Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    E
    I even tried deleting and creating a new certificate. Any suggestions?
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    It was all CVE fixes in the PHP GUI part of the package. See the Redmine ticket here: https://redmine.pfsense.org/issues/16414.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    572 Topics
    3k Posts
    keyserK
    @Antibiotic No it’s not possible with NtopNG as it is not a Netflow collector. You need nProbe for that which will “translate” recieved netflows into flows that NtopNG understands and can visualize (with very very little detail might I add as Netflows has no additonal information apart from sender/reciever and volume). The NtopNG package and the product in general is more geared towards visualising and recording traffic details from actual packet captures. This contains MUCH more metadata about the sessions than netflows (DNS names, protocol information and myriads of other things). But pffSense Plus has a builtin Netflow exporter if you have an external netflow collector on hand.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    V
    @Gertjan Thanks for your reply – that’s also my impression. The point is: I don’t really see any lists right now that are actually “maintained” in the sense of being actively cleaned up, checked for dead domains, categorized, etc. That’s why my main interest is more about the demand: Would curated lists really be a game changer for admins? Would they be more helpful than what’s available today, or are most people already using other alternatives? If so, which ones? And from your perspective, what would be your expectation towards “community lists”? (e.g. reliability, update frequency, categories, fewer false positives?)
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    501 Topics
    3k Posts
    A
    Hi, Please help to forward / report the bugs in ACME 1.0 package. Thanks.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    610 Posts
    E
    Updated CE 2.7.2 to 1.86.4_1 Changelog pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.86.4_1.pkg Freshports
  • Discussions about WireGuard

    700 Topics
    4k Posts
    Bob.DigB
    @HFADmin If it is no Site2Site-VPN then you don't need any gateways in the first place... If that is true but you want to monitor the connection then you could create dummy-gateways just to ping the remote ip-addresses.
  • Quagga OSPF help for a beginner

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    R
    @rengiared: sorry for my late response, but i have figured out where my problem was on the site with the 2 wans i made a gateway-group and set this on the default-lan to everywhere rule as gateway, as soon as i changed it back to the default gateway preference all works then you can fix it easy we setup a "private" alias with all internal networks (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 169.254.0.0/16) and set on each LAN a first "external" route: allow any any to !private any  over gateway group (with traffic limiter)
  • MOVED: Xenserver Tools for pfsense

    Locked
    1
    0 Votes
    1 Posts
    932 Views
    No one has replied
  • PfBlocker Lists question & Errors

    Locked
    8
    0 Votes
    8 Posts
    3k Views
    marcellocM
    @rl2171: Strange, if I do Deny inbound it shows red, but if I deny both it shows as green. If you have no rules on wan interface, pfblocker will not create a rule as you already has an deny all traffic rule.
  • Monit on pfsense

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    L
    Hi Raj, I did it the other day: http://forum.pfsense.org/index.php/topic,61602.0.html Hope that helps.
  • HAProxy Widget

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    P
    For your information, the widget is now included in the HAProxy-devel1.5-dev18 package. Made a few improvements to it to also: -Options configurable from the WebGUI. -Faster server enable/disable responses. -Dropped socat requirement. Check it out if you want 8)
  • Widescreen package in 2.1 breaks

    Locked
    13
    0 Votes
    13 Posts
    4k Views
    R
    Jim, N/M…  I found an odd character at the end of the widgets field in the xml file.  Deleted it, restored the file and its all well now.  Remnant of Widescreen? Thanks, Rick
  • Squid 2.7.9 pkg v.4.3.3 and Sarg 2.3.2 pkg v.0.6.1

    Locked
    6
    0 Votes
    6 Posts
    5k Views
    M
    I have the exact same issue. Any ideas?
  • FTP Access to Pfsense file system?

    Locked
    6
    0 Votes
    6 Posts
    8k Views
    L
    @biggsy: Use filezilla. By the way, pfSense is built on FreeBSD, which is not Linux. EDIT: Thinks…  why would you want to upload a bunch of files to a firewall? Thanks, didn't think it was that simple!  Enabled Secure Shell, setup NAT on Pfsense and the load sharing router I have in front of pfsense, access with Filezilla is a breeze!  (Filezilla has been my choice for sometime). I thought FreeBSD was a flavour of linux (hangs head in shame). I don't strictly use Pfsense as a firewall, I use it more for the captive portal features to provide WiFi access to a large pub.  My captive portal asks for a name, email and postcode, and these are stored (one user per line) in a file which is rotated each day, with a maximum of 360 files stored.  These logs are available to view on the GUI, and you can click a button to kick the user off the captive portal if you believe the details given are a little suspect.  When they get the captive portal page thrown back at them, there is a red warning asking them to check the details.  Three warnings given bans them for 3 days.  I was considering implementing email validation using a send email with a clickable link, but this just seemed to complicated with having to allow them unresticted access for a period of time to check their emails, and then you also get people who can't access their emails on the move. As such, I have around 200 log files I would like to shift from one system to another as part of an upgrade.  I would prefer to retain the log files on the system rather than starting again from zero.
  • Dansguardian Error

