1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    S
    @shady28 Are you maybe looking at IP block list feeds vs DNSBL feeds?

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.

  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?

  • Discussions about the Tailscale package

    93 Topics
    657 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.

  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
Log in to post
Load new posts
  • T

    How to YP enable?

    1
    0 Votes
    1 Posts
    456 Views
    No one has replied
  • T

    Samba4 on Pfsense 2.4

    Locked
    6
    0 Votes
    6 Posts
    7k Views
    jimpJ
    This is a firewall. Do not install packages or run scripts from other sources on it. That is a giant security nightmare. You have no way to verify that those packages are secure or properly built from trustworthy sources.
  • M

    Squid3 Reverse Proxy - Client CA is empty file

    1
    0 Votes
    1 Posts
    515 Views
    No one has replied
  • M

    Freeradius2 installation failed

    9
    0 Votes
    9 Posts
    1k Views
    M
    now pfsense stopet working. only ssh working after a hard reset :D my other virtuel server working fine.  ;D now i have some homework at weekend.
  • S

    freeRadius2 does not start after upgrade freeRadius2 package 1.7.7 to 1.7.8

    4
    0 Votes
    4 Posts
    1k Views
    D
    Read this and configure the certificates. https://forum.pfsense.org/index.php?topic=128923.0
  • S

    Installing Monit FreeBSD package

    1
    0 Votes
    1 Posts
    976 Views
    No one has replied
  • W

    Need help perl: warning: Setting locale failed.

    Locked
    18
    0 Votes
    18 Posts
    4k Views
    jimpJ
    The original subject of this thread has been solved. For help with squid, create a new post in the Cache/Proxy board and ask there if you still have questions or problems.
  • V

    [SOLVED] captive poral, radius and password file

    3
    0 Votes
    3 Posts
    782 Views
    V
    got it :)
  • V

    Quagga, unable to start if configured via RAW config

    4
    0 Votes
    4 Posts
    1k Views
    Q
    The way that the Quagga OSPF package is written it assumes a basic, working configuration (interface, RID, area) has been deployed via the GUI. I've done a dummy config and then used the raw config fields to do whatever i want after that.
  • Raul RamosR

    FreeRADIUS 1.7.8 problem (Solved)

    8
    0 Votes
    8 Posts
    6k Views
    D
    The bundled horrible FreeRADIUS certificate manager (defaulting to MD5) has been removed from the package (starting with 1.7.8). Configuring proper certificates in the pfSense Cert Manager is a required configuration step now. https://redmine.pfsense.org/issues/7170 https://github.com/pfsense/FreeBSD-ports/pull/334 There is no way to migrate the old config if you were not using the pfSense cert manager before, you simply need to do the work yourself. Probably might put some file_notice() and/or install message before 2.4 is released.
  • ivorI

    MOVED: Can't get Squid HTTPS/SSL Interception to work with Android Nexus devices

    Locked
    1
    0 Votes
    1 Posts
    436 Views
    No one has replied
  • D

    Softflowd missing fields

    1
    0 Votes
    1 Posts
    691 Views
    No one has replied
  • N

    Ntopng and mariadb

    2
    0 Votes
    2 Posts
    976 Views
    D
    The workaround is to use what's used by the package. No such manual messing is supported.
  • C

    Quagga OSPF Problem - Losing Neighbor Relationship

    2
    0 Votes
    2 Posts
    2k Views
    U
    Same to me. After 3 weeks working, the pfsense lose the neighbor. No config changes. No neighbor also after a reboot…
  • P

    Add TOTP one-time passwords to FreeRadius

    2
    0 Votes
    2 Posts
    1k Views
    ivorI
    Share your fix, our devs can take a look (assuming they don't have their own fix).
  • S

    Mail Report Graphs

    6
    0 Votes
    6 Posts
    2k Views
    S
    In the mean time, what NMS package would read the RRD data?  Most everything I see monitors via SNMP.  We use PRTG which grabs SNMP information but since the routers already log the info I'd rather just read them for continuity and accuracy.
  • Y

    Bind9 - udp socket: permission denied

    9
    0 Votes
    9 Posts
    2k Views
    Y
    It's a basic web development operation. some hosts with A records point to digital ocean VPS, some development sites trickle down the local subnet and get port forwarded to boxes in the LAN. Those lan boxes need a local DNS record because the external DO dns record points to the router, not the local IP. www.domain.com > A record > DO dev.domain.com > CNAME > home network plex.home.dev > local A record 10.5.5.2 > home network * * * So it's a combination… I have lots of local stuff, that's not public, and DNS is easier that setting up hosts file on every machine. The problem with dns crashing still happened today with the DNS Resolver. Is there anything I can do to remedy this situation, and still keep my VPN clients active. I would prefer to have DNS and encrypted WAN.
  • G

    LCDProc and adafruit USB + Serial Backpack

    5
    0 Votes
    5 Posts
    2k Views
    G
    Hi, revengineer Just wanted to say thank you very much for your help. I tried it late last night and its worked perfectly. I tried /dev/cuaU0 just as you said and it worked. I had tried all the ports before but i dont think at the time i had set the panel to lkd so i wonder if that did not help. Im now hoping the get the keyboard options in LCD proc to work. Hopefully it will be just normal keyboard keys that it uses so i can just make get a little micro controller to imitate a usb keyboard and send the right ascii codes. Thanks again Trev
  • D

    Bind Package Feature Request - Make "Base Domain IP" dynamic

    7
    0 Votes
    7 Posts
    1k Views
    D
    @doktornotor: @docdawning: I'll consider extremely inexpensive alternatives, or other ideas. https://dns.he.net/ This WAS looking so so promising and I've gone down the road of having my stuff mostly setup here, but then I ran in to the deal-breaker: "Zone failed validation test. Wildcarding has been disabled due to abuse." Update: I contacted them and they confirmed they're not going to allow wildcarding. They said they'd manually rig it for me if I only had a few domains. While that would work for me, it's not a viable long-term solution for me. So I guess I'm back to getting pfsense's bind to meet my needs, hosting my own DNS server outside of pfsense or using a paid service.
  • V

    Package manager unable download the list of packages on new installation

    8
    0 Votes
    8 Posts
    4k Views
    P
    Thanks for this post ! I download pfSense-CE-2.4.0-BETA-amd64-20170404-1642, and I still have the problem " Proxy Authentication Required " when I try pkg update from the console. If I use "set" in the console I see http_proxy PROXYIP:8012 http_proxy_auth basic:*:user:password http_proxy_auth_pass password http_proxy_auth_user user http_proxy_port 8012 but nothing for https … could it be the problem ?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.