1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N

    Can I use pgblockerng aliases in Haproxy?

    80758505-9bad-4dad-a80b-c159be1045a2-image.png

    If it was a firewall rule, typing pfb would produce a dropdown to select.

    Here it has to be written, but will it work? Is it supported?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    cyb3rtr0nianC

    @bmeeks So after upgrading to the newest PfSense 2.8.0 everything is now working like a charm!

    Suricata no longer seems to strip off tags like it did before! Which means I can now use my network segmented by VLANs and still use the benefits of Suricata Inline IPS! Very niiize!

    I checked in the Alerts section and it is indeed generating the correct alerts from the different VLAN sections, I put Inline IPS on the parent interface of all the VLANs.

    I assume this is because the FreeBSD version is also updated with the new PfSense 2.8.0 version?

    Because before, as soon as I selected Inline IPS mode, my entire VLAN tagging would break and nothing was reachable until I switched back to Legacy mode.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG

    @AlexK-0 said in Can't receive GeoIP databases updates anymore, banned:

    Days ago, I received from MaxMind an email, notifying me that my country has been banned to receive GeoLite City database updates.

    You've found a reason to use a VPN.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG

    @EChondo

    What's your pfSense version ?
    The instructions are shown here :

    1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png

    A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate.

    @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy:

    I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess.

    No need to wait x days.
    You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    89 Topics
    574 Posts
    A

    Hello,
    I am unable to get the Tailscale package to work. The page at VPN > Tailscale > Authentication is stuck. It displays the error "Tailscale is not online," but also shows a "Logout and Clean" button, with no option to log in.
    link text

    This state persists even after performing the following troubleshooting steps:

    Rebooting the pfSense router.

    Completely uninstalling and reinstalling the Tailscale package multiple times.

    Clearing browser cache and using a private browser window.

    Toggling the main "Enable Tailscale" checkbox in the settings.

    Checking the logs, which show the service gets a "terminate" signal and shuts down cleanly; it does not crash.

    Manually trying to delete the state file with rm /var/db/tailscale/tailscaled.state, which failed because the file does not exist.

    It appears that the package's configuration is corrupted in a way that persists even after reinstallation. Can anyone advise on how to perform a complete manual cleanup of all Tailscale files and settings?

  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Thanks for further suggestions. The tunnel is definitely up and so I don't think this is a CGNAT issue after all. WAN firewall rule is in place for UDP on port 51823 (otherwise the tunnel wouldn't work, right?). I can ping from client 1 -> client 2 and visa versa and also ping all points in between like you suggest. I just can't open an HTTPS connection from pfSenseB from Client 1 using a browser. But I can do this the other way round i.e. from Client 2 to pfSenseA

    I will try and do some packet capture to see if that reveals anything.

Log in to post
Load new posts
  • M

    Dual wan and package install

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    Cry HavokC

    Set up an explicit route?

  • L

    Package reload hangs

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • N

    How to disable squid without removing it?? –RESLOVED--

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    N

    WORKS.
    THANKS

  • D

    Frickin Question

    Locked
    17
    0 Votes
    17 Posts
    7k Views
    A

    Once again this has come up :)

    What have I tried meantime is that I installed Frickin 2.0 beta2 onto my FreeBSD-6.2. I also enabled scrub only for udp and tcp, but well.. still stuck on "Verifying username and password..".

    Looks like I forgot to MFC a few items.  Please try a snapshot about 2 hours from now.

    I didn't quite get what snapshot should one try - Frickin or pfSense or …?

    And I'm quite confused about PF and PPTP issue. Some people seem to claim that it's possible to use PPTP through PF, but all the guidlines end up somewhere.. Is there any hope to get it working with PF or should I just go back to IPFW (which to my mind had no such problems)?

  • P

    Snort not working

    Locked
    2
    0 Votes
    2 Posts
    6k Views
    S
    Sep 19 15:47:54    snort[11015]: PID path stat checked out ok, PID path set to /var/run/ Sep 19 15:47:54    snort[11015]: PID path stat checked out ok, PID path set to /var/run/ Sep 19 15:47:54    snort[11015]: FATAL ERROR: Failed to Lock PID File "/var/run//snort_ng0.pid" for PID "11015" Sep 19 15:47:54    snort[11015]: FATAL ERROR: Failed to Lock PID File "/var/run//snort_ng0.pid" for PID "11015"

    Do you connect to the internet via PPoE?

