| Sidebar Sponsor |
 |
| Random Distribution | 
PAIPIX
PAIPIX was a compilation of free software, based on Debian Live, that was meant to be used in any environment, but with special vocation for educational use in the information and instrumentation technologies. It was developed by the College of Sciences at the University of Lisbon.
Status: Discontinued
|
|
 Latest News and Updates |
|
|
| 2017-02-21 |
NEW • BSD Release: pfSense 2.3.3 |
Rate this project
|
Jim Pingle has announced the release of pfSense 2.3.3, an updated build of the FreeBSD-based specialist operating system designed for firewalls and routers: "We are happy to announce the release of pfSense software version 2.3.3. This is a maintenance release in the 2.3.x series, bringing numerous stability and bug fixes, fixes for a handful of security issues in the GUI, and a handful of new features. The full list of changes is on the 2.3.3 New Features and Changes page, including a list of FreeBSD and internal security advisories addressed by this release. As always, you can upgrade from any prior version directly to 2.3.3. The Upgrade Guide covers everything you'll need to know for upgrading in general. While, nearly all of the common regressions between 2.2.6 and 2.3-RELEASE have been fixed in subsequent releases, the following still exist: IPsec IPComp does not work, this is disabled by default; IGMP Proxy does not work with VLAN interfaces and possibly other edge cases; those using IPsec and OpenBGPD may have non-functional IPsec unless OpenBGPD is removed." Continue to the release announcement for more information. Download: pfSense-CE-2.3.3-RELEASE-amd64.iso.gz (307MB, SHA256), pfSense-CE-2.3.3-RELEASE-i386.iso.gz (292MB, SHA256). |
|
| About pfSense
|
| pfSense is a free, open source customized distribution of FreeBSD specifically tailored for use as a firewall and router that is entirely managed via web interface. In addition to being a routing platform, pfSense includes a long list of related features and a package system which allows further expandability.
|
| Screenshots | 
| |
| Recent Related News and Releases |
| 2023-07-13 |
BSD Release: pfSense 2.7.0 |
|
pfSense is a free, open source customized distribution of FreeBSD specifically tailored for use as a firewall and router that is entirely managed via web interface. pfSense 2.7.0 ships with improvements to firewall performance, fixes some uPnP issues related to running multiple gaming systems on the same network, and upgrades OpenVPN. "Captive portal and limiters moved from ipfw to pf: pf is the default packet filter in pfSense software. These changes leverage L2 features previously added to pf and upstreamed to FreeBSD, and improve performance and stability of the captive portal by eliminating the need for packets to traverse both pf and ipfw.
UPnP and multiple game systems: A fix has been added to address an issue with UPnP and multiple game systems. This resolves the problems some game systems experienced connecting to the internet when UPnP was enabled and multiple consoles are in use. New gateway state killing options: These options give the user more flexibility in how the firewall decides to kill states automatically during failover events and also adds several new manual ways to selectively remove states. Improved Firewall/NAT rule usability: The Firewall/NAT rule interface has been improved to make it easier to create and manage rules. This includes new buttons to toggle multiple rules and copy rules to other interfaces." These, and other changes, are detailed in the release announcement and in the release notes. Download: pfSense-CE-2.7.0-RELEASE-amd64.iso.gz (472MB, SHA256). |
|
| 2022-02-15 |
BSD Release: pfSense 2.6.0 |
|
Jim Pingle has announced the release of pfSense 2.6.0, the latest stable version of the project's FreeBSD-based specialist operating system for firewalls and routers. Some of the changes and new features of the release include: "IPsec VTI interface names have changed in this release, configurations will be updated automatically where possible to use the new names; IPsec status page and widget are significantly faster, show more complete information, and have additional useful functionality; ZFS is now the default filesystem for installations where possible; new Disks widget to replace the disk usage list in the System Information widget - this widget is automatically added and enabled if the firewall configuration contains the System Information widget with disk usage section active; AutoConfigBackup no longer makes pages wait to load during the backup process; the default password hash format in the User Manager has been changed from bcrypt to SHA-512; improvements to the Captive Portal logout page and process; RAM disks have been converted to tmpfs." Read the rest of the release announcement for further information. Download: pfSense-CE-2.6.0-RELEASE-amd64.iso.gz (417MB, SHA256), pfSense-CE-memstick-2.6.0-RELEASE-amd64.img.gz (418MB, SHA256). |
|
| 2021-02-17 |
BSD Release: pfSense 2.5.0 |
|
pfSense is a free, open source customized distribution of FreeBSD specifically tailored for use as a firewall and router that is entirely managed via web interface. The project's latest release, pfSense 2.5.0, is based on FreeBSD 12.2. The release announcement highlights changes in the new version: "Base OS upgraded to FreeBSD 12.2-STABLE, OpenSSL upgraded to 1.1.1, pPerformance improvements. Kernel WireGuard implementation, as mentioned in a previous WireGuard blog post. WireGuard is a new VPN Layer 3 protocol designed for speed and simplicity. The pfSense documentation site includes information on how to configure WireGuard as well as example configuration recipes. IPsec enhancements: Configuration for the strongSwan IPsec backend was changed from the deprecated ipsec.conf/stroke format to the new swanctl/VICI format. Various improvements to tunnel configuration, including better options for lifetime and rekey to avoid duplicate security associations." Download: pfSense-CE-2.5.0-RELEASE-amd64.iso.gz (359MB, SHA256). |
|
| 2020-03-26 |
BSD Release: pfSense 2.4.5 |
|
