pfSense 2.6 (Community Edition) - 专用于防火墙和路由器的 FreeBSD 免费、开源定制发行版

pfSense 简介

pfSense® 软件是 FreeBSD 的免费、开放源代码定制发行版，专门用于完全通过 Web 界面进行管理的防火墙和路由器。除了是功能强大，灵活的防火墙和路由平台之外，它还包括大量相关功能和软件包系统 (sysin)，该软件包系统可实现进一步的扩展，而不会给基础发行版增加膨胀和潜在的安全漏洞。

pfSense 项目由 Rubicon Communications，LLC 托管和开发 (Netgate)。

Polygon Arrows

pfSense 是 Electric Sheep Fencing，LLC 的联邦注册商标。州和联邦法律以及国际条约禁止未经授权使用该商标。有关如何正确使用商标的信息，请参阅知识兔的商标使用准则。

许可证：

pfSense is open source and distributed under the Apache 2.0 license.

pfSense 功能

pfSense® 开源软件是一种高度可配置的全功能解决方案，可以满足从边缘到云的任何需求。

Applications

VPN Server
High Availability
Load Balancing
Traffic Shaping
Captive Portal
UTM Device
Firewall / Router
DNS / DHCP Server
IDS / IPS
Transparent Caching Proxy
Web Content Filter
And more …

Features

Firewall and Router
- Stateful Packet Inspection (SPI)
- GeoIP blocking
- Anti-Spoofing
- Time based rules
- Connection limits
- Dynamic DNS
- Reverse proxy
- Captive portal guest network
- Supports concurrent IPv4 and IPv6
- NAT mapping (inbound/outbound)
- VLAN support (802.1q)
- Configurable static routing
- IPv6 network prefix translation
- IPv6 router advertisements
- Multiple IP addresses per interface
- DHCP server
- DNS forwarding
- Wake-on-LAN
- PPPoE Server
VPN
- IPsec and OpenVPN
- Site-to-site and remote access VPN support
- SSL encryption
- VPN client for multiple operating systems
- L2TP/IPsec for mobile devices
- Multi-WAN for failover
- IPv6 support
- Split tunneling
- Multiple tunnels
- VPN tunnel failover
- NAT support
- Automatic or custom routing
- Local user authentication or RADIUS/LDAP
Intrusion Prevention System
- Snort-based packet analyzer
- Layer 7 application detection
- Multiple rules sources and categories
- Emerging threats database
- IP blacklist database
- Pre-set rule profiles
- Per-interface configuration
- Suppressing false positive alerts
- Deep Packet Inspection (DPI)
- Optional open-source packages for application blocking
Enterprise Reliability
- Optional multi-node High Availability Clustering
- Multi-WAN load balancing
- Automatic connection failover
- Bandwidth throttling
- Traffic shaping wizard
- Reserve or restrict bandwidth based on traffic priority
- Fair sharing bandwidth
- User data transfer quotas
User Authentication
- Local user and group database
- User and group-based privileges
- Optional automatic account expiration
- External RADIUS authentication
- Automatic lockout after repeated attempts
Proxy and Content Filtering
- HTTP and HTTPS proxy
- Non Transparent or Transparent caching proxy
- Domain/URL filtering
- Anti-virus filtering
- SafeSearch for search engines
- HTTPS URL and content screening
- Website access reporting
- Domain Name blacklisting (DNSBL)
- Usage reporting for daily, monthly, etc.

Administration

Configuration
- Web-based configuration
- Setup wizard for initial configuration
- Remote web-based administration
- Customizable dashboard
- Easy configuration backup/restore
- Configuration export/import
- Encrypted automatic backup to Netgate server
- Variable level administrative rights
- Multi-language support
- Simple updates
- Forward-compatible configuration
- Serial console for shell access and recovery options
System Security
- Web interface security protection
- CSRF protection
- HTTP Referer enforcement
- DNS Rebinding protection
- HTTP Strict Transport Security
- Frame protection
- Optional key-based SSH access
Reporting & Monitoring
- Dashboard with configurable widgets
- Local logging
- Remote logging
- Local monitoring graphs
- Real-time interface traffic graphs
- SNMP monitoring
- Notifications via web interface, SMTP, or Growl
- Hardware monitoring
- Networking diagnostic tools