|
Latest News and Updates |
|
|
| 2012-12-21 |
NEW • BSD Release: pfSense 2.0.2 |
 |
Chris Buechler has announced the release of pfSense 2.0.2, an updated version of the project's specialist FreeBSD-based operating system for firewalls: "pfSense 2.0.2 is a maintenance release with some bug and security fixes since the 2.0.1 release. You can upgrade from any previous release to 2.0.2. Base OS updated to 8.1-RELEASE-p13 to address FreeBSD security advisories. Added a warning to PPTP VPN configuration page - PPTP is no longer considered a secure VPN technology because it relies upon MS-CHAPv2 which has been compromised. If you continue to use PPTP be aware that intercepted traffic can be decrypted by a third party, so it should be considered unencrypted. We advise migrating to another VPN type such as OpenVPN or IPsec. Fix reference to PPTP secondary RADIUS server shared secret. PPTP 1.x to 2.x configuration upgrade fixes." See the detailed release announcement for a complete list of security and bug fixes. Download: pfSense-2.0.2-RELEASE-i386.iso.gz (76.2MB, SHA256), pfSense-2.0.2-RELEASE-amd64.iso.gz (87.6MB, SHA256). |
|
| About pfSense
|
| pfSense is a m0n0wall-derived operating system. It uses Packet Filter, FreeBSD 6.x (or DragonFly BSD when ALTQ and CARP is finished), ALTQ for excellent packet queuing, and an integrated package management system for extending the environment with new features.
|
| Recent Related News |
| 2013-04-15 |
BSD Release: pfSense 2.0.3 |
 |
Chris Buechler has announced the release of pfSense 2.0.3, an updated version of the FreeBSD-based operating system for firewalls: "I'm happy to announce the release of pfSense 2.0.3. This is a maintenance release with some bug and security fixes since 2.0.2 release. You can upgrade from any previous release to 2.0.3. Changelog: updated to OpenSSL 0.9.8y; fix XSS in IPsec log possible from users possessing shared key or valid certificate; fix obtaining DNS servers from PPP type WANs (PPP, PPPoE, PPTP, L2TP); fix captive portal redirect URL trimming; voucher sync fixes; captive portal pruning/locking fixes; fix problem with fastcgi crashing which caused CP issues on 2.0.2; clear the route for an OpenVPN endpoint IP when restarting the VPN, to avoid a situation where a learned route from OSPF or elsewhere could prevent an instance from restarting properly...." See the detailed release announcement for a complete list of security and bug fixes. Download: pfSense-2.0.3-RELEASE-amd64.iso.gz (88.0MB, SHA256), pfSense-2.0.3-RELEASE-i386.iso.gz (76.6MB, SHA256). |
|
| 2011-12-21 |
BSD Release: pfSense 2.0.1 |
 |
Chris Buechler has announced the release of pfSense 2.0.1, an updated version of the project's FreeBSD-based operating system for firewalls: "The pfSense 2.0.1 release is now available. This is a maintenance release with some bug and security fixes since the 2.0 release. This is the recommended release for all installations. As always, you can upgrade from any previous release to 2.0.1, so if you haven't upgraded to 2.0 yet, just upgrade straight to 2.0.1. For those who use the built-in certificate manager, pay close attention to the notes below on a potential security issue with those certificates. The following changes were made since 2.0 release: improved accuracy of automated state killing in various cases; various fixes and improvements to relayd...." Here is the brief release announcement. Download: pfSense-2.0.1-RELEASE-i386.iso.gz (97.9MB, SHA256), pfSense-2.0.1-RELEASE-amd64.iso.gz (110MB, SHA256).
|
|
| 2011-09-17 |
BSD Release: pfSense 2.0 |
 |
Chris Buechler has announced the release of pfSense 2.0, a major new update of the specialist FreeBSD-based operating system designed for firewalls and gateways: "I am proud to announce the release of version 2.0. This brings the past three years of new feature additions, with significant enhancements to almost every portion of the system." Features and changes: "Based on FreeBSD 8.1-RELEASE; i386 and amd64 variants for all install types (full install, NanoBSD, embedded, etc.); USB memory stick installer images available; GRE and GIF tunnels; 3G support; multi-Link PPP (MLPPP) for bonding PPP connections; LAGG interfaces; IP Alias type Virtual IPs; IP Alias VIPs can be stacked on CARP VIPs to go beyond the 255 VHID limit in deployments that need very large numbers of CARP VIPs; QinQ VLANs; bridging enhancements - can now control all options of if_bridge, and assign bridge interfaces...." Read the release announcement and visit the features and changes page for more detailed information and upgrade instructions. Download: pfSense-2.0-RELEASE-i386.iso.gz (97.8MB, SHA256), pfSense-2.0-RELEASE-amd64.iso.gz (110MB, SHA256).