pfSense is a free, open source customized distribution of FreeBSD specifically tailored for use as a firewall and router that is entirely managed via web interface. The project's latest release upgrades the base operating system, adds improvements to the web interface and disables access time writes by default to improve disk performance. "2.4.5 adds several new features, including: OS Upgrade: Base Operating System upgraded to FreeBSD 11-STABLE after FreeBSD 11.3. Added sorting and search/filtering to several pages including the Certificate Manager, DHCP Leases, and ARP/NDP Tables. Added DNS Resolver (Unbound) Python Integration. Added IPsec DH and PFS groups 25, 26, 27, and 31. Changed UFS filesystem defaults to noatime on new installations to reduce unnecessary disk writes. Set autocomplete=new-password for forms containing authentication fields to help prevent browser auto-fill from completing irrelevant fields. Added new Dynamic DNS providers Linode and Gandi." Additional information can be found in the project's release announcement and in the release notes. Download (SHA256): pfSense-CE-2.4.5-RELEASE-amd64.iso.gz (363MB). |
|
| 2018-09-24 |
BSD Release: pfSense 2.4.4 |
|
Jim Pingle has announced the availability of pfSense 2.4.4. The new release of the pfSense operating system for routers and firewalls is based on FreeBSD 11.2 and offers several new features: "2.4.4 includes a number of significant new features: OS Upgrade - base Operating System upgraded to FreeBSD 11.2-RELEASE-p3. As a part of moving to FreeBSD 11.2, support is included for C3000-based hardware. PHP 7.2 - PHP upgraded to version 7.2, which required numerous changes to syntax throughout the source code and packages. Routed IPsec (VTI) - routed IPsec is now possible using using FreeBSD if_ipsec(4) Virtual Tunnel Interfaces (VTI). IPsec Speed Improvements - the new Asynchronous Cryptography option under the IPsec Advanced Settings tab can dramatically improve IPsec performance on multi-core hardware. Default Gateway Group - the default gateway may now be configured using a Gateway Group setup for failover, which replaces Default Gateway Switching. Limiter AQM/Queue Schedulers - limiters now include support for several Active Queue Management (AQM) methods and Queue Scheduler configurations such as FQ_CODEL." Further details can be found in the project's release announcement and in the release notes. Download: pfSense-CE-2.4.4-RELEASE-amd64.iso.gz (326MB, SHA256). |
|
| 2018-03-30 |
BSD Release: pfSense 2.4.3 |
|
Jim Pingle has announced the release of pfSense 2.4.3, the latest update of the specialist FreeBSD-based operating system for firewalls and routers: "We are excited to announce the release of pfSense software version 2.4.3, now available for new installations and upgrades. pfSense software version 2.4.3 brings security patches, several new features, support for new Netgate hardware models, and stability fixes for issues present in previous pfSense 2.4.x branch releases. This release includes several important security patches: kernel PTI mitigations for Meltdown; IBRS mitigation for Spectre V2 (requires updated CPU microcode); fixed three potential XSS vectors and two potential CSRF issues; CSRF protection for all dashboard widgets; updated several base system packages to address CVEs. In addition to security fixes, pfSense software version 2.4.3 also includes important bug fixes." Read the rest of the release announcement for a full changelog and upgrade instructions. Download: pfSense-CE-2.4.3-RELEASE-amd64.iso.gz (305MB, SHA256), pfSense-CE-memstick-serial-2.4.3-RELEASE-amd64.img.gz (306MB, SHA256). |
|
| 2017-10-12 |
BSD Release: pfSense 2.4.0 |
|
pfSense is a free, open-source customised distribution of FreeBSD specifically tailored for use as a firewall and router that is entirely managed via web interface. Jim Pingle has announced the release of pfSense 2.4.0 which uses FreeBSD 11.1 as the base operating system and supports running on ZFS. "We are excited to announce the release of pfSense software version 2.4, now available for new installations and upgrades! pfSense software version 2.4.0 was a herculean effort! It is the culmination of 18 months of hard work by Netgate and community contributors, with over 290 items resolved. According to git, 671 files were changed with a total 1,651,680 lines added, and 185,727 lines deleted. Most of those added lines are from translated strings for multiple language support. Version 2.4.0 includes a long list of significant changes in pfSense software and in the underlying operating system and dependencies. Changes for pfSense 2.4.0 include: FreeBSD 11.1-RELEASE as the base operating system; new pfSense installer based on BSDInstall, with support for ZFS, UEFI and multiple types of partition layouts (e.g. GPT, BIOS)...." The 32-bit build of pfSense is no longer available in the 2.4 series. The release announcement offers further information. Download (SHA256): pfSense-CE-2.4.0-RELEASE-amd64.iso.gz (300MB). |
|
| 2017-05-05 |
BSD Release: pfSense 2.3.4 |
|
Version 2.3.4 of pfSense, a specialist FreeBSD-based operating system designed for firewalls and routers, has been released: "We are happy to announce the release of pfSense software version 2.3.4. This is a maintenance release in the 2.3.x series, bringing stability and bug fixes, fixes for a few security issues, and a handful of new features. On the 2.3.4-RELEASE Dashboard you'll find a few additional pieces of information - the BIOS vendor, version, and release date (if the firewall can determine them) and a Netgate Unique ID. The Netgate Unique ID is similar to a serial number, it is used to uniquely identify an instance of pfSense software for customers who want to purchase support services. For hardware sold in our store, it also allows us to tie units to our manufacturing records. This ID is consistent across all platforms (bare metal, virtual machines, and hosted/cloud instances such as AWS/Azure). We had originally intended to use the hardware serial number or the UUID generated by the operating system, but we found that these were unreliable." See the release announcement and release notes for further details. Download: pfSense-CE-2.3.4-RELEASE-amd64.iso.gz (306MB, SHA256), pfSense-CE-2.3.4-RELEASE-i386.iso.gz (290MB, SHA256). |
|
| 2016-07-26 |
BSD Release: pfSense 2.3.2 |
|
