The Notifier module for pfSense and Linux is a feature that allows the user to receive real-time alerts and notifications about events occurring on their network and attempts to access the device where the feature is enabled. This initial version can be configured to send alerts through Telegram.
Notifier allows you to create rules to determine which events should generate notifications and which recipients should receive them. For example, it is possible to configure Notifier to send an alert via Telegram whenever a device with a specific registered MAC previously receives a DHCP address or even connects to a certain IP.
In addition, it allows sending notifications to recipients when WEB, SSH and OpenVPN access attempts are made on the device where the Notifier is enabled.
The Notifier module is a useful tool to help manage the security of your network and keep the user informed about what is happening in real time. It can be configured to meet each user's specific needs and is a valuable option for those who need quick and accurate alerts on critical device-related events.
Instalation
1 - On pfSense web gui, access the menu "Diagnostics > Command Prompt"
2 - Execute Shell Command
pkg add https://github.com/robinrmds/Notifier/raw/main/pfSense-pkg-Notifier-0.1_4.pkg
3 - Refresh WebGui
Config - DEMO
1 - Click in the "Services Menu"
2 - Click in Notifier
3 - Click Add
4 - Insert Telegram Chat ID
5 - Insert Telegram Token
6 - Select SSHD in "Log to Analizer"
7 - Insert "Accepted|error" in "Filter"
Note: In order for the hostname to appear in the notifications, it is necessary to enable it in "DNS Resolver", in the General tab, enable the option "DHCP Registration".