OPNsense Forum

English Forums => General Discussion => Topic started by: temporaryuser on March 25, 2016, 07:59:17 pm

Title: Wishlist: Collection of features & strategy proposals for OPNsense
Post by: temporaryuser on March 25, 2016, 07:59:17 pm
Hi everyone,

This thread is intended to function as a centralized collection of community ideas on what features to implement in OPNsense and proposals concerning the overall strategy and future of the project.

Please add your suggestions to this thread so we can discuss and elaborate and shape the future of OPNsense together!

Cheers
temporaryuser
Title: Re: Wishlist: Collection of features & strategy proposals for OPNsense
Post by: temporaryuser on March 25, 2016, 08:23:11 pm
Here is my list:


By my estimation, the suggestions to a) relicense OPNsense with the GPLv3 and b) to create a foundation for OPNsense, would really make a difference for this nice project.
A strategical decision of this significance would really separate OPNsense from pfSense, since those changes would initiate an absolutely new path for OPNsense and give this project a completely new character, instead of just being what in marketing strategy is called "same-but-a-bit-better".
As a result, from a marketing perspective, OPNsense would have a real competitive advantage over pfSense, both, on the side of it's relationship to partner companies and contributors as well on the side of it's users. I expect those advantages make the user base, the number of contributors and the number of companies that want to back this project skyrocket.

Cheers
temporaryuser
Title: Re: Wishlist: Collection of features & strategy proposals for OPNsense
Post by: Σουπεργιούζερ on March 26, 2016, 08:57:52 am
My whishlist is:

Title: Re: Wishlist: Collection of features & strategy proposals for OPNsense
Post by: fabian on April 02, 2016, 10:27:36 pm
Want to add this to the wishlist:
Title: Re: Wishlist: Collection of features & strategy proposals for OPNsense
Post by: AdSchellevis on April 03, 2016, 11:21:51 am
Σουπεργιούζερ,
 
Increase security of OPNsense file downloads:
Good point, we could add the signatures to our download page, we will certainly take this into account.

Real time, dashboard-like, human readable, aggregated, in-depth, IP- or user-based network activity monitoring/ surveillance:
This one is on our roadmap (https://opnsense.org/about/road-map/) since the release of 16.1 for 16.7, there will be some sort of analysis in OPNsense using Netflow.

Live demo on website:
I do like the idea, although I don't expect we have time to release this any time soon.

Firewall:
The firewall scripting really needs a lot of work before it's a good idea to extend more there.
It's always interesting to know if other people miss the functionality your describing here.

Plugins for hardware:
The plugin architecture is fully in place since version 16.1 (https://github.com/opnsense/plugins), as soon as enough people need the same kind of functionality its likely new plugins do arrive.

Honeypot:
We haven't looked at it yet, might be a nice idea at some point in time.

Refine & improve release cycle:
We have mechanisms in place to rollback versions if you have them and have proven to respond very fast on the few issues we had.
Given the enormous lack of maintenance of the project we forked from, we spend a *lot* of time rewriting code to make it better readable, more consistent and solve a lot of structural issues.
We might consider additional options after release 16.7, but no concrete plans yet.


Best regards.

Ad
Title: Re: Wishlist: Collection of features & strategy proposals for OPNsense
Post by: klausneil on April 04, 2016, 05:29:40 am
Greetings, not if this is the way but I wanted to express my humble but collaborative idea and my whishlist is basicly for the proxy module:

* Create group by ip or users for apply filter rules of the proxy by each one.
* Create time of access by groups by  the proxy.
* Cutomize the page of deny proxy
* The log displays information such as time of access, domain, url and / or MIME type.
* A button to clear the cache proxy.

Thanks for your consideration and time.
Title: Re: Wishlist: Collection of features & strategy proposals for OPNsense
Post by: sergey1984qq on April 04, 2016, 09:57:08 am
I deal with dnscrypt proxy as described in these guide https://ramirosalas.com/installing-dnscrypt-in-opnsense.html (https://ramirosalas.com/installing-dnscrypt-in-opnsense.html)

Pesronally what I want it to see in the future opnsense builds is the ability to use dnscrypt proxy out of the box with conjunction of privoxy or tor services these would be great feature if implemented like in way they does with suricata package that is work for IPS/IDS and can be correctly setting up through GUI.

But I do it for a standard dns port 53 and dhcp on my client sabayon system through network-manager, I issuing then command dig -4 @127.0.0.1 -p 53 slashdot.org and seems all kind of logic dnscrypt provides to my system through DNS Forwarder works fine. I don't know how to check if it going to encrypt my dns queries or not cause not know is there any dns sniffer are availible for freebsd distribution. Well I does also standard steps and setup not just public but official dnscrypt servers from their github file that provides complete list of standard dnscrypt-proxy servers.
Title: Re: Wishlist: Collection of features & strategy proposals for OPNsense
Post by: GreG.P. on April 25, 2016, 06:55:14 pm
Hi all,

I think the good values were to add some essentials information into the banner (top banner) like these info listed below.

Optional:

PS: I think essentials informations or links are important into the banner but need to stay clearly readable and visible.

Regards,
GreG
Title: Re: Wishlist: Collection of features & strategy proposals for OPNsense
Post by: donkey on September 21, 2017, 07:52:49 am
I would like to congratulate for the great and excellent project.

My suggestion would be an ajax supported webUI mainly to allow to move filter rules up and down by drag & drop.

many thanks  ;)

Title: Re: Wishlist: Collection of features & strategy proposals for OPNsense
Post by: AndyX90 on September 23, 2017, 12:04:43 pm
Hey guys,
great work and great progress!
Here is my personal plugin/feature-wishlist:
- gui customizable blockpages in webproxy/clamav
- wpad package
- apache-guacamole like html5-portal
- postfix package
- some kind of port-knocking-feature to temporary open/close ports
- iperf package
(- proxy sso using ntlm)

Best regards,

Andy
Title: Re: Plugin/Feature wishlist
Post by: fabian on September 23, 2017, 12:17:40 pm
SSO is currently under development: https://github.com/opnsense/plugins/pull/266

iperf, postfix: if you want only the package (no plugin) it should not be a problem to add it - you need to add a request here: https://github.com/opnsense/tools/issues
port knocking: there is already a feature request but nobody did implement it: https://github.com/opnsense/plugins/issues/37

wpad: is there a ready to use package?
apache-guacamole: may be possible to support but probably not without a plugin (which needs to be contributed).

gui customizable blockpages in webproxy/clamav -> first of all, web proxy and clamav are separated - the proxy is in core the clamav and  c-icap are plugins. This are different maintainers and different repositories. If there would be time for that, somebody would have already implemented it.
Title: Re: Wishlist: Collection of features & strategy proposals for OPNsense
Post by: AndyX90 on September 23, 2017, 02:28:17 pm
Oh sorry i meant plugins not packages

Gesendet von meinem LG-H850 mit Tapatalk