Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    E
    I even tried deleting and creating a new certificate. Any suggestions?
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    S
    @Smeg.Head Have you tried saving the log settings page as is? Years ago IIRC there was a bug there also where it needed saving. If pfSense is set to compress logs (should not on ZFS or slow CPUs) I wonder if it might be trying and timing out.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    572 Topics
    3k Posts
    keyserK
    @Antibiotic No it’s not possible with NtopNG as it is not a Netflow collector. You need nProbe for that which will “translate” recieved netflows into flows that NtopNG understands and can visualize (with very very little detail might I add as Netflows has no additonal information apart from sender/reciever and volume). The NtopNG package and the product in general is more geared towards visualising and recording traffic details from actual packet captures. This contains MUCH more metadata about the sessions than netflows (DNS names, protocol information and myriads of other things). But pffSense Plus has a builtin Netflow exporter if you have an external netflow collector on hand.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    J
    @nanda said in pfb_filter and pfb_dnsbl services are not running Pfsense 25.07.1: When I checked the status of the service, the firewall returned, "does not exist". as in on the Status -> Services page? or where specifically ? and yet it shows on the dashboard services widget.. And you said this was a fresh install so ... are there any errors in pfblockerNG 's error.log, dnsbl_parsed_error or py_error (Firewall -> pfBlockerNG -> Logs on the pfblockerNG -> General. make sure the Keep Settings option is enabled then head over to packages and try to reinstall the package (you may remove and install or just reinstall) see if you spot any install errors during the install then when complete you will need to change the masterfile / mastercat line again and then check the update page at Firewall -> pfBlockerNG -> Update should have a status showing the next scheduled cron event (if that is within a few minutes just wait for it to run). if it is more than say 20 minutes away or says not scheduled (or similar) then on the same update screen force Cron hit run. when that is complete check the status then reboot check the status
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    500 Topics
    3k Posts
    G
    @Gertjan well..... finally i created a new user for inwx and just gave him dns_management role only AND without 2FA. So now all is fine, my PFSense has the LE Cert as it should be. Thanks and kr Mike
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    609 Posts
    luckman212L
    The bugaboo that was affecting the FreeBSD 15 pkg repos has cleared, and the new builds seem to be finished. So, 1.86.4 is now landed in FreeBSD:15:amd64/latest ABI: pkg add -f https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.86.4.pkg
  • Discussions about WireGuard

    699 Topics
    4k Posts
    S
    @Bob.Dig what's the right place?
  • Snort & Beast TLS attack

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    M
    Thanks for the heads up man..  ;D
  • ARPWATCH

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Squid error message : wrong time

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    N
    Squid time: http://forum.pfsense.org/index.php?topic=34315.0;prev_next=next Firewall shedule: If I remember correct on SYSTEM –> ADVANCED there is an option to reset firewall states when a shedule changed.
  • Squidguard not applying rules

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    F
    Solved the problem by reinstalling squid for a fourth time and setting the allowed subnets again under Acces Control Tab. After restarting the system everything worked fine. Blocked Facebook by using an alias with all facebook servers combined with a firewall rule that drops all connections to the alias (and from). Thanks for the help.
  • 0 Votes
    2 Posts
    1k Views
    marcellocM
    In some cases it's better to remove all packages before firmware update. It will keep all config but will not hang install/upgrade process.
  • SNORT 2.8.6.1 PFSense 1.2.3

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    C
    Thanks, same to you!
  • 2.1/postfix

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Imspector Dev setup

    Locked
    6
    0 Votes
    6 Posts
    2k Views
    T
    @marcelloc: @turiyain: Is there no need to to give mysql entry and it will work nicely. only if you want to log chat on mysql @turiyain: I want to log all chat including gtalk.  How can i define ssl certificate. Will this add iptables rules automatically. Depends on what client you are using. IIRC,gtalk itself use https instead of defalut jabber port. Check on system -> cert manager local ca and certificates options. pfsense uses pf to create rules, not iptables ;) As per your screen shots, i have implemented. But there is not logs.  My LAN users are using gtalk, pidgin, and live from gmail account. Please guide me further. Thanks
  • CableModem monitoring Package

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    E
    Yeah, although it should be easy to pig up different scripts to grab from different modem types. I will have to look into making something like this and turning it into a package that makes RRD scripts. I have a bunch of time off over the holidays so this could be a fun little project.
  • Did the recent pbi rebuild build right?

