Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    BBcan177B
    @Draco try to goto the General Tab, first ensure that the Keep Settings option is checked. Then unchecked Enable pfBlockerNG so that its disabled. Hit save. Force Update. Then reenable pfBlockerNG and Force update.
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    657 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.
  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
  • MOVED: pfBlockerNG Alias

    Locked
    1
    0 Votes
    1 Posts
    425 Views
    No one has replied
  • Freeradius3 Accounting Interim Interval Wording

    4
    0 Votes
    4 Posts
    946 Views
    NogBadTheBadN
    Cool thanks gents. I was adding a few entries into the user database and spotted it, it just looked a little odd.
  • Automate tinc deployment

    1
    0 Votes
    1 Posts
    670 Views
    No one has replied
  • FreeRadius3 + OpenLDAP (JumpCloud's LDAP-as-a-Service)

    5
    0 Votes
    5 Posts
    3k Views
    D
    https://doc.pfsense.org/index.php/FreeRADIUS_2.x_package#Related_Articles
  • MOVED: How to install a backup without GUI?

    Locked
    1
    0 Votes
    1 Posts
    371 Views
    No one has replied
  • MOVED: Haproxy Widget: Missing Actions Button

    Locked
    1
    0 Votes
    1 Posts
    299 Views
    No one has replied
  • How to clear UPS alarms?

    6
    0 Votes
    6 Posts
    4k Views
    ?
    But.. you did measure high ESR on the caps. So they were bad. Even if the unit seemed to be functioning fine, you saw bad caps. Doesn't that simply mean that regardless of NUT being right or wrong the hardware on that UPS is bad? Also, a unit that seems fine, even with bad caps cannot be trusted either :p It's also possible that there is more hardware damage than just those caps. An inverter with bad caps is a recipe for disaster.
  • No available packages (empty list)

    5
    0 Votes
    5 Posts
    5k Views
    W
    Hi Gertjan, the problem was permanent, a simple reboot didn't work. The problem was (because I've already solved it with a system+package reinstallation, that eventually went fine) due to a pkg-related sqlite database error that - despite applying the raccomandations given in other threads (i.e. forced update/upgrade of the system) - didn't solve the issue (and most of all, they were lenghty to execute). As the issue was created immediately after installation with no warning, I consider this solution a defeat. As a matter of fact, we still don't know the cause but the reinstallation was surely the fastest way to solve: I already know the beast. At the current state of the art and from my viewpoint, there has been a considerable loss of performance (mostly on pfsense boxes installed on nanobsd-powered embedded devices) and stability (as it is witnessed by the large number of threads in the forum about this topic) after the introduction of the pkg-based system upgrade/package management method.
  • FreeRadius3…problems

    7
    0 Votes
    7 Posts
    2k Views
    R
    Hey, Thank you guys! The first 2 posts fixed my problem now the Radius works perfect! Is there actually any point  against the Radius Server working as a paket on the pfsense? I mean a security thing, or possible problems with the Firewall etc…. thank you The 3 blocking rules are just here to divide my Subnet from the others, normally there should be no match...it's just the point that there is no possibility to access the others
  • Allow add more ASN in openbgpd

    9
    0 Votes
    9 Posts
    2k Views
    Y
    the openbgpd Status how show the 32bit ASN to asplain? In accordance with the provisions should be displayed as decimal https://www.ietf.org/rfc/rfc5396.txt https://submit.apnic.net/cgi-bin/convert-asn.pl
  • MOVED: HAPROXY - stats showing green but not working

    Locked
    1
    0 Votes
    1 Posts
    347 Views
    No one has replied
  • LCDProc on a SOPHOS 220 Rev.5

    1
    0 Votes
    1 Posts
    681 Views
    No one has replied
  • How to block mail.google.com

    4
    0 Votes
    4 Posts
    898 Views
    GertjanG
    What is ultrasurf ? edit : Ok, found it. I guess there exists a country filled up with people (half a million or so) who know how to use it to circumvent local 'policies'  - and the other half who knows how to block it. You surely will find some useful knowledge there. Start by blocking outgoing ports 80,443,21,22,53,110,465,587,993,995 and see what happens ;) Btw : think about protecting the gates of your company and have employees checked if they carry any smart phones. Enforce the PC's so users can't install unknown programs.
  • LCDproc filling general log

    1
    0 Votes
    1 Posts
    988 Views
    No one has replied
  • Ntopng service will not start because Redis service is not running

    3
    0 Votes
    3 Posts
    1k Views
    D
    Yeah it happens because redis fucks itself up - which happens at least once every months for me. I stopped using the package. Beyond it being a disk space hog, it's rather useless when you find yourself wiping all the history periodically because the thing has crashed. After experiencing Redis and MongoDB in a bunch of applications, I really don't have much good to say about these "fancy" way overhyped NoSQL products. They are unstable immature shit.
  • Custom Packages on 2.3.3 - tinc 1.1

    4
    0 Votes
    4 Posts
    1k Views
    J
    Too bad, thank you for the info! cheers!
  • Free radius stopped

    2
    0 Votes
    2 Posts
    580 Views
    D
    !!! [image: maxresdefault.jpg] !!!
  • MOVED: Problem SQUID With Application – Connect to internet

    Locked
    1
    0 Votes
    1 Posts
    387 Views
    No one has replied
  • MOVED: install Suricata but suppress service start automatically?

    Locked
    1
    0 Votes
    1 Posts
    415 Views
    No one has replied
  • HAProxy "Use Client-IP to connect to backend servers." & OpenVPN

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.