Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    BBcan177B
    @Draco try to goto the General Tab, first ensure that the Keep Settings option is checked. Then unchecked Enable pfBlockerNG so that its disabled. Hit save. Force Update. Then reenable pfBlockerNG and Force update.
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    657 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.
  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
  • FreeRADUIS not Authenticating with PFSense using OTP

    5
    0 Votes
    5 Posts
    2k Views
    P
    @brunovic: So no one has any ideas on this? Why isn't pfSense passing the authentication to the py script like the other logins? Check the link above this post, auth is successful now. (Also, check the RADIUS server entry under System > User Manager, Authentication Servers tab. It must be set to PAP.)
  • Pfsense-Squidguard-transparent proxy blocking internal IP's

    2
    0 Votes
    2 Posts
    851 Views
    F
    I figured it out, I had to enable bypass for local address in my GPO and add the relevant address in there, what is weird is that this always ran before.
  • NET-SNMPD Custom Options not saving new lines

    3
    0 Votes
    3 Posts
    642 Views
    D
    Wow! Thank you. I'll be watching for next version.
  • Traffic Totals does not resolve all interface names on graphs

    2
    0 Votes
    2 Posts
    623 Views
    jimpJ
    I'm not seeing that here at all. All of the interface names are correct, even for VLANS. Are you still seeing that now? Maybe try a 2.4.2 snapshot?
  • 0 Votes
    2 Posts
    730 Views
    jimpJ
    Multiple instances are not possible. Usually you'd setup some sort of CHECK-ITEM for users based on some attribute sent by the different access points or SSIDs so that certain users are only valid on certain places.
  • Squid antivirus - allows to download bad files after 2.4.1 upgrade

    19
    0 Votes
    19 Posts
    2k Views
    K
    Its not risky at all so long as you have saved your config.
  • Apcupsd & ESXi Shutdown?

    5
    0 Votes
    5 Posts
    3k Views
    dennypageD
    @Craash: The only odd thing I ran into was that I had to reboot my pfSense box after connecting my 2200 RM APC via USB. FWIW, this is a known issue. It's a permissions problem that happens only on first connect. You can solve it by disconnecting/reconnecting the USB connection or rebooting. There is a discussion of this issue here.
  • UPS (NUT) and snmp v3?

    2
    0 Votes
    2 Posts
    1k Views
    dennypageD
    @Sn3ak: I can talk to my apc AP9617 via snmp v1, but snmp v3 doesn't work. Unfortunately there is no helpful error messages, just that the ups is unavailable. What do you see in Status / System Logs / System / General when you filter for nut?
  • Package Manager: Installed Packages not see because of DNS

    2
    0 Votes
    2 Posts
    400 Views
    GertjanG
    @gklimeck: ….. Change DNS back to ISP or 8.8.8.8 and it should come back. Or change back to default : NOT the forwarder, but the RESOLVER and you'll be fine forever.
  • Tinc restart every 53 seconds, why?

    1
    0 Votes
    1 Posts
    577 Views
    No one has replied
  • FREERADIUS3 and PFSENSE 2.4.1 bandwidth problem

    1
    0 Votes
    1 Posts
    482 Views
    No one has replied
  • Any Way to Reinstall the OLSR Package?

    1
    0 Votes
    1 Posts
    411 Views
    No one has replied
  • Random website timeout

    2
    0 Votes
    2 Posts
    585 Views
    P
    also forgot to mention another behavior that may be connected I was unable to download certain (larger) iso from a mirror site (like centos mirrors) but the smaller iso would download not sure if that is related timeout or not
  • Haproxy ulimit raising

    2
    0 Votes
    2 Posts
    1k Views
    P
    Should be able to add those tunables ,entioned on haproxy settings page, just make sure to leave some room for other processes:   'kern.maxfiles'   'kern.maxfilesperproc'
  • Iperf3 (SOLVED)

    4
    0 Votes
    4 Posts
    7k Views
    ssbarneaS
    I have pfsense 2.4.1 and using web search returns only iperf2 but from CLI I can install it. Any reasons for the different behaviour? I find this at least confusing.
  • Quagga OSPF in a full mesh WAN

    2
    0 Votes
    2 Posts
    748 Views
    A
    All right, After posting this, I spend some time not focusing on my doubts on how I set up quagga and found some information about pfSense specific "issues" and found some posts about rc.newwanip. Tried commenting out "send_event("service reload packages");" and all my troubled was gone.. This is of corse no long time solution but quagga/ospf now seems to behave the way I pictured it. Anyone that knows if there is a possibility so disable the reload of a single package (quagga) when issuing the service reload packages?
  • AutoConfigBackup is dead with 2.4.x?

    3
    0 Votes
    3 Posts
    684 Views
    E
    Thanks - turns out the problem is between the user and the keyboard (LOL) - I had changed my forum password in August and not realized that the same account controlled the Auto Backup.  Resetting the password in the Auto Backup has fixed this. However, note that I was getting a notification that the Backups were successful even though nothing was getting saved - you might want to look into this.  It would have been useful if the AutoBackup setup page included a verification that the data entered (access password) was functional when it was entered.
  • Running bind and DNS resolver at the same time

    3
    0 Votes
    3 Posts
    1k Views
    M
    Thanks - so, just a matter of waiting then.
  • MOVED: snort - Blocked Hosts lost after upgrade/reboot

    Locked
    1
    0 Votes
    1 Posts
    322 Views
    No one has replied
  • Bind Setup issues

    1
    0 Votes
    1 Posts
    524 Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.