    Locked
    23
    0 Votes
    23 Posts
    6k Views
    C
    @jimp: ah perhaps I forgot to update the package xml before re-running the pbi build. I fired it off just as I was going to sleep. I'll do another. thanks jim!!! reinstalled this evening and all is well again.
  • SNORT - Unknown clastype sdf

    Locked
    6
    0 Votes
    6 Posts
    2k Views
    bmeeksB
    I agree with you on scrapping the current built-in Snort rule update process and turning it into a pure PulledPork process.  However, I'm not skilled enough in programming the web GUI in pfSense to pull this off yet.  I'm just trying for now to work within the boundaries of what's there already. The best process for the future is to strip out the GUI update code and just run PulledPork.  Perhaps a little bit of web GUI code can be put in to "manage" the PulledPork configuration.  Its configuration is really just a single text-based file called pulledpork.conf.
  • Squid + OpenLDAP groups with single sign on/passthrough auth

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    W
    Hi all, I found out today that they're not opposed to replacing the OSX openLDAP if it is causing more problems that it's solving since it seems to be only doing half the job and then only really controlling the OSX machines. So I'm currently cooking up a debian virtual machine to try to prove that it can/should be replaced. Could anyone suggest the best approach?  I'd like to stay away from a Win AD setup if possible but if I must then maybe I must… Thanks!
  • Squid: Worth it for me to use?

    Locked
    8
    0 Votes
    8 Posts
    4k Views
    ?
    great, thanks
  • Squid 2.7.9 pkg 4.3.1 - bungled squid.conf

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    M
    @jimp: OK new squid binaries are going up now that should be fixed. Thanks jimp.  whatever you did resolved the issue.  I've since uninstalled and re-installed squid and it worked on first try.  Much appreciated!
  • Squidgard: missing items in Target Categories

    Locked
    4
    0 Votes
    4 Posts
    1k Views
    N
    I am using the blacklists from shallalist.de, too. I first download it to my local computer and after that uploading it on pfsense ( /tmp/shallalist.tar.gz ) and I am using this path on squidguard GUI. This is working.
  • SQUID: The Requested URL Could not be Retrieved

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    marcellocM
    What squid version are you using? On squid3, try to check dnsv4first option.
  • Snort selective blocking

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    I
    Hi bmeeks, thanks for your reply. I know that SNORT have those abilities (selective blocking) using a plug-in. Actually, based on http://doc.pfsense.org/index.php/Setup_Snort_Package#Alert_Thresholding_and_Suppression, pfSense Snort Package used to have those abilities too!!! If you look at the pfSense screens, you can see that there is a place to put sig_ids for threshold and much more. I believe that this is from the time that the pfSense Package used the SnortSam plugin, but maybe I'm wrong. So it looks like those abilities went away somehow. I know that I would love to see them coming back. If anyone know why those features went away, I would love to hear.
  • Enable Shallalist Blacklists in Dansgaurdian

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    marcellocM
    @legit: I've added shallalist.de as the blacklist site but I can't find anywhere to enable the individual lists. Dansguardian blacklist tab config expects a full url to fetch. after it, you can select what categories you want on access lists.
  • Squidguard rewrite/redirect Youtube for schools

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    N
    Thanks. I will try rewrite and post when I figure it out.
  • POSTFIX Forwarder help (Quick one)

    Locked
    7
    0 Votes
    7 Posts
    2k Views
    C
    Ok thank you. Are there any best practices for this type of configuration? I don't need to configure recipients? I just want all emails stored until my mail server back on?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.