1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    D
    Retested on 24.11-RELEASE (amd64) all seems to work. So it seems right to file a bug for this issue.

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    S
    So since there is no version 25.03. There is an official 25.07 now but only get a 7.08.2 what happen to the rest up to Suricata 7.0.10 or 7.0.12?

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K
    @pulsartiger The database name is vnstat.db and its location is under /var/db/vnstat. With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    R
    @Gertjan said in pfBlockerNG not logging anything by default?: 192.168.1.85 doesn't exist on your LAN ? This IP does exist on my LAN but why it resolves some weird random desktop-sdshdsd.local? I am overwhelmed by the logs and see so much weird stuff like this. None of these things are on my network. Also no 192.168.51.5 exists on my network either. DNS-reply,Aug 5 12:42:25,reply,A,NSEC,1835,desktop-A5k217Qu.local,192.168.1.86,NXDOMAIN,unk DNS-reply,Aug 5 10:09:22,reply,A,SOA,2942,hometheater-tQNIYv.local,192.168.1.86,SOA,unk DNS-reply,Aug 5 14:22:28,reply,A,SOA,3146,desktop-ZmWfGXFW.local,192.168.1.86,SOA,unk DNS-reply,Aug 5 10:38:49,local,PTR,PTR,Unk,10.34.1.10.in-addr.arpa,192.168.1.86,NXDOMAIN,unk DNS-reply,Aug 5 10:39:03,local,PTR,PTR,Unk,5.51.168.192.in-addr.arpa,192.168.1.86,NXDOMAIN,unk DNS-reply,Aug 5 10:39:09,local,PTR,PTR,Unk,10.170.0.10.in-addr.arpa,192.168.1.86,NXDOMAIN,unk DNS-reply,Aug 5 11:21:24,reply,A,SOA,2827,hometheater-WADQ2.local,192.168.1.86,SOA,unk I checked the pfblockerng logs and at 11:59:58 I see all these resolve. I assume it is related to time servers? I cant find any good info on what zorac.sf-bay.org is for example? EDIT: Seems to be related to Perl which is used by pfsense plugins. But just a guess. DNS-reply,Aug 5 11:59:58,resolver,AAAA,AAAA,86400,anyns.pch.net,127.0.0.1,2001:500:14:6004:ad::1,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,86400,anyns.pch.net,127.0.0.1,204.61.216.4,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,57600,f.ntpns.org,127.0.0.1,139.178.72.201,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,AAAA,57600,f.ntpns.org,127.0.0.1,2a05:dfc1:cb1:123::,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,86400,dns2.udel.edu,127.0.0.1,128.175.13.17,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,SOA,600,dns1.udel.edu,127.0.0.1,SOA,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,SOA,600,dns2.udel.edu,127.0.0.1,SOA,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,86400,ns1.eu.bitnames.com,127.0.0.1,165.227.133.206,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,AAAA,86400,ns1.eu.bitnames.com,127.0.0.1,2a03:b0c0:3:d0::c0:4001,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,3600,osdn.services.net,127.0.0.1,192.55.226.68,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,57600,e.ntpns.org,127.0.0.1,45.33.123.43,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,57600,c.ntpns.org,127.0.0.1,2.59.255.53,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,SOA,600,dns2.udel.edu,127.0.0.1,SOA,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,SOA,600,dns1.udel.edu,127.0.0.1,SOA,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,SOA,300,zorac.sf-bay.org,127.0.0.1,SOA,unk DNS-reply,Aug 5 11:59:58,resolver,A,SOA,300,zorac.sf-bay.org,127.0.0.1,SOA,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,10400,g.ntpns.org,127.0.0.1,212.12.50.229,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,3600,sdn.iecc.com,127.0.0.1,72.249.171.254,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,AAAA,57600,e.ntpns.org,127.0.0.1,2400:6180:0:d1::695:5001,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,AAAA,3600,sdn.iecc.com,127.0.0.1,2606:4300:0:4::106e,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,3600,sdn.iecc.com,127.0.0.1,72.249.171.254,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,AAAA,3600,osdn.services.net,127.0.0.1,2001:470:1f07:1126:4e:6f74:6269:6e64,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,AAAA,57600,c.ntpns.org,127.0.0.1,2600:3c02::f03c:92ff:fe5f:baf1,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,AAAA,3600,ns2.everett.org,127.0.0.1,2001:470:1:205::230,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,86400,ns2.us.bitnames.com,127.0.0.1,107.170.182.174,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,SOA,300,zorac.sf-bay.org,127.0.0.1,SOA,unk DNS-reply,Aug 5 11:59:58,resolver,AAAA,AAAA,3600,sdn.iecc.com,127.0.0.1,2606:4300:0:4::106e,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,86400,ns3.us.bitnames.com,127.0.0.1,68.183.187.150,unk DNS-reply,Aug 5 11:59:58,resolver,A,A,57600,d.ntpns.org,127.0.0.1,86.109.15.15,unk @Gertjan said in pfBlockerNG not logging anything by default?: Without details, set your system to, use 192.168.1.1 = pfSense, and you'll be good. I did that but it hasn't changed anything. This was a default Ubuntu install and it has something to do with systemd-resolve but I can't figure it out myself. @Gertjan said in pfBlockerNG not logging anything by default?: You saw the name of the system process, : is "systemd-resolve" a resolver ? If so, then your Ubuntu totally bypasses the pfSense resolver (and pfBlockerng) . This means that DNS requests made by your Unbuntu are being handled by Ubuntus own resolver. But why do I see stuff being resolved in pfblockerNG if it should be bypassed?

