Anti Virus For PFSENSE

havp, antivirus is a solution used to set up points and shooting considerably. When the installation is complete, only a few settings, change the tab of the HTTP proxy has (Services> Anti-virus).
Sets the description value. Check Enable to enable scan
Specifies the execution mode of the parent of the Squid in proxy mode.
Proxy port of the connection port. Squid is a must have different port 3125

Some of the other policy settings, including the logging file type, you want to scan, There, shows the arrangement for Cerberus in Figure
HTTP proxy settings of the anti-virus
HTTP proxy settings of the anti-virus Figure 2011:
And, again some 2012 inches Figure

Via HTTP proxy settings in the Anti-Virus for, Anti-virus for more than HTTP proxy settings Figure 2012:

There are also some small configuration under the order to cope with the frequency of the log of the Settings tab and update. Figure 12 shows how Cerberus has been set.

When you save the settings, scan engine ClamAV Noto havp proxy, you can see that it is running at the bottom of the page on the General tab.

execution of the ClamAV Noto havp, Noto is up and running ClamAV havp: 13 Figure

(It takes about 10 minutes), you can use the simulation of a secure file that the virus has been provided by the Eicar.org, to test the installation will be fully updated at a time.
Eicar.org virus test file, Eicar.org of test virus file
Only two of the test file has been recognized as a threat. COM extension archive files without scanning, the embedded, emphasized the need for another anti-virus software on each host machine, but have not been tested.

Anti-Virus are currently running.

That's it for this series. Next time, we will continue to convert UTM to set up content filtering and much more. source

Multi wan Load balancing on pfsense

step by step setting multi wan 2 isp on pfsense

*** Welcome to pfSense 1.2-RC3-pfSense on pfsense ***

LAN * -> fxp0 -> NONE

OPT1 (OPT1) -> fxp1 -> NONE
OPT2 (OPT2) -> fxp2 -> NONE
WAN * -> fxp3 -> NONE
OPT3 (OPT3) -> fxp4 -> NONE

pfSense console setup
***********************
0) Logout (SSH only)
1) Assign Interfaces
2) Set LAN IP address
3) Reset the password webConfigurator
4) Reset to factory defaults
5) Reboot the system
6) Halt system
7) Ping host
Shell
9) PFtop
10) Filter Logs
11) Restart webConfigurator
12) pfSense PHP shell
13) Upgrade from console

Enter an option:

Furthermore, the processes carried out are:

1. Setting the LAN to get into the WEB Admin with option No. ways. 1 (Assign Interfaces)

Capable VLAN interfaces:

fxp0 00:50:8 b: 9a: da: 9a (up)
fxp1 00: d0: b7: 15:56: fa

fxp3 00: d0: b7: 15:54:05 
fxp2 00: a0: c9: b3: a2: 4
d(up)
0: d0: b7: 15:66: ec
fxp4 
0

Enter the parent interface name for the new VLAN (or nothing if finished): fxp0

Enter the VLAN tag (1-4094): 1

Then fill the NIC who detected / subsequent written like the above, for example VLAN: VLAN = fpx1 or wl01. Or leave with an empty value and press enter.

Furthermore LAN settings

Enter the LAN interface name or 'a' for auto-detection: fxp0

Enter the WAN interface name or 'a' for auto-detection: ^

WAN settings for interchangeable we passed at first because of interchangeable settings via the Web Console if you eat it sdh completed in the setting. For that we just leave with an empty value and press enter.

2. Setting LAN IP Address. Choose 2) Set LAN IP Address

Enter the new LAN IP address: 10.1.2.1

Subnet masks are Entered as bit counts (as in CIDR notation) in pfSense.
e.g. 255.255.255.0 = 24
255.255.0.0 = 16
255.0.0.0 = 8

Enter the new LAN subnet bit count: 24

Do you want to enable the DHCP server on LAN [y | n]? n

IP Address = 10.1.2.1, Subnet Mask = 24 (255.255.255.0) and to my morbidly DHCP is enabled.

