Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    D
    Retested on 24.11-RELEASE (amd64) all seems to work. So it seems right to file a bug for this issue.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    S
    So since there is no version 25.03. There is an official 25.07 now but only get a 7.08.2 what happen to the rest up to Suricata 7.0.10 or 7.0.12?
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K
    @pulsartiger The database name is vnstat.db and its location is under /var/db/vnstat. With "Backup Files/Dir" we are able to do backup or also with a cron.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    A
    @Gertjan said in pfBlockerNG-devel 3.2.8 service pfb_dnsbl don't start: Masterfile Count [ 16446 ] Deny folder Count [ 16445 ] This sanity check failure might be the issue as discussed here: pfblockerNG Database Sanity check Failed
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG
    @EChondo What's your pfSense version ? The instructions are shown here : [image: 1753262126227-1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png] A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate. @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy: I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess. No need to wait x days. You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    591 Posts
    TommyMooT
    @veddy254 Thank you, the -f flag fixed it!! $ tailscale version 1.84.2 go version: go1.24.5 Will in future, pay more attention, for no mismatch happens again! Tks
  • Discussions about WireGuard

    692 Topics
    4k Posts
    M
    This is still an issue as of 2.8.0 / 25.07, and it drives me crazy. Gateway failure works as expected, the wireguard tunnels will fail over to the backup gateway and continue on as normal, but will never recover once the failed gateway comes back online. While a reboot will (usually) fix it, I usually just go into my routing settings and mark the secondary gateway as down, forcing it to revert back to the primary... the users tend to dislike it when I reboot the firewall in the middle of the day
  • Install packages offline

    7
    0 Votes
    7 Posts
    7k Views
    R
    @bmeeks Thank you for the link! I am not the OP but was interested in the topic.
  • Haproxy err_incomplete_chunked_encoding

    1
    0 Votes
    1 Posts
    718 Views
    No one has replied
  • Zabbix: Check access restrictions in agent

    2
    0 Votes
    2 Posts
    355 Views
    No one has replied
  • Reboot after installing new packages?

    4
    0 Votes
    4 Posts
    662 Views
    H
    @davidstoll somewhere in the status or diagnostic menu.... Can't remember, been years since I've last installed it
  • Downtime For Installing Packages?

    5
    0 Votes
    5 Posts
    1k Views
    I
    @kbohlken If you install new packages on a production firewall it should not cause downtime. However, if you are updating packages on a production firewall, those services related to the packages will be unavailable for a short period. If you have SquidGuard working for example, and decide to update the package, the squid service will be restarted and squid will stop blocking pages for a short period, usually less than a few minutes. I always have 2 firewalls in HA Sync, and when I do updates I will swap production firewalls and only work on the standby firewall. I also make it a habit to reboot the firewall after installing or updating a package as I've had issues updating squid/squidguard in the past.
  • Receiving duplicates packets for the radius request in Pfsense

    1
    0 Votes
    1 Posts
    496 Views
    No one has replied
  • Installing WireGuard VPN

    Locked
    49
    1 Votes
    49 Posts
    99k Views
    J
    This is now finished. At lease phase one is finished. https://www.netgate.com/blog/wireguard-for-pfsense-software.html
  • Does syslog-ng default install conflict?

    2
    0 Votes
    2 Posts
    449 Views
    kiokomanK
    @ar15usr short answer : no they are indipendent
  • about pfsense ipsec machine access

    1
    0 Votes
    1 Posts
    302 Views
    No one has replied
  • Just a quick question about BIND

    8
    0 Votes
    8 Posts
    998 Views
    X
    @gertjan Hello I build my infrastructure It is not large in hardware perspective, but I've started to to integration of many apps that will have to have to be on a separate domains. Until now the internal resolver did the job, but now ... I need actual dns server. This is strange everywhere I open a discussion about BIND and DNS all I am getting is go somewhere else!!!!!! Never had a straight answer like this functions is for that that function is for that or if you want to do this just do this and this !!!! Never mind. Typically, you should isolate such a program, set up a test bed network and 'play' with. That's what I am doing right now I have a downstream network behind an other pfSense Firewall and that's where I am testing it. I also have a Ubuntu server behind this firewall with Virtualmin and BIND9 package installed with few test websites, but what I am trying to understand is some terminology and functions of BIND. So... I set in the Settings to listen on: all vlans, but there is an option on the bottom "Forwarder Configuration" should I set this "Forwarder IPs" to my upstream resolver or, if this option is not enabled it will simply look what DNS Servers set on System/General Settings ???? and.... In "Views" I have created and called "localview" where Recursion - Yes match-clients - Any but... allow-recursion - currently set to ANY, but this will be used for local zones isn't more secure to be set to "localnets" then "any" no matter if that is my downstream or upstream pfsense Thank you
  • 1 Votes
    1 Posts
    358 Views
    No one has replied
  • problem configuring HAproxy with subdomains

