The pfSense Store

Author Topic: Packages wishlist?  (Read 276558 times)

0 Members and 1 Guest are viewing this topic.

Offline msanangelo

  • Newbie
  • *
  • Posts: 4
  • Karma: +1/-0
    • View Profile
Re: Packages wishlist?
« Reply #600 on: May 27, 2017, 10:17:39 pm »
Would really love an implementation of either of the following

- Freenas
- Bacula Server
- Simple FTP server for file storage
- Samba (with UI)

Most of the above are already available in some adhoc way on pfsense (except bacula server and Freenas) , but really appreciate a UI based installation and management.

thanks

I second this. A FTP Server and Samba in particular. If a store bought consumer router can do it, why not pfsense? Surely it can do it better, more secure, and faster. :)

Offline jahonix

  • Hero Member
  • *****
  • Posts: 2498
  • Karma: +150/-16
  • volunteer since 2006
    • View Profile
Re: Packages wishlist?
« Reply #601 on: May 28, 2017, 06:26:31 pm »
If a store bought consumer router can do it, why not pfsense?
Maybe because pfSense is a more serious contender in the firewall business and not one of the flaky consumer routers you better throw as far as your aching back lets you?
Chris

The issue with IPv6 jokes is that almost no one understands them and no one is using them yet.

Offline BBcan177

  • Hero Member
  • *****
  • Posts: 2601
  • Karma: +809/-5
    • View Profile
    • Click for Support
Re: Packages wishlist?
« Reply #602 on: May 28, 2017, 06:33:16 pm »
If a store bought consumer router can do it, why not pfsense?
Maybe because pfSense is a more serious contender in the firewall business and not one of the flaky consumer routers you better throw as far as your aching back lets you?

http://thehackernews.com/2017/05/samba-rce-exploit.html
https://lists.samba.org/archive/samba-announce/2017/000406.html
https://www.shodan.io/report/FoqqpNmw
"Experience is something you don't get until just after you need it."

 | http://pfblockerng.com | Twitter @BBcan177  | #pfBlockerNG |

Offline msanangelo

  • Newbie
  • *
  • Posts: 4
  • Karma: +1/-0
    • View Profile
Re: Packages wishlist?
« Reply #603 on: June 01, 2017, 06:50:56 pm »
If a store bought consumer router can do it, why not pfsense?
Maybe because pfSense is a more serious contender in the firewall business and not one of the flaky consumer routers you better throw as far as your aching back lets you?

Really? it's been a stellar firewall so far. it will more than happily block things but I have to fight it to allow things. can't even forward port 80 that worked fine on the tp-link it replaced and also worked on a VM behind the main pfsense router. the data usage stats are practically useless without an added package. So far, ddwrt worked better and wasn't so annoying. I might enjoy pfsense more if it wasn't so featureless. All I'm asking is a couple programs to make it a bit more useful on the LAN side. Also, is it too much to ask for some critical software patches around here? I've got 4 vulnerable packages in 2.3.3 and my only hope is to wait for 2.4. whenever that'll be released.  >.>

http://thehackernews.com/2017/05/samba-rce-exploit.html
https://lists.samba.org/archive/samba-announce/2017/000406.html
https://www.shodan.io/report/FoqqpNmw

I'm aware of that. I'm not dumb enough to put samba or ftp on the wan. I just want it for the lan.

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 13406
  • Karma: +591/-7
    • View Profile
Re: Packages wishlist?
« Reply #604 on: June 01, 2017, 07:07:37 pm »
is it too much to ask for some critical software patches around here?

If you need the feature and know how to configure it under console/config files, you can enable freebsd repo and install the packages you need.

Also, pfSense has a great GUI framework that you can use to create your own packages with xml files and php script to check selected options and create config files.

What packages from 2.3.3 are vulnerable?

Offline dennypage

  • Hero Member
  • *****
  • Posts: 715
  • Karma: +136/-0
    • View Profile
Re: Packages wishlist?
« Reply #605 on: June 01, 2017, 09:36:36 pm »
Also, is it too much to ask for some critical software patches around here? I've got 4 vulnerable packages in 2.3.3 and my only hope is to wait for 2.4.

What packages? And is there a reason that you haven't installed the 2.3.4 update?

Offline gerby123

  • Newbie
  • *
  • Posts: 20
  • Karma: +0/-0
    • View Profile
Re: Packages wishlist?
« Reply #606 on: June 05, 2017, 11:19:12 am »
Given that the freeradius2 port is expiring the end of June 2017 (this month) I'd be interested in seeing freeradius3 make it in to PFSense
https://www.freshports.org/net/freeradius2
https://www.freshports.org/net/freeradius3

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 21486
  • Karma: +1456/-26
    • View Profile
Re: Packages wishlist?
« Reply #607 on: June 05, 2017, 11:35:25 am »
Given that the freeradius2 port is expiring the end of June 2017 (this month) I'd be interested in seeing freeradius3 make it in to PFSense
https://www.freshports.org/net/freeradius2
https://www.freshports.org/net/freeradius3

That's been on my to-do list for a while. It's just a lot of work, having to go through and rearrange everything to the 3.x directory layout and changes in the config.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline gerby123

  • Newbie
  • *
  • Posts: 20
  • Karma: +0/-0
    • View Profile
Re: Packages wishlist?
« Reply #608 on: June 05, 2017, 11:57:40 am »
I have no experience writing PFSense packages but I'd be willing to contribute.

