Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What features make pfsense a firewall?

    Scheduled Pinned Locked Moved General pfSense Questions
    15 Posts 7 Posters 2.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M Offline
      mohiyodeen
      last edited by

      @doktornotor:

      Is this question serious?

      If you can't help newbie then please stay away.  :-\ :-\ :-[

      1 Reply Last reply Reply Quote 0
      • D Offline
        doktornotor Banned
        last edited by

        Help with what exactly? Using Google, perhaps? You claim to have used things like ISA and TMG and come here to post something like this?

        1 Reply Last reply Reply Quote 0
        • KOMK Offline
          KOM
          last edited by

          Not sure what packages you are referring to, but yes, the features of the pf packet filter are included in pfSense which is based on pf.

          1 Reply Last reply Reply Quote 0
          • M Offline
            mohiyodeen
            last edited by

            @doktornotor:

            Help with what exactly? Using Google, perhaps? You claim to have used things like ISA and TMG and come here to post something like this?

            I am just going to use pfsense, I was bit confused and just clearing my confusion, ISA and TMG are totally different from pfsense. and obviously after searching on google, i came to this platform, but here the friends like you are not saying welcome to me. :-\

            1 Reply Last reply Reply Quote 0
            • D Offline
              doktornotor Banned
              last edited by

              Uh. Perhaps, define what makes a firewall from your point of view. Bottom line:

              • No, pfSense is not UTM.
              • No, proxy ain't considered a firewall feature.
              1 Reply Last reply Reply Quote 0
              • johnpozJ Offline
                johnpoz LAYER 8 Global Moderator
                last edited by

                Definition: A firewall is a network security system, either hardware- or software-based, that controls incoming and outgoing network traffic based on a set of rules.

                Since pfsense does this - there you go its a firewall ;)  Is that what you were looking for?

                It uses PF, here this is info on PF which stands for PACKET FILTER..  kind of the heart of any firewall ;)

                http://www.openbsd.org/faq/pf/

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • M Offline
                  mohiyodeen
                  last edited by

                  let me share you my idea, I just want to create a network like this

                  pfsense as firewall >>>  squid cache as proxy on centos7    >>> server2008 as FTP server, I want to share my ftp server over the network with security, that is why i am too much concerned related to security point of view.

                  what you people suggest.
                  what should i do to create a network like this.

                  1 Reply Last reply Reply Quote 0
                  • D Offline
                    doktornotor Banned
                    last edited by

                    I would suggest to NOT run an FTP server in the first place if you want a secure transfer protocol. Even the less on an OS like W2008.

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ Offline
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      Yeah I'm with dok, if you worried about security wtf would the words ftp come in to same sentence..  FTP has been deprecated for YEARS…  If you want to securely xfer files there are much better ways.  SFTP for example.. For that matter simple https website..  2k8 also quite old, is it even r2??  Your just going to use the ftp server that is part of IIS???

                      So your wanting to use squid as a reverse proxy?  Is that how you want to use it to your ftp server?  Or http you serving up off the iis box as well?

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • ? This user is from outside of this forum
                        Guest
                        last edited by

                        but can you people please explain what are the features in pfsense that we can call this a Firewall,

                        Firewalls are filtering traffic by using rules or rule sets, in pfSense this job is done by the packet filter pf.

                        as i think pfsense have only squid in it?

                        And ClamAV as a AV, Snort or Suricata as a IDS/IPS, but this are only features, options and functions
                        that came by default or over a packet system inside of pfSense. There are also on top many different
                        variants of firewalls available on the market and they all will be differ each from another by using different
                        techniques and functions. One of them would be the "NG-Firewall" that is working also application based.

                        Please elaborate.

                        A router is routing packets from one to another or more networks, a firewall is inspecting packets to
                        separate packets from one to another or more networks and because that a firewall is also capable to
                        route packets make them not automatically being in the same area or on the same stage of devices.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.