Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    J
    @qupfer What did I bang my head over this strange 502 issue. Your solution did it! Thank you so much, even 2.5 years later!
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    M
    Hi, I had a problem with my home network today, so I checked pfsense and discovered that suricata had blocked the wan ip. After some tests and triggering some suricata alerts, the wan ip was blocked. I restarted pfsense and ran some more tests, but the problem no longer occurred. I then checked the wan interface settings and indeed the ip list does not include the wan ip, both now that it's working and before, when it was blocked. I'm using pfsense 2.8.0 and suricata 7.0.8_2. I use PPPoE to access the Internet.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    dennypageD
    @Leon-Straathof Data retention settings are handled inside of ntopng. Documentation here. Pay attention to the RRD note. Also, if you've turned on some of the slice and dice time series information (is off by default), I'd suggest turning them back off. These balloon the storage requirements and are of little actual use.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    fireodoF
    @tinfoilmatt said in Failed or invalid Mime Type: [application/SIMH-tape-data|0]: (ASN data is IPinfo, not Maxmind) Thats correct but "GeoLite2-Country" is from Maxmind ... (that confused me) I'm considering simply adding "application/SIMH-tape-data" to the list to test. Thats what i tought too ... I'll try when I have the time for it ... Edit: I can confirm - adding "application/SIMH-tape-data" to the list at line 257 in /usr/local/pkg/pfblockerng/pfblockerng.inc did the trick - no more error! Edit: OK, problem resolved but I would like to know, whats the cause for that error! (SIMH-tape-data sounds like a "blast from the past" ...) Thanks a lot!
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    496 Topics
    3k Posts
    M
    And when you are on version 25.07.1 or 25.07 and then click on the reinstall button for the ACME package. It will downgrade. :) [image: 1755753389733-125fc31e-ef4f-4342-b364-48c2b03446c5-image.png]
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    599 Posts
    S
    Upgraded to 25.07 and facing the same issue. Tried the "tailscale up" command as suggested above but restarting the tailscale service kills the login again.[image: 1755715824513-tailscale_logged_out_25_07.jpg]
  • Discussions about WireGuard

    695 Topics
    4k Posts
    R
    Hi guys for privacy reasons, I never show my ip address to the vpn provider that I use on my main laptop. "But they keep no logs" I don't know that. what I do instead: I install vpn provider #1 on a crappy laptop that has windows 10. this is a laptop with a crappy processor and perhaps a broken screen but it doesn't matter. in windows 10 network settings, I send the vpn traffic from provider #1 to the ethernet port of the crappy laptop. I connect the main laptop with crappy laptop using an ethernet cable. on my main laptop I use vpn provider #2 using wireguard software. what I am trying to figure is if I use the same crappy laptop but change my main laptop, and I sign up with a new account with vpn provider #2, and I use wireguard on the new laptop, can vpn provider #2 figure out that I am the same person? I guess what it boils down to is this: does wireguard share the mac address of the ethernet port of the crappy laptop with vpn provider #2?
  • Quagga OSPF to Cisco

    8
    0 Votes
    8 Posts
    7k Views
    D
    Just an update here: I went ahead and moved to new gear and separated out each vlan on it's own interface. Upon firing up OSPF again, the same issue prevails. I get the routes from the Cisco 1811 and shows as "FULL". Doing same 'sh ip route' in the Cisco side and it doesn't see any redistributed routes from the pfsense side. Any ideas?
  • After installing squid3 there is no entry in "services -> proxy server"

    2
    0 Votes
    2 Posts
    988 Views
    marcellocM
    squid3 installs two menus, proxy server and reverse proxy. I have no idea why it's not working on your install. Can you access it directly? the installation ends without errors?
  • Sarg issues

    9
    0 Votes
    9 Posts
    3k Views
    S
    @marcelloc: Do you have more then one report running simultaneously? Maybe one via cron and other via console? I had some issues with sarg but it was a report reading error(special chars or url size) But I think this bug was present on previous versions. Are your squid logs on default format? marcelloc, No. I have not run any of them. It's a default install. Yes default squid logs. I am also running havp in transparent mode.
  • Problem with Barnyard2

    11
    0 Votes
    11 Posts
    5k Views
    C
    thanks for the replies, served much help
  • Snort GPLv2 community rules expected MD5 checksum blank.

    11
    0 Votes
    11 Posts
    5k Views
    bmeeksB
    @gregg1ep00: You're right, I just looked and it downloaded.  Must have been a hiccup. Thanks so much for the quick response.  Sorry it ended up being nothing (but then again, very glad it was nothing).  ;D I tried to make the newest rules update code as robust as possible.  It will try 4 times, with a 15-second pause in between each try, before it gives up completely and bails on any given ruleset to move on to the next one.  The idea was to get past any temporary Internet glitches.  Of course if the site is unavailable for more than 60 seconds, those rules will not download until the next scheduled update. Bill
  • Unbound 1.4.21_0

    6
    0 Votes
    6 Posts
    2k Views
    D
    wagonza fixed this yesterday.
  • Cachemgr.cgi???

