PerUserBW Adds a per user bandwidth distribution option. Requires 1.2 or newer. NET http://www.pfsense.com/packages/config/per-user-bandwidth-distribution.xml 0.1 ALPHA 2.0 per-user-bandwidth-distribution.xml Lightsquid High perfomance web proxy Report. Required squid. http://lightsquid.sf.net/ Network 1.7.1 dv_serg@mail.ru http://ftp.lv.freebsd.org/pub/FreeBSD/ports/packages/All/ lightsquid-1.7.1.tbz Beta1 1.2 http://www.pfsense.com/packages/config/lightsquid/lightsquid.xml lightsquid.xml Dashboard Adds pfSense dashboard that will be included with 1.3. This requires 1.2-BETA-2 or newer. System http://www.pfsense.com/packages/config/dashboard/dashboard.xml 0.6 BETA 1.2-BETA-2 dashboard.xml phpSysInfo http://phpsysinfo.sourceforge.net/ PHPSysInfo is a customizable PHP Script that parses /proc, and formats information nicely. It will display information about system facts like Uptime, CPU, Memory, PCI devices, SCSI devices, IDE devices, Network adapters, Disk usage, and more. System 2.5.3 Beta 1.0 http://www.pfsense.com/packages/All mbmon-205_3.tbz http://www.pfsense.com/packages/config/phpsysinfo/phpsysinfo.xml phpsysinfo.xml dns-server pfSense version of TinyDNS which features failover host support http://cr.yp.to/djbdns.html Services 1.0 ALPHA 1.2 http://www.pfsense.com/packages/config/tinydns/tinydns.xml tinydns.xml http://www.pfsense.com/packages/All/djbdns/ ucspi-tcp-0.88_1.tbz daemontools-0.76_9.tbz djbdns-1.05_9.tbz arping Broadcasts a who-has ARP packet on the network and prints answers. VERY useful when you are trying to pick an unused IP for a net that you don't yet have routing to. Then again, if you have no idea what I'm talking about then you prolly don't need it. http://www.habets.pp.se/synscan/programs.php?prog=arping Services 2.05 ALPHA 1.0.1 http://www.pfsense.com/packages/config/arping/arping.xml arping.xml http://www.pfsense.com/packages/All/ arping-2.05.tbz frickin The Frickin PPTP Proxy allows a Point-to-Point Tunneling Protocol (PPTP) client to connect to a PPTP server through Network Address Translation. http://www.placid.tv Services 2.0-BETA2 ALPHA 1.2 http://www.pfsense.com/packages/config/frickin/frickin.xml frickin.xml bsdstats The mission of this site is to try and come up with semi-accurate numbers for both advocacy, and marketing, of the *BSD Operating Systems. http://bsdstats.hub.org/ Network 3.9 BETA 2.0 geekgod@geekgod.com http://www.pfsense.org/packages/All http://www.pfsense.org/packages/config/bsdstats/bsdstats.xml bsdstats.xml clamav The ClamAV antivirus. http://www.clamav.net/ Security 0.1 PRE-ALPHA 2.0 fernando@netfilter.com.br ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All http://www.pfsense.org/packages/config/clamav.xml clamav.xml phpmrss mRss is a C library for parsing, writing and creating RSS files or streams. http://www2.autistici.org/bakunin//libmrss/doc/ Textproc 0.13 BETA 2.0 me@daniel.stefan.haischt.name http://www.pfsense.com/packages/All/ libmrss-0.13.tbz http://www.pfsense.org/packages/config/phpmrss.xml phpmrss.xml p3scan-pf A transparent POP3-Proxy with virus-scanning- and spam-scanning-capabilities. http://www.undergroundsecurity.com/p3scan/ Security 0.1 ALPHA 2.0 fernando@netfilter.com.br http://www.pfsense.com/packages/All/ p3scan-pf-2.3.2.tbz http://www.pfsense.org/packages/config/p3scan-pf/p3scan-pf.xml p3scan-pf.xml clamsmtp SMTP virus scanner. http://memberwebs.com/nielsen/software/clamsmtp/ Security 0.1 PRE-ALPHA 2.0 fernando@netfilter.com.br http://www.pfsense.org/packages/config/clamsmtp.xml clamsmtp.xml viralator HTTP virus scanner. http://viralator.sourceforge.net/ Security 0.1 PRE-ALPHA 2.0 fernando@netfilter.com.br ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.1-release/All perl-5.8.8.tbz p5-libwww-5.805.tbz squirm-1.26.tbz http://www.pfsense.org/packages/config/viralator.xml viralator.xml nmap billm@pfsense.org NMap is a utility for network exploration or security auditing. It supports ping scanning (determine which hosts are up), many port scanning techniques (determine what services the hosts are offering), version detection (determine