Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    S
    @shady28 Are you maybe looking at IP block list feeds vs DNSBL feeds?
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    657 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.
  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
  • MOVED: squid cannot start after fresh install on latest 2.0 snapshots

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • MOVED: dismal squid performance

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Snort - whitelists?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    J
    Add the VPN ip to a NETLIST. James
  • Snort 2.8.6 pkg v. 1.32 Issue

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    J
    @jamesdean: Sorry about that, I forgot to add a file. James Good guys finish last.  ;D
  • Openh323

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Users get blocked by Snort package

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    C
    Your suppression should look like this; suppress gen_id 119, sig_id 1 suppress gen_id 119, sig_id 2 suppress gen_id 119, sig_id 4 suppress gen_id 119, sig_id 13
  • Snort Update Issue with Snort 2.8.6 pkg v. 1.31

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    D
    I had a similar issue - what fixed it it was Services / Snort / Global Settings / Reset button. I had to reconfig Snort, but everything works great now.  Just fantastic; love this package.
  • Squid Blacklist url w/ path

    Locked
    3
    0 Votes
    3 Posts
    9k Views
    N
    @jimp: It's a regex, iirc, so for "any number of characters (or none)" use .*, not * So try this: example.com/.*/w4m Thank you; I'll will try that. Since I posted, I was able to install squidGuard and compose a Destination List; by following the instructions on the squidGuard Quick Start page http://diskatel.narod.ru/sgquick.htm. That allowed me to selectively block just the dating and inappropriate portions of Craigslist. I do have Shalla's Blacklist installed, but it's 'hard coded' for just one or two Craigslist cities. I'll try your wildcard syntax and see if it works with a squidGuard destination list.  Right now, my Dest List uses a long set of URLs and I'll have to add another one for each additional city.  If your suggestion works there as well, the same URL set will work for every Craigslist city.  I'd forward the entries to Shalla SS; for integration into his list. I'll also be using your syntax, where I originally intended.  Don't know for what, but something will pop up soon enough. Your response is appreciated. NV
  • MOVED: Squid and LDAP on 2.0

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • MOVED: Squid Pfsense

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Squid + SquidGuard + ( Transparent proxy & Proxy Authentication )

    Locked
    4
    0 Votes
    4 Posts
    12k Views
    K
    Try This: Let your squid listen on Optional Interface in Non Transparent Mode. Just forward all the http traffic from LAN interface to Optional Interface where your squid is listening (Default 3128). Since Your Squid is not going be in Transparent Mode you can Enable Authentication. :)
  • Recent clamd needed

    Locked
    35
    0 Votes
    35 Posts
    21k Views
    jimpJ
    I updated the package to pull the new version. It should be up in about 5 minutes.
  • DenyHost 0.5.1 with pfsense 1.2.3

    Locked
    5
    0 Votes
    5 Posts
    4k Views
    G
    @ToxIcon: 2010-07-11 19:08:52,679 - sync        : ERROR    <fault 1:="" "exceptions.keyerror:'timestamp'"="">Traceback (most recent call last):   File "/usr/local/lib/python2.5/site-packages/DenyHosts/sync.py", line 117, in receive_new_hosts     self.__prefs.get("SYNC_DOWNLOAD_RESILIENCY"))   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1147, in call     return self.__send(self.__name, args)   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1437, in __request     verbose=self.__verbose   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1201, in request     return self._parse_response(h.getfile(), sock)   File "/usr/local/lib/python2.5/xmlrpclib.py", line 1340, in _parse_response     return u.close()   File "/usr/local/lib/python2.5/xmlrpclib.py", line 787, in close     raise Fault(**self._stack[0]) Fault: <fault 1:="" "exceptions.keyerror:'timestamp'"=""></fault></fault> Looks like the problem is not python. From the FAQ Denyhosts was written for 2.3 and 2.4. This might help someone but I don't use it because VPNs are a we bit safer  ;) DenyHosts requires Python v2.3 or later. If you are using an earlier version of Python then you should install a newer version of Python on your system. Multiple versions of Python can safely co-exist on your server so you do not need to worry about breaking any dependencies. You should obtain the latest version of Python and install it on your system. Depending on the method of download, your latest Python executable is typically installed in /usr/local/bin or /usr/bin. If you downloaded version Python v2.3, then the executable is python2.3. If you downloaded Python v2.4 then the executable is python2.4. If you will be using DenyHosts in daemon mode, then you will need to edit the daemon-control-dist script. You will want to copy this file to "daemon-control" such that future DenyHosts upgrades will preserve your edits. $ cp daemon-control-dist daemon-control Assuming you installed Python v2.4 and the executable is in /usr/bin then you will need to make the following changes to your daemon-control script: Line # From To 1 #!/usr/bin/env python #!/usr/bin/python2.4 18 PYTHON_BIN = "/usr/bin/env python" PYTHON_BIN = "/usr/bin/python2.4" You may need to modify the above paths to reflect the actual installation location and version of Python that you installed. If you are not using DenyHosts in daemon mode then to execute DenyHosts you would do the following: $ python2.4 denyhosts … args... -or- $ python2.3 denyhosts ... args...
  • Snort-dev Package Update and Bug List

    Locked
    1
    0 Votes
    1 Posts
    9k Views
    No one has replied
  • Problem connecting to Package System?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    S
    I have the same problem.
  • Squid traffic management

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Squid + squidguard + backup

    Locked
    1
    0 Votes
    1 Posts
    4k Views
    No one has replied
  • [SUGGESTION] FreeSwitch on nano embedded / writing logs to usb-disk

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Snort dashboard widget not working

    Locked
    1
    0 Votes
    1 Posts
    3k Views
    No one has replied
  • Squid, blocking https except legitimate sites

    Locked
    7
    0 Votes
    7 Posts
    9k Views
    K
    Add facebook as regular expression or domain name in squid Access Control or SquidGuard Custom BlackList. http or https it will get blocked.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.