Slashdot Mirror

← Back to Stories (view on slashdot.org)

pfSense 1.0 Firewall Released

Posted by ryuzaki0 on from the protected-by-daemons dept.

Chris Daniel writes, "pfSense, a FreeBSD-based firewall LiveCD distribution, has reached its official 1.0 release. Based on m0n0wall, pfSense offers firewalling, traffic shaping, VPNs, load balancing, and a nice package-management system for adding extra functionality, among many other useful built-in features. The project has been ongoing for two years, and pfSense has already been in production use in a number of locations well before the 1.0 release." Find a download mirror here.

5 of 104 comments (clear)

  1. CURRENT? by scott_karana · · Score: 4, Interesting

    Why Freebsd 6.1-CURRENT, I wonder? STABLE is bleeding edge enough for most, and I quite imagine that they could just use base 6.1.

  2. SmoothWall by mahesh_gharat · · Score: 4, Informative

    Have a look at SmoothWall at http://www.smoothwall.org/
    It's based on GNU/Linux and provides at par or better features and it is there for almost 4-5 years now.

    1. Re:SmoothWall by MattBurke · · Score: 4, Informative

      Only if you discount firewalling as a feature.

      The code behind iptables is disgusting. It doesn't even do a proper job of stateful tracking. Read and compare the source code if you don't believe me - There are many things which linux does in about 10 lines of code but run into hundreds or thousands of lines in the pf source because pf does the job properly

  3. SmoothWall?? IPCop! by PurPaBOO · · Score: 5, Informative

    You only get the better features in Smoothwall if you pay for the corporate version.

    You could try IPCop instead, a fork of smoothwall.

    I use IPCop instead of pfsense for some installations as it has support for the Bewan PCI ADSL modem.

    --
    If it weren't for the rocks in its bed, the stream would have no songs.
  4. Uuh, no thanks, not convinced by udippel · · Score: 4, Interesting
    I opened the links, since I was keen on finding out (even using) the thingy.

    But, no. The minimal ("Do not even attempt to use it on anything less !") hardware is beyond my means (and beyond my expectation, even for traffic shaping and stuff):
    All platforms: 128 megabytes of ram
    Embedded: 128 megabyte compact flash card
    Full installation: 2gb hard drive or larger
    LiveCD: USB Keychain for configuration storage

    That's simply a tiny little bit too much. I surely get the similar setting with OpenBSD on boxes with lower specs.

    Okay, let's get it going. I love compact flash. Alas: "Larger flash sizes can be used but pfSense will not use the space over the 128 MB limit".
    "The Snort package requires a LOT of memory, only install this when the sytem has 1 GB ram or over."

    Any need to go further ? To me, at least, not. I rather move on ... .