pfSense 1.0.1 review
DownloadpfSense is a m0n0wall derived operating system platform with radically different goals such as using Packet Filter, FreeBSD 6.X (or D
|
|
pfSense is a m0n0wall derived operating system platform with radically different goals such as using Packet Filter, FreeBSD 6.X (or DragonFly BSD when ALTQ and CARP is finished) ALTQ for excellent packet queueing and finally an integrated package management system for extending the environment with new features.
pfSense is free software released under the BSD license.
Here are some key features of "pfSense":
FreeBSD 6 - CURRENT with ALTQ + IF_BRIDGE Patch (bridging)
Incoming load balancing pools
Reverse captive portal on WAN feature
PPPoE Server
Themes
New system->afterfilterchangeshellcmd xml tag which is executed on the system after each filter change (or other networking related changes)
All of the GREAT m0n0wall features, some improved
FreeBSD 6 - Includes many expanded networking cards
setup wizard using xml -> web gui toolkit
package xml -> web gui toolkit. RAPIDLY create packages and GUI's
rebootless changes of settings
multiple WAN Support
outgoing load balancing pool
pf (openbsd's packet filter)
CARP - for failover and clustersyncing (rules, trafficshaper, nat, IPSEC SAs...)
failovercapable DHCP-Server with advanced settings (specify gateway, DNS, WINS)
advanced support for wireless devices (including WEP, WPA, HostAP-mode, hardware-encryption if supported by driver, mac-filtering, hide SSID, ...) with by freeBSD6 supported wirless devices (atheros recommended for full functionality)
gif ipsec interface option for expanded routing
IPSEC-Tunnels with dynamic andpoints
Systemstatus with realtimegraphs including SWAP usage monitor
ALTQ traffic shaping with integrated magic shaper wizard
Queuegraphs for Trafficshaper
Edit file option
Execute command now in menu
SSH Support
Console support on COM1
FTP-Proxy
enhanced ALIAS-system
enhanced configuration-system featuring a configuration history and partial config down-/uploads
a lot of small "helpers" that make admins life easier
Packages!
ifdepd - building interface-dependencies
ifstated - connection-checking
pfflowd - converting PF-status-massages to Cisco NetFlow-Datagrams
PFStat - Graphing
NTOP - Enhanced network history data
STunnel - wrap standard ports with SSL
Pure-FTPD - Host FTP files
Squid Transparent Proxy
arpwatch - watch ethernet/ip-adress-pairings
assp - Anti-Spam-Proxy
doorman - portknocking to temporarily open ports
freeradius - Radiusserver
mtr - enhanced traceroute
nmap - networlscanner for security auditing
siproxd - proxy/masquerading for SIP-protocol
spamd - fake SMTP-Server as Spam-Tarpit
iperf - bandwidth-measuring
netio - bandwidth-measuring
pfSense 1.0.1 keywords