Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    A
    Adding load-server-state-from-file none to the Advanced Settings > Backend pass thru section of each backend overrides the behavior and makes backend changes apply immediately when reloading. I am also using the global GUI setting Force immediate stop of old process on reload. (closes existing connections). [image: 1754764767072-67de741e-7dbf-4766-8e17-1a550e6684b0-image.png]
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    @NRgia said in Suricata on Pfsense: @bmeeks Thank you for what you did for Snort or Suricata. I'm not sure what you want me to do on Redmine, due to is a bug tracker. My question is for Product Management, which I will ask it here to be public: What is the plan for these 2 packages, Suricata and Snort? Thank you Yes, Redmine is for both bug reports and feature requests. Asking for the Suricata binary to be updated to the latest 7.0.11 version from upstream is a legitimate Redmine request. I would suggest simply asking for the binary version update instead of asking about future Netgate strategy (such as the support plans for the packages). Strategy discussions typically don't get very far because they deal with proprietary information or plans that a company may not want to publicly discuss. Redmine is where the Netgate developer team tracks all the code changes they make for pfSense. They will see Redmine reports much quicker than a forum post.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K
    @pulsartiger The database name is vnstat.db and its location is under /var/db/vnstat. With "Backup Files/Dir" we are able to do backup or also with a cron.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG
    @rasputinthegreatest said in pfBlockerNG not logging anything by default?: its made up of multiple sources so it does make sense that it resolves some of these weird private hosts An public NTP pool like pool.ntp.org would not list host names with weird random paddings that reference local devices. "domaincontroller-gPHvwjYS.local,192.168.1.86" is a reverse PTR, and is requested by one of your local devices. Why , I don't know. @rasputinthegreatest said in pfBlockerNG not logging anything by default?: I find them in pfblockerNG dns_reply log under Logs No URLs there, only host names. [image: 1754736735409-c09607c2-c95a-4971-bdb4-f63fe08bebe8-image.png]
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG
    @EChondo What's your pfSense version ? The instructions are shown here : [image: 1753262126227-1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png] A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate. @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy: I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess. No need to wait x days. You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    594 Posts
    E
    @totalimpact Tailscale 1.54.0 is 2+ years out of date. Tailscale has made quite a number of changes since Tailscale 1.54.0, likely rendering it incompatible with their servers. I would consider manually updating the Tailscale FreeBSD package. FreshPorts does not maintain an archive of all the releases, only the latest compiled by the volunteer maintainers. The key to manually upgrading is knowing which FreeBSD version your pfSense release is running, i.e. 14 or 15. You can following along here.
  • Discussions about WireGuard

    692 Topics
    4k Posts
    M
    This is still an issue as of 2.8.0 / 25.07, and it drives me crazy. Gateway failure works as expected, the wireguard tunnels will fail over to the backup gateway and continue on as normal, but will never recover once the failed gateway comes back online. While a reboot will (usually) fix it, I usually just go into my routing settings and mark the secondary gateway as down, forcing it to revert back to the primary... the users tend to dislike it when I reboot the firewall in the middle of the day
  • pkg-static: Cannot get an advisory lock on a database

    2
    0 Votes
    2 Posts
    526 Views
    GertjanG
    As said here. Also, do a reboot to put things straight.
  • Can't install, reinstall, delete squidgaurd

    2
    0 Votes
    2 Posts
    150 Views
    viktor_gV
    killall -9 pkg-static then try again
  • Can not update or uninstall any packages.

    7
    0 Votes
    7 Posts
    1k Views
    GertjanG
    Same problem ? Same solution ?! See here.
  • RRD_Summary, dates issues

    1
    0 Votes
    1 Posts
    278 Views
    No one has replied
  • Trying to install ntopng, hangs at Writing configuration... done.

    5
    0 Votes
    5 Posts
    834 Views
    G
    @netblues said in Trying to install ntopng, hangs at Writing configuration... done.: @gawainxx Have you tried this? https://docs.netgate.com/pfsense/en/latest/hardware/forcing-a-filesystem-check.html It's working now. Thanks!!! see my above reply.
  • bind dns ipv6 PTR zone and gui options problem.

    4
    0 Votes
    4 Posts
    432 Views
    GertjanG
    @viktor_g said in bind dns ipv6 PTR zone and gui options problem.: BIND Oops. My answer was ... just noise in open space. I'm using the Resolver.
  • FreeRadius with Active Directory and Google authenticator

    1
    1 Votes
    1 Posts
    159 Views
    No one has replied
  • Frezing during package reinstall

