Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    perikoP
    @aGeekhere dns_v4_first...have years and they still don't clean the code. But won't affect.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    @NRgia said in Suricata on Pfsense: @bmeeks Thank you for what you did for Snort or Suricata. I'm not sure what you want me to do on Redmine, due to is a bug tracker. My question is for Product Management, which I will ask it here to be public: What is the plan for these 2 packages, Suricata and Snort? Thank you Yes, Redmine is for both bug reports and feature requests. Asking for the Suricata binary to be updated to the latest 7.0.11 version from upstream is a legitimate Redmine request. I would suggest simply asking for the binary version update instead of asking about future Netgate strategy (such as the support plans for the packages). Strategy discussions typically don't get very far because they deal with proprietary information or plans that a company may not want to publicly discuss. Redmine is where the Netgate developer team tracks all the code changes they make for pfSense. They will see Redmine reports much quicker than a forum post.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    dennypageD
    @Leon-Straathof Data retention settings are handled inside of ntopng. Documentation here. Pay attention to the RRD note. Also, if you've turned on some of the slice and dice time series information (is off by default), I'd suggest turning them back off. These balloon the storage requirements and are of little actual use.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    fireodoF
    @tinfoilmatt said in Failed or invalid Mime Type: [application/SIMH-tape-data|0]: (ASN data is IPinfo, not Maxmind) Thats correct but "GeoLite2-Country" is from Maxmind ... (that confused me) I'm considering simply adding "application/SIMH-tape-data" to the list to test. Thats what i tought too ... I'll try when I have the time for it ... Edit: I can confirm - adding "application/SIMH-tape-data" to the list at line 257 in /usr/local/pkg/pfblockerng/pfblockerng.inc did the trick - no more error! Edit: OK, problem resolved but I would like to know, whats the cause for that error! Thanks a lot!
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    495 Topics
    3k Posts
    I
    Redmine Issue has been closed. fixed - Gandi LiveDNS method in acme 1.0 has both PAT and API key fields. tested on: 25.11-DEVELOPMENT (amd64) built on Sat Aug 16 6:00:00 UTC 2025 FreeBSD 15.0-CURRENT
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    598 Posts
    E
    Updated CE 2.7.2 to 1.86.4 Changelog pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.86.4.pkg Freshports
  • Discussions about WireGuard

    693 Topics
    4k Posts
    L
    @boyan1 said in Wireguard Gateway not coming up after reboot.: W Hey man, im trying to make the SITE A use internet of SITE B as you did, but there is no means of making that works. How did you make that works? Could you tell me please? Thanks!
  • Remote desktop gateway behind squid

    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Squid + SquidGuard

    2
    0 Votes
    2 Posts
    1k Views
    S
    Can you tell me what have you defined under Squidguard -> "Client Source" !? make sure to hit save button on "General Settings" page and then hit "Apply" at top of the same page!
  • FusionBox 3.x on pfSense 2.1

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Squid auto delete cache??

    3
    0 Votes
    3 Posts
    2k Views
    N
    Thank you, I just set to a shorter period.
  • "monit" package for pfSense part 2

    21
    0 Votes
    21 Posts
    8k Views
    R
    OK found my problem, permission. The permission of  /usr/local/etc/rc.d/monit.sh should be 0755 All starting fine now :-) Cheers
  • Squid Rever proxy … works for exchange only

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Signed certificate with reverse proxy

    2
    0 Votes
    2 Posts
    3k Views
    N
    Morning Everybody In France we say "La nuit porte conseil" that looks like "sleep on it"… Here is what I did : Installed pfSense on an VmWare Esxi to be able to use many servers with a single internet address. THANKS to http://blog.romant.net/technology/configuring-nat-on-esx-and-esxi/ Installed and configured squid3 package in pfSense as I can access 3 differents Centos servers in my virtual network by their URLs Transfered a Windows trusted certificate in pfSense to avoid users to get "Exception message" in their browsers ; THANKS to http://knowledge.zomers.eu/pfsense/Pages/How-to-use-a-Windows-PFX-certificate-with-pfSense.aspx THANKS to http://digfound.blogspot.fr/2012/06/reverse-proxy-ssl-with-pfsense-inc-owa.html And of course THANKS to pfSense Team that gives us this awesome product. Regards Nicolas
  • Snort 'ignore_call_channel' setting seems to have no effect

    2
    0 Votes
    2 Posts
    1k Views
    E
    Based on my research, the options that work well in this case are 1) Disable UDP tracking in Stream5 2) or define a BPF filter file using a 'config' option called 'bpf_file'. Since disabling UDP tracking altogether may not be desired, I am sticking with BPF. I hope this information helps someone in the future.
  • Apache with modsecurity installation halts for ages in pfSense 2.1!