Chris Buechler has announced the release of pfSense 2.3.2, a new stable version in the 2.3 branch of the project's FreeBSD-based operating system for firewalls and routers: "We are happy to announce the release of pfSense software version 2.3.2. This is a maintenance release in the 2.3.x series, bringing a number of bug fixes. It includes fixes for 60 bugs, 8 features and 2 to-do items completed. As always, you can upgrade from any prior version directly to 2.3.2. While nearly all of the common regressions between 2.2.6 and 2.3-RELEASE have been fixed in subsequent releases, the following still exist: IPsec IPComp does not work and is disabled by default, however in 2.3.1 it is automatically not enabled to avoid encountering this problem; IGMP Proxy does not work with VLAN interfaces and possibly other edge cases, this is a little-used component; those using IPsec and OpenBGPD may have non-functional IPsec unless OpenBGPD is removed." Here is the full release announcement, with further information available on the features and changes page. Download: pfSense-CE-2.3-RELEASE-amd64.iso.gz (297MB, SHA256), pfSense-CE-2.3.2-RELEASE-i386.iso.gz (282MB, SHA256). |
|
| 2016-05-19 |
BSD Release: pfSense 2.3.1 |
|
Chris Buechler has announced the release of pfSense 2.3.1, an updated version of the project's FreeBSD-based operating system designed for firewalls and routers. This is minor bug-fix release, although it also includes a number of important security updates: "We are happy to announce the release of pfSense software version 2.3.1. This is a maintenance release in the 2.3.x series, bringing a number of bug fixes, two security fixes in the GUI, as well as security fixes for OpenSSL, OpenVPN and FreeBSD atkbd and sendmsg. This release includes a total of 103 bug fixes. 79 regressions in 2.3 have been fixed, mostly minor issues in the new GUI. Several of these are significant issues, and have resolved nearly all the post-upgrade problems encountered in 2.3-RELEASE. 24 issues affecting 2.2.x and prior versions have also been fixed." Read the release announcement and check out the features and changes page for further information. Download: pfSense-CE-2.3-RELEASE-amd64.iso.gz (296MB, SHA256), pfSense-CE-2.3.1-RELEASE-i386.iso.gz (281MB, SHA256). |
|
| 2016-04-13 |
BSD Release: pfSense 2.3 |
|
Chris Buechler has announced the availability of pfSense 2.3. The new release of this FreeBSD-based firewall operating system includes a number of new changes to its web interface and fixes several bugs from previous releases. "We are happy to announce the release of pfSense software version 2.3. The most significant changes in this release are a rewrite of the webGUI using Bootstrap, and the underlying system, including the base system and kernel, being converted entirely to FreeBSD pkg. The pkg conversion enables us to update pieces of the system individually going forward, rather than the monolithic updates of the past. The webGUI rewrite brings a new responsive look and feel to pfSense requiring a minimum of resizing or scrolling on a wide range of devices from desktop to mobile phones. For the highlights, check out the features and highlights video. Past blog posts have covered some of the changes, such as the performance improvements from tryforward and the webGUI update." Further information can be found on the project's features and changes page. Download: pfSense-CE-2.3-RELEASE-amd64.iso.gz (296MB, SHA256). |
|
| 2016-04-01 |
Development Release: pfSense 2.3 RC |
|
Chris Buechler has announced the launch of a release candidate for pfSense 2.3. The development snapshot is available for testing and features a number of important changes, particularly with regards to package management: "We are proud to announce pfSense software version 2.3 Release Candidate is now available! The most significant changes in this release are a rewrite of the webGUI utilizing Bootstrap, and the underlying system being converted entirely to FreeBSD pkg (including the base system and kernel). The pkg conversion enables us to update pieces of the system individually going forward, rather than the monolithic updates of the past. Further information can be found in the project's release announcement and Features and Changes document. Download: pfSense-CE-2.3-RC-amd64.iso.gz (296MB, SHA256). |
|
| 2015-12-22 |
BSD Release: pfSense 2.2.6 |
|
Chris Buechler has announced the release of pfSense 2.2.6, an updated build of the project's FreeBSD-based operating system made for firewalls and routers. This release is largely a security update to fix issues with the software's browser-based user interface and several recent OpenSSL vulnerabilities, while it also upgrades the base system to the latest FreeBSD version: "pfSense software version 2.2.6 is now available. This release includes a few bug fixes and security updates. Security fixes and errata: webgui - local file inclusion vulnerability in the pfSense WebGUI; captiveportal - SQL injection vulnerability in the pfSense captive portal logout; webgui - multiple XSS and CSRF vulnerabilities in the pfSense WebGUI; updated to FreeBSD 10.1-RELEASE-p25; openssl - multiple vulnerabilities in OpenSSL; updated strongSwan to 5.3.5; includes fix for CVE-2015-8023 authentication bypass vulnerability in the eap-mschapv2 plugin. As always, you can upgrade from any previous version straight to 2.2.6. For those already running any 2.2.x version, this is a low-risk upgrade. For those on 2.1.x or earlier versions, there are a number of significant changes which may impact you. Pay close attention to the 2.2 upgrade notes for the details." Read the full release announcement for further details. Download: pfSense-LiveCD-2.2.6-RELEASE-amd64.iso.gz (99.2MB, SHA256). |
|
| 2015-11-06 |
BSD Release: pfSense 2.2.5 |
|
Chris Buechler has announced the release of a new version of pfSense, an operating system designed for use in firewalls. The new release, pfSense 2.2.5, arrives on the project's 11th birthday and contains mostly bug fixes for previous versions. "pfSense software version 2.2.5 is now available. This release includes a number of bug fixes and some security updates. Today is also the 11 year birthday of the project. While work started in late summer 2004, the domains were registered and the project made public on November 5, 2004. Thanks to everyone that has helped make the project a great success for 11 years. Things just keep getting better, and the best is yet to come. Security fixes and errata: webgui - multiple stored XSS vulnerabilities in the pfSense WebGUI. The complete list of affected pages and fields is listed in the linked SA." People who were running an earlier version of pfSense in the 2.2.x series should be able to upgrade smoothly to the latest version. "As always, you can upgrade from any previous version straight to 2.2.5. For those already running any 2.2.x version, this is a low risk upgrade. For those on 2.1.x or earlier versions, there are a number of significant changes which may impact you." Further information can be found in the project's release announcement. Download: pfSense-LiveCD-2.2.5-RELEASE-amd64.iso.gz (99.2MB, SHA256). |
