Packages wishlist?

sullrich

Well my vote goes to Quagga, or at least some kind of RIP/OSPF supporting routing daemon. Purely for use on VPN's, of course!

I've just spotted that it's in ports, but a web extension for it would be nice. I did a package of Quagga for smoothwall a while back (web bit didn't work though, but never got round to fixing it) so I might try and do something for pfSense.

Yes, please do! If you want to take over the package it currently does not have a maintainer.

lsf

IPtraf is not a BSD util. Its linux, and it's a ugly hack imo. ;)

smidgey

mmm IDS like snort and adaptive firewalling capabilities like snort-sam

i.e. kiddie starts scanning me, ids generates firewall rules to block kiddie before he hits my open ports / or temporarily 'hides' those ports.

kevlatimer

@sullrich:

@kevlatimer:

Well my vote goes to Quagga, or at least some kind of RIP/OSPF supporting routing daemon. Purely for use on VPN's, of course!

I've just spotted that it's in ports, but a web extension for it would be nice. I did a package of Quagga for smoothwall a while back (web bit didn't work though, but never got round to fixing it) so I might try and do something for pfSense.

Yes, please do! If you want to take over the package it currently does not have a maintainer.

I'll start having a crack at it today then, my BSD isn't a patch on my Linux but I'm sure I can muddle through ;)

sullrich

http://www.pfsense.com/~sullrich/pfSenseDevelopersVMWareEdition.7z may help…. Full dev environment in vmware.

Superman

I know this isn't what you want on a firewall normally, but I would like to see a samba client along with rsync for remote backups (I guess with a cron scheduler) through the firewall to a local windows machine.

I know it would be better to have a seperate machine, but it's just not feasible in my friends enviroment at the time. I've been using a Linux based firewall/server installation at his location, but it's several releases back and I can't upgrade it remotely. pfSense of course is my choice for a firewall, and with just these few features it would fit perfectly in that enviroment, and I'd always be able to remotely maintain the firewall.

Likely I could just add the packages, but then they would get wiped out with each upgrade…

Leoandru

@Superman:

Likely I could just add the packages, but then they would get wiped out with each upgrade…

No they won't not unless your doing a clean install. I have Been running a jabber server on my pfSense box that survived several upgrades.
Likewise, I didnt want to get a separate box just to run a jabber server, so I just installed and configured it on my firewall.

Superman

Oh, okay, that's cool, I didn't know that!! ::)

Thanks Leoandru!

Superman

Okay, I've tried this out on my own pfSense FW, I can install the packages no problem. I guess I need to make a custom kernel however, because there is now smbfs.ko to be loaded. I tried just copying one from my freebsd system, but that doesn't work. I've built a kernel before, but just with very basic changes. What would I have to do to build the pfSense kernel with only the addition of that one module? Where do I specify for it to build that module?

Thanks for your help…

btafoya

Some form of packet capturing for use with Ethereal would be incredible!

Zharvek

This might be possible for a package?

Is there a way, (or possible) to have pfSense put IP addresses of people in a sort of temporary pool that will block all access from them, if they say lauch an attack against the router.

Multiple attempts to attack the router results in a 6 hour ban. Something of that sort.

fernandotcl

@Zharvek:

This might be possible for a package?

Is there a way, (or possible) to have pfSense put IP addresses of people in a sort of temporary pool that will block all access from them, if they say lauch an attack against the router.

Multiple attempts to attack the router results in a 6 hour ban. Something of that sort.

That's possible with Snort. However, it's not always desirable to run an IDS in your firewall. Besides, if you have to use such a system, you should be confortable enough to implement it manually, without GUIs.

rexster

@Leoandru:

No they won't not unless your doing a clean install. I have Been running a jabber server on my pfSense box that survived several upgrades.
Likewise, I didnt want to get a separate box just to run a jabber server, so I just installed and configured it on my firewall.

maybe you could publish the package for the community to use?

sullrich

Anything custom that starts from /usr/local/etc/rc.d/ is not touched during upgrades.

This is basically the package area (/usr/local/).

You are pretty safe in adding you own startup files in /usr/local/etc/rc.d/*.sh … We do not touch them during upgrade.

tweak

I think it would be great to see a package for myNetWatchman (http://www.mynetwatchman.com) if possible. That and perhaps SFTP :-[

fernandotcl

@tweak:

That and perhaps SFTP

SFTP is already in, it's part of SSH.

tweak

@fernandotcl:

SFTP is already in, it's part of SSH.

This is true, but I'd like to know how to use an SFTP client when the menu is presented after every SSH login…

jeroen234

login true a sftp client
then you don't get that ssh menu

ZGamer

I'm not sure if this can be done but some sort of log reporting package which would generate a couple web pages on the statistics….kinda like awstats with a builtin syslog thing....sorta hard to describe but would be cool.

tweak

@jeroen234:

login true a sftp client
then you don't get that ssh menu

I've tried gftp, putty-tools, hsftp and the sftp binary all with the same result - what would you recommend for a linux sftp client?