Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    perikoP
    @aGeekhere dns_v4_first...have years and they still don't clean the code. But won't affect.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    @NRgia said in Suricata on Pfsense: @bmeeks Thank you for what you did for Snort or Suricata. I'm not sure what you want me to do on Redmine, due to is a bug tracker. My question is for Product Management, which I will ask it here to be public: What is the plan for these 2 packages, Suricata and Snort? Thank you Yes, Redmine is for both bug reports and feature requests. Asking for the Suricata binary to be updated to the latest 7.0.11 version from upstream is a legitimate Redmine request. I would suggest simply asking for the binary version update instead of asking about future Netgate strategy (such as the support plans for the packages). Strategy discussions typically don't get very far because they deal with proprietary information or plans that a company may not want to publicly discuss. Redmine is where the Netgate developer team tracks all the code changes they make for pfSense. They will see Redmine reports much quicker than a forum post.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    dennypageD
    @Leon-Straathof Data retention settings are handled inside of ntopng. Documentation here. Pay attention to the RRD note. Also, if you've turned on some of the slice and dice time series information (is off by default), I'd suggest turning them back off. These balloon the storage requirements and are of little actual use.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    fireodoF
    @tinfoilmatt said in Failed or invalid Mime Type: [application/SIMH-tape-data|0]: (ASN data is IPinfo, not Maxmind) Thats correct but "GeoLite2-Country" is from Maxmind ... (that confused me) I'm considering simply adding "application/SIMH-tape-data" to the list to test. Thats what i tought too ... I'll try when I have the time for it ... Edit: I can confirm - adding "application/SIMH-tape-data" to the list at line 257 in /usr/local/pkg/pfblockerng/pfblockerng.inc did the trick - no more error! Edit: OK, problem resolved but I would like to know, whats the cause for that error! Thanks a lot!
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    495 Topics
    3k Posts
    I
    Redmine Issue has been closed. fixed - Gandi LiveDNS method in acme 1.0 has both PAT and API key fields. tested on: 25.11-DEVELOPMENT (amd64) built on Sat Aug 16 6:00:00 UTC 2025 FreeBSD 15.0-CURRENT
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    598 Posts
    E
    Updated CE 2.7.2 to 1.86.4 Changelog pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.86.4.pkg Freshports
  • Discussions about WireGuard

    693 Topics
    4k Posts
    L
    @boyan1 said in Wireguard Gateway not coming up after reboot.: W Hey man, im trying to make the SITE A use internet of SITE B as you did, but there is no means of making that works. How did you make that works? Could you tell me please? Thanks!
  • Light squid report empty

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Why is Mailscanner using all my inodes?

    4
    0 Votes
    4 Posts
    1k Views
    D
    Yeah, but that won't solve the real issue.
  • NTOP - HOW DO I GET HISTORICAL DATA ??

    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Errors in File Manager…

    3
    0 Votes
    3 Posts
    1k Views
    BeerBelliB
    Well that explains it. Thanks.
  • Install ziproxy Package

    2
    0 Votes
    2 Posts
    1k Views
    M
    Im also getting the same error trying to install wget. /root(10): pkg_add -r wget Error: Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8.1-release/Latest/wget.tbz: File unavailable (e.g., file not found, no access) pkg_add: unable to fetch 'ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8.1-release/Latest/wget.tbz' by URL
  • Sudo startup messages

    3
    0 Votes
    3 Posts
    1k Views
    jimpJ
    Nothing to "start" per se but it has to sync the sudoers file with the user permissions in the config. Especially on embedded systems post-upgrade. I just bumped the sudo pkg with a fix, let me know if it doesn't work.
  • [FIXED] Service Watchdog - cannot detect DHCPv6 relay status

    6
    0 Votes
    6 Posts
    2k Views
    D
    All good now, thanks! (Will post other issues to the new thread  if required.)
  • Unbound - RFC1918 PTRs vs. Private Address support/Domain Overrides

    5
    0 Votes
    5 Posts
    3k Views
    D
    Excellent, all works without any custom config lines now! Thanks!
  • Varnish with missing "if" in pfSense generated vcl

    2
    0 Votes
    2 Posts
    2k Views
    W
    I pushed a fix for this - please test it and let me know. There is quite a bit to still do on this package :/
  • SNORT and transparent firewall

    6
    0 Votes
    6 Posts
    4k Views
    ?
    Glad I could help. Snort not working in a transparent bridge is almost guaranteed to be caused by incorrect automatic IP assignments to the variables, just for future google reference.
  • OpenVPN Manager always connects to the 1st config

    7
    0 Votes
    7 Posts
    4k Views
    P
    See here for some discussion: https://github.com/jochenwierum/openvpn-manager/issues/17 OpenVPN Manager needs to use a different management channel for each OpenVPN client that it can control. A default config generated by the client export utility has: # open management channel management 127.0.0.1 166 The 166 needs to be replaced by a different number for each client that is going to be available on the same end-user laptop. I will submit pull requests for code to allow this to be specified and put in the client export utility generated configs…
  • Arpwatch not being able to send email notifications