|
| 2015-07-27 |
BSD Release: pfSense 2.2.4 |
|
Chris Buechler has announced the release of pfSense 2.2.4, a FreeBSD-based firewall solution. The new release mostly includes bug fixes and security updates. The bug fixes include patches to prevent cross-site scripting attacks against the web interface, a fix for a TCP resource exhaustion attack and enhancements to prevent file corruption during unclean shutdowns. Buechler points out that a recent patch to FreeBSD's OpenSSL implementation was not needed as pfSense did not ship the vulnerable version of the OpenSSL software. "As always, you can upgrade from any previous version straight to 2.2.4. For those already running any 2.2.x version, this is a low risk upgrade. This is a high priority upgrade for those using IPsec on 2.2.x versions. For those on 2.1.x or earlier versions, there are a number of significant changes which may impact you." The release announcement has more details and a full list of changes since the last version of pfSense can be found in the New Features and Changes document. Download: pfSense-LiveCD-2.2.4-RELEASE-amd64.iso.gz (99MB, SHA256). |
|
| 2015-06-25 |
BSD Release: pfSense 2.2.3 |
|
Chris Buechler has announced the release of pfSense 2.2.3, a security and bug-fix update of the specialist operating system designed for firewalls and routers, based on FreeBSD: "pfSense software version 2.2.3 release is now available, bringing a number of bug fixes and some security updates. Security fixes: multiple XSS vulnerabilities in the pfSense WebGUI, the complete list of affected pages and fields is large and all are listed in the linked SA; multiple OpenSSL vulnerabilities (including Logjam). The bug fixes and changes in this release are detailed here. As always, you can upgrade from any previous version straight to 2.2.3. For those already running any 2.2x version, this is a low-risk upgrade. This is a high-priority upgrade for those using IPsec on 2.2x versions. For those on 2.1.x or earlier versions, there are a number of significant changes which may impact you. Pay close attention to the 2.2 upgrade notes for the details." Here is the brief release announcement. Download links: pfSense-LiveCD-2.2.3-RELEASE-amd64.iso.gz (83.2MB, SHA256), pfSense-LiveCD-2.2.3-RELEASE-i386.iso.gz (78.5MB, SHA256). |
|
| 2015-04-16 |
BSD Release: pfSense 2.2.2 |
|
Chris Buechler has announced the release of pfSense 2.2.2, the latest update of the FreeBSD-based operating system made for firewalls and routers, providing several security fixes: "pfSense software version 2.2.2 release is now available, bringing a number of bug fixes and a couple low-risk security updates that don't apply to most users. This release includes two low-risk security updates. FreeBSD-SA-15:09.ipv6 - denial of Service with IPv6 router advertisements. Where a system is using DHCPv6 WAN type, devices on the same broadcast domain as that WAN can send crafted packets causing the system to lose IPv6 Internet connectivity. FreeBSD-SA-15:06.openssl - multiple OpenSSL vulnerabilities. Most aren't applicable, and the worst impact is denial of service. As always, you can upgrade from any previous version straight to 2.2.2. For those already running any 2.2x version, this is a low-risk upgrade. This is a high priority upgrade for those using IPsec on 2.2x versions." See the release announcement for full details. Download: pfSense-LiveCD-2.2.2-RELEASE-amd64.iso.gz (83.2MB, SHA256), pfSense-LiveCD-2.2.2-RELEASE-i386.iso.gz (78.4MB, SHA256). |
|
| 2015-03-18 |
BSD Release: pfSense 2.2.1 |
|
Chris Buechler has announced the release of pfSense 2.2.1, a security and bug-fix update of the project's FreeBSD-based specialist operating system for firewalls and routers: "pfSense software 2.2.1 release is now available, bringing a number of bug fixes and some security fixes. Security fixes: pfSense-SA-15_02.igmp - integer overflow in IGMP protocol; pfSense-SA-15_03.webgui - multiple XSS vulnerabilities in the pfSense WebGUI; pfSense-SA-15_04.webgui - arbitrary file deletion vulnerability in the pfSense WebGUI; FreeBSD-EN-15:01.vt - vt(4) crash with improper ioctl parameters; FreeBSD-EN-15:02.openssl - update to include reliability fixes from OpenSSL. A note on the OpenSSL 'FREAK' vulnerability: does not affect the web server configuration on the firewall as it does not have export ciphers enabled. pfSense 2.2 already included OpenSSL 1.0.1k which addressed the client-side vulnerability. If packages include a web server or similar component, such as a proxy, an improper user configuration may be affected. Consult the package documentation or forum for details." See the complete release announcement for further information. Download: pfSense-LiveCD-2.2.1-RELEASE-amd64.iso.gz (83.1MB, SHA256), pfSense-LiveCD-2.2.1-RELEASE-i386.iso.gz (78.4MB, SHA256). |
|
| 2015-01-24 |
BSD Release: pfSense 2.2 |
|
Chris Buechler has announced the release of pfSense 2.2, a major new update of the project's FreeBSD-based specialist operating system for firewalls and routers: "I'm happy to announce the release of pfSense software version 2.2. This release brings improvements in performance and hardware support from the FreeBSD 10.1 base, as well as enhancements we've added such as AES-GCM with AES-NI acceleration, among a number of other new features and bug fixes. In the process of reaching release, we've closed out 392 total tickets (this number includes 55 features or tasks), fixed 135 bugs affecting 2.1.5 and prior versions, fixed another 202 bugs introduced in 2.2 by advancing the base OS version from FreeBSD 8.3 to 10.1, changing IPsec keying daemons from racoon to strongSwan, upgrading the PHP backend to version 5.5 and switching it from FastCGI to PHP-FPM, and adding the Unbound DNS Resolver, and many smaller changes." Read the rest of the release announcement for a complete list of changes and new features. Download links: pfSense-LiveCD-2.2-RELEASE-amd64.iso.gz (84.2MB, SHA256), pfSense-LiveCD-2.2-RELEASE-i386.iso.gz (79.5MB, SHA256). |