what application/service is runing on a port), and TCP/IP fingerprinting (remote host OS or device identification). It also offers flexible target and port specification, decoy/stealth scanning, SunRPC scanning, and more. Most Unix and Windows platforms are supported in both GUI and command line modes. Several popular handheld devices are also supported, including the Sharp Zaurus and the iPAQ. Security http://www.pfsense.com/packages/All/ nmap-4.20_1.tbz http://www.pfsense.com/packages/config/nmap/nmap.xml 4.20_1 Stable 1.0 nmap.xml snort Snort is a libpcap-based packet sniffer/logger which can be used as a lightweight network intrusion detection system. It features rules based logging and can perform content searching/matching in addition to being used to detect a variety of other attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, and much more. Security http://www.pfsense.com/packages/All/ snort-2.6.1.3_2.tbz http://www.pfsense.com/packages/config/snort/snort.xml 2.6.1.3_2 1.0 STABLE snort.xml miniupnpd Emulates Microsoft's Internet Connection Service (ICS). It implements the UPnP Internet Gateway Device specification (IGD) and allows UPnP aware clients, such as MSN Messenger to work properly from behind a NAT firewall. http://miniupnp.free.fr/ Network Management seth.mos@xs4all.nl ryan@wgnrs.dynu.com 20070521 1.0 Stable http://www.pfsense.com/packages/config/miniupnpd/miniupnpd.xml miniupnpd.xml imspector ** REQUIRES: 1.0.1-SNAPSHOT-01-22-2006 OR LATER ** IMSpector is an Instant Messenger transparent proxy with logging capabilities. Currently it supports MSN, AIM, ICQ, Yahoo and IRC to different degrees. http://www.imspector.org/ Network Management ryan@wgnrs.dynu.com 0.3 1.0 BETA http://www.pfsense.com/packages/config/imspector/imspector.xml imspector.xml http://pfsense.com/packages/All/ imspector-0.3.tbz nut Network UPS Tools http://www.networkupstools.org/ Network Management 2.0.5 BETA 1.0 ryan@wgnrs.dynu.com http://www.pfsense.com/packages/config/nut/nut.xml nut.xml ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All/ nut-2.0.5_1.tbz nut-usb-2.0.5_1.tbz diag_new_states Paul Taylors version of Diagnostics States which utilizes pftop. http://www.addressplus.net Network Management 0.2 ptaylor@addressplus.net 1.0 BETA http://www.pfsense.org/packages/config/diag_states_pt/diag_new_states.xml http://www.pfsense.com/packages/config/diag_states_pt/diag_new_states.xml freenas http://www.freenas.org/ <p> FreeNAS is a free NAS (Network-Attached Storage) server, supporting: CIFS (samba), FTP, NFS, RSYNC protocols, local user authentication, Software RAID (0,1,5) with a Full WEB configuration interface. </p> <p> Please read the <a href="http://www.pfsense.com/packages/config/freenas/doc/README.txt" target="_blank">FreeNAS README</a> before installing this package. </p> Network 0.68 ALPHA HEAD me@daniel.stefan.haischt.name http://www.pfsense.com/packages/All/ ataidle-0.9.tbz avahi+libdns-0.6.12.tbz wzdftpd-0.7.2_1.tbz e2fsprogs-1.39_1.tbz smartmontools-5.36.tbz aaccli-1.0.tbz rsync-2.6.8_2.tbz scponly-4.6_1.tbz cracklib-2.7_2.tbz samba-3.0.23,1.tbz netatalk-2.0.3_3,1.tbz pam_ldap-1.8.2.tbz expat-2.0.0_1.tbz http://www.pfsense.org/packages/config/freenas/pkg/freenas.xml freenas.xml dspam http://dspam.nuclearelephant.com/ DSPAM is a scalable and open-source content-based spam filter designed for multi-user enterprise systems. On a properly configured system, many users experience results between 99.5% - 99.95%, or one error for every 200 to 2000 messages. DSPAM supports many different MTAs and can also be deployed as a stand-alone SMTP appliance (Note: This package is still in some kind of development and only was tested on HEAD). http://www.pfsense.org/packages/config/dspam.xml dspam.xml http://www.pfsense.com/packages/All/ dspam-3.6.8-sqlite3-noldap.tbz unzoo-4.4 unzip-5.52_2 lha-1.14i_6 arc-5.21o arj-3.10.22 pkg-config-0.20_2 sqlite-3.3.6 libiconv-1.9.2_2 gettext-0.14.5_2 libgmp-4.2.1_1 curl-7.15.4 libidn-0.6.3 clamav-devel-20060703 3.6.8 PRE-ALPHA 2.0 me@daniel.stefan.haischt.name dspam dspam.log sshterm