0
                            • K
                              kilko
                              last edited by

                              @kilko:

                              @GruensFroeschli:

                              Why the hell would you want to reboot your pfSense???

                              Let my just state: that pfsense is unbeatable stable (for the price and functions available) and have been running for months and (would be years..) but my ISP is making "hiccups on the cable" which makes the traffic suddenly stop flowing..  Read more if you like here; http://forum.pfsense.org/index.php/topic,69879.msg381954.html#msg381954

                              I have 3 Reason:

                              1. When doing a controlled reboot all data /traffic etc is saved.
                              2. When my ISP is doing some upgrade/"fixing".. I sometimes reboot the cable modem.. and sometimes I have to reboot pfsense too, to get internet running again.
                              3. When I'm not home - and internet stoppes working, my system will try to get online again automatically. (and people don't have to start calling me ;-))

                              If not a package, here is a howto: http://forum.pfsense.org/index.php/topic,71335.msg389446.html#msg389446

                              1 Reply Last reply Reply Quote 0
                              • BBcan177B
                                BBcan177 Moderator
                                last edited by

                                @marcelloc:

                                this script may help you undestanding how to install it on freebsd.

                                Most of this are already done on snort package
                                https://github.com/shirkdog/snorby-bsd/blob/master/snorbyInstall.sh

                                Hi Marcello, have you tested this Snorby script on 2.1 Release?

                                Can you share some screenshots of the interface?

                                "Experience is something you don't get until just after you need it."

                                Website: http://pfBlockerNG.com
                                Twitter: @BBcan177  #pfBlockerNG
                                Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                1 Reply Last reply Reply Quote 0
                                • BBcan177B
                                  BBcan177 Moderator
                                  last edited by

                                  I would like to see an OSSEC package. Their website says FreeBSD is suppored.        http://www.ossec.net/?page_id=165

                                  I would also like to see pfBlocker updated to include domain blocking on top of the existing IP based lists and the ability to use .csv lists.

                                  and finally pfCenter to monitor and control several pfSense boxes in one application.

                                  "Experience is something you don't get until just after you need it."

                                  Website: http://pfBlockerNG.com
                                  Twitter: @BBcan177  #pfBlockerNG
                                  Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                  1 Reply Last reply Reply Quote 0
                                  • ?
                                    Guest
                                    last edited by

                                    @Derf:

                                    portspoof could be a nice addition

                                    https://github.com/drk1wi/portspoof

                                    This gets a vote from me. Sounds awesome!

                                    Would really need this.

                                    1 Reply Last reply Reply Quote 0
                                    • N
                                      NOYB
                                      last edited by

                                      Is there a PhantomJS package for FreeBSD?  Found a port at FreeBSD org, but was hoping for a ready to go package.

                                      http://www.freebsd.org/cgi/ports.cgi?query=phantomjs&stype=all
                                      http://svnweb.freebsd.org/ports/head/lang/phantomjs/

                                      1 Reply Last reply Reply Quote 0
                                      • J
                                        JWTrance
                                        last edited by

                                        @BBcan17:

                                        I would like to see an OSSEC package. Their website says FreeBSD is suppored.        http://www.ossec.net/?page_id=165

                                        I think an OSSEC Agent package would be a GREAT addition to the lineup. I believe it would be a reletivly easy package to build as it is already BSD compatable and requires very few user inputed settings to have it up and running (< 4 I think). While syslog works well enough for remote log generation an OSSEC Agent would provide a huge number of additional awesome feature that syslog was not ment to include. (log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response - according to their website) But the thing that does it the most for me is the fact that OSSEC is being integrated into many open source SIEM projects, and the inclusion of an OSSEC package would allow pfSense to be even better integrated into a quality SIEM/UTM environment.

                                        A final note, OSSEC is a free and open source product and seems to follow a similar philosophy to the pfTeam and appear to be in it for the long haul.

                                        EDIT: Im using this as a way to practice building a package and hosting a repository, I don't have anything worthwhile yet but if anyone has any suggestions send me a message, dont post here. Thanks!

                                        1 Reply Last reply Reply Quote 0
                                        • BBcan177B
                                          BBcan177 Moderator
                                          last edited by

                                          @Sickcero:

                                          @BBcan17:

                                          I would like to see an OSSEC package. Their website says FreeBSD is suppored.        http://www.ossec.net/?page_id=165

                                          I think an OSSEC Agent package would be a GREAT addition to the lineup. I believe it would be a reletivly easy package to build as it is already BSD compatable and requires very few user inputed settings to have it up and running (< 4 I think). While syslog works well enough for remote log generation an OSSEC Agent would provide a huge number of additional awesome feature that syslog was not ment to include. (log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response - according to their website) But the thing that does it the most for me is the fact that OSSEC is being integrated into many open source SIEM projects, and the inclusion of an OSSEC package would allow pfSense to be even better integrated into a quality SIEM/UTM environment.

                                          A final note, OSSEC is a free and open source product and seems to follow a similar philosophy to the pfTeam and appear to be in it for the long haul.

                                          EDIT: Im using this as a way to practice building a package and hosting a repository, I don't have anything worthwhile yet but if anyone has any suggestions send me a message, dont post here. Thanks!

                                          I believe they are working on having an OSSEC Server installation. I hope that it can also be run as an "Agent" as I already have an OSSEC Server on my system.

                                          https://github.com/pfsense/pfsense-packages/pull/526

                                          "Experience is something you don't get until just after you need it."

                                          Website: http://pfBlockerNG.com
                                          Twitter: @BBcan177  #pfBlockerNG
                                          Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                                          1 Reply Last reply Reply Quote 0
                                          • J
                                            JWTrance
                                            last edited by

                                            @BBcan17:

                                            @Sickcero:

                                            @BBcan17:

                                            I believe they are working on having an OSSEC Server installation. I hope that it can also be run as an "Agent" as I already have an OSSEC Server on my system.

                                            https://github.com/pfsense/pfsense-packages/pull/526

                                            Nice! I would assume that we would have agent functions by themselves if we should so chose, I would hope so anyway! :)  Im in the same boat as you, I already have a server and just need to be able to integrate my pf boxes with agent functionality.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.