Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    D
    Retested on 24.11-RELEASE (amd64) all seems to work. So it seems right to file a bug for this issue.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    S
    So since there is no version 25.03. There is an official 25.07 now but only get a 7.08.2 what happen to the rest up to Suricata 7.0.10 or 7.0.12?
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K
    @pulsartiger The database name is vnstat.db and its location is under /var/db/vnstat. With "Backup Files/Dir" we are able to do backup or also with a cron.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    B
    Hi, I upgraded my pfSense to 25.07-RELEASE and with it also pfBlockerNG to 3.2.7, but now the pfb_dnsb service no longer starts... I tried a “force_update” and reboots. I also tried reinstalling pfBlockerNG. When starting the service manually with /usr/local/etc/rc.d/pfb_dnsbl.sh start I get 025-08-05 18:17:28: (/wrkdirs/usr/ports/www/lighttpd/work/lighttpd-1.4.76/src/network.c.604) bind() 10.255.255.254:443: Can't assign requested address 10.255.255.254 is the DNSBL Webserver address... Any ideas? Thx! :)
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG
    @EChondo What's your pfSense version ? The instructions are shown here : [image: 1753262126227-1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png] A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate. @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy: I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess. No need to wait x days. You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    J
    @div444 i'm finding the same - did you find a solution or did reverting fix it? Hoping there is a patch fix or something to get it working! Rather not rollback if i can avoid it
  • Discussions about the Tailscale package

    90 Topics
    583 Posts
    L
    Any ideas to why I get this error? Im running pfsense CE 2.8.0-RELEASE (amd64) pkg add https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2_1.pkg pkg: An error occured while fetching package
  • Discussions about WireGuard

    692 Topics
    4k Posts
    F
    Hi again, to be honest: I guess, I did not remember exactly what I did 2 years ago. May I was mistaken by the interface name opt2 because the SG-3100 has a physical port OPT1 and I mixed up physical and virtual names. The goal was to use 2 different tunnels, one for the mobile clients and one for the site-2-site connection. And now all is running in that way . Regards
  • SquidGuard: Blocking youtube on the Andriod app

    8
    0 Votes
    8 Posts
    11k Views
    GertjanG
    @rodgomesc: google.com -> 216.239.38.120 google.com resolves to more then one IPv4 : dig TXT +short _netblocks{,2,3}.google.com | tr ' ' '\n' | grep '^ip4:' ip4:64.233.160.0/19 ip4:66.102.0.0/20 ip4:66.249.80.0/20 ip4:72.14.192.0/18 ip4:74.125.0.0/16 ip4:108.177.8.0/21 ip4:173.194.0.0/16 ip4:209.85.128.0/17 ip4:216.58.192.0/19 ip4:216.239.32.0/19 ip4:172.217.0.0/19 ip4:172.217.32.0/20 ip4:172.217.128.0/19 ip4:172.217.160.0/20 ip4:172.217.192.0/19 ip4:108.177.96.0/19 ......
  • LCDproc: no nexcom.so ?? (pfs 2.3.5)

    3
    0 Votes
    3 Posts
    772 Views
    F
    After looking around some more, it looks like support for the Nexcom devices was added to the "generic" hd44780 driver after all: ConnectionType=lcm162 Code change: https://github.com/lcdproc/lcdproc/commit/9e80b177ffb1755e27109dd284ad568319fe4e6a#diff-b5b7491d509ceae9b603712026311903 Documentation change: https://github.com/lcdproc/lcdproc/commit/4a50059b81910d7a6f9a70791766dfd12c61bb99#diff-056b4c550c4f9828ca095124588909ed So, these Nexcom devices are supported by the base lcdproc project code. Not sure the pfSense integration package was updated, though…
  • Cannot Access NTOP

    2
    0 Votes
    2 Posts
    646 Views
    johnpozJ
    did you actually configure it and enable it?  Via the ntop settings under diag menu.
  • More Information on Package Development

    4
    0 Votes
    4 Posts
    711 Views
    P
    Well.. if you want to block/inspect traffic packets passing through pfSense, then that is not something that php will do. if you take the basic concept of pfSense it is just the php 'glue' that makes all parts work together with a nice webgui. Changing or adding new parts of that 'glue' is relatively easy. The packet processing is mostly being done by FreeBSD (the OS) and PF (the firewall). Or perhaps you would like to do something more like Snort and Suricata, and maybe create a custom 'ruleset' for one of those two with your packet inspection rules as far as they can support your intended case.. But developing on any those software parts is a entirely different thing than the usual 'pfSense package' which takes a existing binary application and wraps in into a easy to use php webgui without actually changing the binary code of the application or changing the internal flow of network packets, well a package like 'tinc' does add mesh vpn capabilities, but the 'pfSense package' just installs and configures that existing piece of software.. If your intending to go make changes in those parts then a little knowledge about script writing wont really help much. Would need some good general programming knowledge preferably in C or C++ .. its imho not something that can be learned by reading a single wiki page..
  • Mailreport and outlook.com