This is a package of the SSHTools SSHTerm Java Applet. SSHTools is a suite of Java SSH applications providing a Java SSH API, SSH Terminal, SSH secured VNC client, SFTP client and SSH Daemon. http://sourceforge.net/projects/sshtools/ Security 0.1 Stable 1.0 me@daniel.stefan.haischt.name http://www.pfsense.com/packages/All/ sshtools-0.2.2.tbz http://www.pfsense.org/packages/config/sshterm/sshterm.xml sshterm.xml spamassassin The SpamAssassin spam detection software. http://spamassassin.apache.org/ Security 0.1 PRE-ALPHA 2.0 fernando@netfilter.com.br ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.1-release/All p5-Mail-SpamAssassin-3.1.0_6.tbz http://www.pfsense.org/packages/config/sassassin.xml sassassin.xml darkstat http://dmr.ath.cx/net/darkstat/ darkstat is a network statistics gatherer. It's a packet sniffer that runs as a background process on a cable/DSL router, gathers all sorts of statistics about network usage, and serves them over HTTP. Network Management ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/Latest/ darkstat.tbz gettext.tbz 3.0.619 Stable 1.0 geekgod@geekgod.com http://www.pfsense.com/packages/config/darkstat/darkstat.xml darkstat.xml ntop http://www.ntop.org/ ntop is a network probe that shows network usage in a way similar to what top does for processes. In interactive mode, it displays the network status on the user's terminal. In Web mode it acts as a Web server, creating an HTML dump of the network status. It sports a NetFlow/sFlow emitter/collector, an HTTP-based client interface for creating ntop-centric monitoring applications, and RRD for persistently storing traffic statistics. Network Management http://www.pfsense.org/packages/All/ ntop-3.2_2.tbz 3.2_2 BETA 1.0 http://www.pfsense.com/packages/config/ntop.xml ntop.xml pfflowd http://www.mindrot.org/pfflowd.html pfflowd converts OpenBSD PF status messages (sent via the pfsync interface) to Cisco NetFlow datagrams. These datagrams may be sent (via UDP) to a host of one's choice. Utilising the OpenBSD stateful packet filter infrastructure means that flow tracking is very fast and accurate. Network Management http://www.pfsense.com/packages/config/pfflowd.xml ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All pfflowd-0.6.tbz 0.6 Stable 1.0 pfflowd.xml nick@buraglio.com widentd RFC1413 auth/identd daemon with fixed fake reply http://www.webweaving.org/widentd Services ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All widentd-1.03_1.tbz 1.03_1 ALPHA 1.0 http://www.pfsense.com/packages/config/widentd.xml widentd.xml freeradius http://www.freeradius.org/ A free implementation of the RADIUS protocol. System 1.1.2_1 BETA 1.0 fernando@netfilter.com.br ftp://ftp2.freebsd.org/pub/FreeBSD/ports/i386/packages-6.2-release/All/ freeradius-1.1.2_1.tbz libltdl-1.5.22.tbz http://www.pfsense.org/packages/config/freeradius.xml freeradius.xml bandwidthd http://bandwidthd.sourceforge.net/ BandwidthD tracks usage of TCP/IP network subnets and builds html files with graphs to display utilization. Charts are built by individual IPs, and by default display utilization over 2 day, 8 day, 40 day, and 400 day periods. Furthermore, each ip address's utilization can be logged out at intervals of 3.3 minutes, 10 minutes, 1 hour or 12 hours in cdf format, or to a backend database server. HTTP, TCP, UDP, ICMP, VPN, and P2P traffic are color coded. System 2.0.1.1 BETA 1.0 ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.2-release/All/ bandwidthd-2.0.1.tbz http://www.pfsense.org/packages/config/bandwidthd/bandwidthd.xml bandwidthd.xml stunnel http://www.stunnel.org/ The stunnel program is designed to work as an SSL encryption wrapper between remote client and local (inetd-startable) or remote servers. It can be used to add SSL functionality to commonly used inetd daemons like POP2, POP3, and IMAP servers without any changes in the program's code. It will negotiate an SSL connection using the OpenSSL or SSLeay libraries. It calls the underlying crypto libraries, allowing stunnel to support whatever cryptographic algorithms you compiled into your