Country Block Block countries Firewall http://forum.pfsense.org/index.php/topic,25732.0.html http://pfsense.org/packages/config/countryblock/countryblock.xml http://files.pfsense.org/packages/amd64/8/All/ 0.1.3 Beta 1.2.2 tom@tomschaefer.org countryblock.xml IP-Blocklist IP-Blocklist is like PeerGuardian2. IP lists are used to add deny/allow rules to the firewall for in & out traffic. Firewall http://forum.pfsense.org/index.php/topic,24769.0.html http://pfsense.org/packages/config/ipblocklist/ipblocklist.xml http://files.pfsense.org/packages/amd64/8/All/ 0.2.1 Beta 1.2.2 tom@tomschaefer.org ipblocklist.xml Varnish Varnish is a state-of-the-art, high-performance HTTP accelerator. It uses the advanced features in FreeBSD 6/7/8 to achieve its high performance. http://varnish-cache.org http://doc.pfsense.org/index.php/Varnish_package Services 0.8 ALPHA 2.0 http://www.pfsense.com/packages/config/varnish64/varnish_backends.xml varnish_backends.xml http://files.pfsense.org/packages/amd64/8/All/ varnish-2.1.tbz gcc-4.2.5.20090325_3.tbz /usr/ports/www/varnish /usr/ports/lang/gcc42 Notes Track things you want to note for this system. Status http://www.pfsense.com/packages/config/notes/notes.xml http://files.pfsense.org/packages/amd64/8/All/ 0.2.4 Alpha 1.2.1 markjcrane@gmail.com notes.xml PHPService PHP run as a service it can do anything PHP can do including but not limited to monitoring files, CPU, RAM, and send alerts to the syslog. Services http://doc.pfsense.org/index.php/PHPService http://www.pfsense.com/packages/config/phpservice/phpservice.xml http://files.pfsense.org/packages/amd64/8/All/ 0.4.1 Beta 1.2.1 markjcrane@gmail.com phpservice.xml Backup Tool to Backup and Restore files and directories. System http://www.pfsense.com/packages/config/backup/backup.xml http://files.pfsense.org/packages/amd64/8/All/ 0.1.5 Beta 1.2 markjcrane@gmail.com backup.xml Cron The cron utility is used to manage commands on a schedule. Services http://www.pfsense.com/packages/config/cron/cron.xml http://files.pfsense.org/packages/amd64/8/All/ 0.1.5 Beta 1.2 markjcrane@gmail.com cron.xml AutoConfigBackup portal@bsdperimeter.com Automatically backs up your pfSense configuration. All contents are encrypted on the server. Requires pfSense Premium Support Portal Subscription from https://portal.pfsense.org https://portal.pfsense.org Services 1.18 Stable 1.2 http://doc.pfsense.org/index.php/AutoConfigBackup http://www.pfsense.com/packages/config/autoconfigbackup/autoconfigbackup.xml autoconfigbackup.xml RRD Summary RRD Summary Page, which will give a total amount of traffic passed In/Out during this and the previous month. System 1.1 Beta jimp@pfsense.org 1.2.3 http://www.pfsense.org/packages/config/rrd-summary/rrd-summary.xml rrd-summary.xml OpenVPN Client Export Utility Allows a pre-configured OpenVPN Windows Client or or Mac OSX's Viscosity configuration bundle to be exported directly from pfSense. Security http://files.pfsense.org/packages/amd64/8/All/ p7zip-9.04.tbz zip-3.0.tbz /usr/ports/archivers/p7zip /usr/ports/archivers/zip 0.3 BETA 2.0 http://www.pfsense.com/packages/config/openvpn-client-export/openvpn-client-export.xml openvpn-client-export.xml squid High performance web proxy cache. http://www.squid-cache.org/ Network 2.7.9_1 Stable 2 fernando@netfilter.com.br seth.mos@xs4all.nl mfuchs77@googlemail.com jimp@pfsense.org http://files.pfsense.org/packages/amd64/8/All/ squid-2.7.9.tbz squid_radius_auth-1.10.tbz libwww-5.4.0_4.tbz /usr/ports/www/squid /usr/ports/www/squid_radius_auth /usr/ports/www/libwww http://www.pfsense.org/packages/config/squid/squid.xml squid.xml squidGuard High perfomance