Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    D
    Retested on 24.11-RELEASE (amd64) all seems to work. So it seems right to file a bug for this issue.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    S
    So since there is no version 25.03. There is an official 25.07 now but only get a 7.08.2 what happen to the rest up to Suricata 7.0.10 or 7.0.12?
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K
    @pulsartiger The database name is vnstat.db and its location is under /var/db/vnstat. With "Backup Files/Dir" we are able to do backup or also with a cron.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    A
    @Gertjan said in pfBlockerNG-devel 3.2.8 service pfb_dnsbl don't start: Masterfile Count [ 16446 ] Deny folder Count [ 16445 ] This sanity check failure might be the issue as discussed here: pfblockerNG Database Sanity check Failed
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG
    @EChondo What's your pfSense version ? The instructions are shown here : [image: 1753262126227-1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png] A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate. @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy: I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess. No need to wait x days. You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    591 Posts
    TommyMooT
    @veddy254 Thank you, the -f flag fixed it!! $ tailscale version 1.84.2 go version: go1.24.5 Will in future, pay more attention, for no mismatch happens again! Tks
  • Discussions about WireGuard

    692 Topics
    4k Posts
    M
    This is still an issue as of 2.8.0 / 25.07, and it drives me crazy. Gateway failure works as expected, the wireguard tunnels will fail over to the backup gateway and continue on as normal, but will never recover once the failed gateway comes back online. While a reboot will (usually) fix it, I usually just go into my routing settings and mark the secondary gateway as down, forcing it to revert back to the primary... the users tend to dislike it when I reboot the firewall in the middle of the day
  • [BUG] LCD deamon not started

    1
    0 Votes
    1 Posts
    269 Views
    No one has replied
  • This might mean something...

    2
    0 Votes
    2 Posts
    426 Views
    W
    I screwed up here, this should be part of Bind upgrade producing errors on pfsense 2.5 upgrade
  • Telegraf Not Showing in Additional Packages on SG-1100 w/ 2.4.5

    5
    1 Votes
    5 Posts
    798 Views
    styxlS
    @parithosh i am not aware of an easy way to recompile the code, you can probably check with the influx folks on github - https://github.com/influxdata/telegraf
  • Service Watchdog and updates

    1
    1 Votes
    1 Posts
    377 Views
    No one has replied
  • 0 Votes
    5 Posts
    705 Views
    M
    @viktor_g said in FreeFadius TOTP Session Timeout by default disconnects after one hour and apparently can't be changed: @maartenv Please check it with the latest FreeRADIUS pkg version first Hello Viktor, I upgraded Freeradius, but the Timeout problem is still there.
  • 0 Votes
    3 Posts
    546 Views
    SweetyS
    @mike123 Ok thanks !
  • This topic is deleted!

    1
    0 Votes
    1 Posts
    6 Views
    No one has replied
  • 0 Votes
    13 Posts
    1k Views
    R
    @digitaljessica Try entering a space in the USB Type field. For some reason that passes input validation and allows you to save the config settings.
  • openvpn-client-export not exporting correctly

    5
    0 Votes
    5 Posts
    2k Views
    bingo600B
    @huseby_lucas I would expect it to be your "PC / Remote client" that is a 2.4.xx version. You could download an upgrade from OpenVPN.
  • Squid "The requested URL could not be retrieved"

    1
    0 Votes
    1 Posts
    203 Views
    No one has replied
  • pfsense squidguard acl group does not work after upgrade.

    1
    0 Votes
    1 Posts
    196 Views
    No one has replied
  • SSL Error transparent proxy (Squid)

    6
    0 Votes
    6 Posts
    1k Views
    SweetyS
    @viktor_g That's not working, I didn't have any solution... Does I have to install a WPAD on each client or a CERT ? My config is : Windows Server : 192.168.0.2 Hyper-V : 192.168.0.5 WAN : 192.168.3.2 (gateway : 192.168.3.1) LAN : 192.168.0.249
  • Restarting OpenVPN Service randomly via cron job?

    1
    0 Votes
    1 Posts
    322 Views
    No one has replied
  • Freeradius assign IP address question

    1
    0 Votes
    1 Posts
    211 Views
    No one has replied
  • APC Status Widget

    15
    0 Votes
    15 Posts
    2k Views
    fireodoF
    @carver said in APC Status Widget: @fireodo Thanks for sending yours. You're welcome! I changed his original to the info I wanted to see on my firewall. I am going to try and test it today and make sure all aspects of it work. It is obvious after looking at his coding I don’t have a clue what I am doing. I am too old school........grin In fact its important that you get what you want! Regards, fireodo
  • Error updating packages

    2
    0 Votes
    2 Posts
    323 Views
    fireodoF
    @dave-opc https://forum.netgate.com/topic/160362/certificate-error-while-running-pkg-update/
  • FreeRADIUS latest package upgrade

    25
    0 Votes
    25 Posts
    2k Views
    johnpozJ
    Ok - so that was an issue that it would auth, even without users in the freerad users.. And you fixed that. So now I just add them that match the CN on the certs.. Not a big deal.. Thanks!! All back to working for my 3 devices.. And it does make sense.. That users should also have to be listed in freerad to match the CN on the cert. And - makes it easy to just delete a user vs worried about revoking a cert, etc. etc.. Thanks again for looking into this so quickly and link to the other bug that was fixed.. That was causing my problem. edit: Project for this weekend maybe is moving to eap-tls via wpa3-enterprise.. I got wpa3 working on my psk ssids.. But have to do some reading - Not sure wpa3-enterprise really gets me all that much over wpa2-enterprise.. Can use a higher level encryption sure.. But not sure if makes any sense when using eap-tls.. Some reading to do.. But wpa3-psk is working nice.. Sad part is - with all these shitty iot devices, that don't support wpa3, you have to still run in wpa2/wpa3 mode..
  • tinc and UDP

    3
    0 Votes
    3 Posts
    781 Views
    N
    @viktor_g I had that. I left out one key bit of information which I was unaware was relevant at the time: That is, my SG-3100 was running multiWAN and my Tomato router was behind it. I had issues with NAT reflection requirements that I did not sort out completely before giving up on that configuration. I moved the Tomato router from behind the SG-3100 and put it directly on it's own WAN connection and then the Tinc UDP flowed fine in both directions. How was the bandwidth using iperf3? Not great. At 15mbps the single core of the Tomato router (an Asus RT-AC66U) was maxed out while one of the cores of the SG-3100 never exceeded 16% running tincd.
  • FreeRadius Sync?

    5
    0 Votes
    5 Posts
    921 Views
    J
    @jeffscott Oh... Duh, I get it... I didn't realize "configured backup server" was actually using the HA setup... Thanks for the clarification!
  • Can SquidGuard work without wpad or manual proxy setup on a client?

    8
    0 Votes
    8 Posts
    1k Views
    I
    @nick-loenders If you do not have servers, is it safe to assume there are minimal amount of clients? You can create the CA on the pfsense firewall and then export that certificate and install it in the root store of the devices in order to use SquidGuard with HTTPS/MITM functionality. Otherwise SquidGuard has to be configured as a proxy to use HTTPS filtering. The HTTP filtering alone doesn't require further client configurations but most connections these days are through SSL. Otherwise, you can configure the pfsense as DNS unbound resolver and utilize pfBlockerNG which can block TLD's, and connections based on source country/region (DNSBL). pfBlocker will also let you utilize lists such as Dshield and Spamhaus to filter out bad sites and domains by IP address. Short of all that 'hassle', you might be more interested in a next-gen layer 7 firewall from a different vendor, but they are considerably more expensive and require maintenance contracts to continue functioning properly.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.