    3
    0 Votes
    3 Posts
    723 Views
    M
    Gertjan, thank you for your answer. Current situation is : Sending test email works with Outlook.com Alert emails (e.g. UPS events or Gateway events) are sent Mail reports are not sent Unfortunately I cannot use Postfix any more (I am leaving the company), therefore I am forced to switch to outlook.com. Furthermore : I am in China and this limits the selection of email providers I can use (Google does not work here and I already tried with pfSense, but no success). I will try to switch back to Postfix and confirm that the issue lies in the switch between the two systems.
  • Ntopng fails to restart

    1
    0 Votes
    1 Posts
    597 Views
    No one has replied
  • Zabbix log monitoring

    2
    0 Votes
    2 Posts
    1k Views
    D
    I suggest you send the logs elsewhere, the zabbix user won't have access to them locally. Regards.
  • Zabbix Proxy not starting

    3
    0 Votes
    3 Posts
    2k Views
    D
    @Beni: Hi, Have you tried to delete the pid file and the sqlite. rm /var/run/zabbix-proxy/zabbix_proxy.pid /var/db/zabbix-proxy/proxy.db Regards Beni Do this and show the proxy log, please.
  • Zabbix agent does not start after reboot

    2
    0 Votes
    2 Posts
    1k Views
    D
    Is this still happening? zabbix_agentd.sh is the rc script from pfSense. zabbix_agentd is the rc installed with the FreeBSD port.
  • Zabbix Proxy VMware Support

    2
    0 Votes
    2 Posts
    750 Views
    D
    It's all enabled now. https://github.com/pfsense/pfsense/blob/master/tools/conf/pfPorts/make.conf#L144-L162
  • Package Zabbix Proxy 3.4

    10
    0 Votes
    10 Posts
    4k Views
    D
    This was fixed with 1.0.1 version of proxy
  • HAProxy ssl verify and Android/Chrome issue

    2
    0 Votes
    2 Posts
    940 Views
    P
    https://redmine.pfsense.org/issues/8228#note-5 "Leave all these options empty"
  • Want to BLOCK IDM & uTorrent

    1
    0 Votes
    1 Posts
    728 Views
    No one has replied
  • Haproxy + Change Host Request Value

    3
    0 Votes
    3 Posts
    3k Views
    A
    Hello, thank you for your reply. I test hdr without success but this line working : sni ssl_fc_sni check-sni vhost.yourdomain.local Thank you
  • Syslog-ng stops working after logroate run

    1
    0 Votes
    1 Posts
    445 Views
    No one has replied
  • Glances

    2
    0 Votes
    2 Posts
    981 Views
    GertjanG
    Did you check how many times the word "Glances" was mentioned on this forum ? The answer is a start of a possible answer. pfSense can be instructed to make cafe, launch nukes, or sprinkle your lawn. Al you need is some time, PHP knowledge and some pfSense knowledge, and a (new) need for something. If you're missing one of more of those, you need to find someone. Did you see this forum : https://forum.pfsense.org/index.php?board=34.0
  • [SOLVED] freeradius stopped working and it won't restart

    8
    0 Votes
    8 Posts
    4k Views
    A
    radiusd -X }   # Loading module "datacounterforever" from file /usr/local/etc/raddb/mods-enabled/datacounter_acct   exec datacounterforever {         wait = yes         program = "/bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}"         shell_escape = yes   } /usr/local/etc/raddb/mods-enabled/counter[2]: Failed to link to module 'rlm_counter': Shared object "libgdbm.so.4" not found, required by "rlm_counter.so" error, radius not start. (freeradius3) help me please
  • Squid, pfSense 2.4.2p1 and unable to configure SSL Filtering

    3
    0 Votes
    3 Posts
    1k Views
    ChrisLynchC
    Yes, I see that X under the Internal column.  And that would make sense as the firewall needs to create the certificate for the SSL/TLS endpoint in order to filter SSL/TLS traffic.  Sorry for the confusion on my part.
  • Snort FATAL ERROR

    30
    0 Votes
    30 Posts
    10k Views
    Raffi_R
    bmeeks, you're the source of all the information I'm looking for! I literally can't even thank you enough because the forum says I have to wait 1 hour before I can applaud you again :) I have Suricata in the global settings currently pointing to the snort 29110.tar.gz which I believe is the latest. I wish I could have stuck with snort, but that startup issue kills the entire IDS. To me, having some kind of IDS is better than not having one at all. I used to have snort setup with the service watchdog in case it crashed (it did that quite often too), but that wouldn't be a good idea in this case because the watchdog would have tried to keep starting it up and it would have kept failing. It would have just sat there in a constant loop eating up resources.
  • 0 Votes
    2 Posts
    448 Views
    S
    This rule is in openappid-ads.rules. Disable it temporarily until it has been fixed. The problem is that there's the same error on this rule as well: I can't seem to find the SID in any of the openappid categories… ? alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"scribd_upload";flow:from_client;appid:scribd_upload; sid:71443 ; classtype:misc-activity; rev:1 Edit: Seems many rules have the same problem at the present time: https://forum.pfsense.org/index.php?topic=79855.msg771713#msg771713
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.