web proxy URL filter. Requires proxy Squid package. http://www.squidGuard.org/ dv_serg@mail.ru Network Management 1.4-2 Beta 1.1 http://files.pfsense.org/packages/amd64/8/All/ squidGuard-1.4_2.tbz db41-4.1.25_4.tbz db3-3.3.11_3,1.tbz cyrus-sasl-2.1.23.tbz /usr/ports/www/squidguard /usr/ports/databases/db41 /usr/ports/databases/db3 /usr/ports/security/cyrus-sasl2 http://www.pfsense.org/packages/config/squidGuard/squidguard.xml squidguard.xml Lightsquid High perfomance web proxy report. Requires squid HTTP proxy. http://lightsquid.sf.net/ Network Report 1.8.0 dv_serg@mail.ru http://files.pfsense.org/packages/amd64/8/All/ lightsquid-1.8_2.tbz perl-5.10.1.tbz /usr/ports/www/lightsquid /usr/ports/lang/perl5.10 Beta 2 http://www.pfsense.com/packages/config/lightsquid/lightsquid.xml lightsquid.xml true HAVP antivirus http://www.server-side.de/ Antivirus: HAVP (HTTP Antivirus Proxy) is a proxy with a ClamAV anti-virus scanner. The main aims are continuous, non-blocking downloads and smooth scanning of dynamic and password protected HTTP traffic. Havp antivirus proxy has a parent and transparent proxy mode. It can be used with squid or standalone. And File Scanner for local files. Network Management http://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-8.1-release/All/ havp-0.91_1.tbz /usr/ports/www/havp 0.91 BETA 1.2.2 http://www.pfsense.com/packages/config/havp/havp.xml havp.xml dv_serg@mail.ru Please check the HAVP settings. Dashboard Widget: HAVP Dashboard widget for HAVP alerts. System http://www.pfsense.com/packages/config/widget-havp/widget-havp.xml 0.1 BETA 1.2 widget-havp.xml Dashboard Widget: Antivirus Status Dashboard widget for HAVP status. System http://www.pfsense.com/packages/config/widget-antivirus/widget-antivirus.xml 0.1 BETA 1.2 widget-havp.xml siproxd http://siproxd.sourceforge.net/ Proxy for handling NAT of multiple SIP devices to a single public IP. Services http://www.pfsense.com/packages/config/siproxd.xml http://files.pfsense.org/packages/amd64/8/All/ siproxd-0.7.2.tbz http://doc.pfsense.org/index.php/Siproxd_package /usr/ports/net/siproxd 0.7.2,1 Beta 1.2.1 siproxd.xml OpenBGPD OpenBGPD is a FREE implementation of the Border Gateway Protocol, Version 4. It allows ordinary machines to be used as routers exchanging routes with other systems speaking the BGP protocol. NET http://www.pfsense.com/packages/config/openbgpd/openbgpd.xml 0.5.2 STABLE http://doc.pfsense.org/index.php/OpenBGPD_package 1.3 openbgpd.xml http://files.pfsense.org/packages/amd64/8/All/ openbgpd-4.7.20100410.tbz /usr/ports/net/openbgpd vnstat2 http://humdi.net/vnstat/ A console-based network traffic monitor + vnstat PHP frontend http://forum.pfsense.org/index.php/topic,14179.0.html Network Management ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-8.1-release/All/ vnstat-1.10_2.tbz /usr/ports/net/vnstat 1.10_2 test 2.0 crazypark2@yahoo.dk http://www.pfsense.com/packages/config/vnstat2/vnstat2.xml vnstat2.xml dns-server pfSense version of TinyDNS which features failover host support http://cr.yp.to/djbdns.html Services 1.0.6.6 Beta http://doc.pfsense.org/index.php/Tinydns_package 2.0 http://www.pfsense.com/packages/config/tinydns/tinydns.xml tinydns.xml http://files.pfsense.org/packages/amd64/8/All/ ucspi-tcp-0.88_2.tbz daemontools-0.76_15.tbz djbdns-1.05_13.tbz /usr/ports/sysutils/ucspi-tcp /usr/ports/sysutils/daemontools /usr/ports/dns/djbdns arping Broadcasts a who-has ARP packet on the network and prints answers. http://www.habets.pp.se/synscan/programs.php?prog=arping Services 2.08 Beta http://doc.pfsense.org/index.php/Arping_package 1.0.1 