Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    E
    I even tried deleting and creating a new certificate. Any suggestions?
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    It was all CVE fixes in the PHP GUI part of the package. See the Redmine ticket here: https://redmine.pfsense.org/issues/16414.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    572 Topics
    3k Posts
    keyserK
    @Antibiotic No it’s not possible with NtopNG as it is not a Netflow collector. You need nProbe for that which will “translate” recieved netflows into flows that NtopNG understands and can visualize (with very very little detail might I add as Netflows has no additonal information apart from sender/reciever and volume). The NtopNG package and the product in general is more geared towards visualising and recording traffic details from actual packet captures. This contains MUCH more metadata about the sessions than netflows (DNS names, protocol information and myriads of other things). But pffSense Plus has a builtin Netflow exporter if you have an external netflow collector on hand.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    V
    @Gertjan Thanks for your reply – that’s also my impression. The point is: I don’t really see any lists right now that are actually “maintained” in the sense of being actively cleaned up, checked for dead domains, categorized, etc. That’s why my main interest is more about the demand: Would curated lists really be a game changer for admins? Would they be more helpful than what’s available today, or are most people already using other alternatives? If so, which ones? And from your perspective, what would be your expectation towards “community lists”? (e.g. reliability, update frequency, categories, fewer false positives?)
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    501 Topics
    3k Posts
    A
    Hi, Please help to forward / report the bugs in ACME 1.0 package. Thanks.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    610 Posts
    E
    Updated CE 2.7.2 to 1.86.4_1 Changelog pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.86.4_1.pkg Freshports
  • Discussions about WireGuard

    700 Topics
    4k Posts
    Bob.DigB
    @HFADmin If it is no Site2Site-VPN then you don't need any gateways in the first place... If that is true but you want to monitor the connection then you could create dummy-gateways just to ping the remote ip-addresses.
  • NETDATA doesn’t work in PFsense 2.6.0

    17
    0 Votes
    17 Posts
    4k Views
    Cool_CoronaC
    Could this be made to serve any specific client on what he is seeing? Just thinking of a shared pfsense environment where different clients are served in VLAN's. Then feed that data into a website available for the specific client to login and see traffic/alerts realtime incl. an attack/traffic map.?
  • 0 Votes
    1 Posts
    587 Views
    No one has replied
  • package manager is not working?

    2
    0 Votes
    2 Posts
    801 Views
    E
    @enesas ** solved** Diagnostics> Commont Prompt I pasted the code below and executed it. Now My package manager is working. env ASSUME_ALWAYS_YES=yes pkg-static bootstrap -f
  • FreeRadius OTP QR code scan old Android vs iPhone

    1
    0 Votes
    1 Posts
    632 Views
    No one has replied
  • Icap server not scanning eicar files correctly

    3
    0 Votes
    3 Posts
    1k Views
    F
    @michmoor I'm uploading a plain text file, I've just created one with the eicar string. The thing is that once its uploaded and on my exchange server, if I try to download the file, I will get the error message from pfsense that it's a virus, but by that point it's scanned by another service. I'm just using pfsense to check the upload.
  • 0 Votes
    1 Posts
    845 Views
    No one has replied
  • Bandwidthd with names

    2
    0 Votes
    2 Posts
    995 Views
    GertjanG
    @optimus-prime said in Bandwidthd with names: And to that extent, is there a way to assign user-defined device names within pfsense by mac address, regardless if devices are set up with DHCP, Static DHCP, or statically assigned? Of course. Add your own static DHCP leases at the bottom of this page : Services > DHCP Server > LAN One for each device + it's MAC address and the IP, member of the LAN network - and outside of the pool.
  • Available packages list is empty

    Moved
    15
    0 Votes
    15 Posts
    2k Views
    bingo600B
    @wintok Start by backing up your existing config to a safe place (or multiple places). Then i'd suggest : Since you have Netgate hardware , that you get a new install image from them, and create a usb boot stick. Then via the usb stick,upgrade your box to the latest release. I would also suggest that you use ZFS as your new filesystem, as it offers some exciting new functionalities in 22.05 ... Snapshots. I can reinstall from scratch (w. hdd format), in less than 20 min. Providing i have a working config backup.
  • BIND package "reinstall" broken?

    1
    0 Votes
    1 Posts
    627 Views
    No one has replied
  • Using syslog-ng to filter for critical events and send alert email

    2
    0 Votes
    2 Posts
    1k Views
    D
    Hi peterglock! Very interesting post. Unfortunately your instructions to do in the "Advanced tab" are not longer available in the post (or at least I cannot see them). Can you please, share them again? thanks a lot!
  • Redirect www to non www

    8
    0 Votes
    8 Posts
    3k Views
    dragoangelD
    @overlord just learn how to use Converters in HAproxy. https://cbonte.github.io/haproxy-dconv/2.6/configuration.html#7.3.1, for example regsub. http-request redirect code 301 location https://%[hdr(host),regsub(\"^www\.(.*)$\",\"\1\",i)]%[capture.req.uri] if { hdr_beg(host) -i www. }
  • 0 Votes
    1 Posts
    664 Views
    No one has replied
  • Haproxy forwardedfor option missing in GUI!

    2
    0 Votes
    2 Posts
    1k Views
    G
    never mind. ssl offloading has to be enabled for that option to show. (admins can delete this post)
  • Freeradius - VLAN fallback assignement

    5
    0 Votes
    5 Posts
    2k Views
    C
    @nogbadthebad - Thanks for your reply. If using 802.1x authentication you can have the radius server pass back the VLAN for the authenticated user (either using username/password or MAC authentication). This is all working as expected for authenticated users - I have one SSID thats broadcast, depending on the user or device (in the case of my IoT) it gets dropped onto the correct VLAN as it reads the radius response. The issue I have at the moment with PFSense is I cannot seem to set a fallback VLAN for failed authentication (ie guests) - Previously in OPNSense (using freeradius) I dropped all unauthenticated users back onto a guest VLAN for segregation. However I dont seem to have the GUI option and when trying to put in the right Syntax for the advanced options, cannot seem to get it to work.
  • Opinions on freeradius3?

    4
    0 Votes
    4 Posts
    1k Views
    D
    @dominikhoffmann I also use freerad, good tool but the GUI is a little old. Have you looked at the captive portal on PFsense? Just another option though I think I saw somewhere a few years ago about issues with IPv6. Supports radius as well
  • openvpn-client-export update request

    2
    0 Votes
    2 Posts
    971 Views
    V
    @herr_xyz Until then it's up to you to download the new version by yourself from there and install it on your Windows or even integrate it into the installer package manually.
  • This topic is deleted!

    2
    0 Votes
    2 Posts
    14 Views
  • HAProxy: https redirect frontend not working

    haproxy
    9
    0 Votes
    9 Posts
    3k Views
    G
    @viragomann Oh man! So, I finally figured out the problem. You were correct from the beginning. In fact, nearly every scenario we tried works. The problem had nothing to do with my setup. My ISP decided to up and block port 80 all of a sudden without telling me. I figured this out by going back to basics. I started up a simple webserver that listened to port 80 and just forwarded directly to that server. Worked on most every other port except 80. Spent 3 hours on the phone with my ISP to get this fixed. All works now. I really appreciate the help. I did learn a few things along the way, so not a total waste of time.
  • PIMD not showing all interfaces

    1
    1 Votes
    1 Posts
    783 Views
    No one has replied
  • stunnel 5.50_11 Will Not Start on Clean Install of 22.05

    1
    0 Votes
    1 Posts
    605 Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.