Archive for August, 2007

1.2 Release Candidate 2 released!

Friday, August 17th, 2007

1.2-RC2 has been released! Here are just a few of the new improvements and features that have made their way into this new version:

New features/improvements present in 1.2-RC2:

  • Automatically restarts racoon (ipsec-tools if it wedges)
  • Ensure CARP status page cache is cleared before load
  • Updated lighttpd to 1.4.15
  • Read the rest of this entry »

pfSense 2007 Hackathon scheduled for October

Thursday, August 16th, 2007

A number of pfSense developers will be flying in to Louisville from around the world to participate in the 2007 Hackthon! During this time a number of pfSense developers get together and spend most of their time hacking on pfSense, testing and many other related items.

We are in dire need of donations to help fund food and drinks. If you would like to help us out in making this years hackathon productive (read: many many features and improvements) please check out our donations page located here.

pfSense commercial support interview in Free Software Magazine

Wednesday, August 15th, 2007

Scott and I, as well as our partner Centipede Networks’ CEO Jeff Starkweather, were interviewed in Free Software Magazine regarding our commercial support venture.

Free Software Magazine is “the free online magazine about free software. It is free to subscribe and free to read online.” This is the first I had heard of it, but they have a lot of good content. I recommend checking it out and subscribing. You also may be interested in the free software news site FSDaily.

Tony Mobily, editor of the magazine, did a great job with the interview. He asked a lot of the same questions we’ve received from many of you, and I think it does a nice job of clarifying our offerings and the partnership.

New kernel installation options

Tuesday, August 14th, 2007

An inquiry from a customer lead to the discovery that the normal ttys file does not work properly on a hard drive install on a Soekris 4801. Upon boot, the console never finishes loading. Because this can be an issue on other embedded hardware platforms, and there are also hardware platforms where you must use the embedded kernel (like a full install on a Microdrive on a WRAP), we have added an installer option to the upcoming 1.2-RC2 that lets you select which kernel you wish to install.

There are four options – single processor, SMP (multi-processor), embedded, and developer (mainly for kernel debugging tools).

The SMP kernel is the default with the previous installer, and should work with almost all uniprocessor and SMP systems. Though going forward, I would recommend choosing the single processor kernel for single processor systems, and the SMP kernel for systems with multiple processors or cores. Use the embedded kernel for any embedded hardware, like a WRAP, Soekris 4801, and similar. Don’t choose the developer kernel unless instructed to do so by a developer, or you know what you’re doing.

BSDCan summary in USENIX ;login:

Tuesday, August 7th, 2007

The August 2007 issue of USENIX ;login: magazine is available, which includes a BSDCan summary article with a summary of two sessions written by yours truly (including the pfSense session).

The slides for our presentation have also been available on the BSDCan website for quite some time now, I forgot to mention it here.

Multi-WAN OpenVPN Guide

Thursday, August 2nd, 2007

This is a great illustration of both the value of purchasing pfSense support, and the benefits this will have for the community. One of many is it forces us to write documentation. :) Several customer inquiries have resulted in documentation, some of which is already public (the rest will come with time).

A customer was having trouble trying to get OpenVPN working on multiple WAN interfaces. This lead me on an endeavor that resulted in the following documentation on how to make this work.

pfSense Multi-WAN OpenVPN Guide

"pfSense Intervention"

Thursday, August 2nd, 2007

Bill McGonigle has a post on restricting web site access with pfSense on his blog that many of you may find interesting.