PF Sense & UnTangle 1 / 2 punch

fastcon68

I am trying to build a really cool product. I want to get one of the 1u cases that will handle two mini-itx system boards and then run pfsense on one and untagle on the other. that would be a great product and would fill a nice void in the market right now.
RC

hoba

@fastcon68:

I am trying to build a really cool product. I want to get one of the 1u cases that will handle two mini-itx system boards and then run pfsense on one and untagle on the other. that would be a great product and would fill a nice void in the market right now.
RC

Get one from our recommended vendors ;) http://linitx.com/viewproduct.php?prodid=10404

leviathan

I use this same setup at my organization. I have one pfSense firewall doing everything I need (pfSense is, by far, a better firewall), but the Untangle does a fantastic job in transparent bridge mode of filtering spam, phishing, virus, etc. you would expect from an UTM. Currently, we run them as separate boxes for our two networks being feed from our one pfSense firewall. We were being overloaded with e-mail, but when I brought the Untangle unit online, we began filtering over 20,000 pieces of junk mail a week. I agree with fastcon68, this is a fantastic design for any small or medium network. In my consulting, I recommend them together for growing businesses. Thanks to hoba, I now have a 1U unit that I can recommend to do both. I also am going to pick one up for our two networks, so I can save some rack space.

fastcon68

Anything in the US case wise? what would you recommend for a system board with say 10 ipsec vpn tunnels?
RC

pinoyboy

Can you guys please explain or give an example of how you have this setup as transparent bridge? I guess what I am not clear on is how you set the ip's up. Thank you.

Sample.gif_thumb

marcoof

Hi !
Untangle seems to be great ! It have a vpn portal… But I prefer two box to do this,
1 pfsense for the firewall and one sme server for the mail (spamassasin /clamav) / proxy (dansguardian) /lamp / server.
This is my opinion.
Marc

Been messing around with untangle on my homenetwork(not really need but..)
how have you solved the vlan problem with untangle, i cant have vlan configured on pfsense at the same time

what´s your config on this?

/F

YeOldeStonecat

@pinoyboy:

Can you guys please explain or give an example of how you have this setup as transparent bridge? I guess what I am not clear on is how you set the ip's up. Thank you.

During the install/setup of Untangle…the wizard will ask you what mode you will run it in..as your router, or as a bridge. Select bridge. You use both NICs..but during this wizard, it bridges in the internal NIC with the external NIC.

See 1/2 down this part of their WiKi
http://wiki.untangle.com/index.php/Introduction#Supported_Configurations

It's a UTM distro (Unified Threat Management), would be compared against Endian, or IPCop with the Copfilter add-on, or Astaro..as they are UTM distros. PFSense is not one.

I install Untangle at my clients in full router/gateway mode...not bridged, I'm not a fan of layering firewalls. I run PFSense at home due to its superior traffic shaping/QoS, and IPSec support..which currently...Untangle has no IPSec support, only OpenVPN. But...IPSec support is comin soon. As well as the slow pokey java management console is going away, soon will be all web based.

bitbyte

Can you please tell how you configured untangle in bridge mode?How do you define in/out interfaces?

in - from already existing firewall/router(pfsense)
out - to the LAN

GruensFroeschli

http://forums.untangle.com/ ?

YeOldeStonecat

@bitbyte:

Can you please tell how you configured untangle in bridge mode?How do you define in/out interfaces?

in - from already existing firewall/router(pfsense)
out - to the LAN

The same wiki link as above. Just follow the easy peasy setup install wizard in Untangle, placed behind your router..when you select bridge mode in the hand holding install wizard..it takes care of all the settings for you.

nocer

Hello,

I've put my first Untangle just behind my pfSense, and guess what! It's way easy and kinda no brainer!!! Read Wiki and just follow the wizard then it's going to take you all thru. It was only 10 minutes. I like Untangle much ;D ;D