pfSense project

admin · 发表于 2012-1-1 15:55:10

<table style="TEXT-ALIGN: left; PADDING-BOTTOM: 0px; WIDOWS: 2; TEXT-TRANSFORM: none; TEXT-INDENT: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT: 12px="12px" 'Lucida Sans="Sans" Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; WHITE-SPACE: normal; ORPHANS: 2; LETTER-SPACING: normal; COLOR: rgb(0,0,0); WORD-SPACING: 0px; PADDING-TOP: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px" class="blog" cellspacing="0" cellpadding="0">
<tbody style="

ADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">
<tr style="

ADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans" Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">
<td style="

ADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans" Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px" valign="top">
<div style="

ADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans" Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">
<table style="

ADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(0,0,0); PADDING-TOP: 0px" class="contentpaneopen">
<tbody style="

ADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">
<tr style="

ADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans" Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">
<td style="TEXT-ALIGN: left; PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans" Unicode', Arial, Verdana, Tahoma; COLOR: rgb(0,0,0); FONT-SIZE: 14px; FONT-WEIGHT: bold; PADDING-TOP: 0px" class="contentheading" width="100%">Home</td></tr></tbody></table>
<table style="

ADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(0,0,0); PADDING-TOP: 0px" class="contentpaneopen">
<tbody style="

ADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">
<tr style="

ADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">
<td style="TEXT-ALIGN: left; PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(51,51,51); FONT-SIZE: 12px; PADDING-TOP: 0px" valign="top" colspan="2">
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">Welcome to the home page of the pfSense project!</p>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">pfSense is a free, open source customized distribution of<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://www.freebsd.org/">FreeBSD</a><span class="Apple-converted-space"> </span>tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution. pfSense is a popular project with more than 1 million downloads since its inception, and proven in countless installations ranging from small home networks protecting a PC and an Xbox to large corporations, universities and other organizations protecting thousands of network devices. </p>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">This project started in 2004 as a fork of the<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://m0n0.ch/wall/">m0n0wall</a><span class="Apple-converted-space"> </span>project, but focused towards full PC installations rather than the embedded hardware focus of m0n0wall. pfSense also offers an embedded image for Compact Flash based installations, however it is not our primary focus.</p>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px"><strong style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">New to the project?</strong></p>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">For those new to the project, we recommend reading the<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://www.pfsense.org/index.php?option=com_content&task=view&id=71&Itemid=81">Common Deployments</a><span class="Apple-converted-space"> </span>and<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://www.pfsense.org/index.php?option=com_content&task=view&id=40&Itemid=43">Features</a><span class="Apple-converted-space"> </span>page, and checking out the<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://www.pfsense.org/index.php?option=com_content&task=view&id=41&Itemid=45">Screenshot Gallery</a>.</p></td></tr></tbody></table></div></td></tr></tbody></table>
<p>
<table style="TEXT-ALIGN: left; PADDING-BOTTOM: 0px; WIDOWS: 2; TEXT-TRANSFORM: none; TEXT-INDENT: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT: 12px="12px"  'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; WHITE-SPACE: normal; ORPHANS: 2; LETTER-SPACING: normal; COLOR: rgb(0,0,0); WORD-SPACING: 0px; PADDING-TOP: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px" class="contentpaneopen">
<tbody style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">
<tr style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">
<td style="TEXT-ALIGN: left; PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', Arial, Verdana, Tahoma; COLOR: rgb(0,0,0); FONT-SIZE: 14px; FONT-WEIGHT: bold; PADDING-TOP: 0px" class="contentheading" width="100%">Features</td></tr></tbody></table>
<table style="TEXT-ALIGN: left; PADDING-BOTTOM: 0px; WIDOWS: 2; TEXT-TRANSFORM: none; TEXT-INDENT: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT: 12px="12px"  'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; WHITE-SPACE: normal; ORPHANS: 2; LETTER-SPACING: normal; COLOR: rgb(0,0,0); WORD-SPACING: 0px; PADDING-TOP: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px" class="contentpaneopen">
<tbody style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">
<tr style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">
<td style="TEXT-ALIGN: left; PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(51,51,51); FONT-SIZE: 12px; PADDING-TOP: 0px" valign="top" colspan="2">
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">pfSense includes most all the features in expensive commercial firewalls, and more in many cases. The following is a list of features currently available in the pfSense 2.0 release. All of these things are possible in the web interface, without touching anything at the command line.</p>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">In addition to features, this page also includes all limitations of the system of which we are aware. From our experience and the contributed experiences of thousands of our users, we understand very well what the software can and cannot do. Every software package has limitations. Where we differ from most is we clearly communicate them. We also welcome people to contribute to help eliminate these limitations. Many of the listed limitations are common to numerous open source and commercial firewalls. </p>
<h3 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 18px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Firewall</h3>
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Filtering by source and destination IP, IP protocol, source and destination port for TCP and UDP traffic</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Able to limit simultaneous connections on a per-rule basis</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">pfSense utilizes p0f,<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://lcamtuf.coredump.cx/p0f.shtml">an advanced passive OS/network fingerprinting utility</a><span class="Apple-converted-space"> </span>to allow you to filter by the Operating System initiating the connection. Want to allow FreeBSD and Linux machines to the Internet, but block Windows machines? pfSense can do so (amongst many other possibilities) by passively detecting the Operating System in use.<span class="Apple-converted-space"> </span><br style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px"/></li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Option to log or not log traffic matching each rule.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Highly flexible policy routing possible by selecting gateway on a per-rule basis (for load balancing, failover, multiple WAN, etc.)</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Aliases allow grouping and naming of IPs, networks and ports. This helps keep your firewall ruleset clean and easy to understand, especially in environments with multiple public IPs and numerous servers.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Transparent layer 2 firewalling capable - can bridge interfaces and filter traffic between them, even allowing for an IP-less firewall (though you probably want an IP for management purposes).</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Packet normalization - Description from the pf scrub documentation - "'Scrubbing' is the normalization of packets so there are no ambiguities in interpretation by the ultimate destination of the packet. The scrub directive also reassembles fragmented packets, protecting some operating systems from some forms of attack, and drops TCP packets that have invalid flag combinations."
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Enabled in pfSense by default</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Can disable if necessary. This option causes problems for some NFS implementations, but is safe and should be left enabled on most installations.</li></ul></li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Disable filter - you can turn off the firewall filter entirely if you wish to turn pfSense into a pure router.</li></ul>
<h3 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 18px; FONT-WEIGHT: normal; PADDING-TOP: 0px">State Table</h3>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">The firewall's state table maintains information on your open network connections. pfSense is a<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://en.wikipedia.org/wiki/Stateful_firewall">stateful firewall</a>, by default all rules are stateful.</p>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">Most firewalls lack the ability to finely control your state table. pfSense has numerous features allowing granular control of your state table, thanks to the abilities of<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://www.openbsd.org/faq/pf/">OpenBSD's pf</a>.</p>
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Adjustable state table size - there are multiple production pfSense installations using several hundred thousand states. The default state table size varies according to the RAM installed in the system, but it can be increased on the fly to your desired size. Each state takes approximately 1 KB of RAM, so keep in mind memory usage when sizing your state table. Do not set it arbitrarily high.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">On a per-rule basis:
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Limit simultaneous client connections</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Limit states per host</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Limit new connections per second</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Define state timeout</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Define state type</li></ul></li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">State types - pfSense offers multiple options for state handling.
