If you could install just one package - which would it be?

aGeekhere

If you want to filter the internet with both http and https sites
Start here https://forum.pfsense.org/index.php?topic=73640.0

Also see https://forum.pfsense.org/index.php?topic=79389.0

dstroot

Have you jumped through all the hoops? Seems a bit bleeding edge for may taste. :-[

Derelict

I'd install no packages. Block all connections in from WAN and you're done.

aGeekhere

There are some websites that cause errors like https://dolphin-emu.org/

And windows updates and adobe updates are not working yet. But have everything setup and just disable HTTPS/SSL interception this will bring you back to just http filtering until these bugs are fixed.

aGeekhere

I'd install no packages. Block all connections in from WAN and you're done.

I would use a normal router for that, no point running a server 24/7, save power.

Derelict

True, but I don't need "packages" to do more. Actually, the only package I need is "OpenVPN Client Export."

But then again I don't run a "server" either. Just a right-sized atom.

aGeekhere

anti-virus and Cache are also a few other bonuses that squid offers.

Derelict

unnecessary. IMHO

rjcrowder

dansguardian… of course I couldn't use it without also installing squid - can I install two packages? :D

dstroot

I ran for years with the embedded (Nano) version on a PC Engines ALIX - this meant basically no packages (yes, I know that some packages work but the machine is so low powered that basically it's not a good idea).

Now I have a new PC Engines APU machine with 4gb RAM and a 30gb mSATA SSD. I have the full version of pfSense installed but just using @Derelict's recommendation to stay package-free makes me feel like I could be getting more "usability" out of the new box's capabilities.

Thanks for the responses so far - I've made a couple runs at setting up Squid but I need to read more.

chpalmer

I really only need siproxd. and only at one site. All the others could live as vanilla installs.

kejianshi

I like the idea of running no packages at all for a home setup unless you have a particular goal to accomplish.

I would install openvpn client export and export a client to your laptop so that if/when you ever need to access your pfsense / LAN remotely you can.

Also, you might like a VPN when traveling.

dstroot

Since we have a lot of iOS devices in our family and I have a OSX laptop I setup an IPSEC VPN using this guide:

https://forum.pfsense.org/index.php?topic=81735.0

That way I can use the native clients on the devices. Having some trouble with stability though…

That way when I have my iPad at Starbux no problems... ;)

kejianshi

It would be very stable with openvpn.