1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N
    @andrew_cb Thank you very much for this, I just tried your proposed solution and it did work! That was driving me crasy! Way simpler than deleting the haproxy_server_state file.

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    @NRgia said in Suricata on Pfsense: @bmeeks Thank you for what you did for Snort or Suricata. I'm not sure what you want me to do on Redmine, due to is a bug tracker. My question is for Product Management, which I will ask it here to be public: What is the plan for these 2 packages, Suricata and Snort? Thank you Yes, Redmine is for both bug reports and feature requests. Asking for the Suricata binary to be updated to the latest 7.0.11 version from upstream is a legitimate Redmine request. I would suggest simply asking for the binary version update instead of asking about future Netgate strategy (such as the support plans for the packages). Strategy discussions typically don't get very far because they deal with proprietary information or plans that a company may not want to publicly discuss. Redmine is where the Netgate developer team tracks all the code changes they make for pfSense. They will see Redmine reports much quicker than a forum post.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K
    @pulsartiger The database name is vnstat.db and its location is under /var/db/vnstat. With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG
    @rasputinthegreatest said in pfBlockerNG not logging anything by default?: its made up of multiple sources so it does make sense that it resolves some of these weird private hosts An public NTP pool like pool.ntp.org would not list host names with weird random paddings that reference local devices. "domaincontroller-gPHvwjYS.local,192.168.1.86" is a reverse PTR, and is requested by one of your local devices. Why , I don't know. @rasputinthegreatest said in pfBlockerNG not logging anything by default?: I find them in pfblockerNG dns_reply log under Logs No URLs there, only host names. [image: 1754736735409-c09607c2-c95a-4971-bdb4-f63fe08bebe8-image.png]

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG
    @EChondo What's your pfSense version ? The instructions are shown here : [image: 1753262126227-1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png] A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate. @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy: I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess. No need to wait x days. You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1

  • Discussions about the Tailscale package

    90 Topics
    594 Posts
    E
    @totalimpact Tailscale 1.54.0 is 2+ years out of date. Tailscale has made quite a number of changes since Tailscale 1.54.0, likely rendering it incompatible with their servers. I would consider manually updating the Tailscale FreeBSD package. FreshPorts does not maintain an archive of all the releases, only the latest compiled by the volunteer maintainers. The key to manually upgrading is knowing which FreeBSD version your pfSense release is running, i.e. 14 or 15. You can following along here.

  • Discussions about WireGuard

    692 Topics
    4k Posts
    P
    SOLVED. Turns out nothing wrong with my tunnel setup and not due to CGNAT. The reason PING works and other traffic doesn't is due to packet size and MTU. Something on the wireless network means that the default MTU doesn't work, forcing a smaller MTU to 1280 on pfSenseB fixed this. This Reddit thread has more details of this issue: https://www.reddit.com/r/WireGuard/comments/qmsa2n/ping_works_but_sites_arent_loading/
Log in to post
Load new posts
  • S

    Snort Alert Question?

    Locked
    9
    0 Votes
    9 Posts
    3k Views
    S
    Yep I just noticed that as I went to reconfigure! Thanks for your help guys.  ;D [Edit:] In fact, it would appear that Snort does not like to run on multiple interfaces; a bug perhaps?
  • J

    Squid and Traffic Shaping possible work around?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    U
    I had a quick look at what you did, so I don't know what causing squid to crash, but what I said before, squid has been changed for transparent proxying.
  • jahonixJ

    NTP server

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    H
    Firewallrules always work for incoming traffic at an interface. You don't have to allow traffic passing out on any interface. So basically the pfSense itself is allowed always to go anywhere (in case you use the dns forwarder).
  • B

    What is package logs??

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    S
    Yes there are, but I cannot recall which ones.
  • A

    RADIUS manager

    Locked
    14
    0 Votes
    14 Posts
    10k Views
    S
    @almedin: OK, but this is not something that i want… please see that functionality in RadiusManager (www.dmasoftlab.com) - that's something I would like to see in pfsense Start a bounty then.
  • H

    Ntop service stops when activating lan

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    J
    Usually I only want to listen on the lan anyways so I hard card the flag -i (interface name) into the rc.d file.  Then ntop will start using the lan interface.
  • J

    FreeRadius User Import ?

