Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ

    @aGeekhere They just release Squid 7 and it is stable if you want to check it out

    "The Squid HTTP Proxy team is very pleased to announce the availability
    of the Squid-7.1 release!

    This release is, we believe, stable enough for general production use.
    We encourage all users of any previous major version of Squid to upgrade to it,
    as well as users of beta version 7.0.X.

    It can be downloaded from GitHub, at
    https://github.com/squid-cache/squid/releases/tag/SQUID_7_1

    Since version 6, Squid offers:

    better support for overlapping IP ranges and wildcard domains in acl countless security, portability, and documentation fixes

    Since version 6, some previously deprecated features have been removed:

    Edge Side Includes (ESI) access to the cache manager using the cache_object:// scheme - use
    http instead the squdclient tool - use curl
    http://<squid-address>/squid-internal-mgr/menu instead the cachemgr.cgi tool the purge tool - use the http PURGE method instead Ident protocol support basic_smb_lm_auth and ntlm_smb_lm_auth helpers - use Samba's
    ntlm_auth instead

    Further details can be found in the release notes and in the changelog

    Please remember to run "squid -k parse" when testing the upgrade to a new
    version of Squid. It will audit your configuration files and report
    any identifiable issues the new release will have in your installation
    before you "press go".

    If you encounter any issues with this release please file a bug report at
    https://bugs.squid-cache.org/

    --
    Francesco Chemolli

    squid-users mailing list
    squid-users@lists.squid-cache.org
    https://lists.squid-cache.org/listinfo/squid-users"

    I am having issues with this right now

    "I got as far as this with the make clean install no matter what I do I can’t get this package installed. I have tried pkg install heimdal same error after install and pkg install krb5 and pkg install krb5-devel. I don’t know what I am doing wrong it does the make clean for a while and crashes for the bootstrap version the other one I could get going

    ERROR: checking whether S5L_CTX_sess_set_get_cb() callback accepts a const ID argument" ... yes checking "whether X509_get0_signature() accepts const parameters" ... yes checking whether the TXT_DB use OPENSSL_PSTRING data member... yes checking whether the squid workaround for buggy versions of sk_OPENSSL_PSTRING_V alue should used... no checking whether the workaround for OpenSSL IMPLEMENT_LHASH_ macros should used ... yes configure: OpenSSL library support: yes -lcrypto -lss1 configure "Library -Kit-kros" support: no (auto) /configure: LIBHEIMDAL_KRB5_PATH+=-L/usr/lib: not found /configure: LIBHEIMDAL_KRB5_CFLAGS+=-1/usr/include: not found checking for LIBHEIMDAL_KRB5... no configure: error: Required library 'heimdal-krb5' not found ニニニン Script "configure" failed unexpectedly. Please report the problem to timp87@gmail.com maintainerl and attach the '/usr/ports/uuu/squid/uork/squid-7.1/config.log" including the output of the failure of your make command. Also, it might be a good idea to provide an overview of all packages installed on your system te.g. a /usr/local/sbin/pkg-static into -g -tal. *** Error code 1 Stop. makel1]: stopped in /usr/ports/www/squid *** Error code 1 Stop. make: stopped in /usr/ports/www/squid root@free:/usr/ports/www/squid #"

    it gets so far along and fails with this error.

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    P

    Hi. Is there any way to get Suricata working with the new PPPoE driver (available since version 2.8.0). Unfortunately, after enabling the new driver, Suricata doesn't report any alerts.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    M

    @Laxarus This worked for me as well. Though I had to search the web how to edit the file (the easiest way).

    Therefore:

    Addition for anyone struggling to find where to edit files on your pfsense system.

    Go to Diagnostics --> Edit File --> insert the location of the file:

    /usr/local/pkg/pfblockerng/pfblockerng.sh

    Go to line number 1232 by filling it in the Go to line field.

    That line should read:

    s1="$(grep -cv ^${ip_placeholder2}$ ${masterfile})"

    replace only (leave the rest intact):

    masterfile

    to

    mastercat

    Then follow the above instructions from @Laxarus https://forum.netgate.com/post/1219635

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    johnpozJ

    @MacUsers

    https://help.zerossl.com/hc/en-us/articles/360060119933-Certificate-Revocation

    edit: oh you prob out of luck

    You can revoke any certificate issued via the ZeroSSL portal. Currently, certificates issued via ACME can not be revoked from inside the portal - please follow the instructions of your ACME client for revoking those certificates.

    the gui in pfsense does not have the ability to revoke - you prob have to move the certs to something you have certbot installed to and revoke that way.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    88 Topics
    572 Posts
    A

    We have a very basic configuration between three locations. All are running Netgate firewalls (1x 4100, 1x 6100 & 1x 4200). All are on the latest firmware (03.00.00.01-2Ct-uc-15) and system versions (24.11-RELEASE).

    The local subnets are as follows:
    4100 - 192.168.5.0/24
    4200 - 192.168.4.0/24
    6100 - 192.168.1.0/24

    The VPN traffic between the 4100 and 4200 is functioning 100% as expected

    The traffic between 6100 and the 4100 works going from the 4100 subnet (192.168.5.0/24) to the 6100 subnet (192.168.1.0/24)

    Traffic from the firewall (i.e. the 6100 device) to the 4100 subnet works (i.e. I can ping any device on the 192.168.5.0/24 subnet from the 6100 firewall) but I cannot ping any device on the 4100 (192.168.5.0/24) subnet from any device on the 6100 subnet (192.168.1.0/24) - other than from the firewall itself.

