pfSense

[MatthewL]

I've bitten the bullet this weekend and built a pfSense box on an old i3 PC and have setup some basic bits, still not fully integrated to the network and not the ideal hardware I would like it on. I did have a Watchguard 1U box but that was too noisy and unable to upgrade it without bricking and starting again. I'm after a 1U type box so I can put it in my cabinet but struggling to find anything I trust, any recommendations? Once I'm happy with this I am then going to be in a position to buy a smaller router sized box to replace the setup at a family members.

 

So looking for any hints and tips, I did have some sites before but lost them.

 

Wanting more control on the network I have blocked everything outbound, only allow HTTP/HTTPS/DNS/NTP as a common thing from clients. Have custom rules for other specif things, although certain things appear to work when they shouldn't so guess they are working over HTTP/HTTPS. I am looking to put some packet filtering type thing on to restrict things more.

 

I have OVPN setup, currently just port forwarding from the Virgin SH, will put that in modem mode once I sort a new switch out.

 

I want to setup Squid proxy and some web filtering, any useful guides for this? I then want to create a VLAN and put a guest network on my Unifi.

 

I'm been able to see a live view of traffic so I can find denies or what ports something is accessing, sure I've done it on older versions but this new 2.4.2 is a bit different from what I have used.

[MatthewL]

Anyone, surprised there hasn't been any response on it.

 

Doing well so far, limited to fully setting up till I Get a new switch, any hints and tips? Surprised there are not more users of it on here.