    5
    0 Votes
    5 Posts
    684 Views
    hugoeyngH
    Hello. I uninstalled Lightsquid and after this I could reinstall/uninstall/ squidGuard. Solved. Thank you.
  • 0 Votes
    3 Posts
    3k Views
    K
    @Gertjan said in Packages reinstall issue when restoring config in a brand new pfsense installation: @kevindd992002 said in Packages reinstall issue when restoring config in a brand new pfsense installation: ideas Yes, one that works for you right now. Your list :remove right away : Service_Watchdog is it is dangerous, and you're probably not a developer (and even they would not use it). Netgate_Coreboot_Upgrade as this updates Netgate devices only (is Netgate_Coreboot_Upgrade a Netgate device ?). After a pfSense install, make WAN work - and stop there. Install the packages by hand, one after another. Then import your backed up config to finalize the setup. Do a reboot, and you'll be fine. Somewhere on the forum, you'll fuind a reason for why the initial automatic install can fail. It's has something to do with a process that didn't get restarted (or something like that). Sorry, what do you mean "yes, one that works for you right now."? Why is Service_Watchdog dangerous? I have Netgate_Coreboot_Upgrade for the sole reason that I want flashrom installed (I know I can install it manually in the CLI but I want it to keep it this way so that I have a reference in the GUI). Regardless, I am fine with my list, this is simply a home firewall/router :) Your suggestion makes sense but it's just that I had no problems with my other box (same model, APU2C4) when I did this a month ago. That other box even has more packages on top of the list that I posted here. I can install the packages manually (and that's probably what I'll be doing anyways) but I just want to know what's causing this. I have to find that thread you're talking about.
  • Zabbix Proxy 4.2 Missing after pfSense v2.4.5-p1 update

    5
    0 Votes
    5 Posts
    894 Views
    viktor_gV
    @DaddyGo said in Zabbix Proxy 4.2 Missing after pfSense v2.4.5-p1 update: @zimmy6996 because EOL!? https://www.freshports.org/net-mgmt/zabbix42-agent [image: 1594576965341-37bdb3ec-e236-4fb0-8f40-581e52a65bb7-image.png] Correct, See https://redmine.pfsense.org/issues/10688
  • NGINX as a Load balancer

    2
    0 Votes
    2 Posts
    207 Views
    jimpJ
    There are no current plans to do that internally, but if someone wants to write up a package for it, we'd certainly be open to reviewing it for inclusion.
  • rpz 'rpz.local' is not a master or slave zone crash BIND

    5
    0 Votes
    5 Posts
    3k Views
    viktor_gV
    See https://redmine.pfsense.org/issues/10445#note-3
  • Traffic Total not working

    2
    0 Votes
    2 Posts
    375 Views
    RicoR
    Did you try the Reset Graphing Data button? -Rico
  • New SG-1100 can't install packages from the web UI

    2
    0 Votes
    2 Posts
    306 Views
    J
    Well it turns out there's something with the web UI that doesn't like Firefox. Chrome seems to work just fine.
  • 0 Votes
    8 Posts
    896 Views
    nzkiwi68N
    I too am having this problem. with 2.4.5-p1 I can't cleanly upgrade Squid or FRR, they just hang, even when left for 30+ minutes. I've tried rebooting, uninstalling the packages (that mostly hangs too). In the end I tried; # pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade and # pkg-static upgrade -f But, guess what, that hung also once it got to installing the packages.
  • pfsesne - freeradius with ldap, a/d and dynamic vlan conf

    1
    1 Votes
    1 Posts
    145 Views
    No one has replied
  • Avahi Help!

    19
    0 Votes
    19 Posts
    2k Views
    W
    it looks like everything IS working...discovery app return a number of things from the IOT vlan while I was on my trust network. Thanks for putting up with and helping a newbie.
  • Help with configuring NUT master and slave

    1
    0 Votes
    1 Posts
    370 Views
    No one has replied
  • Did updater get broken?!?!

    2
    0 Votes
    2 Posts
    263 Views
    GertjanG
    @OverLabyss said in Did updater get broken?!?!: I am running the 2.4.5 train Download an original version from here : https://www.pfsense.org/download/ Also : what about reading, for example, this : https://docs.netgate.com/pfsense/en/latest/install/upgrade-troubleshooting.html @OverLabyss said in Did updater get broken?!?!: Did the updater get broken We'll be having a hard time explain why thousands did upgrade since "1/11". @OverLabyss said in Did updater get broken?!?!: snapshots are only available for 2.5.0 (called 'the bleeding edge'). @OverLabyss said in Did updater get broken?!?!: hasn't updated since 1/11 At least two major versions came out, and you stay silent ? Btw : For example : https://www.netgate.com/blog/pfsense-2-4-5-release-p1-now-available.html - read the fat lines.
  • AVAHI and Sonos

    2
    0 Votes
    2 Posts
    2k Views
    SetarcosS
    Check your firewall logs for the corresponding interfaces and you will likely see UDP multicast traffic on port 5353 still being blocked. It looks like * doesn't include multicast destinations. I found another forum poster had added an alias for something like this, recreated it, and it solved my problems with Avahi traffic being blocked: [image: 1592896841426-51f6b17e-897c-4b59-8b6c-a2bb50603d3d-image.png]
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.