http://www.pfsense.com/packages/config/arping/arping.xml arping.xml http://files.pfsense.org/packages/amd64/8/All/ arping-2.08.tbz /usr/ports/net/arping nmap billm@pfsense.org NMap is a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), version detection (determine what application/service is runing on a port), and TCP/IP fingerprinting (remote host OS or device identification). It also offers flexible target and port specification, decoy/stealth scanning, SunRPC scanning, and more. Most Unix and Windows platforms are supported in both GUI and command line modes. Several popular handheld devices are also supported, including the Sharp Zaurus and the iPAQ. Security http://files.pfsense.org/packages/amd64/8/All/ nmap-5.00.tbz /usr/ports/security/nmap http://www.pfsense.com/packages/config/nmap/nmap.xml 5.00 Stable http://doc.pfsense.org/index.php/Nmap_package 1.2.1 nmap.xml imspector IMSpector is an Instant Messenger transparent proxy with logging capabilities. Currently it supports MSN, AIM, ICQ, Yahoo and IRC to different degrees. http://www.imspector.org/ Network Management billm@pfsense.org 0.8-9 1.2.1 BETA http://doc.pfsense.org/index.php/IMSpector_package http://www.pfsense.com/packages/config/imspector/imspector.xml imspector.xml http://files.pfsense.org/packages/amd64/8/All/ imspector-0.8.tbz libiconv-1.11_1.tbz mysql-client-5.0.77.tbz sqlite3-3.6.10.tbz /usr/ports/net-im/imspector /usr/ports/converters/libiconv /usr/ports/databases/mysql50-client /usr/ports/databases/sqlite3 nut Network UPS Tools http://www.networkupstools.org/ Network Management 2.2.2_3a BETA 2.0 rswagoner@gmail.com http://www.pfsense.com/packages/config/nut/nut.xml nut.xml http://files.pfsense.org/packages/amd64/8/All/ nut-2.2.2_3.tbz perl-5.10.1.tbz /usr/ports/lang/perl5.10 http://doc.pfsense.org/index.php/Nut_package darkstat http://dmr.ath.cx/net/darkstat/ darkstat is a network statistics gatherer. It's a packet sniffer that runs as a background process on a cable/DSL router, gathers all sorts of statistics about network usage, and serves them over HTTP. Network Management http://files.pfsense.org/packages/amd64/8/All/ darkstat-3.0.712.tbz 3.0.712 Stable 1.2.1 sullrich+pfsp@gmail.com http://www.pfsense.com/packages/config/darkstat/darkstat.xml darkstat.xml /usr/ports/net-mgmt/darkstat pfflowd http://www.mindrot.org/pfflowd.html pfflowd converts OpenBSD PF status messages (sent via the pfsync interface) to Cisco NetFlow datagrams. These datagrams may be sent (via UDP) to a host of one's choice. Utilising the OpenBSD stateful packet filter infrastructure means that flow tracking is very fast and accurate. Network Management http://www.pfsense.com/packages/config/pfflowd.xml http://files.pfsense.org/packages/amd64/8/All/ pfflowd-0.7.tbz 0.7 Stable 1.2.1 pfflowd.xml nick@buraglio.com /usr/ports/net/pfflowd widentd RFC1413 auth/identd daemon with fixed fake reply http://www.webweaving.org/widentd Services http://files.pfsense.org/packages/amd64/8/All/ widentd-1.03_1.tbz 1.03_1 Stable http://doc.pfsense.org/index.php/Widentd_package 1.2.1 http://www.pfsense.com/packages/config/widentd.xml widentd.xml /usr/ports/net/widentd freeradius http://www.freeradius.org/ A free implementation of the RADIUS protocol. System 1.1.8 BROKEN 2.0 none http://files.pfsense.org/packages/amd64/8/All/ freeradius-1.1.8.tbz libltdl-2.2.6b.tbz /usr/ports/net/freeradius /usr/ports/devel/libltdl22 http://www.pfsense.org/packages/config/freeradius.xml freeradius.xml bandwidthd http://bandwidthd.sourceforge.net/ BandwidthD tracks usage of TCP/IP network subnets and builds html files with graphs to display utilization. Charts are built by individual