    7
    0 Votes
    7 Posts
    5k Views
    B
    @jimp: sendmail? No. Never. Personally, I'm a "Windows man", so a lot of these pfSense related things are hard for me to know if they are pfSense-spesific or standard for unix based systems. Am I right to assume that "sendmail" is a common feature, and thus not a natural part of arpwatch? @jimp: If you just need to send mail, 2.1 has a CLI program mail.php that will take input from stdin and send it using the configured notification e-mail settings. Isn't the problem here that arpwatch doesn't do anything towards notifications? I might be on thin ice here, but what I'm trying to achieve is to get some sort of notification each time a new IP is logged in arpwatch. If this can be achieved with mail.php, could you give a clue as to how I should proceed to reach my goal? (The pfSense notifications have been configured, and test emails (and growls) are arriving as expected.)
  • HAVP - trying to get working on 2.1RC

    11
    0 Votes
    11 Posts
    3k Views
    K
    I suppose your choices are HAPV + clamd or dansguardian + clamav.  Haven't tried HAPV because it looked like was going to maybe cause issues with my simple squid setup I run. I was using dansguardian + clamav with all the filters except clamav turned off for a while.  I made an alias group of only windows computers on the network and only those were "filtered" through dansguardian, which was only doing AV scanning and no filtering. That works, but I eventually turned it off because I have government issue symantec corporate AV solutions that never expire on all the windows machines running on the network, so they were pretty much covered anyway.
  • Bandwidthd database option

    4
    0 Votes
    4 Posts
    6k Views
    A
    Super, thanks! Just a note regarding the operation, I just pulled2.1-RC1 (i386) built on Wed Aug 21 01:29:33 EDT 2013 FreeBSD 8.3-RELEASE-p9after first removing the bandwidthd package out of my older 2.0.3 installation. After working out my RRD issues (something about the database not converting properly, fixed with reset of my old data) I went to the bandwidthd menu to set it up again. Very cool to see the new fields there for database logging! Anyway, unchecking the enable bandwidthd box and clicking save rendered the menu URL``` /pkg_edit.php?xml=bandwidthd.xml&id=0 I was able to repeat the problem a couple of times. I don't think this is a big deal, I just prefer to enter all of my settings with the service disabled while I work out all the niggles. arri
  • Proxying over IPSEC

    1
    0 Votes
    1 Posts
    913 Views
    No one has replied
  • Spamd - says it started, but then says not running

    1
    0 Votes
    1 Posts
    947 Views
    No one has replied
  • Writing pfSense packages and getting them added

    5
    0 Votes
    5 Posts
    2k Views
    jimpJ
    #1 - Not in the public repositories. Nobody else there is doing Java. #2 - I work for ESF, the parent company behind pfSense, and we are the official source of pfSense support/consulting. We could assist with developing a package as a part of the usual support hours/time. See the link in my sig.
  • Snort blocking with disabled rule

    7
    0 Votes
    7 Posts
    5k Views
    bmeeksB
    @jflsakfja: Ding! Ding! Ding! Run from Diagnostics>Command prompt (I've checked the em1 directory, it's correct) $ grep 2000419 /usr/local/etc/snort/snort_7104_em1/rules/snort.rules (no results so nothing found) $ grep 2000419 /usr/local/etc/snort/snort_7104_em1/rules/flowbit-required.rules Category: emerging-policy  GID:1  SID:2000419 alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET POLICY PE EXE or DLL Windows file download"; flow:established,to_client; file_data; content:"MZ"; within:2; byte_jump:4,58,relative,little; content:"PE|00 00|"; distance:-64; within:4; flowbits:set,ET.http.binary; reference:url,doc.emergingthreats.net/bin/view/Main/2000419; classtype:policy-violation; sid:2000419; rev:17;) The rule indeed looks enabled from my point of view Thanks for the quick feedback.  This confirms my suspicion.  I will put in a fix for this in the upcoming package update (pkg. 2.6.0).  In the meantime a Suppress List Entry is a viable work around. Bill
  • Squid Whitelist Issue

    2
    0 Votes
    2 Posts
    2k Views
    N
    Anybody? I started playing around with Untangle and finally got it working. I like it, but the block page is proving harder than I thought to customize. They want you to pay for branding, and the blockpage is over-written with each update to Untangle. I also tried moving to Squid 3 and Squid 3 dev for HTTPS filtering, but I couldn't even get the services to start. I didn't play around with it too much because I wasn't liking the idea of using beta software in production anyway, and I took the services not starting as a sign that I should move on to a stable solution.
  • Postfix relay timout after data

    4
    0 Votes
    4 Posts
    4k Views
    O
    Same problem here. We have web server in local network (10.x.x.x) and it uses NAT to get access to internet. Problem is that sending data takes over 180sec and its timed out when it goes thrue pfsense. If I change postfix relayhost to 10.x.x.x network (it does not go thrue pfsense) it works just fine. Client mail log: Aug 19 21:22:55 nginx postfix/smtp[27134]: ABCDEFHTEOT: to=someone@somewhere.com, relay=mail.server.com[xx.xx.xx.xx]:25, delay=37971, delays=37791/0.01/0.07/180, dsn=4.4.2, status=deferred (conversation with mail.server.com[xx.xx.xx.xx] timed out while sending message body) Mail Server log: Aug 19 21:22:55 mail postfix/smtpd[9514]: timeout after DATA (66017 bytes) from unknown[10.x.x.x] Aug 19 21:22:55 mail postfix/smtpd[9514]: disconnect from unknown[10.x.x.x]/someone@somewhere.com
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.