Subcategories

• Cache/Proxy

  Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.
  4k Topics

  21k Posts

  J

  I have an issue with anydesk, i read that allowing the traffic from these: if (dnsDomainIs(host, "teamviewer.com") || shExpMatch(host, "*.teamviewer.com")) { return "DIRECT"; } // AnyDesk if (dnsDomainIs(host, "anydesk.com") || shExpMatch(host, "*.anydesk.com") || shExpMatch(host, "*.net.anydesk.com") || shExpMatch(host, "relay-*.anydesk.com") || shExpMatch(host, "*.relay.anydesk.com")) { return "DIRECT"; would make anydesk connections don't go through proxy because anydesk doesn't work with a transparent proxy config, it did work for teamviewer but anydesk is intermitent (only works 10% of the time) I have no ssl interception and Transparent HTTP Proxy is disabled.
• IDS/IPS

  Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.
  2k Topics

  16k Posts

  J

  @ssullivan556 said in So why is Netflix hitting me with Dradis?: DNS is NOT google And apps and devices like "tvs" love to use their own dns.. Quite possible that was a dns query to check for an update or something, or telemetry - so no it wouldn't "break" your internet or anything. Or stop netflix from working. I block lots of dns queries - stuff still works. Why do they rate something at a 1? Is that what your asking - well if it wasn't a false positive, then yeah it would be bad ;) Snort or any sort of ids/ips is going to have lots and lots of false positives - which is why users shouldn't be using it unless they understand that, and how to deal with it, and how to address them, etc. Was it actually blocked? Snort normally would default to monitor only mode. edit: here as example - did a quick sniff on the segment my rokus and tvs are on.. [image: 1763718575767-example.jpg] I sure don't have them set to google, If you look at their network settings in their gui, they don't list google as dns, etc.. But as you can see - they are asking google. You could block that if you want, but when they can't talk they tend to get more chatty about it - asking more and more often, etc.. But just because they talked to google, and your ips/ids flagged something as possible bad - doesn't mean it is..
• Traffic Monitoring

  Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.
  573 Topics

  3k Posts

  D

  @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
• pfBlockerNG

  Discussions about the pfBlockerNG package
  3k Topics

  20k Posts

  W

  @Antibiotic you should enable python module on general settings.
• UPS Tools

  Discussions about Network UPS Tools and APCUPSD packages for pfSense
  102 Topics

  3k Posts

  C

  @dennypage Nicely done sir!
• ACME

  Discussions about the ACME / Let’s Encrypt package for pfSense
  503 Topics

  3k Posts

  G

  @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.
• FRR

  Discussions about the FRR Dynamic Routing package on pfSense
  296 Topics

  1k Posts

  C

  This one has been tricky still not sure what to try. Any ideas?
• Tailscale

  Discussions about the Tailscale package
  93 Topics

  665 Posts

  C

  @Wolf666 Thank you, I will try it. Unfortunately, since I had already replaced the contents of /usr/local/etc/rc.d/tailscaled and it had been working so far, I will not be able to tell which of the two solved the problem. And of course, I can't find a copy of the old .../rc.d/tailscaled. Therefore, if none of this works, it will require yet another delete and reinstall of everything Tailscale in my system.
• WireGuard

  Discussions about WireGuard
  716 Topics

  4k Posts

  J

  Great. Thanks for the info.