|
| 2014-06-26 |
BSD Release: pfSense 2.1.4 |
|
Jared Dillard has announced the release of pfSense 2.1.4, a free network firewall distribution based on FreeBSD: "2.1.4 follows very shortly after 2.1.3 and is primarily a security release. Packages also had their own independent fixes and need updating. During the firmware update process the packages will be re-installed properly. Otherwise, uninstall and then re-install packages to ensure that the latest version of the binaries is in use. Other fixes: patch for Captive Portal pipeno leaking issue which leads to the 'Maximum login reached' on Captive Portal; remove text not relevant to Allowed IPs on the Captive Portal; remove units from burst as it is always specified in bytes; add column for internal port on UPnP status page; make listening on interface rather than IP optional for UPnP...." See the release announcement and release notes for more details. Download: pfSense-LiveCD-2.1.4-RELEASE-amd64.iso.gz (92MB, SHA256). |
|
| 2014-04-05 |
BSD Release: pfSense 2.1.1 |
|
Jim Thompson has announced the release of pfSense 2.1.1, a free network firewall distribution based on FreeBSD with a customised kernel and free third-party software packages for additional functionality: "I'm happy to announce the release of pfSense 2.1.1. The largest change is to close the following security issues / CVEs: FreeBSD-SA-14:01.bsnmpd / CVE-2014-1452; FreeBSD-SA-14:02.ntpd / CVE-2013-5211; FreeBSD-SA-14:03.openssl / CVE-2013-4353, CVE-2013-6449, CVE-2013-6450. Other than these, the em/igb/ixgb/ixgbe drivers have been upgraded to add support for i210 and i354 NICs. Some Intel 10Gb Ethernet NICs will also see improved performance." Follow the release announcement and the detailed release notes for further information. Download: pfSense-LiveCD-2.1.1-RELEASE-amd64.iso.gz (92MB, SHA256). |
|
| 2013-09-15 |
BSD Release: pfSense 2.1 |
|
Chris Buechler has announced the release of pfSense 2.1, a free, open-source and customised distribution of FreeBSD tailored for use as a firewall and router: "I'm proud to announce the release of pfSense 2.1, and our new Gold subscription. The 2.1 book and our AutoConfigBackup service, available for years to support subscribers, are immediately available today to Gold subscribers. This release brings many new features, with the biggest change being IPv6 support in almost every portion of the system. There are also a number of bug fixes and touch-ups in general. Three FreeBSD security advisories are applicable to prior pfSense releases. These aren't remotely exploitable in and of themselves, but anyone who can execute arbitrary code on your firewall could use one or more of these to escalate privileges." See the detailed release announcement for a complete list of changes, new features, bug fixes and package updates. Download links: pfSense-LiveCD-2.1-RELEASE-amd64.iso.gz (90.4MB, SHA256), pfSense-LiveCD-2.1-RELEASE-i386.iso.gz (77.6MB, SHA256). |
|
| 2013-04-15 |
BSD Release: pfSense 2.0.3 |
|
Chris Buechler has announced the release of pfSense 2.0.3, an updated version of the FreeBSD-based operating system for firewalls: "I'm happy to announce the release of pfSense 2.0.3. This is a maintenance release with some bug and security fixes since 2.0.2 release. You can upgrade from any previous release to 2.0.3. Changelog: updated to OpenSSL 0.9.8y; fix XSS in IPsec log possible from users possessing shared key or valid certificate; fix obtaining DNS servers from PPP type WANs (PPP, PPPoE, PPTP, L2TP); fix captive portal redirect URL trimming; voucher sync fixes; captive portal pruning/locking fixes; fix problem with fastcgi crashing which caused CP issues on 2.0.2; clear the route for an OpenVPN endpoint IP when restarting the VPN, to avoid a situation where a learned route from OSPF or elsewhere could prevent an instance from restarting properly...." See the detailed release announcement for a complete list of security and bug fixes. Download: pfSense-2.0.3-RELEASE-amd64.iso.gz (88.0MB, SHA256), pfSense-2.0.3-RELEASE-i386.iso.gz (76.6MB, SHA256). |
|
| 2012-12-21 |
BSD Release: pfSense 2.0.2 |
|
Chris Buechler has announced the release of pfSense 2.0.2, an updated version of the project's specialist FreeBSD-based operating system for firewalls: "pfSense 2.0.2 is a maintenance release with some bug and security fixes since the 2.0.1 release. You can upgrade from any previous release to 2.0.2. Base OS updated to 8.1-RELEASE-p13 to address FreeBSD security advisories. Added a warning to PPTP VPN configuration page - PPTP is no longer considered a secure VPN technology because it relies upon MS-CHAPv2 which has been compromised. If you continue to use PPTP be aware that intercepted traffic can be decrypted by a third party, so it should be considered unencrypted. We advise migrating to another VPN type such as OpenVPN or IPsec. Fix reference to PPTP secondary RADIUS server shared secret. PPTP 1.x to 2.x configuration upgrade fixes." See the detailed release announcement for a complete list of security and bug fixes. Download: pfSense-2.0.2-RELEASE-i386.iso.gz (76.2MB, SHA256), pfSense-2.0.2-RELEASE-amd64.iso.gz (87.6MB, SHA256). |
|
| 2011-12-21 |
BSD Release: pfSense 2.0.1 |
|
Chris Buechler has announced the release of pfSense 2.0.1, an updated version of the project's FreeBSD-based operating system for firewalls: "The pfSense 2.0.1 release is now available. This is a maintenance release with some bug and security fixes since the 2.0 release. This is the recommended release for all installations. As always, you can upgrade from any previous release to 2.0.1, so if you haven't upgraded to 2.0 yet, just upgrade straight to 2.0.1. For those who use the built-in certificate manager, pay close attention to the notes below on a potential security issue with those certificates. The following changes were made since 2.0 release: improved accuracy of automated state killing in various cases; various fixes and improvements to relayd...." Here is the brief release announcement. Download: pfSense-2.0.1-RELEASE-i386.iso.gz (97.9MB, SHA256), pfSense-2.0.1-RELEASE-amd64.iso.gz (110MB, SHA256).