IPs, and by default display utilization over 2 day, 8 day, 40 day, and 400 day periods. Furthermore, each ip address's utilization can be logged out at intervals of 3.3 minutes, 10 minutes, 1 hour or 12 hours in cdf format, or to a backend database server. HTTP, TCP, UDP, ICMP, VPN, and P2P traffic are color coded. System 2.0.1_4 BETA 1.2.1 http://files.pfsense.org/packages/amd64/8/All/ bandwidthd-2.0.1_4.tbz http://www.pfsense.org/packages/config/bandwidthd/bandwidthd.xml bandwidthd.xml /usr/ports/net-mgmt/bandwidthd iperf http://dast.nlanr.net/Projects/Iperf/ Iperf is a tool for testing network throughput, loss, and jitter. Network Management http://www.pfsense.com/packages/config/iperf.xml http://files.pfsense.org/packages/amd64/8/All/ iperf-2.0.4.tbz /usr/ports/benchmarks/iperf 2.0.4 Beta http://doc.pfsense.org/index.php/Iperf_package 1.2.1 iperf.xml netio http://freshmeat.net/projects/netio/ This is a network benchmark for DOS, OS/2 2.x, Windows NT/2000 and Unix. It measures the net throughput of a network via NetBIOS and/or TCP/IP protocols (Unix and DOS only support TCP/IP) using various different packet sizes. Network Management http://www.pfsense.com/packages/config/netio.xml http://files.pfsense.org/packages/amd64/8/All/ netio-1.26.tbz /usr/ports/benchmarks/netio 1.26 2.0 ALPHA netio.xml mtr-nox11 billm@pfsense.org Enhanced traceroute replacement http://www.bitwizard.nl/mtr/ Network Management http://files.pfsense.org/packages/amd64/8/All/ mtr-nox11-0.80.tbz /usr/ports/net/mtr 0.80 Stable 2.0 http://www.pfsense.com/packages/config/mtr-nox11.xml mtr-nox11.xml LCDproc LCD display driver http://www.lcdproc.org/ Utility lcdproc-0.5.3 BETA 1.2.1 seth.mos@xs4all.nl http://files.pfsense.org/packages/amd64/8/All/ lcdproc-0.5.3.tbz http://www.pfsense.org/packages/config/lcdproc/lcdproc.xml lcdproc.xml arpwatch Arpwatch monitors ethernet/ip address pairings. It also logs certain changes to syslog. http://www-nrg.ee.lbl.gov/ Security http://files.pfsense.org/packages/amd64/8/All/ arpwatch-2.1.a15_5.tbz /usr/ports/net-mgmt/arpwatch 2.1.a15_5 ALPHA 2.0 http://www.pfsense.com/packages/config/arpwatch.xml arpwatch.xml arpwatch arpwatch.log portsentry The Sentry tools provide host-level security services for the Unix platform. PortSentry protect against portscans, and detect suspicious login activity on a continuous basis. http://sourceforge.net/projects/sentrytools/ Services 0.1 BETA 2.0 http://www.pfsense.com/packages/config/portsentry/portsentry.xml portsentry.xml http://files.pfsense.org/packages/amd64/8/All/ portsentry-1.2.tbz /usr/ports/security/portsentry spamd http://www.openbsd.org/spamd/ Tarpits like spamd are fake SMTP servers, which accept connections but don't deliver mail. Instead, they keep the connections open and reply very slowly. If the peer is patient enough to actually complete the SMTP dialogue (which will take ten minutes or more), the tarpit returns a 'temporary error' code (4xx), which indicates that the mail could not be delivered successfully and that the sender should keep the mail in their queue and retry again later. Services http://www.pfsense.com/packages/config/spamd/spamd.xml http://files.pfsense.org/packages/amd64/8/All/ spamd-4.5.0_4.tbz /usr/ports/mail/spamd 4.5.0_4 Beta 1.2.1 spamd.xml spamd spamd.log stunnel http://www.stunnel.org/ An SSL encryption wrapper between remote client and local or remote servers. Network Management http://files.pfsense.org/packages/8/All/ stunnel-4.25.tbz 4.30.2 Stable http://doc.pfsense.org/index.php/Stunnel_package 1.2.1 http://www.pfsense.com/packages/config/stunnel.xml stunnel.xml /usr/ports/security/stunnel