Posts Tagged ‘pfsense’

Upcoming Book: The Definitive Guide to pfSense

September 9th, 2009

If you use pfSense as much as I do you may be interested and perhaps exited to find out that pfSense is getting it’s own book.

From the Reed Media website

Authored by pfSense developer Chris Buechler and pfSense consultant Jim Pingle, The Definitive Guide to pfSense covers installation and basic configuration through advanced networking and firewalling of the popular open source firewall and router distribution.

This book is designed to be a friendly step-by-step guide to common networking and security tasks, plus a thorough reference of pfSense’s capabilities.

This is great new since some people are allergic to wikis or can’t stand reading from the monitor for hours at a time. I am looking forward to reading the book and I might even do a review once it comes out.

For more information visit http://www.reedmedia.net

5 reasons to consider pfSense

August 10th, 2009

If you were expecting a detailed explanation of why I use pfSense ten look elsewhere. This is a short list of why I use pfSense.

Rule from the browser

pfSense requires no previous knowledge of BSD. If you can use a web browser and have knowledge networking then you should have no trouble using it. I still love Cisco and the command line.

You can choose where to install

Vendors make money by selling hardware and software and they usually cripple either one to force you to upgrade to next line of products. With pfSense you get none of that, you can choose to use embedded, desktop, or server hardware for your installation.

Use it as an appliance

You can get more out of pfSense than just a firewall/router. You can turn pfSense in to a VPN, sniffer, DNS, DHCP, and even a VoIP appliance.

Packages, packages, and more packages

Who said you have to settle with what’s included with the click of a mouse you can install over 50 different packages and expand the capabilities of pfSense.

Oh, and this stuff too

You should check the pfSense web site for a complete list of all the features supported by pfSense.

Hardware options for pfSense

June 26th, 2009

If you are thinking of running pfSense at home then you might interested in knowing about low power and low cost hardware platforms. This might be a better alternative to running a noisy and not so efficient older PC. This post is not about which one is better, but only to inform.

After searching online I found two capable and affordable solutions. One is made by PC Engines and the second one by Intel.

Hardware

ALIX2D3

  • AMD Geode LX800
  • 256MB DDR DRAM
  • 3 Onboard NICs 10/100
  • 1 miniPCI
  • USB
  • Fanless
  • Cost $116

What I like ?
Small form factor and fanless makes for a winning combination. Plenty of NICs. Bundle with pfSense and you have a winning combination.

What I don’t like ?
Some operating systems are hassle to install, not really a con.

alix

Intel D945GCLF

  • Intel Atom processor 230
  • 1×240pin slot (2GB max memory supported)
  • 1xPATA
  • 2xSATA
  • 1 Onboard NIC 10/100
  • Mini ITX
  • Cost $64.99

What I like ?
Cheap and plenty of processing power for pfSense. Expandable thanks to SATA and PATA.

What I don’t like ?
Limited number of PCI slots, only one.
intel atom

You still need to provide a PSU, storage and case or enclosure to have a fully functioning system.

5 open source projects you should consider

June 6th, 2009

pfSense

pfSense

pfSense is a powerful and versatile open source firewall/router based on FreeBSD that can be used on existing hardware. pfSense includes most of the features found on commercial and proprietary solutions. Equally important is the ability to control and administer pfSense from a web interface. The system can be further expanded by using the included package system. pfSense also makes for a great appliance platform, only limited by the ingenuity of the administrator.
Category : Router / Firewall / VPN

Vyatta

Vyatta

Vyatta is marketed as a replacement for some Cisco routers. Vyatta can function as a router,firewall, and VPN. The main advantages for using Vyatta is that it runs on commodity hardware thus removing the hardware limitations imposed by some vendors. Vyatta offers various types of paid subscriptions and hardware platforms via their web site.
Category : Router / Firewall / VPN

Openfiler

Openfiler

Openfiler is an operating system design to function as a Storage Area Network or Network Attached Storage. Openfiler supports a wide range of network protocols. Openfiler is a great way to introduce iSCSI to the network by using existing hardware without the high cost of an appliance. Administration is done from a web interface. Paid support and subscriptions are available from the Openfiler web site.
Category : Network Storage

Clonezilla

Clonezilla

Clonezilla is a disk cloning utility for single system cloning and network based cloning of systems. Open source and free of charge makes Clonezilla a great alternative to Norton Ghost. Network protocols supported by Clonezilla are SSH, Samba, and Network File System (NFS).
Category : Disaster recovery

Darik’s Boot and Nuke (“DBAN”)

DBAN

DBAN is an open source project intended to erase all the data on a hard drive by overwriting it with random data in a safe and secure manner. DBAN makes hard drive recycling a safe option, meaning companies and individuals no longer have to worry about sensitive data falling in the hands of a third party. DBAN requires minimal user input reducing the chance for errors. Paid support is available in the form of EBAN. EBAN is the commercially supported version of DBAN and includes support for network booting and reporting.
Category : Data destruction