|
|
| 2011-09-17 |
BSD Release: pfSense 2.0 |
|
Chris Buechler has announced the release of pfSense 2.0, a major new update of the specialist FreeBSD-based operating system designed for firewalls and gateways: "I am proud to announce the release of version 2.0. This brings the past three years of new feature additions, with significant enhancements to almost every portion of the system." Features and changes: "Based on FreeBSD 8.1-RELEASE; i386 and amd64 variants for all install types (full install, NanoBSD, embedded, etc.); USB memory stick installer images available; GRE and GIF tunnels; 3G support; multi-Link PPP (MLPPP) for bonding PPP connections; LAGG interfaces; IP Alias type Virtual IPs; IP Alias VIPs can be stacked on CARP VIPs to go beyond the 255 VHID limit in deployments that need very large numbers of CARP VIPs; QinQ VLANs; bridging enhancements - can now control all options of if_bridge, and assign bridge interfaces...." Read the release announcement and visit the features and changes page for more detailed information and upgrade instructions. Download: pfSense-2.0-RELEASE-i386.iso.gz (97.8MB, SHA256), pfSense-2.0-RELEASE-amd64.iso.gz (110MB, SHA256).
|
|
| 2011-06-22 |
Development Release: pfSense 2.0 RC3 |
|
Chris Buechler has announced the availability of the third release candidate for pfSense 2.0, a FreeBSD-based operating system for firewalls: "I'm happy to announce what will likely be the final 2.0 release candidate, RC3, is now available. RC2 was a snapshots-only tag. The mirrors are currently syncing, with a few of them done already and the remaining will sync within the coming hours. There are considerably fewer open issues on 2.0 right now than there were on 1.2.3 when it was released, and no major outstanding problems. 2.0 has gotten widespread use in production environments over the last year plus including in our most critical networks, and looks to be ready for release. We expect final release within a month, and consider RC3 the preferred release for all new installs." Here is the full release announcement. Download: pfSense-2.0-RC3-i386.iso.gz (96.5MB, SHA256), pfSense-2.0-RC3-amd64.iso.gz (110MB, SHA256).
|
|
| 2011-03-01 |
Development Release: pfSense 2.0 RC1 |
|
Chris Buechler has announced the availability of the first release candidate for pfSense 2.0, a FreeBSD-based operating system for firewalls: "Years and many thousands of hours in the making, pfSense 2.0 release candidate 1 is now available. This is considered a stable release suitable for production use, as we've already widely deployed it over the past several months in beta and upgraded numerous systems to RC1 over the weekend. This is the preferred version for new installations at this point. For existing 1.2.x users, upgrading will be a smooth process for most if not all scenarios. Some portions of the configuration are considerably different now than in 1.2.x releases, and we suspect there may be some configuration upgrade problems remaining, though we aren't aware of any specific issues at this time and have tested a wide variety of configurations." Read the release announcement and release notes for a full list of changes and new features. Download: pfSense-2.0-RC1-i386.iso.gz (95.6MB, SHA256), pfSense-2.0-RC1-amd64.iso.gz (109MB, SHA256).
|
|
| 2009-12-27 |
Development Release: pfSense 2.0 Beta 1 |
|
Chris Buechler has announced the availability of the first beta release of pfSense 2.0, a FreeBSD-based firewall system: "Our Christmas gift to the community is the 2.0 release reaching the beta milestone. The release is feature complete, with no new features being added, and should stay relatively stable throughout the remainder of the development process. That's not to say it's production-ready though, most of our developers are using it in production and have been for months, but unless you have a solid understanding of the underlying system and can manually verify the configuration, 2.0 is not yet for you. If you have a non-critical environment where you can try it out, you can find the latest build on the snapshot server. Please report your experiences on the 2.0 board on the forum." Read the complete release announcement for further details and known issues. Download: pfSense-2.0-BETA1.iso.gz (75.6MB, SHA256).
|
|
| 2009-12-11 |
BSD Release: pfSense 1.2.3 |
|
Chris Buechler has released pfSense 1.2.3, a specialist firewall distribution based on FreeBSD: "pfSense 1.2.3 is now available! This is a maintenance release in the 1.2.x series, bringing an updated FreeBSD base, some minor enhancements, some bug fixes, and a couple of security updates. We have been waiting a few weeks in anticipation of a FreeBSD security advisory for the SSL/TLS renegotiation vulnerability, which came last week and allowed us to finalize the release. Change list: upgrade to FreeBSD 7.2; embedded edition switched to NanoBSD; dynamic interface bridging bug fix; IPsec connection reloading improvements; dynamic site-to-site IPsec; sticky connections enable and disable; ability to delete DHCP leases; polling fixed; ipfw state table size; UDP state timeout increases...." Read the rest of the release announcement for a complete list of changes and enhancements. Download: pfSense-1.2.3-RELEASE-LiveCD-Installer.iso.gz (55.2MB, MD5).