|
|
| 2011-06-22 |
Development Release: pfSense 2.0 RC3 |
 |
Chris Buechler has announced the availability of the third release candidate for pfSense 2.0, a FreeBSD-based operating system for firewalls: "I'm happy to announce what will likely be the final 2.0 release candidate, RC3, is now available. RC2 was a snapshots-only tag. The mirrors are currently syncing, with a few of them done already and the remaining will sync within the coming hours. There are considerably fewer open issues on 2.0 right now than there were on 1.2.3 when it was released, and no major outstanding problems. 2.0 has gotten widespread use in production environments over the last year plus including in our most critical networks, and looks to be ready for release. We expect final release within a month, and consider RC3 the preferred release for all new installs." Here is the full release announcement. Download: pfSense-2.0-RC3-i386.iso.gz (96.5MB, SHA256), pfSense-2.0-RC3-amd64.iso.gz (110MB, SHA256).
|
|
| 2011-03-01 |
Development Release: pfSense 2.0 RC1 |
 |
Chris Buechler has announced the availability of the first release candidate for pfSense 2.0, a FreeBSD-based operating system for firewalls: "Years and many thousands of hours in the making, pfSense 2.0 release candidate 1 is now available. This is considered a stable release suitable for production use, as we've already widely deployed it over the past several months in beta and upgraded numerous systems to RC1 over the weekend. This is the preferred version for new installations at this point. For existing 1.2.x users, upgrading will be a smooth process for most if not all scenarios. Some portions of the configuration are considerably different now than in 1.2.x releases, and we suspect there may be some configuration upgrade problems remaining, though we aren't aware of any specific issues at this time and have tested a wide variety of configurations." Read the release announcement and release notes for a full list of changes and new features. Download: pfSense-2.0-RC1-i386.iso.gz (95.6MB, SHA256), pfSense-2.0-RC1-amd64.iso.gz (109MB, SHA256).
|
|
| 2009-12-27 |
Development Release: pfSense 2.0 Beta 1 |
 |
Chris Buechler has announced the availability of the first beta release of pfSense 2.0, a FreeBSD-based firewall system: "Our Christmas gift to the community is the 2.0 release reaching the beta milestone. The release is feature complete, with no new features being added, and should stay relatively stable throughout the remainder of the development process. That's not to say it's production-ready though, most of our developers are using it in production and have been for months, but unless you have a solid understanding of the underlying system and can manually verify the configuration, 2.0 is not yet for you. If you have a non-critical environment where you can try it out, you can find the latest build on the snapshot server. Please report your experiences on the 2.0 board on the forum." Read the complete release announcement for further details and known issues. Download: pfSense-2.0-BETA1.iso.gz (75.6MB, SHA256).
|
|
| 2009-12-11 |
BSD Release: pfSense 1.2.3 |
 |
Chris Buechler has released pfSense 1.2.3, a specialist firewall distribution based on FreeBSD: "pfSense 1.2.3 is now available! This is a maintenance release in the 1.2.x series, bringing an updated FreeBSD base, some minor enhancements, some bug fixes, and a couple of security updates. We have been waiting a few weeks in anticipation of a FreeBSD security advisory for the SSL/TLS renegotiation vulnerability, which came last week and allowed us to finalize the release. Change list: upgrade to FreeBSD 7.2; embedded edition switched to NanoBSD; dynamic interface bridging bug fix; IPsec connection reloading improvements; dynamic site-to-site IPsec; sticky connections enable and disable; ability to delete DHCP leases; polling fixed; ipfw state table size; UDP state timeout increases...." Read the rest of the release announcement for a complete list of changes and enhancements. Download: pfSense-1.2.3-RELEASE-LiveCD-Installer.iso.gz (55.2MB, MD5).
|
|
| 2009-01-09 |
BSD Release: pfSense 1.2.2 |
 |
Chris Buechler has announced the availability of pfSense 1.2.2, a security and bug-fix release of the FreeBSD-based firewall system: "pfSense 1.2.2 released! Only five changes from 1.2.1, but we did want to get these issues fixed and an updated version out there: setup wizard fix - removing BigPond from the WAN page on the setup wizard caused problems; SVG graphs fixed in Google Chrome; IPsec reload fix specific to large (100+ sites) deployments; bridge creation code changes - there have always been issues when attempting to bridge more than two interfaces; FreeBSD updates for two security advisories on January 7, 2009. Most users on 1.2.1 won't have any need to upgrade to 1.2.2, but if any of the above applies to you, then upgrade to this version. 1.2.2 should be used for all new installs." Please refer to the release announcement for more information. Download: pfSense-1.2.2-LiveCD-Installer.iso (49.2MB, MD5).
|
|
|
| Web Security |

Scan your website for Cross Site Scripting with Acunetix WVS and safeguard your WordPress website by signing up for a WebsiteDefender account. WebsiteDefender detects malware, vulnerabilities, backs up and restores your website, and advises you how to keep your website secure.
|
|