Pfsense and snort

I’m running pfsense in our cowork space and am curious how other people have it configured.

Have you installed snort for ids/ips? If so, what rulesets are you using? Has that caused problems for your coworkers?

We run pfsense, and have experimented with snort and a few other network management extensions, but found that it was REALLY hard to manage them effectively with all of the unpredictable ways that our members use the internet. Rulesets end up getting complicated and confusing.

We want to make it easy for someone to come in, sit down, and get straight to work…without wasting time figuring out why something isn’t working on our network. It’s been easy to go overkill with network management tools that end up making the network LESS useful instead of more. This frustrates members AND our team members who don’t always know how to explain why the internet isn’t working the way they need/expect, let alone how to fix the issue.

If someone has a magical universal ruleset, though…I’d love to check it out :wink:

-Alex

···

On Sun, Apr 12, 2015 at 5:00 PM, Jacques Paquin [email protected] wrote:

I’m running pfsense in our cowork space and am curious how other people have it configured.

Have you installed snort for ids/ips? If so, what rulesets are you using? Has that caused problems for your coworkers?

Visit this forum on the web at http://discuss.coworking.com


You received this message because you are subscribed to the Google Groups “Coworking” group.

To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].

For more options, visit https://groups.google.com/d/optout.


The #1 mistake in community building is doing it by yourself.

Join the list: http://coworkingweekly.com

Listen to the podcast: http://dangerouslyawesome.com/podcast

···

On Mon, Apr 13, 2015 at 7:33 AM, Alex Hillman [email protected] wrote:

We run pfsense, and have experimented with snort and a few other network management extensions, but found that it was REALLY hard to manage them effectively with all of the unpredictable ways that our members use the internet. Rulesets end up getting complicated and confusing.

We want to make it easy for someone to come in, sit down, and get straight to work…without wasting time figuring out why something isn’t working on our network. It’s been easy to go overkill with network management tools that end up making the network LESS useful instead of more. This frustrates members AND our team members who don’t always know how to explain why the internet isn’t working the way they need/expect, let alone how to fix the issue.

If someone has a magical universal ruleset, though…I’d love to check it out :wink:

-Alex

Visit this forum on the web at http://discuss.coworking.com


You received this message because you are subscribed to the Google Groups “Coworking” group.

To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].

For more options, visit https://groups.google.com/d/optout.


The #1 mistake in community building is doing it by yourself.

Join the list: http://coworkingweekly.com

Listen to the podcast: http://dangerouslyawesome.com/podcast

On Sun, Apr 12, 2015 at 5:00 PM, Jacques Paquin [email protected] wrote:

I’m running pfsense in our cowork space and am curious how other people have it configured.

Have you installed snort for ids/ips? If so, what rulesets are you using? Has that caused problems for your coworkers?

Visit this forum on the web at http://discuss.coworking.com


You received this message because you are subscribed to the Google Groups “Coworking” group.

To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].

For more options, visit https://groups.google.com/d/optout.

Derek Neighbors

http://derekneighbors.com

Mobile: 480-335-9746

Connect With Me

Linked In : http://linkedin.com/in/dneighbors

Twitter : http://twitter.com/dneighbors

My initial impression syncs with your real world experience. We have our open house next Monday night but already have members working here. I turned on blocking for rules for about 10 minutes and problems immediately cropped up with guys working on the websites. So, blocking got turned off. I was just curious as to whether that was normal. Or if there were rulesets that stopped the really egregious abuses that I could enable.

-jacques

···

On Monday, April 13, 2015 at 10:33:45 AM UTC-4, Alex Hillman wrote:

We run pfsense, and have experimented with snort and a few other network management extensions, but found that it was REALLY hard to manage them effectively with all of the unpredictable ways that our members use the internet. Rulesets end up getting complicated and confusing.

We want to make it easy for someone to come in, sit down, and get straight to work…without wasting time figuring out why something isn’t working on our network. It’s been easy to go overkill with network management tools that end up making the network LESS useful instead of more. This frustrates members AND our team members who don’t always know how to explain why the internet isn’t working the way they need/expect, let alone how to fix the issue.

If someone has a magical universal ruleset, though…I’d love to check it out :wink:

-Alex


The #1 mistake in community building is doing it by yourself.

Join the list: http://coworkingweekly.com

Listen to the podcast: http://dangerouslyawesome.com/podcast

On Sun, Apr 12, 2015 at 5:00 PM, Jacques Paquin [email protected] wrote:

I’m running pfsense in our cowork space and am curious how other people have it configured.

Have you installed snort for ids/ips? If so, what rulesets are you using? Has that caused problems for your coworkers?

Visit this forum on the web at http://discuss.coworking.com


You received this message because you are subscribed to the Google Groups “Coworking” group.

To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].

For more options, visit https://groups.google.com/d/optout.

Hi,

same experience here, running a pfsense is already complicated enough without trying to restrict internet usage. Have seen the strangest kind of errors and sunk to many time into managing the box to really see a payoff for usage restrictions. And that even in Germany where we have this stupid file sharing law that you as the owner of a connection can be sued for copyright infringements of your users. I rather trust my coworkers and be really loud about it within our community if that trust is misused :wink:

Cheers
Thilo

···


coworking: http://co-up.de
more time for you coworkers: https://cobot.me

On Monday, April 13, 2015 at 8:56:35 PM UTC+2, Jacques Paquin wrote:

My initial impression syncs with your real world experience. We have our open house next Monday night but already have members working here. I turned on blocking for rules for about 10 minutes and problems immediately cropped up with guys working on the websites. So, blocking got turned off. I was just curious as to whether that was normal. Or if there were rulesets that stopped the really egregious abuses that I could enable.

-jacques

On Monday, April 13, 2015 at 10:33:45 AM UTC-4, Alex Hillman wrote:

We run pfsense, and have experimented with snort and a few other network management extensions, but found that it was REALLY hard to manage them effectively with all of the unpredictable ways that our members use the internet. Rulesets end up getting complicated and confusing.

We want to make it easy for someone to come in, sit down, and get straight to work…without wasting time figuring out why something isn’t working on our network. It’s been easy to go overkill with network management tools that end up making the network LESS useful instead of more. This frustrates members AND our team members who don’t always know how to explain why the internet isn’t working the way they need/expect, let alone how to fix the issue.

If someone has a magical universal ruleset, though…I’d love to check it out :wink:

-Alex


The #1 mistake in community building is doing it by yourself.

Join the list: http://coworkingweekly.com

Listen to the podcast: http://dangerouslyawesome.com/podcast

On Sun, Apr 12, 2015 at 5:00 PM, Jacques Paquin [email protected] wrote:

I’m running pfsense in our cowork space and am curious how other people have it configured.

Have you installed snort for ids/ips? If so, what rulesets are you using? Has that caused problems for your coworkers?

Visit this forum on the web at http://discuss.coworking.com


You received this message because you are subscribed to the Google Groups “Coworking” group.

To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].

For more options, visit https://groups.google.com/d/optout.