Tso tawm cov khoom siv faib rau tsim firewalls pfSense 2.5.0

Ib qho khoom siv sib cog lus rau kev tsim hluav taws xob thiab lub rooj vag network pfSense 2.5.0 tau raug tso tawm. Qhov kev faib tawm yog raws li FreeBSD code puag siv kev txhim kho ntawm m0n0wall project thiab kev siv cov pf thiab ALTQ. Ib daim duab iso rau amd64 architecture, 360 MB qhov loj, tau npaj rau rub tawm.

Kev faib tawm yog tswj hwm ntawm lub vev xaib interface. Txhawm rau npaj cov neeg siv nkag mus rau ntawm lub xov tooj thiab wireless, Captive Portal, NAT, VPN (IPsec, OpenVPN) thiab PPPoE tuaj yeem siv. Muaj ntau lub peev xwm tau txais kev txhawb nqa rau kev txwv bandwidth, txwv cov naj npawb ntawm kev sib txuas ib txhij, lim cov tsheb khiav thiab tsim cov teeb meem tsis raug cai raws li CARP. Kev lag luam txheeb cais tau nthuav tawm hauv daim duab duab lossis hauv daim ntawv tabular. Kev tso cai tau txais kev txhawb nqa siv cov neeg siv hauv zos, nrog rau los ntawm RADIUS thiab LDAP.

Cov kev hloov pauv tseem ceeb:

  • Lub hauv paus system Cheebtsam tau hloov kho rau FreeBSD 12.2 (FreeBSD 11 tau siv hauv ceg dhau los).
  • Kev hloov mus rau OpenSSL 1.1.1 thiab OpenVPN 2.5.0 nrog kev txhawb nqa rau ChaCha20-Poly1305 tau ua.
  • Ntxiv VPN WireGuard kev siv ua haujlwm ntawm qib kernel.
  • Swan IPsec backend configuration muaj zog tau tsiv los ntawm ipsec.conf siv swanctl thiab VICI hom. Txhim kho qhov chaw teeb tsa.
  • Txhim kho daim ntawv pov thawj tswj interface. Ntxiv lub peev xwm los hloov kho cov ntawv nkag hauv tus thawj tswj daim ntawv pov thawj. Muab cov ntawv ceeb toom txog kev tas sij hawm ntawm daim ntawv pov thawj. Muaj peev xwm xa tawm PKCS #12 cov yuam sij thiab cov ntaub ntawv nrog tus password tiv thaiv. Ntxiv kev txhawb nqa rau Elliptic Curve Certificate (ECDSA).
  • Lub backend rau txuas mus rau lub wireless network ntawm Captive Portal tau hloov pauv loj heev.
  • Cov cuab yeej txhim kho kom ntseeg tau tias kev zam txim txhaum cai.

Tso tawm cov khoom siv faib rau tsim firewalls pfSense 2.5.0


Tau qhov twg los: opennet.ru

Ntxiv ib saib