PFSense?

[Charles Sprickman]

Hello all,

I've been spending part of my day here toying with pfsense 
(http://www.pfsense.org) while I figure out why OpenBSD past 3.5 panics on 
boot on my old hardware...  It looks very interesting so far.  I do wish 
that they'd based it on OpenBSD instead of FreeBSD.

It's basically a very stripped-down FreeBSD 6-stable release with a web 
gui for pf.  It's far from perfect, but they do have some of the more 
advanced features exposed in the webgui, including hfsc queueing with some 
handy built-in rules for VoIP and similar.

I'm wondering what some of the gurus here think of this.  So far I've 
learned a few things by studying some of the configs it has generated 
(like how to do "nat reflection" so one can reach natted host services by 
name from natted workstations without split dns, how anchors work).

Any comments on this project?  I do like the idea of being able to drop a 
fairly sophisticated "appliance" at a client site that uses pf...

Thanks,

Charles