Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    perikoP
    @aGeekhere dns_v4_first...have years and they still don't clean the code. But won't affect.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    @NRgia said in Suricata on Pfsense: @bmeeks Thank you for what you did for Snort or Suricata. I'm not sure what you want me to do on Redmine, due to is a bug tracker. My question is for Product Management, which I will ask it here to be public: What is the plan for these 2 packages, Suricata and Snort? Thank you Yes, Redmine is for both bug reports and feature requests. Asking for the Suricata binary to be updated to the latest 7.0.11 version from upstream is a legitimate Redmine request. I would suggest simply asking for the binary version update instead of asking about future Netgate strategy (such as the support plans for the packages). Strategy discussions typically don't get very far because they deal with proprietary information or plans that a company may not want to publicly discuss. Redmine is where the Netgate developer team tracks all the code changes they make for pfSense. They will see Redmine reports much quicker than a forum post.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    dennypageD
    @Leon-Straathof Data retention settings are handled inside of ntopng. Documentation here. Pay attention to the RRD note. Also, if you've turned on some of the slice and dice time series information (is off by default), I'd suggest turning them back off. These balloon the storage requirements and are of little actual use.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    keyserK
    @jrey Thank you so much for the detailed explanation and help. I will adapt and apply the patch to move the job timing like suggested at 01:35 Are you just a user or are you also involved in package maintenance on one or more packages?
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    495 Topics
    3k Posts
    M
    @raidflex said in updating to acme 1.0 breaks system beyond repair: need to restore from backup: maybe uninstall Crowdsec when applying other updates first. It seems like it doesn't help at least from what I see on my system... it changes something.. so it must be definitely reported to their github. I have never experienced that before and crowsec was installed.. maybe with 2.8.0 something have changed
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    597 Posts
    ryan.goodfellowR
    Upgraded 25.07 and Tailscale is broken in the way users here describe. I can manually log in using sudo /usr/local/bin/tailscale login, but the tailscale service in pfSense does not pick this up and restarting the service clobbers the login state. Given 16004 was logged 7 months ago with zero activity, this is an indication that Netgate devices no longer support Tailscale.
  • Discussions about WireGuard

    693 Topics
    4k Posts
    L
    @boyan1 said in Wireguard Gateway not coming up after reboot.: W Hey man, im trying to make the SITE A use internet of SITE B as you did, but there is no means of making that works. How did you make that works? Could you tell me please? Thanks!
  • HAProxy Widget

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    P
    For your information, the widget is now included in the HAProxy-devel1.5-dev18 package. Made a few improvements to it to also: -Options configurable from the WebGUI. -Faster server enable/disable responses. -Dropped socat requirement. Check it out if you want 8)
  • Widescreen package in 2.1 breaks

    Locked
    13
    0 Votes
    13 Posts
    4k Views
    R
    Jim, N/M…  I found an odd character at the end of the widgets field in the xml file.  Deleted it, restored the file and its all well now.  Remnant of Widescreen? Thanks, Rick
  • Squid 2.7.9 pkg v.4.3.3 and Sarg 2.3.2 pkg v.0.6.1

    Locked
    6
    0 Votes
    6 Posts
    5k Views
    M
    I have the exact same issue. Any ideas?
  • FTP Access to Pfsense file system?

    Locked
    6
    0 Votes
    6 Posts
    8k Views
    L
    @biggsy: Use filezilla. By the way, pfSense is built on FreeBSD, which is not Linux. EDIT: Thinks…  why would you want to upload a bunch of files to a firewall? Thanks, didn't think it was that simple!  Enabled Secure Shell, setup NAT on Pfsense and the load sharing router I have in front of pfsense, access with Filezilla is a breeze!  (Filezilla has been my choice for sometime). I thought FreeBSD was a flavour of linux (hangs head in shame). I don't strictly use Pfsense as a firewall, I use it more for the captive portal features to provide WiFi access to a large pub.  My captive portal asks for a name, email and postcode, and these are stored (one user per line) in a file which is rotated each day, with a maximum of 360 files stored.  These logs are available to view on the GUI, and you can click a button to kick the user off the captive portal if you believe the details given are a little suspect.  When they get the captive portal page thrown back at them, there is a red warning asking them to check the details.  Three warnings given bans them for 3 days.  I was considering implementing email validation using a send email with a clickable link, but this just seemed to complicated with having to allow them unresticted access for a period of time to check their emails, and then you also get people who can't access their emails on the move. As such, I have around 200 log files I would like to shift from one system to another as part of an upgrade.  I would prefer to retain the log files on the system rather than starting again from zero.
  • Dansguardian Error

    Locked
    8
    0 Votes
    8 Posts
    3k Views
    N
    I have two sites running Squid (2.7.9 v4.3.3) and Dans Guardian (2.12.0.3 v.0.1.8) About every 10-15 minutes, the logs show: DansGuardian: [nnnnn] Error Connecting to Proxy. I've tried increasing the Proxy Timeout from 30 to 40s and this has not fixed the problem. Any ideas as to what is causing this error?
  • Snort Package 2.5.7 – Issues