    5
    0 Votes
    5 Posts
    2k Views
    X
    Even with that error, the option appeared in the menu. When trying to use returned an error in the file / usr / local / pkg / apache_mod_security.inc line 169. Typo: Before: $ setting = sarray (); Fix for: $ settings = array (); It's working.
  • Language manager package

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Is 'lan only' load balancer/relayd possible?

    5
    0 Votes
    5 Posts
    3k Views
    H
    On the one hand, 9 / 10 on the hack-o-meter.  On the other hand, never argue with success.  Thanks! It would be good to add "check script …" to the possible monitors. It would be good to warn of the aforementioned should the 'forward to' and the 'monitor address' be on the same subnet. It would be good to warn if the virtual address isn't among the addresses this system arps for.  I'm assuming that if the address is a carp vip in backup mode the system won't advertise via the load balancer facility that it owns the virtual ip.
  • IMSpector Log Viewer not displaying logs

    11
    0 Votes
    11 Posts
    4k Views
    D
    @dbpinggoy: @marcelloc: I've pushed an update for it with no version change, reinstall package imspector-dev in about 15 minutes and check if it's fixed. I got same problem even thhough im running imspector-dev. The log is still empty . All is allowed on access lists.. Is their any solution for this? Thanks a lot I've found the solution for this, when I tried to uncheck the enable on imspector access list. But we got another problem in which our IM (Yahoo messenger) keep on logging out.. We are using pfsense 2.0..
  • How to restart WebGUI

    3
    0 Votes
    3 Posts
    13k Views
    D
    Wow, thanks!
  • Squid + Disney/ABC apps on iOS = no worky!

    7
    0 Votes
    7 Posts
    3k Views
    jimpJ
    @doktornotor: As for the OP: http://i41.tinypic.com/2ynmbf6.jpg Perry the Platypus frowns upon such blasphemy. [image: 16bh4bn.jpg]
  • SquidGuard redirectors configuration in GUI

    6
    0 Votes
    6 Posts
    3k Views
    F
    Hi Tikimotel, I have followed your instructions and I could create the patch to squidGuard redirectors and another patch to squid configuration to bypass proxy for some sites. But I have a question, my patch was correctly applied but I can't put the tab identation in the line. Do you know what character is the tab character to put in the begining of the line? Thanks!
  • Squid Package?

    7
    0 Votes
    7 Posts
    2k Views
    D
    On your pfSense page, click on System, then Packages and then Available packages. Scroll until the one you want and then click the Plus Sign to install it.
  • Squid dev3 will not install.

    2
    0 Votes
    2 Posts
    2k Views
    P
    Indeed, there are no "tbz" install files for squid-3.3.8 on: http://files.pfsense.org/packages/amd64/8/All/ or http://files.pfsense.org/packages/8/All/ squid-3.3.8 pbi files are there, so the install should work from a 2.1-RC0 system, which uses "pbi". But it won't work from 2.0.3 which needs the "tbz" format install files. The previous squid-3.3.5.tbz files are there in both folders. Hopefully a squid maintaining person will notice this soon and put the files in place!
  • Lightsquid not recording Spotify traffic

    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    A transparent squid proxy would only catch HTTP traffic, nothing else. It could be using HTTPS, or a port that isn't HTTP at all inside the client. Isolate a machine running spotify and check the state table and/or packet captures of that system's traffic, see what it is and where it's going.
  • Snort Package HOME_NET - Your opinion on its automatic generation

    17
    0 Votes
    17 Posts
    6k Views
    bmeeksB
    @slagr: Is there any reason why alias with URL type could not be used in snort  whitelists ? Well, at the moment the Snort code is only expecting hosts or networks.  I can look at including URLs in the update I'm working on. Bill
  • SquidGuard + SSL certificate for error page served over HTTPS

    2
    0 Votes
    2 Posts
    5k Views
    N
    Hi, if you modify anything on .conf files it will be overwritten. You need to change this in the following two files: /usr/local/pkg/squidguard.inc /usr/local/pkg/squidguard_configuration.inc Further I had some problems in the past to get the sgerror.php page displayed correctly if I have the pfsense webGUI running on https. So probably best would be to first change the .inc file and /or then try without pfsense webGUI on HTTPS but5 revert - for testing - back to http.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.