Dr. I usually experience we will be confused network cards which one recognizable as a LAN Because there are poly-NIC. For that I am doing testing in turn connect with existing NIC and ping to the LAN network. Choose the console CLI pd no 8 (Shell) and do a ping to another PC on the LAN. After putting up signs in the know on the NIC.

3. Furthermore, we can set through the Web Console access with http://10.1.2.1 address.

Username: admin

Password: pfsense (default)

4. Setting the WAN's Address to the ISP

Next click the Interfaces -> WAN IP Address settings for an ISP

IP Address: 202.155.73.42/28

Gateway: 202.155.73.41

Click Save

Next click the Interfaces -> OPT1 for setting the IP Address the ISP 2 (Speedy)

Enable options OPT1: ON

IP Address: 192.168.1.100

Gateway: 192.168.1.1

Click Save

5. Setting DNS

Click on System -> General Setup

DNS1: 202.155.0.20 (provider-a)

DNS2: 202.134.0.155 (provider-b)

6. DNS Settings Path Route

Click on System - Static Route -> +

WAN: Indosat

Interfaces: WAN

Destination Network: 202.155.0.20/32

Gateway: 202.155.73.41

OPT1: Telkom Speedy

Interfaces: OPT1

Destination Network: 202.134.0.155/32

Gateway: 192.168.1.1

The result is like the following:

Click the button Applay Changes

7. Setting Load Balancer

Click on Services -> Load Balancer -> +

Name: Balancer

Type: Gateway

Behavior: Load Balancing

Monitor IP: Other -> eg the contents with DNS: 202.155.0.20

Interfaces Name: WAN

Click Add to poll

Continue filling the ISP IP monitor to 2

Monitor IP: Other -> 202.134.0.155

Interfaces Name: OPT1

Click Add to poll

Click Save

TIPS:

To maximize employment, IP Monitor IP Address should be sought across the ISP's router there dr router position in the fastest and closest office who should not encounter problems with the IP and DNS. Can be in the know with melakukn trace route to the ISP's DNS

The results such as the following fig

8. Setting Firewall Rules

Click Firewall -> Rules

Next do the following configuration:

A. Setting the LAN

Action: Pass

Interface: LAN

Protocol: TCP

Source: Type = LAN Subnet

Destination: Type = any

Gateway: Balancer

Click Save & Apply Changes

B. WAN Settings -> Link Indosat

Action: Pass

Interface: WAN

Protocol: TCP

Source: Type = LAN Subnet

Destination: Type = WAN Address

Gateway: 202.155.73.41

Click Save & Apply Changes

B. Setting OPT1 -> Link Speedy

Action: Pass

Interface: OPT1

Protocol: TCP

Source: Type = LAN Subnet

Destination: Address Type = OPT1

Gateway: 192.168.1.1

Click Save & Apply Changes

This documentation only describes the basic settings in pfsense dr Load Balancing. Many more who could do with functions of a firewall, routing, aliasing, grout, incoming balancing, bandwidth management. This information can dig pd www.pfsense.org website.

source : konfigurasi-loadbalancing-pfsense

Configure SquidGuard On Pfsense

What is a squidGuard
SquidGuard is a URL redirector used to use blacklists with the proxy software Squid. There are two big advantages to squidguard: it is fast and it is free. SquidGuard is published under GNU Public License.

SquidGuard can be used to
limit the web access for some users to a list of accepted/well known web servers and/or URLs only.
block access to some listed or blacklisted web servers and/or URLs for some users.
block access to URLs matching a list of regular expressions or words for some users. enforce the use of domainnames/prohibit the use of IP address in URLs.
redirect blocked URLs to an info page.
redirect banners to an empty GIF.
have different access rules based on time of day, day of the week, date etc. 