    Locked
    59
    0 Votes
    59 Posts
    16k Views
    bmeeksB
    @ermal: Bill for the reinstall during bootup i fixed it by this https://github.com/pfsense/pfsense-packages/commit/7a9c4f49b8fcb9b0d9eedd17046fc3b030c9bb96 Thanks Ermal!  I had actually put the same fix in my working directory copy of the code, but just had not committed it yet to my fork of the pfsense-packages repository.  I discovered that trick while looking through some of the other pfSense PHP files. Bill
  • NUT - Network UPS Tools

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Squid3/Dansguardian not passing traffic

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    G
    Thanks for the response. I was able to get it working. It was a combination of conflicting squid versions (dansguardian installs squid 2.7 and I had installed squid 3) and I also had to manually set the ip address and port of squid in the Dansguardian config even though I'm only using the defaults. I think it might be a left-over quirk from the multiple squid configuration files causing problems. Now, I'm trying to figure out why requests going through Dansguardian/Squid are so slow, but I'll open a new topic for that.
  • Separation of Packages into Virtual Servers

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    W
    Just to clarify, I wasn't really looking for anyone to test this for me.  I was just looking for some advice/recommendations on where I put different services based on prior experience.
  • Snort enable_xff

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    bmeeksB
    @Mr.: On another note… Is it possible to run snort plug-in in inline mode and make it drop packets instead of blocking the source IP? But maybe that needs a new post ;) No, it won't run in true inline mode where it drops packets itself.  The blocking action is the best available for now.  If you construct a proper HOME_NET variable using the Whitelist tab and Aliases, then you can set the block mode to BOTH and be guaranteed to kill the bad traffic without killing a friendly IP.  When set to BOTH, the blocking module will test each IP address individually against the whitelist and only block the one NOT in the list.  The idea is communication to/from the "bad host" is blocked, but hosts in your HOME_NET or whitelist can still communicate to the "good hosts". The current logic for auto-generating the HOME_NET variable and default whitelist is not perfect.  To get it to work as described above in the current version requires a custom whitelist and HOME_NET.  Some changes are being discussed in this thread to make this happen automatically: http://forum.pfsense.org/index.php/topic,61891.msg334030.html#msg334030 Related to your original post about enabling xff, I have already made it a default for the next package update. Bill
  • Dansguardian - clamdscan(off)

    Locked
    8
    0 Votes
    8 Posts
    3k Views
    A
    @Legion: Try and download the test files from http://www.eicar.org/85-0-Download.html I'm 99% sure all is ok, but what should I see when I try to download the test eicar file?  Am I supposed to get a warning that Clamd blocked something or should the download process just not do anything?  When I click on the "Download Anti Malware Test File" my browser shows the spinning icon for about 1/2 second then nothing happens.  ??? Thx UPDATE:  I found the warning… /var/log/clamav/clamd.log has /tmp/tfemgsEy: Eicar-Test-Signature FOUND
  • Load Balance Squid

    Locked
    1
    0 Votes
    1 Posts
    880 Views
    No one has replied
  • Squid 3 Install Broken (2.1 Beta 1)

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    marcellocM
    @markuhde: Installed now. When will Squid3 be updated to a more current version than 3.1? Thanks! 3.3 package version is coming…  :)
  • Snort local IP

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    S
    Bill thanks for your reply :). Sounds as pretty good solution, there is enough CPU and free memory to run multiple instances of snort (different interfaces). I will problably only enable the virus and malware rules of snort on the LAN interface. As that's the reasons why I might need the local IP.
  • Squid3 installation fails

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    S
    I am able to install squid3. Thank you.
  • Squid3 Installation Failure

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    P
    It's actually downloading stuff this time so I think we can call this resolved. Fast response as always, thanks jimp.
  • Squid config suggestions

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    marcellocM
    Just select interfaces you want squid to listen on. An alternative for virtual hosts is to listen squid on 127.0.0.1(loopback) and create nat rules for interfaces/virtual ips you what to squid be available.
  • OpenVPN Client Export Problem

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    N
    Thanks a lot Jimp , the box is ok , but it will not store "user" and "pass" on specific file .
  • Squid ssl_crtd crashing

    Locked
    5
    0 Votes
    5 Posts
    4k Views
    N
    Found this thread: http://forum.pfsense.org/index.php/topic,58368.0.html marcelloc is working on (the same?) feature as you and it seems like he could finish it.
  • Word boundary regex \b on squidGuard

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    N
    You probably cannot compile things on pfsense because the dependencies are not installed because a firewall do not need to compile packages. So you should compile this package on a freebsd 8.1 system (pfsense 2.0.x) or freebsd 8.3 (pfsense 2.1) and build there the .tbz. I read here in the forum that it is possible to create/build .tbz packages on another system and then copy this to pfsense and install it but I do not know the command lines for that. I know that user marcelloc posted on some other threads how to do that because other users asked for that. Perhaps the forum search will give you some success.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.