crypto package. Network Management http://www.pfsense.com/packages/All stunnel-4.19.tbz 4.18 Stable 1.0 http://www.pfsense.com/packages/config/stunnel.xml stunnel.xml iperf http://dast.nlanr.net/Projects/Iperf/ Iperf is a tool for measuring maximum TCP and UDP bandwidth, reminiscent of ttcp and nettest. It has been written to overcome the shortcomings of those aging tools. Iperf can also test UDP bandwidth, loss, and jitter. Network Management http://www.pfsense.com/packages/config/iperf.xml ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All iperf-2.0.2_1.tbz 2.0.2_1 ALPHA 1.0 iperf.xml spamd http://www.openbsd.org/spamd/ Tarpits like spamd are fake SMTP servers, which accept connections but don't deliver mail. Instead, they keep the connections open and reply very slowly. If the peer is patient enough to actually complete the SMTP dialogue (which will take ten minutes or more), the tarpit returns a 'temporary error' code (4xx), which indicates that the mail could not be delivered successfully and that the sender should keep the mail in their queue and retry again later. Services http://www.pfsense.com/packages/config/spamd.xml ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All spamd-4.1.2.tbz 4.3 Stable 1.0 geekgod@geekgod.com spamd.xml spamd spamd.log siproxd http://siproxd.sourceforge.net/ Siproxd is a proxy/masquerading daemon for the SIP protocol. It handles registrations of SIP clients on a private IP network and performs rewriting of the SIP message bodies to make SIP connections possible via a masquerading firewall. It allows SIP clients (like kphone, linphone) to work behind an IP masquerading firewall or router. Services http://www.pfsense.com/packages/config/siproxd.xml ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All/ siproxd-0.5.13.tbz 0.5.13_pfs1 ALPHA 2.0 siproxd.xml netio http://freshmeat.net/projects/netio/ This is a network benchmark for DOS, OS/2 2.x, Windows NT/2000 and Unix. It measures the net throughput of a network via NetBIOS and/or TCP/IP protocols (Unix and DOS only support TCP/IP) using various different packet sizes. Network Management http://www.pfsense.com/packages/config/netio.xml ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All netio-1.14.tbz 1.14 2.0 ALPHA netio.xml ifdepd The ifdepd daemon implements dependencies between network interfaces in a reliable fashion. If any of the source interfaces fails, ifdepd sets all destination interfaces to state down. If all source interfaces are up, ifdepd sets all destination interfaces to state up. http://hugo.bmg.gv.at Network Management ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All ifdepd-20050420.tbz 20050420 ALPHA 2.0 http://www.pfsense.com/packages/config/ifdepd.xml ifdepd.xml mtr-nox11 billm@pfsense.org Enhanced traceroute replacement http://www.bitwizard.nl/mtr/ Network Management http://www.pfsense.com/packages/All mtr-nox11-0.65_2.tbz 0.65_2 ALPHA 2.0 http://www.pfsense.com/packages/config/mtr-nox11.xml mtr-nox11.xml squid High performance web proxy cache. http://www.squid-cache.org/ Network 2.6.5_1-p15 BETA 1.0 fernando@netfilter.com.br seth.mos@xs4all.nl http://www.pfsense.org/packages/All squid-2.6.5.tbz squid_radius_auth-1.0.8.tbz http://www.pfsense.org/packages/config/squid/squid.xml squid.xml arpwatch Arpwatch monitors ethernet/ip address pairings. It also logs certain changes to syslog. http://www-nrg.ee.lbl.gov/ Security http://www.pfsense.com/packages/All arpwatch-2.1.a13.tbz 2.1.a13 ALPHA 2.0 http://www.pfsense.com/packages/config/arpwatch.xml arpwatch.xml arpwatch arpwatch.log routed RIP v1 and v2 daemon - NOTE: As of 3/18/2007 this package is no longer necessary, it's included in pfSense base and will be removed when 1.0.1 is no longer the current release. http://www.pfsense.com/ billm@pfsense.org Network Management 1.1 Stable 1.0 http://www.pfsense.com/packages/config/routed/routed.xml routed.xml upnp Emulates Microsoft's Internet Connection Service (ICS). It implements the UPnP Internet Gateway Device specification (IGD) and allows UPnP aware clients, such as MSN Messenger to work properly