    Locked
    8
    0 Votes
    8 Posts
    3k Views
    N
    I have two sites running Squid (2.7.9 v4.3.3) and Dans Guardian (2.12.0.3 v.0.1.8) About every 10-15 minutes, the logs show: DansGuardian: [nnnnn] Error Connecting to Proxy. I've tried increasing the Proxy Timeout from 30 to 40s and this has not fixed the problem. Any ideas as to what is causing this error?
  • Snort Package 2.5.7 – Issues

    Locked
    59
    0 Votes
    59 Posts
    16k Views
    bmeeksB
    @ermal: Bill for the reinstall during bootup i fixed it by this https://github.com/pfsense/pfsense-packages/commit/7a9c4f49b8fcb9b0d9eedd17046fc3b030c9bb96 Thanks Ermal!  I had actually put the same fix in my working directory copy of the code, but just had not committed it yet to my fork of the pfsense-packages repository.  I discovered that trick while looking through some of the other pfSense PHP files. Bill
  • NUT - Network UPS Tools

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Squid3/Dansguardian not passing traffic

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    G
    Thanks for the response. I was able to get it working. It was a combination of conflicting squid versions (dansguardian installs squid 2.7 and I had installed squid 3) and I also had to manually set the ip address and port of squid in the Dansguardian config even though I'm only using the defaults. I think it might be a left-over quirk from the multiple squid configuration files causing problems. Now, I'm trying to figure out why requests going through Dansguardian/Squid are so slow, but I'll open a new topic for that.
  • Separation of Packages into Virtual Servers

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    W
    Just to clarify, I wasn't really looking for anyone to test this for me.  I was just looking for some advice/recommendations on where I put different services based on prior experience.
  • Snort enable_xff

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    bmeeksB
    @Mr.: On another note… Is it possible to run snort plug-in in inline mode and make it drop packets instead of blocking the source IP? But maybe that needs a new post ;) No, it won't run in true inline mode where it drops packets itself.  The blocking action is the best available for now.  If you construct a proper HOME_NET variable using the Whitelist tab and Aliases, then you can set the block mode to BOTH and be guaranteed to kill the bad traffic without killing a friendly IP.  When set to BOTH, the blocking module will test each IP address individually against the whitelist and only block the one NOT in the list.  The idea is communication to/from the "bad host" is blocked, but hosts in your HOME_NET or whitelist can still communicate to the "good hosts". The current logic for auto-generating the HOME_NET variable and default whitelist is not perfect.  To get it to work as described above in the current version requires a custom whitelist and HOME_NET.  Some changes are being discussed in this thread to make this happen automatically: http://forum.pfsense.org/index.php/topic,61891.msg334030.html#msg334030 Related to your original post about enabling xff, I have already made it a default for the next package update. Bill
  • Dansguardian - clamdscan(off)

    Locked
    8
    0 Votes
    8 Posts
    3k Views
    A
    @Legion: Try and download the test files from http://www.eicar.org/85-0-Download.html I'm 99% sure all is ok, but what should I see when I try to download the test eicar file?  Am I supposed to get a warning that Clamd blocked something or should the download process just not do anything?  When I click on the "Download Anti Malware Test File" my browser shows the spinning icon for about 1/2 second then nothing happens.  ??? Thx UPDATE:  I found the warning… /var/log/clamav/clamd.log has /tmp/tfemgsEy: Eicar-Test-Signature FOUND
  • Load Balance Squid

    Locked
    1
    0 Votes
    1 Posts
    880 Views
    No one has replied
  • Squid 3 Install Broken (2.1 Beta 1)

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    marcellocM
    @markuhde: Installed now. When will Squid3 be updated to a more current version than 3.1? Thanks! 3.3 package version is coming…  :)
  • Snort local IP

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    S
    Bill thanks for your reply :). Sounds as pretty good solution, there is enough CPU and free memory to run multiple instances of snort (different interfaces). I will problably only enable the virus and malware rules of snort on the LAN interface. As that's the reasons why I might need the local IP.
  • Squid3 installation fails

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    S
    I am able to install squid3. Thank you.
  • Squid3 Installation Failure

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    P
    It's actually downloading stuff this time so I think we can call this resolved. Fast response as always, thanks jimp.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.