|
|
| 2009-01-09 |
BSD Release: pfSense 1.2.2 |
|
Chris Buechler has announced the availability of pfSense 1.2.2, a security and bug-fix release of the FreeBSD-based firewall system: "pfSense 1.2.2 released! Only five changes from 1.2.1, but we did want to get these issues fixed and an updated version out there: setup wizard fix - removing BigPond from the WAN page on the setup wizard caused problems; SVG graphs fixed in Google Chrome; IPsec reload fix specific to large (100+ sites) deployments; bridge creation code changes - there have always been issues when attempting to bridge more than two interfaces; FreeBSD updates for two security advisories on January 7, 2009. Most users on 1.2.1 won't have any need to upgrade to 1.2.2, but if any of the above applies to you, then upgrade to this version. 1.2.2 should be used for all new installs." Please refer to the release announcement for more information. Download: pfSense-1.2.2-LiveCD-Installer.iso (49.2MB, MD5).
|
|
| 2008-12-26 |
BSD Release: pfSense 1.2.1 |
|
pfSense 1.2.1, a maintenance and bug-fix update of the FreeBSD-based mini-firewall system, has been released: "The pfSense team has a Christmas present for you all - the 1.2.1 final release. The only changes since RC4: fixed problem preventing RIP from starting; fixed broken link in VLAN reboot notification; fixed problem with SSL certificate generation. This is a strictly a maintenance release, meaning it contains only bug fixes in the pfSense code, no new features. Though we also upgraded the base operating system from FreeBSD 6.2 to 7.0, which necessitated numerous changes in how things were configured. The change to FreeBSD 7.0 brings improved performance and more hardware support." Read the complete release announcement for further information. Download the installation CD from here: pfSense-1.2.1-LiveCD-Installer.iso (49.2MB, MD5).
|
|
| 2008-12-15 |
Development Release: pfSense 1.2.1 RC3 |
|
Scott Ullrich has announced the third release candidate for pfSense 1.2.1, a FreeBSD-based firewall system: "pfSense 1.2.1-RC3 is here! Changes since RC2 include: do not accept backslash8 in alias field names; fix setup wizard WAN configuration page since removal of BIGPond; replace route get default with netstat -rn equivalent; no longer synchronise CARP configuration when not needed; do not use broadcast on CARP addresses; added OpenNTPD to Status Services; remove enable filter bridge checkbox; fix 'no state' rules; corrected description for bogon rule; now shows rejected rule icon correctly on firewall edit page; minor fixes for embedded upgrades; create a backup of config.xml prior to package installations; correct interface polling; minor PHP Shell changes/fixes.... If all goes well we will be releasing 1.2.1 final on Christmas!" Here is the full release announcement. Download: pfSense-1.2.1-RC3-LiveCD-Installer.iso (49.3MB, MD5).
|
|
| 2008-11-21 |
Development Release: pfSense 1.2.1 RC2 |
|
Chris Buechler has announced the availability of the second release candidate for pfSense 1.2.1, a FreeBSD-based firewall system: "pfSense 1.2.1-RC2 is now available for testing. This is the first official release candidate of 1.2.1, and we believe it eliminates all regressions that have been found since the first 1.2.1 snapshots were made available four months ago. Plus it fixes several bugs in 1.2. The changes from the 1.2 release: numerous changes to accommodate differences in FreeBSD 7.0; multi-WAN bug fix; bridging bug fix - problem with the way firewall rules were being applied to bridging could lead to strange behavior in some bridging scenarios; captive portal bug fix - imported from m0n0wall, related to MAC authentication with RADIUS; keep state change - the newer pf version changed to defaulting to keep state; NAT reflection bug fix; mobile IPsec fixes...." Here is the full release announcement. Download: pfSense-1.2.1-RC2-LiveCD-Installer.iso (49.2MB, MD5).
|
|
| 2008-02-26 |
BSD Release: pfSense 1.2 |
|
Chris Buechler has announced the final release of pfSense 1.2, a small firewall based on FreeBSD: "The pfSense development team is proud to bring you the 1.2 release! This brings the features and bug fixes from more than 16 months of development since the 1.0 release. Already widely tested and deployed throughout the release candidate phase, this release provides the finishing touches on releases already proven in a wide range of network environments. The changes since RC4: Improve CARP input validation; clarify text and fix typos on several screens; revert DHCP client to default timeout of 60 seconds; reload static routes when an interface IP address is changed by an administrator; fix a few areas allowing potential cross site scripting; fix a couple issues with package uninstalls...." More info in the release announcement. Download: pfSense-1.2-LiveCD-Installer.iso (59.5MB, MD5).
|
|
| 2008-01-16 |
Development Release: pfSense 1.2 RC4 |
|
pfSense, a firewall distribution based on FreeBSD, has reached the fourth and final release candidate for the new version 1.2: "The pfSense development team is happy to bring you the final release candidate in the 1.2 series. Summary of the changes since RC3: libc fix for a security advisory; do not ping other end of IPsec connections on CARP backup hosts; fix edit.php error when opening empty file; math fix on throughput graph; increase maximum alias count (99 to 299); captive portal locking improvements to fix issues in high load environments; IPsec stability fixes for large deployments; VLAN support for ALIX hardware; forced page refreshes removed from all pages; fix for display of wireless networks with a space in the SSID; updated PHP version...." Here is the full release announcement. Download: pfSense-1.2-RC4-LiveCD-Installer.iso.gz (50.7MB, MD5).