Installation

    Open Packages list: click System > Packages
    Install the Squid package, if it is not installed.
    Configure Squid package.
    Install SquidGuard package.

Configure the SquidGuard Package
Blacklist
Blacklists are optional, but often useful for allowing access to certain types of sites.
SquidGuard comes with a small blacklist basically for testing purposes. In production you don't want to use them. A better way is to start with one of the blacklist collections listed (alphabetically) below.

    MESD blacklists - They are freely available.
    Shalla's Blacklists - Free for non commercial/privat use. (Recommended)
    more..  Configure a Professional firewall using pfSense

Downloading blacklist:

1. Open General Settings tab in SquidGuard package GUI, found at   Services > Proxy Filter.
2. Check Blacklist to enable the use of blacklists
3. Enter blacklist url in the field Blacklist URL.
4. If your firewall is itself behind a proxy, enter the proxy informaion in Blacklist proxy (this   step is not         necessary for most people)
5. Click Save
6. Navigate to the Blacklist tab inside of Squidguard
7. Click the Download button.
8. Wait, while blacklist will downloaded and prepared to use(10-35 min). Progress will be displayed on that page as the list is downloaded and processed.

 original post
Tunning Performance Proxy : Lusca
Configure_the_SquidGuard_Package

Install Lusca Cache di Pfsense

Linux Distribution Guide

Introduction-Linux Distribution Guide

This is a brief guide to the world of Linux distributions, primarily aimed at individuals who are new to the Linux scene, and who are thinking about taking the plunge and trying Linux for the first time.  To set the scene, let's start with a very brief history of the origins of Linux.The Linux kernel was started by Linus Torvalds in 1991, who was at the time studying at the University of Helsinki.  Linux was originally intended to be a replacement for Minix, an operating system designed for educational purposes.   One of the most important decisions ever made by Linus was the licensing agreement that the kernel was released under, the GNU General Public License (GPL).  Using the GPL meant that the programming code was freely-distributed and available to the general public.  This in turn encouraged thousands of developers to submit their own contributions to the code.  It is estimated that 1.5-2% of the kernel has been written by Linus Torvalds. 
What is a Linux Distribution?
If you follow the IT press, you probably have heard of some Linux companies such as Red Hat, Mandriva, SuSE, and Debian.  These are all organisations that have created their own 'distributions' (often known as distros) of Linux.
A Linux distribution is more than just the kernel itself.  A typical desktop Linux distribution consists of various software components including the Linux kernel, the GNU toolchain, and a collection of free and open source software, such as office suites, email clients, web browsers, instant messaging, graphics editors, video players and more.  This software is released in both binary and source code form, the former of which is code that the computer can understand, the latter what humans can read.  Having the source code released under a GPL license means that other developers can legally modify the software, thereby providing a mechanism where the community can contribute to the development of the software components.  With most distributions there is often some proprietory software included where the source code may not be released.  This may be due to patent and licensing restrictions.
There are in excess of 700 linux distributions available, of which more than half currently are being actively developed.  However, try not to be daunted by this vast number.  This huge number is partly a reflection of the fact that there is no barrier preventing an individual or organisation from creating their own distribution.  Many distros were started simply because an individual felt that none of the existing distros met his specific requirements.  Furthermore, many of the distros are derived from one of the 'major' distros, sharing the same base, even sometimes being released at the same time.  To illustrate, let's take the popular Debian distribution.  The following distributions are all based on Debian:

General Purpose:
Finnix, Freespire, Linspire, Simply GNUstep, Symphony OS, Ubuntu (see list below), and Xandros.
Live CD:
Arco-Debian Linux, Big Linux, CÃ tix, DeveLinux, Dreamlinux, Elive, Kanotix, Knoppix (see list below), Morphix, Parsix, and sidux.
Security: Adamantix
Mini: Bonzai Linux
International:
Amber Linux, Bayanihan Linux, BeatrIX Linux, LinEx, Loco Linux, NepaLinux, PingOO, Sun Wah RAYS LX, Tuquito, and Trisquel.