from behind a NAT firewall. http://linux-igd.sourceforge.net/ Network Management ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All linuxigd-0.92_2.tbz 1.0.5 *ALPHA* *DANGER* *MAY WRECK SECURITY, USE AT OWN RISK* 1.0 http://www.pfsense.com/packages/config/upnpd.xml upnpd.xml powerdns PowerDNS (AKA pdns) is an advanced high performance authoritative nameserver with MANY advanced features http://www.powerdns.com/ Network Management ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-5.3-release/All powerdns-2.9.16_4.tbz 2.9.16_4 ALPHA (NO GUI) 1.0 http://www.pfsense.com/packages/config/powerdns.xml powerdns.xml postfix Postfix mail forwarder. Forwards mail to another mail server. http://www.postfix.com/ Mail ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-5.3-release/mail postfix-1.1.12_1%2c1.tbz 1.1.12_1 ALPHA 1.0 http://www.pfsense.com/packages/config/postfix.xml postfix.xml squidGuard High performance Web proxy Guard http://www.squidguard.org/ Network Management ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All/ squidGuard-1.2.0_1.tbz 1.2.0_1 ALPHA 1.0 http://www.pfsense.com/packages/config/squidGuard.xml squidGuard.xml pfstat http://www.benzedrine.cx/pfstat.html pfstat is a small utility that collects packet filter statistics and produces graphs. Network Management http://www.pfsense.com/packages/config/pfstat.xml ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All pfstat-1.7.tbz Stable 1.7 1.0 pfstat.xml upclient http://uptimes.hostingwired.com upclient sends system uptime and status information to a server (typically uptimes.hostingwired.com) that tracks and compares uptime statistics. Miscellaneous http://www.pfsense.com/packages/config/upclient.xml ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/misc upclient-5.0.b8_2.tbz 5.0.b8_2 ALPHA 1.0 upclient.xml quagga http://www.quagga.net/ *NO GUI* Network Management http://www.pfsense.com/packages/All quagga-0.98.5_1.tbz ALPHA 1.0 9.5 zebra http://www.zebra.org/ *NO GUI* Network Management http://www.pfsense.com/packages/All zebra-9.5.tbz ALPHA 9.5 1.0 assp http://assp.sourceforge.net The Anti-Spam SMTP Proxy (ASSP) Server project is an open source platform-independent SMTP Proxy server which implements whitelists and Bayesian filtering to rid the planet of the blight of unsolicited email (UCE). UCE must be stopped at the SMTP server. Anti-spam tools must be adaptive to new spam and customized for each site's mail patterns. This free, easy-to-use tool works with any mail transport and achieves these goals requiring no operator intervention after the initial setup phase. Default username: anything, Password: nospam4me Network Management http://www.pfsense.com/packages/config/assp.xml ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All/ perl-5.8.7.tbz perl 0.1 ALPHA 1.0 assp.xml pure-ftpd http://www.pureftpd.org/ *DO NOT RUN THIS ON A FIREWALL. USE A DEDICATED MACHINE!* Pure FTPd Server is a fast, production quality, standards-conformant FTP server based on Troll-FTPd. It has no known vulnerabilities, is trivial to set up, and is especially designed for modern kernels. Features include PAM support, IPv6, chroot()ed home directories, virtual domains, built-in 'ls', FXP protocol, anti-warez system, bandwidth throttling, restricted ports for passive downloads, an LDAP backend, XML output, and more. FTP http://www.pfsense.com/packages/config/pure-ftpd.xml ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All pure-ftpd-1.0.20_3.tbz 1.0.20_3 Stable 1.0 pure-ftpd.xml ftp pure-ftpd.log havp http://havp.sf.net/ HTTP Antivirus Proxy Services http://agni.linuxense.com/packages/config/havp.xml http://agni.linuxense.com/packages havp-0.80_5.tbz 0.6 ALPHA 1.0 raj@linuxense.com havp.xml doorman http://doorman.sourceforge.net Doorman is a port knocking implementation which allows a server to run silently, invisibly, with all TCP ports closed except to those who know the secret knock. Security http://www.pfsense.com/packages/config/doorman.xml ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All/ doorman-0.81_1.tbz 0.8_1 ALPHA 1.2 doorman.xml