1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG
    @shady28 Click on the round "I" for more info. After reading, you'll know now that "unbound mode" is the old legacy mode, it's advised to use Python mode which : Is faster Is faster to reload Offers more options Etc.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.

  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?

  • Discussions about the Tailscale package

    93 Topics
    657 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.

  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
Log in to post
Load new posts
  • marcellocM

    Pkg.php with up and down function - almost there

    Locked
    39
    0 Votes
    39 Posts
    10k Views
    N
    Ok, ok, ok! You got me. I added this to freeradius2 package  ;) It is not exactly what I want - it is more (complex) - but I think it will be helpful as bigger as the user file is  :P
  • rcfaR

    Does mailscanner require postfix, or does it run standalone?

    Locked
    2
    0 Votes
    2 Posts
    986 Views
    marcellocM
    @rcfa: Subject says it all. Not quite clear.. on that.. It requires postfix installed and working.
  • D

    Snort: 2.9.2.3 pkg v. 2.2.1 - Is it stable now?

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    L
    I agree it is still not stable, honestly does not seem to have really improved, since starting my recent journey into pfsense. I just went through a total fresh install. I am starting to loose faith in a stable product here and it's becoming harder for me to say this is a good stable choice for my employer. As many others have stated why is there no way to roll back packages to a working version? Why is there not more stringent testing going on before pushing to your stable version? There has to be a simple way to get things sorted out here until you have the "updated" version working, or is this a difference between "paid" support and free? Me personally, I am waiting about another week before calling this way to unstable for my taste for such a product, since multiple weeks broken is too long in my opinion, especially for those of us new to pfsense and trying just get a working install of listed features. I feel setting up a personal repo is way over kill to get a functioning system, then "cherry picking" the proper revisions for what packages we want to use, again especially just coming into the product.
  • I

    Imspector install fails on sqlite download…

    Locked
    7
    0 Votes
    7 Posts
    2k Views
    I
    Beauteefull!  You're a prince among men.  Thank you.
  • C

    Lightsquid 1.8.0 pkg v.2.32 pbi package not working, perl coredumps

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    C
    i did a gitsync if that was ok… no perl cordumps now :-) but i had to link the config file error /usr/bin/perl /usr/local/www/lightsquid/lightparser.pl today cat: /usr/pbi/lightsquid-i386/squid/logs/access.log: No such file or directory quick fix at the command prompt and its in business rm /usr/pbi/lightsquid-i386/etc/lightsquid/lightsquid.cfg ln -s /usr/local/etc/lightsquid/lightsquid.cfg /usr/pbi/lightsquid-i386/etc/lightsquid/lightsquid.cfg
  • rcfaR

    Hiding Quagga OSPFd in the Dashboard?

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    jimpJ
    Fixed: https://github.com/bsdperimeter/pfsense/commit/58816510ae391de12e16a72e803336cfeb37c747
  • N

    SquidGuard - squidguard_log.php - does not show all line (offset problem !?)

    Locked
    4
    0 Votes
    4 Posts
    1k Views
    N
    Increasing the buffersize helped to 2097152 bytes (2MB) helped. I can now watch ~1500 entries. @dvserg Limiting the size is very important and a good thing. But I do have so many entries in the "blocked" file that I am not able to watch back more than one day. That's the reason why I would like to increase the buffer a little bit. Perhaps you can find a way to implement an option to modify the buffer size and the lines in the logfile when doing a logrotate. Thanks both of you for your help!
  • D

    Manually installing sqlite does not work

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    Try this again now, it should be pulling the right file. (Give it about 5-10 minutes after this post)
  • E

    HAVP + 2.1-BETA (amd64)

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    jimpJ
    FYI- If you're on a current snapshot HAVP should be adding its own user again, but it may need other fixes for the config path and such.
  • rcfaR

    Vhosts documentation, where?

    Locked
    10
    0 Votes
    10 Posts
    3k Views
    rcfaR
    @Cino: I created a small script in /usr/local/etc/rc.d so it starts on boot. Is that part of the standard 2.1 distribution or package now? Because I just upgraded to the lates build, and it turns out vhosts was up without me starting it manually. Unless your change was in the latest build, it would seem that even though the process isn't launched upon package activation, it's lauched upon reboot???
  • rcfaR

    Typo in dansguardian package…

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    P
    Have a look at http://forum.pfsense.org/index.php/topic,47676.0.html I do small fixes for typos, little code bugs etc via this method. Lately I have found that the Github online editor used through Firefox does not want to edit large files. I resorted to using IE (which brings up has a different, simpler editing interface on Github) and it works for the bigger files. Github have admitted that there is a problem they are trying to track down in their fancy online editor that appears with Firefox. The main pfsense code is in the pfsense repo, filed in directories that match where it is on an install (/etc/inc, /usr/local/www,…) The package code is in the pfsense-packages repo, config folder, with a folder for each package. I am living and working In Nepal, but from Australia. I see how difficult English is - so many exceptions to every rule. It's a pity that much of the world is having to standardise on such a poorly organised language. So, well done to those who have learnt English later in life.
  • rcfaR

    Typo in Antivirus HTTP proxy page…

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    C
    I cleaned up that and a good deal of other text in HAVP. Might have missed some things, was just looking through the source in the main havp.xml.
  • rcfaR

    Vhosts broken???

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    rcfaR
    And then, besides getting the service started, there's also this: http://forum.pfsense.org/index.php/topic,46062.0.html
  • S

    Lightsquid proxy state error

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • S

    Snort whitelist seemingly not working

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    S
    I'm using 2.01 with Snort installed in last few days… Snort 2.9.2.3 pkg v. 2.2.1 As I'm new to snort I'm stumbling along really... I've enabled basic rules and emerging threats and ticked all categories and pre-processors... Seeing both of your posts I just rebooted my two firewalls and still see the following in my System Logs: ET SCAN Cisco Torch SNMP Scan [Classification: Attempted Information Leak] [Priority: 2] {UDP} MY_NAGIOS_HOST -> IP:SNMP But I've whitelisted my Nagios box so won't expect to see anything about traffic from it. Is this the only log - it's hard to see what's happening with only system log and snort widget on dashboard.
  • rcfaR

    Vhosts and IPv6 addresses?

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • S

    Newbie - Snort missing "Categories/Rules" tab

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    J
    http://forum.pfsense.org/index.php/topic,27611.0.html I think this is still valid… Greets
  • S

    Pfblocker rules and other rules ordering

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    S
    Cheers Thanks,
  • A

    SquidGuard

    Locked
    10
    0 Votes
    10 Posts
    3k Views
    A
    Hi, I'm currently using chrome. I tried with Firefox but it's still the same. I've tried with IE too (but it's an old version) and I think it doesn't understand a lot of Javascript. Have I something else to configure before making filters ? Airy
  • G

    Dansguardian Package

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    K
    As a testament to searching for your answers before asking… this post helped me figure it out! Thanks!
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.