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Keep state - Works with all protocols. Default for all rules.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Modulate state - Works only with TCP. pfSense will generate strong Initial Sequence Numbers (ISNs) on behalf of the host.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Synproxy state - Proxies incoming TCP connections to help protect servers from spoofed TCP SYN floods. This option includes the functionality of keep state and modulate state combined.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">None - Do not keep any state entries for this traffic. This is very rarely desirable, but is available because it can be useful under some limited circumstances.</li></ul></li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">State table optimization options - pf offers four options for state table optimization.
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Normal - the default algorithm</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">High latency - Useful for high latency links, such as satellite connections. Expires idle connections later than normal.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Aggressive - Expires idle connections more quickly. More efficient use of hardware resources, but can drop legitimate connections.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Conservative - Tries to avoid dropping legitimate connections at the expense of increased memory usage and CPU utilization.</li></ul></li></ul>
<h3 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 18px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Network Address Translation (NAT)<br style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px"/></h3>
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Port forwards including ranges and the use of multiple public IPs</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">1:1 NAT for individual IPs or entire subnets.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Outbound NAT
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Default settings NAT all outbound traffic to the WAN IP. In multiple WAN scenarios, the default settings NAT outbound traffic to the IP of the WAN interface being used.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Advanced Outbound NAT allows this default behavior to be disabled, and enables the creation of very flexible NAT (or no NAT) rules.</li></ul></li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">NAT Reflection - in some configurations, NAT reflection is possible so services can be accessed by public IP from internal networks.</li></ul>
<h4 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 16px; FONT-WEIGHT: normal; PADDING-TOP: 0px">NAT Limitations</h4>
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">PPTP / GRE Limitation - The state tracking code in pf for the GRE protocol can only track a single session per public IP per external server. This means if you use PPTP VPN connections, only one internal machine can connect simultaneously to a PPTP server on the Internet. A thousand machines can connect simultaneously to a thousand different PPTP servers, but only one simultaneously to a single server. The only available work around is to use multiple public IPs on your firewall, one per client, or to use multiple public IPs on the external PPTP server. This is not a problem with other types of VPN connections. A solution for this is currently under development. </li></ul>
<h3 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 18px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Redundancy</h3>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px"><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://en.wikipedia.org/wiki/Common_Address_Redundancy_Protocol">CARP</a><span class="Apple-converted-space"> </span>from OpenBSD allows for hardware failover. Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active. pfSense also includes configuration synchronization capabilities, so you make your configuration changes on the primary and they automatically synchronize to the secondary firewall.</p>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px"><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://www.openbsd.org/faq/pf/carp.html">pfsync</a><span class="Apple-converted-space"> </span>ensures the firewall's state table is replicated to all failover configured firewalls. This means your existing connections will be maintained in the case of failure, which is important to prevent network disruptions.</p>
<h4 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 16px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Limitations</h4>
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Only works with static public IPs, does not work with stateful failover using DHCP, PPPoE, or PPTP type WANs</li></ul>
<h3 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 18px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Load Balancing</h3>
<h4 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 16px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Outbound Load Balancing</h4>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">Outbound load balancing is used with multiple WAN connections to provide load balancing and failover capabilities. Traffic is directed to the desired gateway or load balancing pool on a per-firewall rule basis.</p>
<h4 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 16px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Inbound Load Balancing</h4>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">Inbound load balancing is used to distribute load between multiple servers. This is commonly used with web servers, mail servers, and others. Servers that fail to respond to ping requests or TCP port connections are removed from the pool.</p>
<h4 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 16px; FONT-WEIGHT: normal; PADDING-TOP: 0px">VPN</h4>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">pfSense offers three options for VPN connectivity,<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://en.wikipedia.org/wiki/IPsec">IPsec</a>,<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://openvpn.net/">OpenVPN</a>, and<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://en.wikipedia.org/wiki/Pptp">PPTP</a>.</p>
<h4 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 16px; FONT-WEIGHT: normal; PADDING-TOP: 0px">IPsec</h4>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">IPsec allows connectivity with any device supporting standard IPsec. This is most commonly used for site to site connectivity to other pfSense installations, other open source firewalls (m0n0wall, etc.), and most all commercial firewall solutions (Cisco, Juniper, etc.). It can also be used for mobile client connectivity.</p>
<h4 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 16px; FONT-WEIGHT: normal; PADDING-TOP: 0px">OpenVPN</h4>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">OpenVPN is a flexible, powerful SSL VPN solution supporting a wide range of client operating systems. See the<a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://openvpn.net/">OpenVPN website</a><span class="Apple-converted-space"> </span>for details on its abilities.</p>
<h4 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 16px; FONT-WEIGHT: normal; PADDING-TOP: 0px">PPTP Server</h4>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">PPTP is a popular VPN option because nearly every OS has a built in PPTP client, including every Windows release since Windows 95 OSR2. See<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://en.wikipedia.org/wiki/Point-to-point_tunneling_protocol">this Wikipedia article</a><span class="Apple-converted-space"> </span>for more information on the PPTP protocol.</p>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">The pfSense PPTP Server can use a local user database, or a RADIUS server for authentication. RADIUS accounting is also supported. Firewall rules on the PPTP interface control traffic initiated by PPTP clients.</p>
<h5 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 14px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Limitations</h5>
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Because of limitations in pf NAT, when the PPTP Server is enabled, PPTP clients cannot use the same public IP for outbound PPTP connections. This means if you have only one public IP, and use the PPTP Server, PPTP clients inside your network will not work. The work around is to use a second public IP with Advanced Outbound NAT for your internal clients. See also the PPTP limitation under NAT on this page.</li></ul>
<h3 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 18px; FONT-WEIGHT: normal; PADDING-TOP: 0px">PPPoE Server</h3>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">pfSense offers a PPPoE server. For more information on the PPPoE protocol, see<span class="Apple-converted-space"> </span><a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://en.wikipedia.org/wiki/Point-to-Point_Protocol_over_Ethernet">this Wikipedia entry</a>. A local user database can be used for authentication, and RADIUS authentication with optional accounting is also supported.</p>
