Packages wishlist?

@borkov:

Would love to have DNSCrypt.

Thanks!!!!!

would really like to see this as a package in pfsense, as well.

marcelloc

@tdhuck:

@borkov:

Would love to have DNSCrypt.

Thanks!!!!!

would really like to see this as a package in pfsense, as well.

according to documentation, the native unbound dns service used on pfSense can be complied with DNSCrypt

https://dnscrypt.org/#dnscrypt-server


Running your own DNSCrypt server

.
.
.
unbound, a validating, recursive, and caching DNS resolver, can also act as a DNSCrypt server when compiled with --enable-dnscrypt.

Refer to DNSCrypt Options section in unbound.conf(5) for configuration options.

Deployment

@marcelloc:

@tdhuck:

@borkov:

Would love to have DNSCrypt.

Thanks!!!!!

would really like to see this as a package in pfsense, as well.

according to documentation, the native unbound dns service used on pfSense can be complied with DNSCrypt

https://dnscrypt.org/#dnscrypt-server
Running your own DNSCrypt server

.
.
.
unbound, a validating, recursive, and caching DNS resolver, can also act as a DNSCrypt server when compiled with --enable-dnscrypt.

Refer to DNSCrypt Options section in unbound.conf(5) for configuration options.

Deployment

i was looking for a package that could be enabled in the GUI, i have no idea how to implement using the instructions you posted (i found that information, yesterday, while looking at their site).

thank you for sharing.

marcelloc

@tdhuck:

I was looking for a package that could be enabled in the GUI, i have no idea how to implement using the instructions you posted (i found that information, yesterday, while looking at their site).

thank you for sharing.

The first step is to compile and create unbound package with this feature on a Freebsd 10.3 to replace on you pfSense 2.3.3 testing machine.

If the works, the next steps are findind the best way to run it(as a proxy + sever, just a proxy, just a server, etc…) and then create gui files that configure these extra steps, blacklist downloads, acls, etc....

not that easy but not impossible too.

EDIT: looks like de unbound source does not have the dnscrypt embedded but the wrapper looks like 'simple' to include
https://github.com/Cofyc/dnscrypt-wrapper/

MarcoP

Hi,

as for arpwatch, is it just a matter of converting current HTML/CSS to Boostrap?

cheers

swmspam

@borkov:

Would love to have DNSCrypt.

Thanks!!!!!

+1 for DNScrypt as an installable under the GUI package manager with a services tab and entry on the services monitoring dashboard window.

zentex

The Xymon client would be nice for monitoring of pfsense. I see posts going back 5 years on the forums but no "official package" has ever been added.

I went looking today, and I see zabbix is now in the packages, but still no xymon :'(

RadOD

Something along the lines of smokeping for ISP quality monitoring.

dennypage

@RadOD:

Something along the lines of smokeping for ISP quality monitoring.

The Quality Graph, which offers much the same information as smoke ping, can be found in Status / Monitoring.

RadOD

@dennypage:

@RadOD:

Something along the lines of smokeping for ISP quality monitoring.

The Quality Graph, which offers much the same information as smoke ping, can be found in Status / Monitoring.

Huh, I never realized it could be configured. I thought it was just for CPU.

Still, I like to monitor specific IP addresses such as my ISP gateway and VPN targets and compare to generic websites to find problems early.

vagnyj

Hello everyone, is there an opportunity to install package Virtual Box ? With web management as implemented in Nas4free. In the photo example of management virtual box on Nas4free

111.jpg_thumb

12.jpg_thumb

jahonix

@vagnyj:

Virtual Box

No.
This is your firewall, not a hypervisor.
However, you can install a virtual pfSense on a hypervisor.

msanangelo

@hongkonger:

Would really love an implementation of either of the following

Freenas

Bacula Server

Simple FTP server for file storage

Samba (with UI)

Most of the above are already available in some adhoc way on pfsense (except bacula server and Freenas) , but really appreciate a UI based installation and management.

thanks

I second this. A FTP Server and Samba in particular. If a store bought consumer router can do it, why not pfsense? Surely it can do it better, more secure, and faster. :)

jahonix

@msanangelo:

If a store bought consumer router can do it, why not pfsense?

Maybe because pfSense is a more serious contender in the firewall business and not one of the flaky consumer routers you better throw as far as your aching back lets you?

BBcan177

@jahonix:

@msanangelo:

If a store bought consumer router can do it, why not pfsense?

Maybe because pfSense is a more serious contender in the firewall business and not one of the flaky consumer routers you better throw as far as your aching back lets you?

http://thehackernews.com/2017/05/samba-rce-exploit.html
https://lists.samba.org/archive/samba-announce/2017/000406.html
https://www.shodan.io/report/FoqqpNmw

msanangelo

@jahonix:

@msanangelo:

If a store bought consumer router can do it, why not pfsense?

Maybe because pfSense is a more serious contender in the firewall business and not one of the flaky consumer routers you better throw as far as your aching back lets you?

Really? it's been a stellar firewall so far. it will more than happily block things but I have to fight it to allow things. can't even forward port 80 that worked fine on the tp-link it replaced and also worked on a VM behind the main pfsense router. the data usage stats are practically useless without an added package. So far, ddwrt worked better and wasn't so annoying. I might enjoy pfsense more if it wasn't so featureless. All I'm asking is a couple programs to make it a bit more useful on the LAN side. Also, is it too much to ask for some critical software patches around here? I've got 4 vulnerable packages in 2.3.3 and my only hope is to wait for 2.4. whenever that'll be released. >.>

@BBcan177:

http://thehackernews.com/2017/05/samba-rce-exploit.html
https://lists.samba.org/archive/samba-announce/2017/000406.html
https://www.shodan.io/report/FoqqpNmw

I'm aware of that. I'm not dumb enough to put samba or ftp on the wan. I just want it for the lan.

marcelloc

@msanangelo:

is it too much to ask for some critical software patches around here?

If you need the feature and know how to configure it under console/config files, you can enable freebsd repo and install the packages you need.

Also, pfSense has a great GUI framework that you can use to create your own packages with xml files and php script to check selected options and create config files.

What packages from 2.3.3 are vulnerable?

dennypage

@msanangelo:

Also, is it too much to ask for some critical software patches around here? I've got 4 vulnerable packages in 2.3.3 and my only hope is to wait for 2.4.

What packages? And is there a reason that you haven't installed the 2.3.4 update?

gerby123

Given that the freeradius2 port is expiring the end of June 2017 (this month) I'd be interested in seeing freeradius3 make it in to PFSense
https://www.freshports.org/net/freeradius2
https://www.freshports.org/net/freeradius3

jimp

@gerby123:

Given that the freeradius2 port is expiring the end of June 2017 (this month) I'd be interested in seeing freeradius3 make it in to PFSense
https://www.freshports.org/net/freeradius2
https://www.freshports.org/net/freeradius3

That's been on my to-do list for a while. It's just a lot of work, having to go through and rearrange everything to the 3.x directory layout and changes in the config.