PBR (Policy Based Routing) And PFSense

I went to a customer site today where they had a Toshiba IP phone system that would not route but to only one destination (the default gateway).  But the need was to have certain traffic go out one internet connection (smtp) and the voice traffic out the other. So, I put a Netgate SG-1100 in to do the PBR and it worked great. Doing PBR on PFSense was easy and made sense for this customer. And yes, it's setup with only the LAN port. It's all they needed.

Homesteading

If you like the idea of homesteading, my brother does some pretty cool videos on his family journey into it. They are starting fresh, learning as they go, with a lot of interesting experiences along the way. Check them out.

The Little Orchard Farm

The Messianic Miracles Of Messiah Yeshua

How did the Jews know what to look for in the coming Messiah? This is a good read: http://www.messianicassociation.org/ezine48-af-three-messianic-miracles.htm

What Kind Of Joy

I like music. Especially from my teenage years. The link below is to a song that I really like and haven't heard in years, until recently. I hope you enjoy it as much as I do.
What Kind Of Joy

Pic Of The Week: Here Comes Horses

The Truth About Firewalls

I had someone comment about a statement I made about PFSense and Sonicwall. I said that PFSense was a better firewall than Sonicwall. They said that was a bold statement. 

Well, if you look at the features and capability, it's just a simple fact. Dell doesn't like for me to say that. Well, I honestly don't care. If you don't like for me to tell the truth about your product, then make your product better. It's that simple. 

Is PFSense a perfect firewall and the best there is on the firewall list? No. But if it has more security features than another firewall and performs well, it's definitely recommended over the lesser.

PFSense: PFBlockerNG

I've been working with PFBlockerNG for URL filtering quite a bit lately, and I have to say it works pretty good.  What it does is that it blocks URLs (web filtering) based on DNS instead of a URL category. Yes, Squid does do URL categorization, but if you don't want to have to do anything on the client side for HTTPS inspection, then DNS filtering (so to speak) is a decent choice.  I'm not saying its perfect, but I do like it enough to use it.
I wont put up a "how to", as there are plenty of those out there for doing what you need to do.  Just know that I find it a good alternative to URL filtering.

Comments

My apologies for not responding to comments and posting them. Somehow, Google Blogger didn't notify me that comments were being put on the Network Fun blog. I just went through them all last night and posted them for the last year or so. I'll try to go back and answer the questions as I can. For some reason, Google Blogger took my email address out. I fixed it, so I should get these notifications again. Take good care everyone.

Instagram: OnTheRoadInternet

My wife does an Instagram account for one of the travel firewall and VPN services that we offer at White Rhino. Her Instagram handle is ontheroadinternet (on the road internet) if you want to see some good photography.

Added A Couple More Domain Names

I picked up www.managedfirewallservice.com and www.thefirewallguy.com .  It forwards to the White Rhino Security website. I may do something different with them in the future.

White Rhino Security And Firewall Proficiency

I was asked over the weekend what firewalls we are proficient in at White Rhino Security. So I thought if they wanted to know, maybe some of you in my audience would want to know. Let me list the firewalls that we know very well, in no specific order:
1.  Palo Alto
2.  Check Point
3.  Cisco
4.  Sonicwall
5.  PFSense
6.  Baracuda
7.  Sophos
8.  Meraki
9.  Fortinet
10. Juniper
11.  WatchGuard

Home Projects: Poor Workmanship

I take pride in the work that I do. Its important to me to do a good job. So when I hire someone to do work for me, I expect the same.
Here in Santa Rosa Beach, it's hard to find good contractor help. I've been through so many plumbers that I decided to buy myself a PEX kit and do all my plumbing from now on. I'm in the process of redoing a guest bathroom, and I'm finding the same problem applies here also. I hired a guy to do the work and this has turned out the same way. He poured a concrete shower floor and when I tested the slope of the water towards the drain a few hours later, it didn't drain properly. The water just "ponded". So I tore out all of the concrete and found several other problems from his work. That's really frustrating.  He would have finished it all and some of the problems I would have never known about until it was a big problem. Others, like the water ponding, I would have noticed and it would have been a nightmare to undo. Thankfully I was able to tear out the concrete before it was completely cured. It wasn't easy, but not as hard as it could have been. Below in the picture, you can see the areas that I tested where water stood.

Needless to say, my wife and I will be doing this project ourselves.

Sunday Thought: The Well

Come, and drunk from the well.

https://youtu.be/bW5unzXXC0k

Home Projects: Window Boxes

My wife and I worked on some window boxes last night. She is wanting to plant some flowers and have them hang under the window. So, we built some out of some wood we were using for a fence I'm building. This first try did OK I think. I'll get it up on the window today.

More On Firewalls

If you have a firewall that will not do updateable objects (dynamic objects), then you probably have a base level firewall.