ePrints.FRI - University of Ljubljana, Faculty of Computer and Information Science

Improvement of the pfSense firewall with user services

Nejc Škoberne (2008) Improvement of the pfSense firewall with user services. EngD thesis.

[img] PDF
Download (2980Kb)


    PfSense firewall is a free and reliable network operating system. In spite of that we miss more user-oriented services like web and mail server. However, running such services on important network building blocks (i.e. routers, firewalls etc.) could lead to a compromised network security. Therefore, we have researched the possibilities of improving pfSense firewall with additional user services in a way that will not compromise the security of the firewall itself as well as the network(s) behind it. As a result, we are proposing the use of »FreeBSD jail« operating system-level virtualization feature for every user service, which limits the consequences of its eventual compromisation. Furthermore, we have compared this new system with other similar systems. By describing the jails with user services and relations between them we have also prepared an implementation plan. Finally, we looked into upgrade issues of a such improved pfSense system and provided some suggestions for user interface development and future work on the subject.

    Item Type: Thesis (EngD thesis)
    Keywords: FreeBSD, pfSense, jail, virtualization, service, user services, operating system, server, security, business model
    Number of Pages: 63
    Language of Content: Slovenian
    Mentor / Comentors:
    Name and SurnameIDFunction
    prof. dr. Borut Robič28Mentor
    Link to COBISS: http://www.cobiss.si/scripts/cobiss?command=search&base=50070&select=(ID=6811988)
    Institution: University of Ljubljana
    Department: Faculty of Computer and Information Science
    Item ID: 316
    Date Deposited: 14 Nov 2008 11:13
    Last Modified: 13 Aug 2011 00:33
    URI: http://eprints.fri.uni-lj.si/id/eprint/316

    Actions (login required)

    View Item