    All routes are correct, but it seems that traffic from the 192.168.1.0/24 subnet hits the firewall and then gets lost - traceroute shows that it goes off into the internet.

    Note too that the 6100 has IPsec VPN configured on it as well

    Suggestions would be appreciated

    Attached is a zipped pdf file with the relevant screenshots
    Relevant screen shots.zip

  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Yes, have followed that guide and infact have set up quite a few Wireguard tunnels before with no issue. The difference this time is the CGNAT. I am pretty sure its some quirk of the CGNAT that is causing this but still unsure how to diagnose.

    My firewall settings on the tunnel interfaces are correct I think and are the same as I normally use, there is no blockage there.

  • OpenVPN Multihop Package

    6
    2 Votes
    6 Posts
    2k Views
    A

    @John2893ax
    Hello, can you update pkg for 24.03?

  • Thoughts on CrowdSec

    2
    0 Votes
    2 Posts
    407 Views
    A

    @beloc I have tried him, looks working. Can be integrated with Suricata. They are making update for pfSense, but still not in official repo. If will support official will have to test again)))

  • Requesting help setting up Bind9 on SG1100

    1
    0 Votes
    1 Posts
    118 Views
    No one has replied
  • Bind config window blank - Error Msg on nslookup

    1
    0 Votes
    1 Posts
    233 Views
    No one has replied
  • Howto enable DNSSEC for a domain configured in Bind

    5
    0 Votes
    5 Posts
    826 Views
    A

    @megapearl said in Howto enable DNSSEC for a domain configured in Bind:

    Now finding a way to save the keys in the config xml or write them to a different location to make them persistent upon reboot

    Also looking for a way to save my slave zone. After reboot my slave zone is empty, if there is no master. https://forum.netgate.com/topic/188369/slave-zone-in-bind-9-17/3

  • CloudFlare WARP, WARP+ and WireGuard working setup?

    1
    0 Votes
    1 Posts
    365 Views
    No one has replied
  • Problem with Avahi mdns after upgrade.

    4
    0 Votes
    4 Posts
    628 Views
    GertjanG

    @trautmann

    Avahi doesn't know if traffic goes over wires only, or if a part of the path is over Wifi ....

  • System Patches Package v2.2.11

    1
    5 Votes
    1 Posts
    853 Views
    No one has replied
  • New 2.7.2 Install. Packages are displaying in triplicates.

    4
    0 Votes
    4 Posts
    377 Views
    J

    @SteveITS

    Looks good now... That was weird.

    Thanks.....

  • arpwatch database edit

    2
    0 Votes
    2 Posts
    747 Views
    johnpozJ

    @jester95 had a sim thread recently - the db files are here /usr/local/arpwatch

    https://forum.netgate.com/post/1163611

    the dat files seem to be just text files, so you should be able to edit them I would think.

  • Please Consider Netbird Support | The Truly Free Tailscale Alternative

    1
    5 Votes
    1 Posts
    2k Views
    No one has replied
  • pfSense 2.7 and UDP Broadcast Relay

    9
    1 Votes
    9 Posts
    1k Views
    S

    @Nyxtorm Yes, I had the same feeling; perhaps the best thing is to have the TVs in the same VLAN. In the end, I switched to OpenWRT; I find it better for home use.

  • arpwatch and voluminous amounts of SPAM

    9
    0 Votes
    9 Posts
    572 Views
    J

    Nice! Enjoy!

  • help with ntopng

    4
    0 Votes
    4 Posts
    468 Views
    dennypageD

    @detox To be clear, what I meant was that I don't know if the new pfSense-pkg-ntopng version is in the pfSense community repo yet. You should check in System / Package Manager.

    GeoIP will not work until a new version of pfSense-pkg-ntopng is installed because the old version does not provide the Login ID. [MaxMind now requires a Login ID as well as the License Key. There are several posts discussing this in the forum.]

  • 23.09.1 from 23.05.1 freeRadius broke

    9
    0 Votes
    9 Posts
    1k Views
    P

    @vanwinkle-rip, thanks for posting this! The log suggested to make that change but didn't specify where. You pointed in the right direction.

    Do you or anyone else know how to make this change permanent? Any changes in the GUI revert the changes. Maybe we can create an eap.local file or something like this?

  • Configuring UDP Broadcast Relay

    25
    0 Votes
    25 Posts
    6k Views
    R

    @iptvcld i'm sure there's a more eloquent and effective way to find out but I've actually just googled and messaged various companies to ask them what the udp forwarding port the app uses and been moderately successful. Can't get the the printer to reliably talk across the vlans but that could be a "printers are terrible" thing

  • System Patches Package v2.2.10_1

    3
    8 Votes
    3 Posts
    2k Views
    jimpJ

    They can't be in the release notes immediately along with the release since the issues are marked private until after the release is out, but they'll be added shortly.

  • Netmap root directory

    Moved
    1
    0 Votes
    1 Posts
    133 Views
    No one has replied
  • Rebooting pfsense on wan gateway failure

    2
    0 Votes
    2 Posts
    813 Views
    styxlS

    @ipfftw Try this

    link text

  • FreeRADIUS

    2
    0 Votes
    2 Posts
    295 Views
    P

    The screenshot I posted above got removed somehow so I'm posting in text

    sshguard 14637 Blocking "192.168.4.103/32" for 480 secs (1 attacks in 0 secs, after 3 abuses over 693 secs.)
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.