pfSense Digest

Glad to see two book reviews on Amazon already, both with five stars!

I was thrilled to have the foreword for the book written by one of my favorite authors, Michael W Lucas, the author of Absolute FreeBSD, Absolute OpenBSD, Cisco Routers for the Desperate, PGP & GPG, among other things. Thought I would share it here.

My friends and co-workers know that I build firewalls. At least once a month someone says “My company needs a firewall with X and Y, and the price quotes I’ve gotten are tens of thousands of dollars. Can you help us out?”

Anyone who builds firewalls knows this question could be more realistically phrased as “Could you please come over one evening and slap together some equipment for me, then let me randomly interrupt you for the next three to five years to have you install new features, debug problems, set up features I didn’t know enough to request, attend meetings to resolve problems that can’t possibly be firewall issues but someone thinks might be the firewall, and identify solutions for my innumerable unknown requirements? Oh, and be sure to test every possible use case before deploying anything.”

Refusing these requests makes me seem churlish. Accepting these requests ruins my cheerful demeanor. For a long time, I wouldn’t build firewalls except for my employer. pfSense lets me be a nicer person without having to actually work at it. With pfSense I can deploy a firewall in just a few hours — and most of that is running cables and explaining the difference between “inside” and “outside.” pfSense’s extensive documentation and user community offers me an easy answer to questions — “did you look that up?” If pfSense doesn’t support a feature, chances are I couldn’t support it either. But pfSense supports everything I could ask for, and with a friendly interface to boot. The wide userbase means that features are tested in many different environments and generally “just work,” even when interacting with the CEO’s kids’ Windows ME PC connected to the Internet by Ethernet over ATM over carrier pigeon. Best of all, pfSense is built on much of the same software I’d use myself. I trust the underlying FreeBSD operating system to be secure, stable, and efficient.

Security updates? Just click a button and reboot. You need new features? Just turn them on. pfSense handles clustering, traffic shaping, load balancing, integration with your existing equipment through RADIUS, IPsec, PPTP, monitoring, dynamic DNS, and more. Big-name industry suppliers charge outrageous fees to support what pfSense freely provides. If your employer insists on paying for support contracts, or if you just feel more secure knowing you can pick up the phone and scream for help, you can get pfSense support agreements very reasonably. If you don’t need a support contract, I happen to know that Chris, Jim, or anyone else with a pfSense commit bit will let grateful pfSense users buy them a beer or six.

Personally, I don’t build firewalls from scratch any more. When I need a firewall, I use pfSense.

– Michael W. Lucas

As some of you are aware, I’m writing a book on pfSense to be published by Reed Media. It’s been a work in progress for several months and will be completed in the next 5-6 weeks. After technical review and editing, that means it will be available for purchase from Amazon, Barnes & Noble, etc. around late August to early September.

I posted a work in progress table of contents to the mailing list.That’s just the top level, it drills down quite a bit from there. I’m estimating the final page count at roughly 300-400 pages.

There currently is no set title. Of the ones my editor Jeremy Reed and I have thought of, my favorite is The Definitive Guide to pfSense. I’m not set on anything though and am looking for suggestions from the community.

Leave a comment here with your ideas. I will send a complimentary signed copy of the book to the person who chooses the title that will be used, including shipping to anywhere in the world. Please leave a legit email address (it’s only visible to admins) so I can contact you. If we go with The Definitive Guide to pfSense, I will pick someone at random from those who leave comments here and send them the free copy. So if you like that title, feel free to leave a comment saying so.