Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Do's and don'ts with pfsense

    Scheduled Pinned Locked Moved General pfSense Questions
    11 Posts 7 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DerelictD
      Derelict LAYER 8 Netgate
      last edited by

      Samba doesn't belong on a firewall. Period.

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        Samba on pfsense is cool.  You can share with the world!  (-;

        1 Reply Last reply Reply Quote 0
        • B
          biggsy
          last edited by

          @kejianshi:

          Samba on pfsense is cool.  You can share with the world!  (-;

          Yeah and think of all the great malware you could collect too :)

          Roy360, put OpenVPN on pfSense (nothing wrong with that) and use the Asus as a WiFi Access Point.  Find somewhere else for the SAMBA server.

          1 Reply Last reply Reply Quote 0
          • K
            kejianshi
            last edited by

            ubuntu is very easy to set up as a samba server.  I like it better than windows sharing by far.  You can set up a share on something as small as a raspberrypi if needed or on any other computer running behind pfsense.

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              Where did you read not to use openvpn on pfsense?  The best place for vpn send point is the edge.. pfsense is your edge so it makes complete sense for that to be our vpn endpoint.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • M
                mikeisfly
                last edited by

                Freenas is good for Samba / SMB. I use Windows Server 2012 R2 with many VMs. One of them is a File server.

                1 Reply Last reply Reply Quote 0
                • R
                  Roy360
                  last edited by

                  @biggsy:

                  @kejianshi:

                  Samba on pfsense is cool.  You can share with the world!  (-;

                  Yeah and think of all the great malware you could collect too :)

                  Roy360, put OpenVPN on pfSense (nothing wrong with that) and use the Asus as a WiFi Access Point.  Find somewhere else for the SAMBA server.

                  Okay, then I'll do openVPN server and pfsense and use the Asus as a wireless Ap and samba server.

                  1 Reply Last reply Reply Quote 0
                  • R
                    Roy360
                    last edited by

                    @kejianshi:

                    ubuntu is very easy to set up as a samba server.  I like it better than windows sharing by far.  You can set up a share on something as small as a raspberrypi if needed or on any other computer running behind pfsense.

                    A raspberry pi 2 would give me about the same performance as my Ac68p which is ~30MB/s read and write.

                    I'll have to look around and see if anyone is selling 2GHz boards for under 50$.

                    The brand new AC86u is capable of 100MB/s reads and 90MB/s write on samba and it only had a 1.8GHz processor.

                    1 Reply Last reply Reply Quote 0
                    • B
                      biggsy
                      last edited by

                      @Roy360:

                      Okay, then I'll do openVPN server and pfsense and use the Asus as a wireless Ap and samba server.

                      If you turn the Asus into an AP you will probably lose its SAMBA function.

                      The Pi 2 can only do 30-40 MB/s with SAMBA because its LAN connection is via USB, IIRC.

                      1 Reply Last reply Reply Quote 0
                      • ?
                        Guest
                        last edited by

                        The brand new AC86u is capable of 100MB/s reads and 90MB/s write on samba and it only had a 1.8GHz processor.

                        This is then on an eMMC flash storage and not on an SD card as on the RAPI, and on top of this that plastic routers
                        came with ASIC and/or FPGA`s that frees up the entire CPU and it is able to do more. pfSense is a x86 software
                        firewall and nothing more at this moment. An yes a small samba server should be not installed on it as I see it right
                        like other also do, but you will be able to get a NAS with OwnCloud, Samba, Download station and whatever they all
                        offers today, and connect it to your pfSense easy to get access from outside with a VPN connection.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.