    Locked
    3
    0 Votes
    3 Posts
    8k Views
    J
    I think I got it, in VI it was showing some escapce characters improperly.  When I used the built in editor in PFsense and removed them it read the file.  I also pointed radius to a different user file in freeradius.inc and radiusd.conf so they would read the file I'm going to generate.  If I'm not mistaken this will effectively break the gui user admin and allow me to work with just the text file anyways…?  Kind of ghetto but it should work right?
  • N

    Anyone working on a DNS/BIND package?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    H
    Have a look at the tinydns*.png's at http://pfsense.com/~sullrich/pics/?M=D . It's an upcoming package that is under developement atm.
  • J

    FreeRadius won't start (differs from MaxC post)

    Locked
    26
    0 Votes
    26 Posts
    10k Views
    J
    Well here is the update on the radius package: Install Package go to terminal issue: pkg_delete freeradius-1.1.3_1 (some errors about not being to delete everything will come up, that's fine) pkg_add -r freeradius start the service, done deal Sorry I don't know more than that but it should make it easier for the problem to be fixed, thanks to everyone who helpmed me out.
  • S

    Squid: –enable-snmp ?

    Locked
    8
    0 Votes
    8 Posts
    5k Views
    T
    Cool, thanks !
  • T

    Spamd - unable to start service

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    T
    @Tabun: Hello, i've installed the spamd package from the package manager, but i'm not able to start the service. In the Status-> Services window shows "stopped", if i click on start service button i'll become the message "spamd started" but nothing goes on and the status is still stopped. I've uninstalled and reinstalled the package, but have the same problem. Thank for any help.. (pfsense V. 1.01 (Full install), spamd version 4.3) Solved now
  • J

    Making a package turn op on Diagnostics: Package logs

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    J
    this is the package that you can install from pfsense i have maked it stop and then start with the logging options
  • A

    SpamD - Greylisting

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    R
    Whats meant to happen(mine doesn't even work) is: Black list and greylist IP addresses get sent to the pfsense box on port 25. It whittles away their time and resources. Once it has met the conditions to be allowed to send(time, connections etc), it's meant to whitelist the IP address of the sender and then port forward directly to your specified mail server. This means spammers never touch your server and waste it's resources. It's a great solution. I haven't gotten this working yet but i would love to get this working. I can't troubleshoot it that far as I don't have the know how :) I never had somebody else with the same issue that I had so I could never compare.
  • N

    Spamd issues

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    R
    Once you hit the whitelist its meant to redirect your connection to port 25. I could get it to open port 25 on a grey or blacklist but as soon as it hit whitelist, no connection on port 25 for that whitelisted IP address.
  • K

    Snort core dumped ( promiscuous mode disabled )

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    Y
    Update to the latest snapshot: http://www.pfsense.com/~sullrich/1.0.1-SNAPSHOT-12-14-2006/
  • P

    Core dumping on NTOP now SNORT's Fixed

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    Y
    @redseawireless: 2 Gigs with Quad processor and still taking a crap! I am processing traffic across my wireless network covering over 150 square kilometers! On a average day 3000 to 3800 users! CPU Load 6 to 8 percent! Memory at 1 to 2 percent! Plenty of room to run Snort and Ntop on same machine! Do you have any relevant info on this matter? You're going to have to give more information. Be specific in telling us your testing methods. What version of pfsense are you on? Also show us log outputs when ntop goes down, etc. I've been running snort and ntop for weeks now with no problems.
  • H

    Ntop not working with 1.0.1

    Locked
    10
    0 Votes
    10 Posts
    4k Views
    G
    Not sure if this helps, but I had a similar issue that was caused by special characters in the ntop admin password.   I have verified that the following special characters do not work: &)=%#!?}]   These special characters do work: (^$@~<>{[ Those are the only characters I had the time to test.
  • A

    Where is squid package?

    Locked
    21
    0 Votes
    21 Posts
    10k Views
    H
    Mail it to coreteam@pfsense.com .
  • H

    LDAP, Squid and multiple NICs

    Locked
    6
    0 Votes
    6 Posts
    5k Views
    M
    You have a bounty!
  • U

    Not all the packages in 1.01

    Locked
    10
    0 Votes
    10 Posts
    4k Views
    U
    I'll keep you informed. As for now I have squid working, but I had to NAT all proxy packages to the WAN adres where squid is listening, for this test it works fine, but I don't want to enable a proxy server for the whole world. Also squid is running fine, but at this moment I don't run squid as daemon (I want to see what's going on in the test envoirment)
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.