    I am currently having the same error but on ath0 but I've set snort to listen on to bfe0 (WAN)

    Slam

  • R

    RC2 doesn't list packages

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    R

    Thanks  ;D i was searching for subversion pkg

  • R

    Subversion(SVN)

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    R

    Thanks for the info, anyone has tryied to use pkg_add?? on a pfsense?

  • K

    Ip on whitelist but snort is stil triggering/blocking

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • S

    Snort

    Locked
    9
    0 Votes
    9 Posts
    7k Views
    AhnHELA

    I see the same exact thing on a reboot.  Snort apparently takes some coaxing to run properly and yes I've seen that line 40 error as well as of late.

    This is not specific to just your system Slam, so no more clean installs, ok?  ;)

  • U

    Proxy and load balancer

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    A

    Correct usuarioforum, that's my understanding too

  • S

    Squid - Transparent Proxy for ALL Web Traffic

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    M

    @Seth:

    including traffic on unique ports and SSL.  Is this possible?

    Transparently intercepting SSL is not possible, that's part the design of SSL.  As for non-standard ports, just block them: this is standard enterprise filtering technique and all service operators are aware of this, and hence the invention of HTTP tunnelling.

    Sneakily I want to add my own question, as of 1.2-RC2 is it possible to install transparent Squid to HAVP+ClamAV proxy from packages without manual configuration file hacking?  Would this even remotely run on a WRAP device with 128MB system memory and 4GB CF microdrive?  I'm checking for convenient embedded alternatives.

  • G

    UPNP service not working correctly on multiple interfaces

    Locked
    8
    0 Votes
    8 Posts
    3k Views
    R

    My mistake, I use vim in windows to edit the files and didn't realize it wasn't in unix format. Whats interesting is I tested it on my pfSense box and it ran fine. Anyway I updated the file using dos2unix to make sure.

  • D

    About IMSpector file transfer and wishlists

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    R

    Not at this time. Visit the http://imspector.org/ page for contact information.

  • J

    AC-bnfa

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    D

    How about looking at the snort community? :)

  • J

    NUT Package

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    R

    @lorenzr:

    I am having the same problem both on 1.2RC2 and the last stable version before it.  After some tinkering I got a similar error.  "upsmon[xxxx]: user uucp not found"
    I looked at the passwd file and uucp isn't there.  Perhaps another package installs this or it apprear when a serial port is present?

    I tried to replace uucp with root but I must have missed a spot or it set on a file generated on install.
    Ray

    Looks like an easy fix. The uucp user existed on earlier builds. Heres the line in the /etc/passwd on my box.

    uucp:*:66:66:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico

  • I

    Squid - whitelist

    Locked
    2
    0 Votes
    2 Posts
    8k Views
    M

    1.  Fill in the whitelist as you would expect.  List out the sites you want to allow the computers access to. 
    2.  List out the computers by IP that are NOT subject to the whitelist only rules and put them in the 'Unrestricted IPs' box, one per line.  You might have to make one group static and the other on DHCP, or set reservations in DHCP.  Depends on your situation and number of hosts to deal with.
    3.  Place a single '.' (no quotes) in the blacklist.  This is the wild card character for squid.

    This is exactly how we have a production system running, it's amazing.

  • B

    FreeRADIUS

    Locked
    12
    0 Votes
    12 Posts
    5k Views
    A

    I found that freeradius will stop running (Status>Services) everytime i manually disconnect and reconnect my WAN connection (PPPoE). Has anyone got the same problem?

  • P

    Mdmfs package

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    P

    A few notes:

    1. apparently you need to log in to the forums to see the screen shots

    2. mfs mounts = aka "RAM disk".  Basically if you have a box running pfsense with lots of RAM, why not use some spare RAM to save wear and tear on your CF or hard drive while still allowing for a full install of pfsense.

    3. has an option to create a default set of mfs mount points for a few common directories that are accessed/written to on a frequent basis with two clicks of your mouse.

    4. an initial package is complete, I am looking on what the procedures are to submit this for review.  (I have email the coreteam, etc)

  • D

    Adding Widgets to Dashboard

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    Y

    I'll test it out this weekend and add it to the package.

  • P

    UPNP

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    P

    Thank you for your help. For future readers, the package did not show up in the backup file as it never finished installing the package. Reloading the update fixed the problem.

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.