Security
-
pfSense Suricata vs Snort: Which IDS/IPS to Choose
Suricata suits most pfSense homelabs with multithreading, EVE JSON logs and Snort rules. Choose Snort for OpenAppID, then stage IDS before inline IPS.
-
pfBlockerNG GeoIP: MaxMind Key, Country Rules and Feeds
Configure pfBlockerNG GeoIP with a MaxMind license key, country rules and IP feeds; check generated aliases, update failures and false positives.
-
pfSense DNSBL with pfBlockerNG: Ad Blocking Setup and Fixes
Set up pfBlockerNG DNSBL feeds on pfSense, force clients through the resolver, find why ads still get through, and whitelist false positives.