1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    A
    Docker image for squid 7.3 and above https://hub.docker.com/r/fredbcode/squid If pfsense does not push the update.

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    tinfoilmattT
    @vicking said in No blocks on IP: Is it a bad idea to have the action set to deny both instead of inbound only? Question is squarely for admin. Per the infoblock which explains, in part, the "Deny Inbound", "Deny Outbound", and "Deny Both" actions: 'Deny' Rules: 'Deny' rules create high priority 'block' or 'reject' rules on the stated interfaces. They don't change the 'pass' rules on other interfaces. Typical uses of 'Deny' rules are: Deny Both - blocks all traffic in both directions, if the source or destination IP is in the block list Deny Inbound/Deny Outbound - blocks all traffic in one direction unless it is part of a session started by traffic sent in the other direction. Does not affect traffic in the other direction. One way 'Deny' rules can be used to selectively block unsolicited incoming (new session) packets in one direction, while still allowing deliberate outgoing sessions to be created in the other direction. In other words: When set to "Deny Inbound", incoming connection requests from WAN hosts are blocked and therefore no state will be created. However a LAN host can still establish state to an otherwise listed IP. If set to "Deny Outbound", outgoing connection requests from LAN hosts are blocked and therefore no state will be created. However an incoming connection request from an otherwise listed IP to an 'open' WAN port can still establish state. If set to "Deny Both", both incoming connection requests and outbound connections requests are blocked and therefore no state will be created regardless of connection direction.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    M
    I am using the DNS-Update method I have to use a DNS-Sleep of 5 minutes to let the letsencrypt txt dns record update propagate. During this 5 minutes the acme-webgui times out. when the acme-webgui times out the Action list is NOT executed. How can I solve this ? Would it maybe be an idea to let the acme.sh script execute the actions in the action list as a post-hook instead of the web-gui? Or maybe add an option to add post-hooks in the webUI ?

  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?

  • Discussions about the Tailscale package

    93 Topics
    654 Posts
    C
    @luckman212, Thanks for your suggestion. I will check what I have in /usr/local/pkg/tailscale/state, and also the RAM disk settings others have brought up. I could learn more about where Tailscale and pfSense store system files. If I find anything worth sharing, I will let you know.

  • Discussions about WireGuard

    715 Topics
    4k Posts
    H
    @RNM-0 Thanks for your comment and sharing your fix. Unfortunately I don't want to take down pfsense and downgrade versions. I'm currently fine at the moment since I'm using Tailscale and that works. I also fixed the other crash I was having with pfblocker by changing a line code that wasn't pushed out under this version. Hopefully the stable release won't take too long to release but it appears there's still some open bugs that need to be fixed before that happens, and ironically, both the pfblocker and wireguard issues aren't on that list of bug fixes.
Log in to post
Load new posts
  • A

    bug in web interface for bind package

    17
    0 Votes
    17 Posts
    2k Views
    A
    @serbus very interesting comment John, in vi (ssh), I can see the ^M, but not with the GUI editor, just to check I selected into the editor, and copied that data back into vi again, no ^M
  • E

    FreeRadius rlm_rest.so not found

    2
    0 Votes
    2 Posts
    848 Views
    GertjanG
    Hi, Yep , you're right, /usr/local/etc/raddb/mods-available/rest exists, so, when symlinking it it shoudl work ..... if the needed lib existed in the pfSense FreeRadius package. Or, it doesn't. What about checking the main FreeBSD 11.3 (4 ?) package collection ? The lib comes from there, "as is".
  • P

    TFTP package only works through the GUI

    5
    0 Votes
    5 Posts
    2k Views
    viktor_gV
    The latest pkg improvements: [image: 1600949390368-screenshot-from-2020-09-24-15-09-21.png]
  • K

    zabbix proxy issues?

    1
    0 Votes
    1 Posts
    475 Views
    No one has replied
  • F

    Fetching package: connection reset by peer

    89
    0 Votes
    89 Posts
    21k Views
    F
    It started working after I changed those settings and unbound restarted. This was the only option that changed.
  • M

    NUT and APC SMT1500RM2U?

    3
    0 Votes
    3 Posts
    657 Views
    M
    Alright. Second never mind. Turns out it works with both NUT and apcupsd. Looks like I just plugged the UPS cable into an usupported USB3 port. When I moved it to one of the USB2 ports, everything seems to be working again.
  • M

    packages for 2.2.16 version

    2.2.16
    11
    0 Votes
    11 Posts
    1k Views
    johnpozJ
    see how easy stay current.. 2.5 will be out sometime here not too long.. I would think.. So make sure you updated to it before 3.6 is out ;)
  • J

    OpenVPN + FreeRadius with specified IP in free radius log incorrect ip inlog file

    2
    1
    0 Votes
    2 Posts
    386 Views
    J
    I changed the logging to level 4 and can not see the correct ip, Issue resolved
  • N

    Modification of /usr/local/etc/rc.d/tftpd.sh What can go wrong?

