Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    BBcan177B
    @Draco try to goto the General Tab, first ensure that the Keep Settings option is checked. Then unchecked Enable pfBlockerNG so that its disabled. Hit save. Force Update. Then reenable pfBlockerNG and Force update.
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    657 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.
  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
  • SquidGuard problem

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    D
    Hi, Thanks for your reply! I changed the function is_iprange to is_iprange_new and i had the function "is_ipaddr_valid" as it contains a call to the function is_iprange as well, I had only to change it to is_iprange_new and it is working like a charm, thanks. Kind regards, David Negreira.
  • Testing new package on local system

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    T
    Thank you. Using an external web server did the trick. I do have some suggestions for anyone else wanting to set this up 1. Download http://www.pfsense.com/xmlrpc.tgz 2. Extract xmlrpc.tgz to your www root (to simplify) 3. edit /etc/inc/globals.inc     change``` "xmlrpcbaseurl" => "<ip_of_webserver>"</ip_of_webserver> 4\. Use pkg_config.xml as a template (from xmlrpc.tar). The header information is vital.     keep stored in wwwroot/packages Number 4 is my observation that I wish was more clear to me when first setting this up. Thank you all for your help.
  • HAVP updated for 2.x

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • MOVED: "Unable to communicate to pfSense.com"

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Squid died. Removed and now won't re-install.

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    jimpJ
    Out of inodes implies that there were a lot of small files so the filesystem ran out of pointers for files before it ran out of space. This isn't unusual for something such as squid. You will need to rm -rf /var/squid/cache, possibly from the console and not ssh (it may not let you login in this situation) That will probably take a while to run. You can check the inode usage of a drive by using: df -i And reading the iused/ifree/%iused columns If you really can't reinstall the squid package, you may also need to get a backup of your config, edit out the squid settings, and restore the config.
  • Trouble installing wget

    Locked
    4
    0 Votes
    4 Posts
    6k Views
    C
    It's actually working fine (aside from installing the documentation, which will fail, but it's still there). You don't seem to have run 'rehash' after doing the pkg_add, that's probably all you need.
  • SNORT won't auto-update - manually updates OK

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • RESOLVED:squid won't work for second lan subnet

    Locked
    7
    0 Votes
    7 Posts
    11k Views
    E
    resolved bu adding to squid>general>custom optinons http_port IP_ALIAS:3128 Thanks to izuware
  • Snort 2.8.5.3 pkg v. 1.21 and memory settings not working?

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    ?
    I have had the same problem with snort not working at some memory settings ….
  • Recomended Squid Cache Management

    Locked
    7
    0 Votes
    7 Posts
    36k Views
    C
    COSS+AUFS: COSS is for small content size. AUFS is for large content size. both separated by Object size. Your COSS size is too big. If you restart more often then you don't need that big. Most accessed contents range from 1byte to 8Kbyte. I recommend use 10KB to 16KB(thumbnail picture size) for object size. On restart COSS contents will be lost(developent still on progress for this issue) for your memory issues: squid/lusca would use 10MB per GB of total cache(when full). http://wiki.squid-cache.org/SquidFaq/SquidMemory#How_much_memory_do_I_need_in_my_Squid_server.3F If your system starts to use SWAP file(due to lack of RAM) then it will definitely slows your internet. Squid/lusca starts to grow Page faults it also affects performance. You might need to consider changing your cache_mem and give them to your OS. This FAQ would help you. http://wiki.squid-cache.org/SquidFaq
  • Install snort 2.8.5 error …??

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • HAVP package

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    M
    LOLs found myself looking for this path again, so here it is as a pointer for any subsequent searches /usr/local/share/examples/havp/templates/en
  • Cups help..

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • How to reorder interfaces for vnstat

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    C
    your very welcome  ;D
  • Block all http traffic, pass only some pages

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    N
    squidguard will help you…default block all...then create acl allow the pages you allowed..
  • How to use squid.conf in pfsense

    Locked
    3
    0 Votes
    3 Posts
    5k Views
    M
    Take a look at the file /usr/local/pkg/squid.inc  I'm sure you'll have to make changes to some of the paths but it should be possible.  pfSense rebuilds the Squid.conf file at each boot from the squid.inc file.  Good luck.
  • Snort: "Update rules automatically"

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    S
    Clearly, root through cron refresh rules cannot. We will be refreshed therefore through webgui. Thanks!
  • Squid - Custom config

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    G
    Can someone advice the best way of acheving what I am after? I am a little unclear on how best to do it… I understand the reason for transparent proxy but does this mean that I cant have some computers (servers) not going through it? Thanks Andy
  • Pf firewall and snort not killing states

    Locked
    1
    0 Votes
    1 Posts
    3k Views
    No one has replied
  • Snort: With or Without Auto Blocking?

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    N
    Kinda reviving this thread but is it possible de choose what rules should trigger a block ? Right now it seems by default every single alert creates a block which means there is ALOT of false positives so activating the auto block is just suicide. It also seems impossible to edit the basic rules for http_inspecter and ftp because they get overwritten each time you restart the service, you can add stuff in the configuration form but you can't edit section that are already in the default conf. (thinking about the "http_inspect: NON-RFC DEFINED CHAR" that alot of people are getting) Thanks !
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.