1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    @jucelio_rosa I use plus

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    tinfoilmattT
    @vicking said in No blocks on IP: Is it a bad idea to have the action set to deny both instead of inbound only? Question is squarely for admin. Per the infoblock which explains, in part, the "Deny Inbound", "Deny Outbound", and "Deny Both" actions: 'Deny' Rules: 'Deny' rules create high priority 'block' or 'reject' rules on the stated interfaces. They don't change the 'pass' rules on other interfaces. Typical uses of 'Deny' rules are: Deny Both - blocks all traffic in both directions, if the source or destination IP is in the block list Deny Inbound/Deny Outbound - blocks all traffic in one direction unless it is part of a session started by traffic sent in the other direction. Does not affect traffic in the other direction. One way 'Deny' rules can be used to selectively block unsolicited incoming (new session) packets in one direction, while still allowing deliberate outgoing sessions to be created in the other direction. In other words: When set to "Deny Inbound", incoming connection requests from WAN hosts are blocked and therefore no state will be created. However a LAN host can still establish state to an otherwise listed IP. If set to "Deny Outbound", outgoing connection requests from LAN hosts are blocked and therefore no state will be created. However an incoming connection request from an otherwise listed IP to an 'open' WAN port can still establish state. If set to "Deny Both", both incoming connection requests and outbound connections requests are blocked and therefore no state will be created regardless of connection direction.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    M
    I am using the DNS-Update method I have to use a DNS-Sleep of 5 minutes to let the letsencrypt txt dns record update propagate. During this 5 minutes the acme-webgui times out. when the acme-webgui times out the Action list is NOT executed. How can I solve this ? Would it maybe be an idea to let the acme.sh script execute the actions in the action list as a post-hook instead of the web-gui? Or maybe add an option to add post-hooks in the webUI ?

  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?

  • Discussions about the Tailscale package

    93 Topics
    654 Posts
    C
    @luckman212, Thanks for your suggestion. I will check what I have in /usr/local/pkg/tailscale/state, and also the RAM disk settings others have brought up. I could learn more about where Tailscale and pfSense store system files. If I find anything worth sharing, I will let you know.

  • Discussions about WireGuard

    715 Topics
    4k Posts
    H
    @RNM-0 Thanks for your comment and sharing your fix. Unfortunately I don't want to take down pfsense and downgrade versions. I'm currently fine at the moment since I'm using Tailscale and that works. I also fixed the other crash I was having with pfblocker by changing a line code that wasn't pushed out under this version. Hopefully the stable release won't take too long to release but it appears there's still some open bugs that need to be fixed before that happens, and ironically, both the pfblocker and wireguard issues aren't on that list of bug fixes.
Log in to post
Load new posts
  • L

    is it possible to configure multiple rules in SQuidGuard?

    4
    0 Votes
    4 Posts
    808 Views
    KOMK
    @lotfidz You must not have looked very hard. Go to Google. Search for 'pfsense squidguard ldap acl'
  • E

    Maximum Throughput with iPerf

    1
    0 Votes
    1 Posts
    342 Views
    No one has replied
  • A

    nut UPS monitoring daemon

    2
    2
    0 Votes
    2 Posts
    581 Views
    T
    @aadder Did you get this working? If not does the acpupsd program work? If you want to used nut for this then connect to the system using ssh and check the permissions on the usb device the ups is connected to. That would be in /dev/usb/ directory. The permissions should be crw-rw---- root uucp
  • johnpozJ

    freerad - new min tls setting, why no 1.3?

    3
    0 Votes
    3 Posts
    746 Views
    johnpozJ
    Thanks - doing a bit of looking into this, and seems they are working on it ;)
  • A

    Quagga_OSPF: not available in remote repository

    4
    1
    0 Votes
    4 Posts
    1k Views
    bmeeksB
    @adamthemantyler said in Quagga_OSPF: not available in remote repository: @bmeeks Thank you. Looks like I am running 2.4.5 on my boxes still. What would you say the upgrade path looks like? Would I just have to manually document my OSPF configuration and remove the module.. Then upgrade to 2.5.0 and install FRR? Or is there some migration path that will move settings over from Quagga for me? I have some other packages that are out of date too, is it generally a better idea to upgrade packages before a system update or the other way around? Regards, Adam Tyler Sorry Adam, but I don't use either package (Quagga nor FRR), so I wouldn't be of much help. Perhaps someone else will chime in with migration options. As for updating other packages, ALWAYS update pfSense itself first if an update is available. If you update or install a package after a new pfSense update is posted, and you haven't installed that pfSense update, then installing a package will break your system -- sometimes to the point of needing to reinstall and restore a config backup. If you want to install a package on an older pfSense version, then you must go to SYSTEM > UPDATE and on the Update Settings tab change the drop-down selector there to the option "Previous stable version (2.4.5 deprecated)", save that change, then install the package. Changing that setting points your package system utility to the correct branch of packages. Note that these older packages will not be updated, though. They will be whatever was the "current" version at the time the new pfSense was released. There is a dedicated FRR sub-forum on the board here: https://forum.netgate.com/category/79/frr. Perhaps posting your questions in there would generate some helpful replies.
  • E

    Arpwatch Notification : Cron <root@pfsense> /usr/bin/nice -n20 /usr/local/bin/php-cgi -f /usr/local/pkg/suricata/suricata_check_for_rule_updates.php

