Domain: pfsense.org
Stories and comments across the archive that link to pfsense.org.
Comments · 108
-
Re:My Home router is a Linux NAT Box.
-
Re:On the other hand, I want shaping that I contro
If you want a little more than m0n0wall - then try pfsense. Its built on m0n0wall but has far more features and a plugin system that allows 3rd-party packages to be installed like ntop and others. but it needs more resources.. m0n0wall was happy with 64MB RAM, pfsense's minimum is 128MB
-
Re:OpenBSD PF
I don't know why no-one's done a bootable CD version.
Check out pfSense for exactly what you're describing. -
Re:Old computer+Linux
SME with Monowall. AKA esmith.
Er, eSmith has a firewall, yes, but it also a ton of other stuff up to and including the kitchen sink. Only appropriate if you're a very small company that can only afford one box.
Speaking of M0n0wall though, pfSense is M0n0Wall based but supports multiple redundant links with load-balancing and real-time hardware failover including session-state retention. (I.e. you can have not only redundant WAN links but also redundant firewall hardware so if one cheap x86 box dies the other takes over transparently).
There's a ton of other features as well, the pfSense team is definitely aiming for the enterprise while keeping it accessible to SMBs. -
Re:As a long time Speakeasy customer...
But you are right, consumer grade routers are pure crap. Why I recommend Soekris boards with OpenBSD for small businesses.
Plain ol' OpenBSD for small business? I guess you want to by the guy they call any time they want to make a change? I usually recommend Netscreens for regular firewalls.
Although I did just put together a WRAP embedded board running pfSense http://www.pfsense.org/ . Great investment. I used it to replace some POS DLink DSA-3200 that started crapping out on me. I can't believe I paid $500 for that piece of crap just to get some captive portal functionality when I could have had more fun (and gotten a better system!) for just over $200 in hardware and some free software. The good news is that I was able to steal the pigtails and antennas from the Dlink. I considered taking the radio but it turns out that FreeBSD doesn't support that particular chipset.
-matthew -
pfSensepfSense, now in late beta, is the solution.
It's FreeBSD 6.1+OpenBSD's pf + ALQ-Traffic-Shaper+IPSEC+PPTP + CARP + lot's more stuff all wrapped into an easy to understand interface.
Forget about all the other firewall "GUIs" (or lame attempts at GUIs) you've seen before, especially for the unreadable, ever-changing Linux-firewall engines.
pfSense has the performance, the feature-set, the reliability and the usability to be a real Checkpoint- and Netscreen-killer.One quote from the mailing-list says it all: "I tested all the firewalls and GUIs that are available on freshmeat - and pfSense was the only one that didn't suck".
-
pfSenseCheck out http://pfsense.org/. FreeBSD 6.x based, uses pf packet filter, supports multiple VPN protocols, runs on embedded hardware as well.
Running it now on Soekris Net-4801 device http://soekris.com/. Sweet. Smooth.
-
Re:m0n0wall
Try pfsense instead. Derived from m0n0wall, but much superior already. Also with a better firewall and failover
...