    6
    0 Votes
    6 Posts
    3k Views
    B
    @Nachtfalke: The ACL part you did I just added on GUI squid –> Access Control --> External Cache-Managers There I added just an IP address of one of my VLAN interfaces (LAN site). unfortunately, squid 3.x GUI does not have a 'External Cache-Managers ACL' under squid GUI –> ACLs Or maybe I am just blind and cannot see it  :) Then I will be prompted for username - which is admin - an my password myVerySecretMasswordForUserAdmin Not sure but if you do not use any password then it could be possible for someone from your LAN to check the cachmgr.cgi which probably should not be possible. On my network, pfSense webConfigurator is only accessible if you are in the "management" network… clients on the lan have to tunnel through VPN to access the management network and I am the only user allowed to get there... of course, I should probably set a password because "you never know"tm I will look into it. Thanks. -bu
  • Help for FreeRADIUS2!!!

    2
    0 Votes
    2 Posts
    842 Views
    N
    https://doc.pfsense.org/index.php/FreeRADIUS_2.x_package
  • First time squid enable, no hits

    18
    0 Votes
    18 Posts
    15k Views
    marcellocM
    @nesense: I have no idea why dynamic caching doesn't work in squid 3 on pfsense when the options has been there for years… obviously no one gives a sh*t about this when you issue a bug report. As I told when I've pushed it to package. These config are based on squid wiki. If you want to help, test and/or find a working free video cache squid config. This way I can do my best to include it on squid3-dev config.
  • PfBlocker firewall rule order clarification

    4
    0 Votes
    4 Posts
    2k Views
    marcellocM
    @pfNeo: @marcelloc: Do you have proxy configured on this server? Actually, yes! Change rule action to alias only and create these rules on floating tab. Other way to do this is to block it on proxy acls based on site name.
  • Sarg on PFSense 2.1 - View graphical results on embedded (Nanobsd)

    5
    0 Votes
    5 Posts
    2k Views
    marcellocM
    I've updated the package to include these changes with no version bump.
  • SNORT - FATAL ERROR! Unable to process the IP address:

    8
    0 Votes
    8 Posts
    6k Views
    bmeeksB
    @Nadrek: That's a limitation indeed - would it be possible for the GUI to detect (parse the system log, perhaps) a failure to start SNORT, figure out which ruleset it was, and then change the snort.conf file to disable that ruleset while recording the hash of it, and when the hash changes, re-enable and then process normally (including, again, the disable on crash due to ruleset)? No, the GUI can't do this except during manual rule updates.  See, the GUI code is not even running once you leave the Snort menus.  All those web page sessions in the GUI are essentially stateless.  When you exit the page or browse to another menu, that former PHP GUI process shuts down.  The automatic rule updates are done entirely via a cron job.  Trying to figure out which rule failed is a big effort.  I just don't think that is practical.  After all, this problem with a corrupted rules file has only happened once in the year I have been quasi-maintaining the Snort package. A better solution is for someone to create a service monitoring package for pfSense.  You could load it with the services you want monitored, and then on some interval it could canvass the running processes (services) to see what is and is not running.  It could either attempt a restart of dead services, or raise an alert or alarm if one won't restart.  Maybe something like this exists and I'm just not aware of the package? Bill
  • PfBlocker error

    3
    0 Votes
    3 Posts
    1k Views
    S
    Thanks for directions, found it, fixed it, working :)
  • Squid settings question

    5
    0 Votes
    5 Posts
    2k Views
    M
    I see your point Ecnerwal.  I would hope the author simply misused the word "swap" for "cache".  Your right, there generally isn't any swapping going on in a cache.  Operates more like a FIFO, in the case of Squid, a conditional or rules based FIFO.  I don't swap anything to my SSD either, use RAM for all I can except the occasional logging on a 4 hr interval.
  • Snort kills routing to specific domains!

    6
    0 Votes
    6 Posts
    2k Views
    S
    Pfsense 2.0.3 and Snort 2.9.4.6 pkg v. 2.6.0 :) I used the affected machines earlier today and suddenly it rendered the subdomain useless on all ports. Main domain was fine and even other subdomains worked. I rebooted and it worked fine for a couple of minutes and then the affected subdomain was unreachable. Disable snort and a reboot, then it came on fine again. Then I got the dce_iface error and disabled the preproc. and it has been running since…
  • Sarg segment fault pf 2.1 i386

    1
    0 Votes
    1 Posts
    839 Views
    No one has replied
  • Dansguardian can work with multiples groups filtering by IP?

    3
    0 Votes
    3 Posts
    1k Views
    M
    That did it for me at least. Thank you!
  • Varnish 3

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Please start bandwidthd to populate this directory

    Locked
    2
    0 Votes
    2 Posts
    4k Views
    GruensFroeschliG
    Reported by marceloviana on Yesterday at 16:31:18. They left the following message: I used this line in console for resolved: /usr/pbi/bandwidthd-amd64/bandwidthd/bandwidthd
  • Havp - No such file or directory

    4
    0 Votes
    4 Posts
    3k Views
    F
    Is there a way to know what the problem Without making changes Because I do not understand it and do not want to ruin Is the link I added to the previous message can be a solution ?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.