Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    E
    I even tried deleting and creating a new certificate. Any suggestions?
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    It was all CVE fixes in the PHP GUI part of the package. See the Redmine ticket here: https://redmine.pfsense.org/issues/16414.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    572 Topics
    3k Posts
    keyserK
    @Antibiotic No it’s not possible with NtopNG as it is not a Netflow collector. You need nProbe for that which will “translate” recieved netflows into flows that NtopNG understands and can visualize (with very very little detail might I add as Netflows has no additonal information apart from sender/reciever and volume). The NtopNG package and the product in general is more geared towards visualising and recording traffic details from actual packet captures. This contains MUCH more metadata about the sessions than netflows (DNS names, protocol information and myriads of other things). But pffSense Plus has a builtin Netflow exporter if you have an external netflow collector on hand.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    V
    @Gertjan Thanks for your reply – that’s also my impression. The point is: I don’t really see any lists right now that are actually “maintained” in the sense of being actively cleaned up, checked for dead domains, categorized, etc. That’s why my main interest is more about the demand: Would curated lists really be a game changer for admins? Would they be more helpful than what’s available today, or are most people already using other alternatives? If so, which ones? And from your perspective, what would be your expectation towards “community lists”? (e.g. reliability, update frequency, categories, fewer false positives?)
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    501 Topics
    3k Posts
    A
    Hi, Please help to forward / report the bugs in ACME 1.0 package. Thanks.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    610 Posts
    E
    Updated CE 2.7.2 to 1.86.4_1 Changelog pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.86.4_1.pkg Freshports
  • Discussions about WireGuard

    700 Topics
    4k Posts
    W
    @HFADmin I have created 4 gateways, each with their ip monitor.
  • Lost packages after restart

    Locked
    19
    0 Votes
    19 Posts
    7k Views
    D
    Section <include_file>on package xml file must contains fill include path <include_file>/usr/local/pkg/myself_file.inc</include_file> function sync_package from pkg-utils.inc not checked this (get_pkg_depends do it for example) /* Bring in package include files */ if (isset($pkg_config['include_file']) && $pkg_config['include_file'] != "") { $include_file = $pkg_config['include_file']; if (file_exists($include_file)) require_once($include_file); else if (file_exists($include_file)) { require_once($include_file); } else { log_error("Could not locate {$include_file}."); install_package($package['name']); uninstall_package_from_name($package['name']); install_package($package['name']); } } ```</include_file>
  • Squid Local DNS Patch

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    P
    What's the issue accessing 127.0.0.1 from squid while it is in transparent mode? This is working for me at the moment.
  • Ipsec widget display only inactive vpn´s on a carp cluster

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Snort to block

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Squid and DNS

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Squidguard proxy transparent

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    D
    @mantunespb: Friends, are possivel to place squidguard in transparent way, installed here and he does not function, when redirecting the page when a blockade exists happens error. However without the transparent way it functions perfectly. in config possible replace 127.0.0.1 to you lan ip Now i looking how fix this problem without making new troubles.
  • Spamd pkg has several critical flaws

    Locked
    1
    0 Votes
    1 Posts
    3k Views
    No one has replied
  • P3scan

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    T
    http://forum.pfsense.org/index.php/topic,1338.0.html
  • P3scan-pf package

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    T
    Yeah !!! Please do so !
  • PfSense doesn't boot

    Locked
    17
    0 Votes
    17 Posts
    5k Views
    H
    Then it's probably just broken and beyond  rescue  :-\
  • SPAMD won't start on RC1

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    A
    Ok, thanks for the info!
  • What is SQUID Bandwidth Throllting

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    ?
    Last I checked it sets delay pools, but you might want to see what gets modified in the squid.conf file after you set them, just to be sure.
  • Dashboard CPU Graph

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    Y
    CPU graph is still a work in progress as is the entire dashboard.
  • Bandwidthd DNS

    Locked
    1
    0 Votes
    1 Posts
    3k Views
    No one has replied
  • Lightsquid and Lighttpd

    Locked
    55
    0 Votes
    55 Posts
    41k Views
    D
    Locked Look this thread http://forum.pfsense.org/index.php/topic,1176.0.html
  • Squid 'blocking' one website

    Locked
    7
    0 Votes
    7 Posts
    5k Views
    ?
    I should point out that this is the slowest site I've seen in a long time.  It could very well be that the site is failing to load fully before squid's timeout is hit and so you're just getting what it has before the timeouts hit.  The fact that your problem is limited to one very slow site is pretty telling.
  • SquidGuard Test Package

    Locked
    17
    0 Votes
    17 Posts
    9k Views
    D
    Updated Please anibody test this too.
  • Squid Returned to Packages *** PLEASE TEST ***

    Locked
    226
    0 Votes
    226 Posts
    164k Views
    D
    On transparent mode squid blocked access to 127.0.0.1 (from php to self system), but access trought LAN ip worked. It's bug or no?
  • Captive Portal Question

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    J
    make sure that pfsense is the default gateway on the client
  • Snort and PortScan detection

    Locked
    10
    0 Votes
    10 Posts
    13k Views
    P
    That ends that mystery. I rebooted the firewall at the data center, it updated automatically and when I went in to edit the file it was already set at "low". Was wondering on the way home how that happened :)
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.