    10
    0 Votes
    10 Posts
    2k Views
    bmeeksB
    @slim2016 said in Arpwatch Notification : Cron <root@pfsense> /usr/bin/nice -n20 /usr/local/bin/php-cgi -f /usr/local/pkg/suricata/suricata_check_for_rule_updates.php: @bmeeks @eveready1010 The fix has been posted by Viktor Gurov but the link does not work. https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/72 That is Netgate's private Git respository. It is not publically available. You will need to wait for the change to be merged into the public Github repo. They have a private internal repo where they do testing of changes before migrating them to the public site. Notice the URL is "gitlab.netgate.com". Anytime you see that "gitlab" portion, that is their private repo.
  • J

    PAQUETE CRON

    1
    0 Votes
    1 Posts
    283 Views
    No one has replied
  • S

    pfblockerNG deny logs are empty after pfsense 2.50 upgrade

    11
    0 Votes
    11 Posts
    1k Views
    S
    @gertjan this feed def gets logged in the reports/log files section. in the test area, I am going to try some more IP feeds.
  • B

    XDR package?

    1
    0 Votes
    1 Posts
    650 Views
    No one has replied
  • SoloamS

    Avahi - Android APP not capturing broadcast from Player

    3
    0 Votes
    3 Posts
    815 Views
    B
    I must admit that I have never heard before about squeezebox, therefore I have never used it before. Most of the time I listen to music through Spotify using my wireless headphones. I especially like doing so while training, and since lately most of my workouts are done at home, I enjoy using my headphones even more. I understand that your problem is with Avahi, so my basic question is why did you decide to use this app? I get my apps only from https://appcrood.com, who I consider to be trustworthy, and because of that I always get quality.
  • O

    digests.txt 404

    2
    0 Votes
    2 Posts
    275 Views
    jimpJ
    Why do you think that's a problem or necessary? Is something actually not working that you expect? Those URLs are not meant to be browsed by humans, but used by pkg.
  • F

    Can't access my internal servers trough external URL anymore (HAProxy)

    5
    2
    0 Votes
    5 Posts
    1k Views
    F
    Solved. I did an update from 2.4.5_1 to 2.5.0, and now it works... It might just be the reboot, but idk
  • S

    Packages list is empy

    14
    0 Votes
    14 Posts
    2k Views
    S
    I did the upgade to version 2.4.5_1 and I had no problems (unlike the update to version 2.5 which did not work), after this update I see all the additional packages. thanks.
  • gnitingG

    Telegraf's built-in ping plugin showing higher latency since v2.5

    telegraf
    2
    0 Votes
    2 Posts
    1k Views
    gnitingG
    @ibbetsion said in Telegraf's built-in ping plugin showing higher latency since v2.5: Since upgrading to 2.5, the built-in Telegraf ping plugin is reporting results with a higher latency then what I get if I were to ping the same system from the pfsense CLI. And the diff is 2x, sometimes more. This wasn't an issue in 2.4.5x. Is this a known issue? For more clarity, I'm pinging a system on LAN, so am expecting <0.3ms response time. Telegraf shows >0.8ms, sometimes even >2ms.
  • E

    Quagga OSPF missing in 21.02-RELEASE-p1

    4
    0 Votes
    4 Posts
    976 Views
    bmeeksB
    @steveb53 said in Quagga OSPF missing in 21.02-RELEASE-p1: @nogbadthebad HI, FRR was already in the previous release but its not as user friendly. Quagga is missing in the current package manager. If its been dropped, why, if not when might we see it in the newer release. All the pfsense docs refer to Quagga too and not FFR. Quagga and several other packages were officially retired back in November last year. Here is the entry on Redmine: https://redmine.pfsense.org/projects/pfsense/repository/revisions/85652efd5dfee9f66c7c7f3c97eb1c368f690ae3.
  • W

    How to install a package with the same version of pfSense 2.4.5-RELEASE-p1

    Moved
    8
    0 Votes
    8 Posts
    1k Views
    S
    @wyang Hello! I dont think the openvpn-client-export install is related to the FRR deinstall. FRR would have been deinstalled by simply switching to the 2.4.5p1 repo. Now that you have switched back to the 2.4.5p1 repo, I would try reinstalling FRR from the Package Manager. My experience is that the packages that were auto-purged still had their settings saved. John
  • ChitiousC

    Snort not working on 21.02_1

    2
    0 Votes
    2 Posts
    561 Views
    S
    https://forum.netgate.com/topic/161050/snort-won-t-start-after-upgrade-to-21-02-on-sg-3100
  • znamlootZ

    Upgraded to 2.5.0 - Update Status and CPU data don't stop spinning

    3
    1
    0 Votes
    3 Posts
    732 Views
    znamlootZ
    @allang thanks for this....fortunately not something serious. All fixed. Thanks from Canada ..... Cheers Tim
  • A

    NUT Eaton 9SX UPS

    1
    0 Votes
    1 Posts
    300 Views
    No one has replied
  • D

    FreeRADIUS2 - EAP-TLS and Users Certificates

    5
    0 Votes
    5 Posts
    4k Views
    K
    @dcd018 Hello Everyone , I face the issue now. User able to log in without any certificate.....
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.