nettechonline

Tech Supp - The Final Frontier!

  • Increase font size
  • Default font size
  • Decrease font size
Home PFSense pfSense Security
pfSense Security

PFSense IDS Firewall Security

E-mail Print PDF

SmallNetBuilder Web - Build an IDS Firewall - PFSense

-webadmin- Small Net Builder Web - Auther Greg Noel

Hear that sound? That is someone rattling your doorknob. If they are able to break in, they will ransack your home, rifle through your private papers, correspondence, bank statements, photos, and if lucky they’ll find your club memberships and credit cards - your identity. They may even plant listening devices. If you lived in a bad neighborhood, you’d put in high quality locks and maybe an alarm system. The problem is, on the net, everywhere is a bad neighborhood.

What stands between you and this happening on the internet is generally your router, which is designed more as a doorway than a lock. Consumer grade firewalls, either software or hardware, can act as a lock or gatekeeper. But to truly turn back the faceless attacks (even if they would just find pictures of your kids), you need a dynamic firewall with intrusion detection; the kind of 1U firewall server appliances usually found only in corporate data centers (read: expensive). Devices that generally start at about $3K; a Cisco PIX firewall starts at nine.

Last Updated on Wednesday, 18 May 2011 05:15 Read more...
 

PFSense Solution? - Millions of Home routers at Risk

E-mail Print PDF

Millions of Home Routers at Risk?

LAS VEGAS -- According to new research delivered today here at the Black Hat security conference, millions of home routers may have a serious security flaw.

In his presentation at Black Hat, security researcher Craig Heffner detailed how an external attacker could gain full control of a user's router and use that to gain access to the internal local area network (LAN). Though the implications are ominous, Heffner, also detailed a variety of steps users can take to protect themselves.

"The question is not how to hack the routers, that's easy," Heffner said. "The question is how to get access when you're not on the local LAN."

Last Updated on Tuesday, 17 May 2011 22:15 Read more...
 

Pfsense and Rules

E-mail Print PDF

images (2)

The freeBSD PFSense WatchGuard General SOHO setup...

Still working on this product, pfsense with Watchguard X700, and it is getting better with the more reading I do.

Lots of setups and combinations plus hardware choices...

DNS Blacklist here...

Transparent Proxy here... & here...

URL Filtering here...

Traffic Shaping here...

PFSense Forum describing LCD and LED here...

Going forward with squidguard and some other setups...

Good luck and let me know if your doing anything with this...

H.

Last Updated on Tuesday, 17 May 2011 22:17