Given that the freeradius2 port is expiring the end of June 2017 (this month) I'd be interested in seeing freeradius3 make it in to PFSense
https://www.freshports.org/net/freeradius2
https://www.freshports.org/net/freeradius3

That's been on my to-do list for a while. It's just a lot of work, having to go through and rearrange everything to the 3.x directory layout and changes in the config.

Offline kroem

  • Newbie
  • *
  • Posts: 21
  • Karma: +0/-0
    • View Profile
Re: Packages wishlist?
« Reply #609 on: June 08, 2017, 06:09:57 am »
Virtual Box
No.
This is your firewall, not a hypervisor.
However, you can install a virtual pfSense on a hypervisor.
...and ASR's, NCS's, PTX's etc are not routers? :)

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 21486
  • Karma: +1456/-26
    • View Profile
Re: Packages wishlist?
« Reply #610 on: June 09, 2017, 09:46:18 am »
I have no experience writing PFSense packages but I'd be willing to contribute.

Given that the freeradius2 port is expiring the end of June 2017 (this month) I'd be interested in seeing freeradius3 make it in to PFSense
https://www.freshports.org/net/freeradius2
https://www.freshports.org/net/freeradius3

That's been on my to-do list for a while. It's just a lot of work, having to go through and rearrange everything to the 3.x directory layout and changes in the config.

FreeRADIUS 3 package is available on 2.4 snapshots for testing now, try it out and post feedback here: https://forum.pfsense.org/index.php?topic=131883.0
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline rcfa

  • Hero Member
  • *****
  • Posts: 731
  • Karma: +4/-0
    • View Profile
Re: Packages wishlist?
« Reply #611 on: June 11, 2017, 12:00:30 pm »
Virtual Box
No.
This is your firewall, not a hypervisor.
However, you can install a virtual pfSense on a hypervisor.

Well, this reminds me about the old joke about a catholic and a protestant priest: The former starts to smoke his pipe while reading the prayerbook, when the latter interrupts him and asks: "Excuse me, I don't want to be nosy, but I asked my bishop if it's OK to smoke while praying, and he answered me, I should not be distracted from paying through smoking. What's the catholic's stance on this matter?"
To which the catholic priest answers: "Very interesting! See, I asked my bishop if it's OK to pray while smoking, and he answered, it's always OK to pray."

So, of course, a firewall isn't a hypervisor. But assume you have a server box at a colocation provider, you pay per rack space. So, you can either just run the server protected only by whatever mediocre protection the host OS allows for, or you run pfSense and run the server in VirtualBox within. So, you see, this is all a matter of perspective.

Having a hypervisor box, that runs both pfSense and the server OS is theoretically possible, but much harder to administer, and it requires rather expensive, bare-metal hypervisor software, while pfSense community edition and VirtualBox are both available free for people running small services on a limited budget.

In my case, I have somewhere a pfSense unit at a colo provider, to allow me some specialized VPN type applications. The system is, in terms of CPU power, underutilized, because it's rather low traffic. With the coming requirements for pfSense, I'll have to upgrade to an even more powerful CPU. Needless to say, running a web server or some other small services on the same box would not be undesirable, given that I already pay for the rackspace. vhost has gone the way of the dodo, so VirtualBox would get a lot more utility out of the whole thing, without in any significant way affecting security negatively.

pfSense is useful for a whole lot more than just a plain vanilla firewall; if it's just the latter I'd need, I could use a much simpler system...

Offline Perun

  • Newbie
  • *
  • Posts: 10
  • Karma: +0/-1
    • View Profile
Re: Packages wishlist?
« Reply #612 on: June 15, 2017, 03:01:53 am »
Hi

it would be nice to have:

- bacula client
- icinga2 client (yes I know there is nrpe)

Greetz

Offline mf72

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Re: Packages wishlist?
« Reply #613 on: August 07, 2017, 04:30:10 am »
Hi all,

it would be great to get Ufdbguard as a package for Pfsense.
Is there a way I can contribute / facilate with that request?

Regards

Offline chidgear

  • Jr. Member
  • **
  • Posts: 57
  • Karma: +8/-0
    • View Profile
Re: Packages wishlist?
« Reply #614 on: August 24, 2017, 03:19:45 pm »
Hi!

I'd Love to have the Ocsinventory-Unix-Agent package available, so I could install it and keep my firewall inventoried with the rest of my computers and servers.