|
|
| 2007-11-08 |
Development Release: pfSense 1.2 RC3 |
|
The third release candidate of pfSense (a small, FreeBSD-based firewall) is out and ready for testing: "1.2-RC3 has been released! Here are just a few of the new improvements and features that have made their way into this new version: IPSEC Carp rules cleanup; IPSEC stability workarounds for > 150 tunnels; do not allow sticky connection bit to be set if PPPoE is enabled; work around heavy network activity issues; bump lighttpd to 1.4.18; show wireless nodes regardless of whether we can determine BSS value; IPSEC tunnel endpoint highlighting in system logs; show the IPSEC interface as an option for the traffic graph; add RRD settings page; make it possible to disable RRD graphs; correctly set reflection timeout for all protocols; restart SNMP services after LAN IP changes..." See the release announcement for a complete list of changes. Download: pfSense-1.2-RC3-LiveCD-Installer.iso.gz (49.7MB, MD5).
|
|
| 2007-08-18 |
Development Release: pfSense 1.2 RC2 |
|
The second release candidate of pfSense, a FreeBSD-based firewall, is ready for testing: "pfSense 1.2-RC2 has been released. Here are just a few of the new improvements and features that have made their way into this new version: automatically restarts racoon (ipsec-tools if it wedges); ensure CARP status page cache is cleared before load; updated lighttpd to 1.4.15; APC updated to 3.0.14; update to DNSMASQ 2.3.9; ensure that rules are cleared from UPNP when service is stopped; correctly show IPSEC firewall rules tab when Mobile IPSEC is enabled; quality graph miscellaneous alignments; backport show username on captive portal status screen; do not allow aliases named 'pptp'; TCP timeout time fixes." Read the complete changelog for full details. Download: pfSense-1.2-RC2-LiveCD-Installer.iso.gz (37.6MB, MD5).
|
|
| 2007-07-04 |
Development Release: pfSense 1.2 Beta 2 |
|
Scott Ullrich has announced the second beta release of pfSense 1.2, a FreeBSD-based firewall: "1.2-BETA-2 has been released. Here are just a few of the new improvements and features that have made their way into this new version: advanced outbound NAT fixes; UPNP now works on live CD; miscellaneous log viewing fixes; password field lengths now line up on nervecenter theme; IPSEC now works correctly on CARP interfaces out of the box; routed hosts behind a policy-routed segment can now reach the LAN interface correctly when the anti-lockout rule is enabled; pfSync and CARP now will work correctly on extremely restrictive rulesets; captive portal images fixed...." Read the rest of the release announcement for full details. Download: pfSense-1.2-BETA-2-LiveCD-Installer.iso.gz (27.6MB, MD5).
|
|
| 2007-05-01 |
Development Release: pfSense 1.2 Beta 1 |
|
The first beta of the FreeBSD-based pfSense firewall is ready for testing: "pfSense 1.2-BETA-1 has been released! Here are just a few of the new improvements and features that have made their way into this new version: FreeBSD updated to 6.2; reworked load balancing pools which allow for round robin or failover; miniupnpd has proven to work so well that it is now in the base install but deactivated by default; much enhanced RRD graphs; numerous Squid package fixes; PPTP server includes WINS server settings correctly now; general OpenVPN stability improvements; 'Nervecenter' theme added as default; captive portal now allows traffic to port 8000 and 8001 behind the scenes; multiple miscellaneous pf rule fixes to prevent broken rulesets...." Read the rest of the release announcement for more details. Download: pfSense-1.2-BETA-1-LiveCD-Installer.iso.gz (27.6MB, MD5).
|
|
| 2006-10-30 |
BSD Release: pfSense 1.0.1 |
|
A bug-fix update to the recently released pfSense 1.0, a FreeBSD-based firewall distribution, is out: "1.0.1 is now making its way to the mirrors and here is a rundown of the bugs fixed: set maximum cache size for APC to 7 MB; re-start 'check reload status' if it exits; miscellaneous syslog.conf fixes; Snort now blocks traffic correctly; PF does not know about congestion flags, remove from shaper; miscellaneous OpenNTPD system logging tab fixes; removes states from a user when disconnected by Captive Portal; fix FTP helper when strict LAN or Optional LAN rules are in place; ZoneEdit now works; filter reloads rules correctly after changes; faster, snappier webConfigurator and console." Here is the full release announcement. Download: pfSense-1.0.1-LiveCD-Installer.iso.gz (26.3MB, MD5).
|
|
| 2006-10-14 |
BSD Release: pfSense 1.0 |
|
The first stable build of pfSense, a m0n0wall-inspired, FreeBSD-based firewall system, has been released: "The pfSense team is excited to bring you our first ever real release! That is right, 1.0 is finally blessed and is making its way to the mirrors now. We have tried really hard to eliminate all bugs but with any software we expect to find some as this release will be used by a lot more people. With that said, there are a few problems that you should be aware of. Check this Wiki article to see the release caveats. Other than the few small items mentioned in the above Wiki article 1.0 is solid and performs quite well. We are rather proud of our work. So grab 1.0 and install it this weekend and head over to our forum and post your experiences, good or bad." Here is the brief release announcement. Download: pfSense-LiveCD-1.0-RELEASE-Installer.iso (33.6MB, MD5).
|
|
|
| Sidebar Sponsor |
 |
|
• 
• 
• 
• 
• 
• 
• 
bc1qtede6f7adcce4kjpgx0e5j68wwgtdxrek2qvc4 
86fA3qPTeQtNb2k1vLwEQaAp3XxkvvvXt69gSG5LGunXXikK9koPWZaRQgfFPBPWhMgXjPjccy9LA9xRFchPWQAnPvxh5Le