Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    KOMK
    @jucelio_rosa Squid runs on 2.8.1 but there was a library bug IIRC. If you manually start squid then check the system log, do you see this error? The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was 'ld-elf.so.1: /usr/local/sbin/squid: Undefined symbol "_ZTVNSt3__117bad_function_callE"'
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    RedDelPaPaR
    @bmeeks Understood. Thank for kindly for your help. I will likely be ordering a new unit soon.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    N
    @Gertjan said in is something wrong with pfBlockerNG?: "is something wrong with my pfBlockerNG?". First off, thanks for the detail reply. After my post, I "changed" DNSBL -> DNSBL mode from "unbound python mode" to "unbound mode" and so far i have no issues. I understand what you are saying & hinting "maybe something is wrong with my settings" - my response is this: Everything was working before i upgraded the pfsense software to " 25.07.1-RELEASE (arm64)" -- Before the update my DNSBL Mode was set as "unbound python mode" and everything worked. Here is my "inference" - something broke in pfBlockerNG after the upgrade and I cannot 100% point to what that setting (my) is? I will observe for some days how this change in DNSBL mode works out and report the findings.
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    dennypageD
    @fjmp24 said in Notification: UPS ups battery is low: If I remove ignorelb directive, my UPS shuts down after 16 seconds This means your UPS is signaling a low battery. Either your battery is bad, or your UPS is bad. Most likely battery, but you never know. I suggest reaching out to Eaton support.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    M
    I am using the DNS-Update method I have to use a DNS-Sleep of 5 minutes to let the letsencrypt txt dns record update propagate. During this 5 minutes the acme-webgui times out. when the acme-webgui times out the Action list is NOT executed. How can I solve this ? Would it maybe be an idea to let the acme.sh script execute the actions in the action list as a post-hook instead of the web-gui? Or maybe add an option to add post-hooks in the webUI ?
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    642 Posts
    C
    For pfSense+ Version 25.0.7 FreeBSD 15.0-CURRENT: I had a recent issue after upgrading Tailscale to 1.90.4 and afterwards rebooting pfSense. Tailscale would not authenticate. After researching, I found a solution and a suggested workflow for future upgrades. First, I was able to get Tailscale to re-authenticate by executing the following commands (Tailscale Service was offline after the reboot): service tailscaled stop tailscale logout sysrc tailscaled_enable="YES" service tailscaled start tailscale up So that you know, here is the AI-generated one-liner for future upgrades on 25.x FreeBSD 15.0-CURRENT systems. I will test with the next available upgrade package: "service tailscaled stop && tailscale logout || true && fetch https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-X.Y.Z.pkg || exit 1 && IGNORE_OSVERSION=yes pkg-static add -f tailscale-X.Y.Z.pkg && rm -f tailscale-X.Y.Z.pkg && sysrc tailscaled_enable="YES" && service tailscaled start && tailscale up && tailscale version && tailscale status"
  • Discussions about WireGuard

    714 Topics
    4k Posts
    R
    I was on PfSense version 23.xx (don't recall the xx) and was able to start the Wireguard service. I upgraded to the 25.11 beta version and now the Wireguard service will not even start. I am on Wireguard version 2.1, and I see that there are versions that go up to 2.9. How do I upgrade to a later version? The only version in the pfSense updater is 2.1. Thank you
  • Dashboard dissappeared in 1.2rc2

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    Y
    Reboot, reinstall and it should reappear.
  • Squid package to latest version?

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Snort bug fix

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    S
    Thanks, commited!
  • PFFLOW service stoped

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    S
    Interesting.  We might be able to modify that script to attempt to start 3 times and sleep 60 seconds in between each which might just get us past this bug.  Please file a bug report and I will discuss with nick.  Thanks!
  • Using pfflowd on an CF (embedded) device

    Locked
    9
    0 Votes
    9 Posts
    5k Views
    F
    Cool thanks I didnt end up using that image, as i wanted VGA out not console :/  so i installed the full install and changed /etc/platform to embedded pfflow works but lots just say its mostly useless :( it seems to combine all interface traffic in and out in the 1 interface's in information so unfortunitly its not much use im waiting for 1.2 to go final/stable and upgrade but i dont think it will by the time I need to install the firewall
  • UPnP not reporting or working ?

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    R
    The UPnP package was created before UPnP was integrated into the base pfSense install. You should not install the UPnP package if your version of pfSense has it built in. It is disabled by default. You can change the settings and select the interface for it to run on via the webgui -> services -> upnp. You can view the current port mappings via the webgui -> status -> upnp.
  • Darkstat installation failure

    Locked
    8
    0 Votes
    8 Posts
    4k Views
    P
    Working again
  • Snort fails to start on 1.0.1 stable

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    R
    I had the same issue. I just change the "performance" drop-down from "ac-sparsebands" to "ac-banded" and snort started up normally.
  • Squid and PPPoE Server

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Snort automatic updates question.

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • SPAMD on 1.2-RC1 does not start and blocks ALL mail

    Locked
    9
    0 Votes
    9 Posts
    4k Views
    R
    Incidentally, here are the CIDRs which I use in spamd's "SpamD Whitelist".  (My patches also pre-populate the spamd whitelist with these the first time spamd notices the whitelist is empty.  The whitelist is pre-populated only once and only if it is empty.) 72.14.192.0/18 Google Mail 64.233.160.0/19 Google 66.102.0.0/20 Google 66.249.64.0/19 Google 72.14.224.0/18 Google 216.239.32.0/19 Google 216.155.192.0/20 Yahoo 68.142.192.0/18 Yahoo 209.191.64.0/18 Yahoo 209.73.160.0/19 Yahoo 66.135.192.0/19 eBay 127.0.0.0/8 Localhost If anyone else has any useful CIDRs for whitelist, please post them.
  • Ipsec widget is not update the tunnel status after a failover

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • DASHBOARD: IPSec and others

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Snort TCPDUMP security issue

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    S
    Please test this fix by uploading to System -> Firmware update http://www.pfsense.com/~sullrich/1.0.1-tcpdumpfix.tgz If it works okay for you I will release the update ASAP.  PS: after installation please verify that your filter logs show up in Diagnostics -> System Logs
  • Bandwidthd, nothing to display!!!

    Locked
    12
    0 Votes
    12 Posts
    5k Views
    W
    I had a similar issue: nothing to graph… the bandwidthd log files log.1.0.cdf, log.2.0.cdf... were empty. I switch my WAN interface from DHCP to fixed ip and voila it started to graph. Now i'm looking for a way to add multiple subnet in bandwidthd config by using pfsense xml config... anyone did this?
  • Lost packages after restart

    Locked
    19
    0 Votes
    19 Posts
    7k Views
    D
    Section <include_file>on package xml file must contains fill include path <include_file>/usr/local/pkg/myself_file.inc</include_file> function sync_package from pkg-utils.inc not checked this (get_pkg_depends do it for example) /* Bring in package include files */ if (isset($pkg_config['include_file']) && $pkg_config['include_file'] != "") { $include_file = $pkg_config['include_file']; if (file_exists($include_file)) require_once($include_file); else if (file_exists($include_file)) { require_once($include_file); } else { log_error("Could not locate {$include_file}."); install_package($package['name']); uninstall_package_from_name($package['name']); install_package($package['name']); } } ```</include_file>
  • Squid Local DNS Patch

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    P
    What's the issue accessing 127.0.0.1 from squid while it is in transparent mode? This is working for me at the moment.
  • Ipsec widget display only inactive vpn´s on a carp cluster

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Snort to block

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Squid and DNS

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.