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG
    @EChondo What's your pfSense version ? The instructions are shown here : [image: 1753262126227-1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png] A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate. @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy: I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess. No need to wait x days. You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    J
    @div444 i'm finding the same - did you find a solution or did reverting fix it? Hoping there is a patch fix or something to get it working! Rather not rollback if i can avoid it

  • Discussions about the Tailscale package

    90 Topics
    583 Posts
    L
    Any ideas to why I get this error? Im running pfsense CE 2.8.0-RELEASE (amd64) pkg add https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2_1.pkg pkg: An error occured while fetching package

  • Discussions about WireGuard

    692 Topics
    4k Posts
    F
    Hi again, to be honest: I guess, I did not remember exactly what I did 2 years ago. May I was mistaken by the interface name opt2 because the SG-3100 has a physical port OPT1 and I mixed up physical and virtual names. The goal was to use 2 different tunnels, one for the mobile clients and one for the site-2-site connection. And now all is running in that way . Regards
Log in to post
Load new posts
  • Z

    Is it "safe" to install iperf on 2.0.x?

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    marcellocM
    It's the minimum required version.
  • B

    New Package: Filer

    Locked
    14
    0 Votes
    14 Posts
    9k Views
    B
    Okay that sounds fine; it will be easier for me to test it that way anyway. Also a great add-on to firefox is called "It's All text!" It adds a little edit button to any text box on a web page and lets you "open" it in a text editor of your choice,t hen when you save the file it gets put back into the box. Helpful for editing shell scripts and such with syntax highlighting without having to work on a local file and then upload it again. It makes a great helper to filer! https://addons.mozilla.org/en-US/firefox/addon/its-all-text/
  • J

    Autodect proxy settings & wpad not working on some iexplorer running Windows 7

    Locked
    6
    0 Votes
    6 Posts
    5k Views
    J
    Thank you very much for your help. Any idea about how to get this working? I can download the file wpad.dat from an Android phone, but the DHCP 252 option seems not be working on this android phone. Thank you very much in advance. Jesus.
  • B

    SquidGuard blacklist not showing

    Locked
    5
    0 Votes
    5 Posts
    4k Views
    jimpJ
    Unless the Blacklist download/apply on the Blacklist tab completes, those items won't show up. If that doesn't work, try another browser (IE is bad, use FF/Chrome).
  • JeanNoJ

    SNORT - Strange Wan Alert !!

