The ability to restrict on items such as domain names is very advantageous as it allows administrators to thwart attempts of internal machines attempting to connect out to known bad domains ( in other words, domains that may be known to have malware, illegal content, or other insidious pieces of data). PfBlockerNG provides pfSense with the ability for the firewall to make allow/deny decisions based items such as the geolocation of an IP address, the domain name of a resource, or the Alexa ratings of particular websites. As with anything in the computing world, there isn’t a one solution fixes all product out there. PfBlockerNG is a package that can be installed in pfSense to provide the firewall administrator with the ability to extend the firewall’s capabilities beyond the traditional stateful L2/元/L4 firewall.Īs the capabilities of attackers and cyber criminals continues to advance, so must the defenses that are put in place to thwart their efforts. This article is going to talk about a wonderful add-on package for pfsense called pfBlockerNG. pfSense, as mentioned in the earlier article, is a very powerful and flexible firewall solution that can make use of an old computer that may be laying around not doing much.
In an earlier article the installation of a powerful FreeBSD based firewall solution known as pfSense was discussed.
0 kommentar(er)