    19
    0 Votes
    19 Posts
    2k Views
    B
    You're right, I delete certbot and install a selfsignated certificate. That works correctly. The problem come from LE. As the server is empty, I will reinstall it. Thank you for your help Benoit
  • xinetd doesn't read "included directory"

    4
    0 Votes
    4 Posts
    942 Views
    K
    @karls0 Just to remember it: After reloading filters, I get following in Status | System logs | General: Unable to read included directory: /opt/etc/xinetd.d [file=/var/etc/xinetd.conf] [line=1] When I tried "less" and typed in the whole path (without the Tab-key) I got the message "/opt/etc/xinetd.d/check_mk: No such file or directory" So there must be an invisible character in the path. Therefore I deleted the directory /opt/etc/xinetd.d and created it new. I copied the file "check_mk" back into it and now xinetd runs :-)) Sorry, I cannot mark my post as resolved - if anyone can, please do it.
  • How to configure Haproxy with multiple certificates

    Moved
    2
    0 Votes
    2 Posts
    2k Views
    M
    No answer, quite disappointed. I had time to lean on it lately and managed to do what I wanted. Here's some catch if it helps anyone. Create your certificate (I use the OVH API but it works with the other method): [image: 1610639766221-createcertificate.png] You can create as many certificates as necessary (Pay attention to the limit imposed by the ACME packge, see link below) Rate Limits [image: 1610639971033-createcertificate2.png] In Haproxy, go to the frontend which manages the domain name linked to the certificates created previously (the one ending with "site" for me, it depends on your configuration). [image: 1610640212863-frontend.png] In the "certificate" section, choose one of the certificates to create (any you need). Check the 2 boxes "Add ACL for certificate ...." [image: 1610640406182-frontend1.png] In the "additional certificates" section, add all the certificates you need. [image: 1610640536408-frontend2.png] Check the 2 ACL boxes again [image: 1610640576109-frontend3.png] Save and apply the configuration. Domains are now in HTTPS.
  • openvpn-client-export installation problem

    1
    0 Votes
    1 Posts
    335 Views
    No one has replied
  • DNS Resover stops running - Could not deliver signal HUP

    9
    0 Votes
    9 Posts
    1k Views
    AutourdupcA
    @gertjan I did the settings... All is fine. pfsense still running. Concerning BandwithD, it works also fine on my APU... pfsense usage is for personal use, with less than 20 devices on my Network. As you can see, CPU usage is low... (9%..30% depending on what I do). Only temp. is a little bit elevated due to the fact there is no cooling system. I also implemented zfs for better performances and reliability. [image: 1610618983081-82c53026-e1ea-4f4a-959a-bcaee1428221-image.png]
  • Freeradius totp fallback?

    1
    0 Votes
    1 Posts
    303 Views
    No one has replied
  • lldpd 18110 unable to get system name

    1
    0 Votes
    1 Posts
    487 Views
    No one has replied
  • 0 Votes
    7 Posts
    1k Views
    M
    I have solved my problem, for reference and for anyone who runs into the same problem: On the pfSense gateway 172.xx.xx.1 (the one in front of the InfluxDB server, which was working), add the following to the Telegraf configuration: [[inputs.influxdb_listener]] service_address = ":8086" This can be done at the bottom of the Telegraf configuration page. This activates Telegraf as a forwarder. On each other pfSense machine, I find the VTI interface IP, ie 10.88.88.xx and set the influxDB server as http://10.88.88.xx:8086. Now, the data is sent via Telegraf to the InfluxDB server, and arrives as it should. There would probably be other solutions with proxies, but this seems simplest.
  • Wireguard has been merged into freebsd 13

    1
    0 Votes
    1 Posts
    319 Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.