Additionally, some of these 'derived' distros have themselves also spawned a whole raft of other distributions. 

List of Distribtions based on Knoppix: Barnix, Bioknoppix, ClusterKNOPPIX, Clusterix, Condorux, CosmoPBX, Damn Small Linux, Danix, Dappix, DCC/Live, Dinux, distccKNOPPIX, DistccPPCKnoppix, emKnoppix, FCCU GNU/Linux Forensic Boot CD, eduKnoppix, Feather Linux, FREEDUC, GIS-Knoppix,  grml, Instant-Grid, Julex, Kazit, KernelKit, knopILS, Knoppel, Knoppix 64, Knoppix-Mib, Kalango, Knosciences, Kuliax, Kurumin, Lin4Astro, Local Area Security Knoppix, Linux Live Game Project, Luit Linux, Medialinux, Mentoppix, Musix, Myrinix, NordisKnoppix, OGo Knoppix CD, Overclockix, PaiPix, ParallelKnoppix, Parsix, Paipix, Penguin Sleuth Bootable CD, Quantian, ROSLIMS, Shabdix, SLYNUX, StreamBOX-LiveCD, Toophpix, Vigyaan, Vital Data Forensic or Rescue Kit (FoRK), Xarnoppix, Xfld, ZoneCD

List of Distributions based on Ubuntu: Edubuntu, Kubuntu, Xubuntu, Ubuntu CE (all official derivations); andLinux, Elbuntu, Fluxbuntu, gNewSense, Gnoppix, Hiweed, Impi Linux, Linux for Clinics, LinuxMCE, nUbuntu, Scibuntu, Uberyl, Ubuntu Lite, Ubuntu Stunio, and XUbuntu.

Phew! As you can see, over 100 distributions are based on Debian alone! 

Take a look at the Linux distro timeline below (clicking on the graphic will make it readable).  This timeline gives you an accurate representation of when distros were launched, and when other distros were spawned from their parent distribution.

Configure a Professional firewall using pfSense

The guide will take you through the setup of the pfSense firewall with one WAN interface, one LAN interface and one Opt1-WiFi Interface.

This guide was written for Linksys, Netgear, and D-link users with no firewall or router experience. No experience is needed with FreeBSD or GNU/Linux to install and run pfSense. When you are finished, management of pfSense will be from a web interface just like any of the SOHO firewall/router appliances.pfSense is a web-based firewall project that is similar, in terms of functionality, to the software in firewall appliances sold by Linksys, Netgear and D-Link. pfSense covers all the basic requirements offered by those appliances but offers so much more--in fact, it is really in a class by itself since it would be very difficult to find a commercial alternative that would provide what pfSense has to offer (or, anything cheaper than $2,000–$5,000).As mentioned above, in this article I will explain how to setup the pfSense firewall with one WAN interface, one LAN interface and one Opt1-WiFi Interface. This set-up allows you to offer wireless Internet to the surrounding community. The WiFi subnet will not be able to access the LAN: it will be able to connect to the Internet only. You can choose to eliminate the Opt1-WiFi setup: this will leave you with a firewall more similar to the "conventional" 
appliances.One of the very unique uses for your new firewall could be to offer wireless Internet to your neighbors at a reduced costOne of the very unique uses for your new firewall could be to offer wireless Internet to your neighbors at a reduced cost. This connection can be via an encrypted access point, where the network key is only given to approved users, or an open access point where you control access to the Internet with the captive portal function built in to pfSense. A portal landing page will be presented whenever a user tries to connect to the Internet at the beginning of the session. Each user will need to have their user name and password entered into the firewall in advance of the first connection.
There are many advanced features that pfSense can offer with one-click installation which are listed at the end of this article. See the pfSense's web site. There is an active user forum and an pfSense Wiki.