Archive for May, 2008

Slides from pfSense Tutorial at BSDCan Now Available

Thursday, May 29th, 2008

A link to the slides has been added to the tutorial page on the BSDCan site. The slides alone probably aren’t of a huge amount of value for those who didn’t attend since they’re just an overview of the presentation, but you might want to check them out even if you didn’t attend.

Hurry up and wait … for that image to build.

Thursday, May 29th, 2008

It seems more and more that I spend 90% of my time waiting for pfSense builds to validate code changes, kernel changes, etc. I am curious if anyone has a connection to one of the major computer vendors that could persuade them to donate a “fast” box to the project. In return we will put your logo on our webpage and let the world know we use XYZ hardware for building pfSense. If you know someone that is in a position to make these types of decisions, please email me at …

Life is too short to spend waiting for building images! :)

UPDATED: See comments for some samples of what we are looking for.  We have access to sandford and son machines all day long but we need some real hardware for this chore.

Open source on the wire

Wednesday, May 28th, 2008

Very well written article from InfoWorld on “Open source on the wire“, which mentions pfSense. Good read for those considering an open source firewall or router solution.

When all is said and done, there’s little argument against using open-source routing and firewalling tools in most any network, as long as your admins are comfortable with the technology. We know that open-source routing and firewalling solutions can meet or exceed the performance and stability of their commercial counterparts; the proof has been in the proverbial pudding for many years now. Maybe it’s time to hand over yet another part of the infrastructure to the open-source rebels. After all, in for a penny, or in for a pound. It’s good to have that choice.

pfSense article in Free Software Magazine

Sunday, May 25th, 2008

Sloan Miller, who has done some good work on, has written an article on pfSense for Free Software Magazine.

Configure a professional firewall using pfSense

One-click Auto Upgrade has returned in 1.3!

Saturday, May 24th, 2008

Those of you who have been using pfSense for several years will remember pre-1.0, there was an auto-upgrade page that would upgrade you to the latest available release with one click. It was later broken by some changes and removed prior to the 1.0 release, but has been fixed and resurrected. It’s now working in 1.3.

By default, it checks for a newer stable release than the one you are using, and if one is available, you can click a button and it will download and install the update. It also allows changing the URL to pull snapshots, or you can enter your own URL if you maintain a custom version. The current manual upgrade remains available as well.

1.3 is under such active development that it isn’t really suitable for any non-developers at this time. We gave the URL for the snapshots to attendees at our BSDCan tutorial, but won’t be releasing it to everyone just yet.

BSDCan wrap up

Monday, May 19th, 2008

We made it back safely from BSDCan yesterday. It was a great time, as always, with some great presentations. The slides from our tutorial will be available sometime this week after I catch up on some other things and have a chance to upload them. Thanks to those of you who attended, it was great to meet many pfSense users.

The pfSense developer summit went well also, many thanks to those who made contributions! We resolved a number of open tickets and made progress on several others. Still some more work to do before 1.2.1 is ready, but we got about half of it knocked out this week. More here on that later.

I would also like to thank several FreeBSD developers we had discussions with during the week. Historically we have only gotten attention from a very few FreeBSD developers (though their involvement is very much appreciated), and the tough problems we run into commonly do not get responses from developers with the ability to resolve those issues. Every year we get more attention from FreeBSD developers, and more are interested in ways we can work together more. We hope to be able to work together better in the future, to improve both pfSense and FreeBSD.

Update from BSDCan: attendees please read!

Thursday, May 15th, 2008

Hello from Ottawa! Our presentation Wednesday morning went well (we think), though we had far more material than we could cover in the 3 hours allotted. Unfortunately we had to skip the majority of the live demos we had planned. If you were in attendance and have any further questions, please find us here.

We’ll put our slides up within the next week.

Scott, Bill and I will be hanging out in the 13th floor conference room of the residence at UOttawa, for those who are here. You’re welcome to join us. In the evenings, we’ll be at Royal Oak or here on the 13th floor.

If you happen to see any of us at the conference later, please feel free to come up and talk to us. In between sessions Friday and Saturday and tutorials on Thursday I’ll be outside smoking (and walking around aimlessly generally), please feel free to come up and talk to me.

pfSense Developer Summit at BSDCan 2008 – Seeking Donations

Sunday, May 11th, 2008

We will be having a developer summit at BSDCan this year, as the first three contributors to the project – Scott Ullrich, Bill Marquette and yours truly – will all be in attendance. The three of us combined have more than 10 years of dedication to this project.

Plans for the Week

We plan to work on the open tickets on 1.2 so we can get 1.2.1-RC1 out. Several tickets have collected that we either know are problems and need to fix, or are potential problems we need to investigate. Once we get all those resolved, we’ll release 1.2.1-RC1 (which will only be bug fixes since 1.2 and be based on FreeBSD 6.3).

Bill is going to work on getting us converted from CVS to git for revision control, and bring online a significantly improved bug tracking and development tracking system. More on that in another post later.

We will also work on some 1.3 development while there. Likely candidates include OpenVPN, 3G wireless and PPP support, and any number of other things.

Seeking Donations

May 19, 2008 edit: Many thanks to those who contributed. We collected enough to meet our initial goal, and still have enough left over for pizza the next couple times Scott and I get together to work on pfSense. If you would still like to contribute to support our development efforts feel free to do so, the money is used to cover food and beverage expenses when developers gather to work on the pfSense project. Contents of the initial post follow.

We’re looking for contributions to cover our food and beverage expenses during this event. The community gets a lot of great work on pfSense, and we get fed. Similar developer get togethers have proven very fruitful over the past 3 years we have been holding them, and we look for this to be another successful week. Your support is much appreciated!

“pfSense exceeds my expectations”

Thursday, May 8th, 2008

A couple pfSense related posts from Addicted to IT.

“pfSense exceeds my expectations”

And a howto on editing config.xml manually – though this is only necessary in some very limited circumstances, be very careful if you do manually edit your config and make sure you have a good backup!