Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    perikoP
    @aGeekhere dns_v4_first...have years and they still don't clean the code. But won't affect.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    @NRgia said in Suricata on Pfsense: @bmeeks Thank you for what you did for Snort or Suricata. I'm not sure what you want me to do on Redmine, due to is a bug tracker. My question is for Product Management, which I will ask it here to be public: What is the plan for these 2 packages, Suricata and Snort? Thank you Yes, Redmine is for both bug reports and feature requests. Asking for the Suricata binary to be updated to the latest 7.0.11 version from upstream is a legitimate Redmine request. I would suggest simply asking for the binary version update instead of asking about future Netgate strategy (such as the support plans for the packages). Strategy discussions typically don't get very far because they deal with proprietary information or plans that a company may not want to publicly discuss. Redmine is where the Netgate developer team tracks all the code changes they make for pfSense. They will see Redmine reports much quicker than a forum post.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    dennypageD
    @Leon-Straathof Data retention settings are handled inside of ntopng. Documentation here. Pay attention to the RRD note. Also, if you've turned on some of the slice and dice time series information (is off by default), I'd suggest turning them back off. These balloon the storage requirements and are of little actual use.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    fireodoF
    @tinfoilmatt said in Failed or invalid Mime Type: [application/SIMH-tape-data|0]: (ASN data is IPinfo, not Maxmind) Thats correct but "GeoLite2-Country" is from Maxmind ... (that confused me) I'm considering simply adding "application/SIMH-tape-data" to the list to test. Thats what i tought too ... I'll try when I have the time for it ... Edit: I can confirm - adding "application/SIMH-tape-data" to the list at line 257 in /usr/local/pkg/pfblockerng/pfblockerng.inc did the trick - no more error! Edit: OK, problem resolved but I would like to know, whats the cause for that error! Thanks a lot!
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    495 Topics
    3k Posts
    I
    Redmine Issue has been closed. fixed - Gandi LiveDNS method in acme 1.0 has both PAT and API key fields. tested on: 25.11-DEVELOPMENT (amd64) built on Sat Aug 16 6:00:00 UTC 2025 FreeBSD 15.0-CURRENT
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    598 Posts
    E
    Updated CE 2.7.2 to 1.86.4 Changelog pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.86.4.pkg Freshports
  • Discussions about WireGuard

    693 Topics
    4k Posts
    L
    @boyan1 said in Wireguard Gateway not coming up after reboot.: W Hey man, im trying to make the SITE A use internet of SITE B as you did, but there is no means of making that works. How did you make that works? Could you tell me please? Thanks!
  • Squidguard crazyness (ACL, authentification and transparent proxy)

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    L
    You mean by modifying the captive portal, or the captive portal is already able to authenticate using AD, and it's able to send user/groups to SquidGuard?
  • HAVP unstoppable

    Locked
    6
    0 Votes
    6 Posts
    2k Views
    O
    i have this : For LAN TCP LAN net * * 5900 (VNC) *   Allow LAN VNC For WAN TCP LAN net * * 5900 (VNC) *   Allow WAN VNC and when you use vnc over openvpn you have to put one access rule for the other network (f.e. 10.10.10.0/24) for wan and lan to test it ;) GOOD LUCK
  • RRD Summary packages not working correctly

    Locked
    5
    0 Votes
    5 Posts
    5k Views
    jimpJ
    The graphs are drawn from the data in the RRD files, the RRD summary package attempts to add the values up from the same files and produce a sum from them, giving you total usage. Same data, two different views.
  • Linux script to Add Host Blocking to pfSense?

    Locked
    7
    0 Votes
    7 Posts
    5k Views
    jnorellJ
    zktech, you might look at the snort package in pfSense, too - even the portscan preprocessor (ie. without downloading any snort rulesets) catches a lot of ssh port scans, and can automatically block (and later remove) the scanning ip addrs.
  • SQUID CACHE FILES

    Locked
    7
    0 Votes
    7 Posts
    10k Views
    O
    ok i have one problem with this….my structur :( i cant like this:   http://forum.pfsense.org/index.php?topic=14609.0 edit the acl localhost to my lan addy acl localhost 127.0.0.1/255.255.255.255 change to: acl localhost 192.168.10.10/255.255.255.255 this it not possible because of squid: http_port 127.0.0.1:3333 Example with result solution ;) when your structur: intranet (wan) –- squid cache --- havp --- intranet (lan) because of havp dont understand ftp protokoll then you have to configure /usr/local/etc/squid/cachemgr.conf localhost:"your squid port" f.e. localhost:6666 you schouldnt write ips 127.0.0.1:port          !!!!!!!!!! step two: /usr/local/etc/squid/squid.conf at first add some lines before acl entries: cachemgr_passwd disable offline_toggle reconfigure shutdown cachemgr_passwd none all and second add some lines after acl entries! http_access allow manager localhost http_access allow manager localnet #http_access deny manager i know the entry is false, but i dont have a solution to access with deny all manager rule???!!!! thats all and you can access a perfect cache manager tool for squid ! :) questions = pm Good Luck
  • Custom ACL rules in squid

