Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    johnpozJ
    @ha11oga11o if you resolve nextcloud.mydomain.xx to your external IP, ie the same one public people do then it would be handled by your haproxy. Example I have ssl offloading for external users for the public fqdn something.mydomain.tld - this resolves externally to my public IP that hits pfsense wan, this also resolves to my public IP when on my local network, so again haproxy handles the ssl, etc. But if I wanted or needed to access that directly on my local lan then I use its name.home.arpa:port that the service is on that doesn't do ssl, etc. What is the point of using the same fqdn internally and externally? What do you think that gets you other than issues?
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    RedDelPaPaR
    @bmeeks Understood. Thank for kindly for your help. I will likely be ordering a new unit soon.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    C
    Hi folks, Whenever I try to access a DNSBL blocked root domain it shows the block page but the moment it gets into a subfolder or file in the domain it only shows 1x1 px page. Meaning http://detectportal.firefox.com/ redirects to the DNSBL blockpage with the blocked domain info "This website detectportal.firefox.com has been blocked by the Network Administrator!" but if I try http://detectportal.firefox.com/canonical.html http://detectportal.firefox.com/success.txt http://detectportal.firefox.com/justatest it only shows 1x1pixel Is this by design? Is there anything I can do to make the rest of the pages show the alert? Regards
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    dennypageD
    @fjmp24 said in Notification: UPS ups battery is low: If I remove ignorelb directive, my UPS shuts down after 16 seconds This means your UPS is signaling a low battery. Either your battery is bad, or your UPS is bad. Most likely battery, but you never know. I suggest reaching out to Eaton support.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    M
    I am using the DNS-Update method I have to use a DNS-Sleep of 5 minutes to let the letsencrypt txt dns record update propagate. During this 5 minutes the acme-webgui times out. when the acme-webgui times out the Action list is NOT executed. How can I solve this ? Would it maybe be an idea to let the acme.sh script execute the actions in the action list as a post-hook instead of the web-gui? Or maybe add an option to add post-hooks in the webUI ?
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    92 Topics
    639 Posts
    E
    Updated CE 2.8.1 to 1.90.4. Looks like they are already working on .6 Freshports pkg add -f https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.90.4.pkg Changelog
  • Discussions about WireGuard

    714 Topics
    4k Posts
    R
    I was on PfSense version 23.xx (don't recall the xx) and was able to start the Wireguard service. I upgraded to the 25.11 beta version and now the Wireguard service will not even start. I am on Wireguard version 2.1, and I see that there are versions that go up to 2.9. How do I upgrade to a later version? The only version in the pfSense updater is 2.1. Thank you
  • Squid proxy

    16
    0 Votes
    16 Posts
    4k Views
    KOMK
    Glad to hear you got it working.
  • Squid3-dev problems

    4
    0 Votes
    4 Posts
    2k Views
    F
    I figure out good solution First uninstall squid3-dev (and squidguard if any) then install  squid3    (3.1.20 pkg 2.1.0) then uninstall squid 3 finally install  squid3-dev tm make squidguard work with squid3-dev you should flow this steps https://forum.pfsense.org/index.php?topic=73640.0
  • HTTP loadbalancer VIP with rewrite question

    2
    0 Votes
    2 Posts
    649 Views
    F
    Update, I have got this to work with Varnish3 with manual entries.
  • Fresh HAVP install does not start

    1
    0 Votes
    1 Posts
    822 Views
    No one has replied
  • Request for haproxy-devel-1.5-dev25-amd64.pbi

    7
    0 Votes
    7 Posts
    2k Views
    J
    sounds good. thanks for the information. the current package is stable so I am in no hurry.
  • Samba pbi

    1
    0 Votes
    1 Posts
    700 Views
    No one has replied
  • Snort not Alert- arp spoofing

    7
    0 Votes
    7 Posts
    6k Views
    H
    Thanks For Your Kindly Helping Dear <3 Thank YOu  :)
  • Snort cannot start

    3
    0 Votes
    3 Posts
    3k Views
    P
    asphyx Thank´s, this work for me!.
  • Lcdproc-0.5.6 randomly stopping

    3
    0 Votes
    3 Posts
    2k Views
    N
    I've had this issue since the beginning of me using pfSense & LCDProc (1-2 years).  I believe the issue is if one of the interfaces that the LCDProc client is monitoring, goes down or dissapears, then LDCProc client dies. I believe this is why my LCDProc client does not start at router start - the VPN interfaces aren't up by the time LCDProc starts.  A simple restart of the LDCProc service from the web console starts LCDProc fine.
  • Cron Package not running command?

    4
    0 Votes
    4 Posts
    2k Views
    jimpJ
    At the very least, ping should be /sbin/ping, and expr should be /bin/expr There may be more but I didn't look over every line. You'll need to fix any place that runs a command without specifying the full path.
  • Bug or possible problem with Proxy (Squid)

    1
    0 Votes
    1 Posts
    550 Views
    No one has replied
  • PfBlocker Lists Disappearing?

    12
    0 Votes
    12 Posts
    3k Views
    J
    Hi BBCan177, I am going to try your script. I'll get back to you to let you know my results :) Thanks again for your help! Best regards, Joel.
  • Recognizing lcdproc status with disabled LCDd

    1
    0 Votes
    1 Posts
    662 Views
    No one has replied
  • Problem with Dansguardian application

    4
    0 Votes
    4 Posts
    2k Views
    R
    Your clients go to dansguardian… dansguardian forwards to squid.
  • Email Reports Package is not sending emails

    9
    0 Votes
    9 Posts
    4k Views
    F
    I think that patch was just for pfsense in general.  Multiple recipients will work with other notifications.  Although I'm no programmer I think this is more of a issue with the actual mail report package?
  • Postfix adding extra domain names

    8
    0 Votes
    8 Posts
    1k Views
    B
    Maybe something about installing the current package on 2.1. Perhaps an update to 2.1.4 would be worth a try before reinstalling.
  • Squid3 reverse proxy - Can I automate the creation of mappings?

    1
    0 Votes
    1 Posts
    688 Views
    No one has replied
  • Installing p5-perl-ldap

    1
    0 Votes
    1 Posts
    949 Views
    No one has replied
  • Ha-Proxy_Facing 503 Issues

    1
    0 Votes
    1 Posts
    760 Views
    No one has replied
  • Setting up FreeRADIUS - WiFi (WPA2-Ent), OVPN, 2FA, etc

    3
    0 Votes
    3 Posts
    3k Views
    F
    @mich32: The same problem… Thanks for that info! I was actually considering offloading the RADIUS function to a Zentyal box myself (something I'm experimenting with myself atm), & having the pfSense doing auth against if for stuff like oVPN, so thanks for the heads-up. (using DD-WRT AP's atm & maybe a few Ubiquiti's later on) The idea, from my else at least, is to allow them to keep using their W7P clients environemt (& iOS wireless), with a fully POSIX infrastructure back-end, but served in a presentable manner (i.e. just the right eye-candy). I'd be interrested re any progress or insights to be shared here.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.