<h3 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 18px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Reporting and Monitoring<br style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px"/></h3>
<h4 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 16px; FONT-WEIGHT: normal; PADDING-TOP: 0px">RRD Graphs</h4>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">The RRD graphs in pfSense maintain historical information on the following.</p>
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">CPU utilization</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Total throughput</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Firewall states</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Individual throughput for all interfaces</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Packets per second rates for all interfaces</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">WAN interface gateway(s) ping response times</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Traffic shaper queues on systems with traffic shaping enabled</li></ul>
<h4 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 16px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Real Time Information</h4>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">Historical information is important, but sometimes it's more important to see real time information.</p>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">SVG graphs are available that show real time throughput for each interface.</p>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">For traffic shaper users, the Status -> Queues screen provides a real time display of queue usage using AJAX updated gauges.</p>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">The front page includes AJAX gauges for display of real time CPU, memory, swap and disk usage, and state table size.</p>
<h3 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 18px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Dynamic DNS</h3>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">A Dynamic DNS client is included to allow you to register your public IP with a number of dynamic DNS service providers.</p>
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">DynDNS</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">DHS</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">DNSexit<br style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px"/></li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">DyNS</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">easyDNS</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">freeDNS</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">HE.net<br style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px"/></li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Loopia</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Namecheap<br style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px"/></li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">No-IP</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">ODS.org</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">OpenDNS<br style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px"/></li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">ZoneEdit</li></ul>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">A client is also available for RFC 2136 dynamic DNS updates, for use with DNS servers like BIND which support this means of updating.</p>
<h3 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 18px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Captive Portal</h3>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">Captive portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hot spot networks, but is also widely used in corporate networks for an additional layer of security on wireless or Internet access. For more information on captive portal technology in general, see the<a style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); TEXT-DECORATION: none; PADDING-TOP: 0px" href="http://en.wikipedia.org/wiki/Captive_portal">Wikipedia article</a><span class="Apple-converted-space"> </span>on the topic. The following is a list of features in the pfSense Captive Portal.</p>
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Maximum concurrent connections - Limit the number of connections to the portal itself per client IP. This feature prevents a denial of service from client PCs sending network traffic repeatedly without authenticating or clicking through the splash page.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Idle timeout - Disconnect clients who are idle for more than the defined number of minutes.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Hard timeout - Force a disconnect of all clients after the defined number of minutes.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Logon pop up window - Option to pop up a window with a log off button.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">URL Redirection - after authenticating or clicking through the captive portal, users can be forcefully redirected to the defined URL.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">MAC filtering - by default, pfSense filters using MAC addresses. If you have a subnet behind a router on a captive portal enabled interface, every machine behind the router will be authorized after one user is authorized. MAC filtering can be disabled for these scenarios.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Authentication options - There are three authentication options available.<span class="Apple-converted-space"> </span><br style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px"/>
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">No authentication - This means the user just clicks through your portal page without entering credentials.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Local user manager - A local user database can be configured and used for authentication.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">RADIUS authentication - This is the preferred authentication method for corporate environments and ISPs. It can be used to authenticate from Microsoft Active Directory and numerous other RADIUS servers.</li></ul></li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">RADIUS capabilities
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Forced re-authentication</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Able to send Accounting updates</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">RADIUS MAC authentication allows captive portal to authenticate to a RADIUS server using the client's MAC address as the user name and password.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Allows configuration of redundant RADIUS servers.</li></ul></li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">HTTP or HTTPS - The portal page can be configured to use either HTTP or HTTPS.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Pass-through MAC and IP addresses - MAC and IP addresses can be white listed to bypass the portal. Any machines with NAT port forwards will need to be bypassed so the reply traffic does not hit the portal. You may wish to exclude some machines for other reasons.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">File Manager - This allows you to upload images for use in your portal pages.</li></ul>
<h4 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 16px; FONT-WEIGHT: normal; PADDING-TOP: 0px">Limitations</h4>
<ul style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  20px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(51,51,51); PADDING-TOP: 0px">
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">"Reverse" portal, i.e. capturing traffic originating from the Internet and entering your network, is not possible.</li>
<li style="PADDING-BOTTOM: 0px; MARGIN: 0px="0px"  0px="0px"  0px="0px"  40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; LIST-STYLE-IMAGE: url(http://www.pfsense.org/templates/modular_plazza/images/arrow_green.gif); PADDING-TOP: 0px">Only entire IP and MAC addresses can be excluded from the portal, not individual protocols and ports.</li></ul>
<h3 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 18px; FONT-WEIGHT: normal; PADDING-TOP: 0px">DHCP Server and Relay</h3>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">pfSense includes both DHCP Server and Relay functionality</p>
<h3 style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; COLOR: rgb(153,0,0); FONT-SIZE: 18px; FONT-WEIGHT: normal; PADDING-TOP: 0px">And More...</h3>
<p style="PADDING-BOTTOM: 0px; LINE-HEIGHT: normal; MARGIN: 0px="0px"  0px="0px"  1em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT-FAMILY: 'Lucida Sans="Sans"  Unicode', 'Lucida Grande', Arial, Tahoma, Verdana; COLOR: rgb(102,102,102); FONT-SIZE: 12px; PADDING-TOP: 0px">This is by no means a conclusive list. It will be expanded as time permits.</p></td></tr></tbody></table></p>
<p> </p>

		自动登录	找回密码
密码			立即注册