    3
    0 Votes
    3 Posts
    657 Views
    viktor_gV
    Feature request created: https://redmine.pfsense.org/issues/10893
  • S

    TFTP server

    10
    0 Votes
    10 Posts
    3k Views
    N
    In case someone comes here looking for solution via search engine continue here: https://forum.netgate.com/topic/156706/modification-of-usr-local-etc-rc-d-tftpd-sh-what-can-go-wrong
  • N

    pfBlockerNG DNSBL Feeds and EasyList no default list?

    4
    0 Votes
    4 Posts
    1k Views
    J
    @nasheayahu said in pfBlockerNG DNSBL Feeds and EasyList no default list?: Okay thanks, I shall do that. Can I save my current settings I've done so far and reload them or I would just have to start over? You should be able to save your settings.
  • D

    LCDproc on HP PROCURVE MSM760?

    1
    0 Votes
    1 Posts
    201 Views
    No one has replied
  • M

    LCDproc on Watchguard XTM 5 series with pfSense 2.4.4

    30
    0 Votes
    30 Posts
    6k Views
    stephenw10S
    Unless you have a load of packages it should pass more than that, especially if you've replaced the CPU. But this is not the right thread for that discussion, better to open a new thread in Hardware or General. Steve
  • T

    Status_Traffic_Totals Loading Slow

    1
    0 Votes
    1 Posts
    216 Views
    No one has replied
  • cmcqueenC

    Finding pfSense on WAN, using Zeroconf

    2
    0 Votes
    2 Posts
    493 Views
    GertjanG
    @cmcqueen said in Finding pfSense on WAN, using Zeroconf: I access the pfSense web config via its WAN interface (on my LAN Not a good test test set up. You should bring a collection of devices, if not all of them, - your "test environment" - and hook them all up to a LAN on pfSense. Then test that LAN segment - and pfSense. You'll be having a router-after-router setup which is for outgoing (== Internet) traffic completely transparent. Making WAN accessible is not part of real set up. The exception might be : testing a NAT rule (while IPv4 lasts). "Zeroconf" (whatever it actually is) needs ports to be open and/or redirected to some LAN (pfSense) based device with a running service that implements Zeroconf. That will normally never be the case as you do not want the Internet to "Zeroconf" your installation. Keep in mind that pfSense is a firewall and router : nothing from a WAN perspective can be seen. Shut down the firewall part, define routes on your main LAN's router (the one that hands out a WAN IP to pfSense) and set up pfSEnse as a basic router. @cmcqueen said in Finding pfSense on WAN, using Zeroconf: how can I find the pfSense address? If the initial LAN works well, the DHCP (client) request made by pfSense to the upstream ISP router registers it's DNS name 'pfsense' into the upstream LAN DNS (your ISP router). So, as soon as it is powered on, you could use it's name : [image: 1599028033505-cb2465ae-5965-4e8c-9f83-e2045b3c61a7-image.png] Typically, when you type ping pfsense on a PC on the ISP LAn, it (the ISP router) would resolve 'pfsense' to pfSense's IP first, and then starts to ping to this IP. But nothing will happen ... no reply. You have to add a firewall rule on the pfSense WAN interface so it can actually receive these ICMP requests - and thus reply.
  • H

    squidGuard not upgrading

    9
    0 Votes
    9 Posts
    987 Views
    H
    Running on 2.4.5-RELEASE-p1 Same problems again trying to upgrade squidGuard to 1.16.18_7 I think I am giving up trying to update these packages (squid and squidGuard) Had a hard time even uninstalling them. The best I can tell 0. reboot Dashboard - Services Status - stop right away (c-icap, Clamd and squid) uninstall Watchdog uninstall squidGuard uninstall squid reboot
  • F

    (No) Available Packages

    5
    0 Votes
    5 Posts
    629 Views
    GertjanG
    Also do some checks using these : pfsense manual package maintenance
  • S

    Possible bug in Arpwatch

    1
    0 Votes
    1 Posts
    171 Views
    No one has replied
  • humaxoidH

    Samba package

    4
    1 Votes
    4 Posts
    821 Views
    H
    the points in setting up a separate server: -it's not a massive security risk -it's faster, safer & easier to setup a new VM, then it is to fuck with your only way out to the internet
  • SeanKaneS

    Trying to use pi-hole when connected via OpenVPN to home

    5
    0 Votes
    5 Posts
    810 Views
    SeanKaneS
    @Gertjan - I get that. I have seen that. My concern is this used to work, but suddenly it stopped, and I started seeing this message in the logs. Maybe this question should be posed in an OpenVPN forum?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.