    Locked
    3
    0 Votes
    3 Posts
    6k Views
    jimpJ
    That's /usr/local/pkg/squid.inc if you're having trouble locating the file.
  • PACKAGE NOTES ????

    Locked
    5
    0 Votes
    5 Posts
    4k Views
    O
    ok thanks a lot jimp!!!! have a nice day!
  • HAVP package stoped working and blocks http browsing

    Locked
    15
    0 Votes
    15 Posts
    7k Views
    L
    IDK, it just shows "started" on the antivirus screen for the pfsense package page. This is a screen shot after the HAVP fails to work. To make it work, I have to uninstall and reinstall the package each time I reboot or install an update of pfsense. [image: antivirus.png] [image: antivirus.png_thumb]
  • Best Package for Bandwidth Usage per IP

    Locked
    9
    0 Votes
    9 Posts
    29k Views
    T
    Thanks for the tip, Sambo.
  • OSPF Bridging

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    J
    I told OSPF to use then LAN port but the OSPF traffic didn't show up on the other server. I have moved away from that setup now anyway as it was causing me other problems. Should this package work with talking to pf v2 and v1.2.3 as when I got it working traffic wouldn't flow between the 2 nic's.
  • SquidGuard don't filter.

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    A
    @dvserg: Pls read tutorial about SG. Thank you, dvserg! You are best. I got my problem here: 0-order A_rule for Source 10.0.0.0/24 1-order B_rile for Source 10.0.0.15. In this situation In this situation B_rule never applying for 10.0.0.15 source, becose A_rule already worked
  • HAVP & 2.0 B4

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    L
    Even with a fresh install of pfsense, when I implement the updates and the firewall does the updated pfSense, when it "sync"'s the packages upon initial boot after updating pfsense, the package doesn't load and it crashes with the above errors in the system logs. After that, in order to get HAVP running again, I have to uninstall and install the package again.  No reconfiguration, just an uninstall and reinstall, then everything is working great and correctly.  It just sucks having to keep uninstalling and reinstalling the package all the time since snaps are created close to every 12 hours.
  • HAVP -> FTP is currently supported only if PARENTPROXY is used!

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    D
    Do you have FTP access directly via squid (not HAVP)?
  • Squidguard log

    Locked
    11
    0 Votes
    11 Posts
    18k Views
    A
    after remove block.log, squidguard.log and then i reboot the firewall, i still can't access squidguard log via webGUI. weird…  ??? [image: squidguard-pfsense-07.jpg]
  • HAVP is failing the eicar test.

    Locked
    18
    0 Votes
    18 Posts
    10k Views
    N
    igor u were right i have libbz2.so which is linked to libbz2.so.3, and both are present, but i can't find the libbz2.so.4( the missing one), there is no such file by the name libbz2.so.4 . What should i do now ?
  • NRPE check add

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Help to install HAVP

    Locked
    19
    0 Votes
    19 Posts
    7k Views
    N
    hi all,         I made a complete reinstall of havp.The installation for HAVP from shell was a success, it didn't gave any errors. But when i executed freshclam it gave the following error : /libexec/ld-elf.so.1:Shared object "libbz2.so.4" not found, required by "freshclam" what should i do now ? Also how to start havp from shell ? Because i installed havp from the shell itself it is not listed in the Web GUI installed packages. Thanks in advance. NM04
  • Snort custom rules?

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    I
    Still working on it?
  • Squid 3?

    Locked
    18
    0 Votes
    18 Posts
    10k Views
    jimpJ
    @_igor_: Who maintains the squid3-package? To me it looks as if not much happens (still alpha), for this reason i didn't test till now. But i don't want to offend anyone, if i'm completely wrong with my opinion. Would test it with 2.0. Any status-update would be apreciated. Thanks! It had not been touched in a while. I tried to bring it up to date a bit last week by syncing the code from the 2.x package since someone had said it should be config-compatible, and I made it use Squid 3.1.x (which may be where the incompatibility came in). It should be possible to make it work, it just needs some TLC.
  • Lightsquid and users

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.