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    G
    Have you got any mobile phones attached to your network? I only ask because I've seen this port used when people make a wireless connection and stream Video cam feeds using Geoview.
  • C

    MOVED: Firewall getting to busy by udp flood

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • J

    Squidguard: Not to allow IP addresses in URL. Port bypassed

    Locked
    7
    0 Votes
    7 Posts
    5k Views
    J
    Ok. Now I understand your point. Thank you very much. Jesus
  • F

    Typo in freeradius.inc

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    N
    Thanks! Fixed that. If we create certs from the GUI we need to have write ( conf_mount_rw(); ) access to HDD (nanobsd/embedded). After the files were written on the disk we change back to read-only ( conf_mount_ro(); ) So there shouldn't be a problem with that if using pfsense cert manager. If using freeradius-cert-manager there shouldn't be any big problem, too ;-) But thank you very much for your help!
  • P

    Pfblocker initialisation and restore

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    P
    Thanks, updated pfBlocker 1.0.2 on 1 router with no problems.
  • P

    Alix-Board and pfSense 2.0 with Squid and Squidguard

    Locked
    3
    0 Votes
    3 Posts
    4k Views
    P
    I just posted some screenshots of my SquidGuard settings on pfSense 2.0.1 on Alix. Squid and SquidGuard are working fine with the following exceptions: I don't enable access.log - I got "disk full" errors too often, there is only a little RAM disk space for /var and the log doesn't seem to be able to auto-rotate nice and quickly - once a day is too long. The Alix/nanobsd platform is never intended to be a place to record lots of data. If you want lots of logging then you would have to send output to a syslog server that really can store stuff. I can't get time-based rules to work - they work according to the time when SquidGuard starts, but don't switch on and off in real-time. http://forum.pfsense.org/index.php/topic,43352.0.html
  • I

    HAProxy APPSESSION

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • H

    Problems with havp

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • M

    Snort Widget, works now

    Locked
    10
    0 Votes
    10 Posts
    4k Views
    S
    I have changed the code as described but for some reason I get two snort alert widgets after pressing save settings after adding the widget. Any idea why?
  • M

    [protecting my internal mail server] Is Squid-reverse the right choice?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    marcellocM
    The most secure will be apache + mod_security. Some protocol checks as well caching can be done with varnish. I have no idea about security checks on squid-reverse.
  • A

    Squid config

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    marcellocM
    alpha007, Follow this step by step video tutorial, audio is in portuguese but screens are in english  ;) http://www.youtube.com/v/reMh_iUSs2s
  • M

    How to set dansguardian to work in transparent mode with squid

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    marcellocM
    As transparent proxy does not filter ssl, I suggest you to configure proxy.pax/WPAD on your dns and dhcp. If you really want transparent proxy you can try to create a nat rule on lan with source=any, destination=any , destination port=80 and redirect it to 127.0.0.1 at dansguardian port.
  • C

    HTTP accelerator

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    marcellocM
    Both. Is that possible? Yes. Varnish is designed for reverse proxy but can be configured to act as a proxy server. As well squid is designed for outbound proxy but can be configured as a reverse proxy. You may need varnish(http inbound and/or), haproxy(https inbound) and squid(outbound).
  • C

    Bandwidth acceleration with squid.

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    D
    Overall bandwidth throttling - restrict squid common bandwidth Per-host throttling - restrict squid per-user bandwidth (user can not exceed the specified value) This is not accelerating, it is the limit. "This value specifies (in kilobytes per second) " - means how many kilobytes per second the user can receive
  • C

    Squid access.log

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • J

    Lightsquid software error when clicking "Lighstsquid Report"

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    J
    The file lightsquid.cfg is empty. I've tried to remove both Squid and Lightsquid and then re-install, but still get the same error. Can anyone point me in the right direction here? Thanks.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.