Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    E
    I even tried deleting and creating a new certificate. Any suggestions?
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    S
    @icoso also internal IPs aren’t blocked by default
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    572 Topics
    3k Posts
    keyserK
    @Antibiotic No it’s not possible with NtopNG as it is not a Netflow collector. You need nProbe for that which will “translate” recieved netflows into flows that NtopNG understands and can visualize (with very very little detail might I add as Netflows has no additonal information apart from sender/reciever and volume). The NtopNG package and the product in general is more geared towards visualising and recording traffic details from actual packet captures. This contains MUCH more metadata about the sessions than netflows (DNS names, protocol information and myriads of other things). But pffSense Plus has a builtin Netflow exporter if you have an external netflow collector on hand.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    tinfoilmattT
    @BiloxiGeek said in DNSBL and IPv6: Does it just follow the IPv4 address that is listed above that? In my case it would end up being ::10.0.0.86 Yes. In this specific context that's the notation being used. (Full IPv6 web server address, for reference then, would be: http://[0000:0000:0000:0000:0010:0000:0000:0086]) Nota bene: I use 0.0.0.0 which renders the DNSBL webserver useless and inaccessible, but otherwise returns 0.0.0.0 or ::/NOERROR answers to all blocked lookups.
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    501 Topics
    3k Posts
    A
    Hi, Please help to forward / report the bugs in ACME 1.0 package. Thanks.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    610 Posts
    E
    Updated CE 2.7.2 to 1.86.4_1 Changelog pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.86.4_1.pkg Freshports
  • Discussions about WireGuard

    699 Topics
    4k Posts
    S
    @Bob.Dig what's the right place?
  • Squid help

    Locked
    12
    0 Votes
    12 Posts
    4k Views
    J
    I'm guessing there is a language barrier, try your forum language and post there if it is listed, you should have more luck, but all in all this is NOT setup to work correctly yet
  • Squid Whitelist URL Capacity

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    D
    The current squid whitelisting and blacklisting should work starting from version p8. So you can try what size the limit is now :-)
  • Squid log to a remote server

    Locked
    3
    0 Votes
    3 Posts
    4k Views
    B
    I found a command who can do the job : tail -f /log/squid/access.log | logger -p "local4.info" & To work syslog must be configured tu send "local4.info" to the remote server.
  • Snort Alert Question?

    Locked
    9
    0 Votes
    9 Posts
    3k Views
    S
    Yep I just noticed that as I went to reconfigure! Thanks for your help guys.  ;D [Edit:] In fact, it would appear that Snort does not like to run on multiple interfaces; a bug perhaps?
  • Squid and Traffic Shaping possible work around?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    U
    I had a quick look at what you did, so I don't know what causing squid to crash, but what I said before, squid has been changed for transparent proxying.
  • NTP server

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    H
    Firewallrules always work for incoming traffic at an interface. You don't have to allow traffic passing out on any interface. So basically the pfSense itself is allowed always to go anywhere (in case you use the dns forwarder).
  • What is package logs??

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    S
    Yes there are, but I cannot recall which ones.
  • RADIUS manager

    Locked
    14
    0 Votes
    14 Posts
    11k Views
    S
    @almedin: OK, but this is not something that i want… please see that functionality in RadiusManager (www.dmasoftlab.com) - that's something I would like to see in pfsense Start a bounty then.
  • Ntop service stops when activating lan

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    J
    Usually I only want to listen on the lan anyways so I hard card the flag -i (interface name) into the rc.d file.  Then ntop will start using the lan interface.
  • FreeRadius User Import ?

    Locked
    3
    0 Votes
    3 Posts
    8k Views
    J
    I think I got it, in VI it was showing some escapce characters improperly.  When I used the built in editor in PFsense and removed them it read the file.  I also pointed radius to a different user file in freeradius.inc and radiusd.conf so they would read the file I'm going to generate.  If I'm not mistaken this will effectively break the gui user admin and allow me to work with just the text file anyways…?  Kind of ghetto but it should work right?
  • Anyone working on a DNS/BIND package?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    H
    Have a look at the tinydns*.png's at http://pfsense.com/~sullrich/pics/?M=D . It's an upcoming package that is under developement atm.
  • FreeRadius won't start (differs from MaxC post)

    Locked
    26
    0 Votes
    26 Posts
    10k Views
    J
    Well here is the update on the radius package: Install Package go to terminal issue: pkg_delete freeradius-1.1.3_1 (some errors about not being to delete everything will come up, that's fine) pkg_add -r freeradius start the service, done deal Sorry I don't know more than that but it should make it easier for the problem to be fixed, thanks to everyone who helpmed me out.
  • Squid: –enable-snmp ?

    Locked
    8
    0 Votes
    8 Posts
    5k Views
    T
    Cool, thanks !
  • Spamd - unable to start service

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    T
    @Tabun: Hello, i've installed the spamd package from the package manager, but i'm not able to start the service. In the Status-> Services window shows "stopped", if i click on start service button i'll become the message "spamd started" but nothing goes on and the status is still stopped. I've uninstalled and reinstalled the package, but have the same problem. Thank for any help.. (pfsense V. 1.01 (Full install), spamd version 4.3) Solved now
  • Making a package turn op on Diagnostics: Package logs

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    J
    this is the package that you can install from pfsense i have maked it stop and then start with the logging options
  • SpamD - Greylisting

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    R
    Whats meant to happen(mine doesn't even work) is: Black list and greylist IP addresses get sent to the pfsense box on port 25. It whittles away their time and resources. Once it has met the conditions to be allowed to send(time, connections etc), it's meant to whitelist the IP address of the sender and then port forward directly to your specified mail server. This means spammers never touch your server and waste it's resources. It's a great solution. I haven't gotten this working yet but i would love to get this working. I can't troubleshoot it that far as I don't have the know how :) I never had somebody else with the same issue that I had so I could never compare.
  • Spamd issues

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    R
    Once you hit the whitelist its meant to redirect your connection to port 25. I could get it to open port 25 on a grey or blacklist but as soon as it hit whitelist, no connection on port 25 for that whitelisted IP address.
  • Snort core dumped ( promiscuous mode disabled )

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    Y
    Update to the latest snapshot: http://www.pfsense.com/~sullrich/1.0.1-SNAPSHOT-12-14-2006/
  • Core dumping on NTOP now SNORT's Fixed

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    Y
    @redseawireless: 2 Gigs with Quad processor and still taking a crap! I am processing traffic across my wireless network covering over 150 square kilometers! On a average day 3000 to 3800 users! CPU Load 6 to 8 percent! Memory at 1 to 2 percent! Plenty of room to run Snort and Ntop on same machine! Do you have any relevant info on this matter? You're going to have to give more information. Be specific in telling us your testing methods. What version of pfsense are you on? Also show us log outputs when ntop goes down, etc. I've been running snort and ntop for weeks now with no problems.
  • Ntop not working with 1.0.1

    Locked
    10
    0 Votes
    10 Posts
    4k Views
    G
    Not sure if this helps, but I had a similar issue that was caused by special characters in the ntop admin password.   I have verified that the following special characters do not work: &)=%#!?}]   These special characters do work: (^$@~<>{[ Those are the only characters I had the time to test.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.