Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    BBcan177B
    @Draco try to goto the General Tab, first ensure that the Keep Settings option is checked. Then unchecked Enable pfBlockerNG so that its disabled. Hit save. Force Update. Then reenable pfBlockerNG and Force update.
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    657 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.
  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
  • Squid installation failed!

    5
    0 Votes
    5 Posts
    1k Views
    S
    Thanks  ;) :-*
  • Telegraf / InfluxDB

    6
    0 Votes
    6 Posts
    5k Views
    Animosity022A
    Are you able to hit: ttp://10.20.0.55:8083 That's normally your admin port. You can enter in 'show databases' and even try to create the database. I have no authentication on my influxdb since it's all internal.
  • Mail_package_platform_status.php - pfSense update notifier via mail

    5
    0 Votes
    5 Posts
    1k Views
    I
    Hello Javcasta This is great thank you. I have a question, I need to replace the following IPfire script line with something works with pfsense: #/usr/local/bin/sendEmail -f XXXXXXX@gmail.com -t XXXXXXX@gmail.com -u "P-Logs" -m " Attached log file " -s smtp.gmail.com:587 -xu XXXXXXX -xp XXXXXXX  -o tls=yes -a /home/scripts/poxlog.txt; In other world how do I get mail.php to send an email with an attachment file.. Thank you I
  • ClamAV database update not possible behind proxy server

    1
    0 Votes
    1 Posts
    655 Views
    No one has replied
  • Problemas Instalacion de paquetes

    2
    0 Votes
    2 Posts
    1k Views
    D
    This issue has nothing to do with packages, it's the package manager being braindead.
  • NUT - Shutdown

    3
    0 Votes
    3 Posts
    3k Views
    P
    Great - Many thanks for taking the time to reply
  • Bitmask app for pfsense?

    3
    0 Votes
    3 Posts
    836 Views
    G
    yes.. :( bitmask support says: -Are there plans to provide and OpenBSD Bitmask client? -Hello, there are no plans. Not because we don't want but because we don't have enough time / man power. If you (or someone else) wants to try make work bitmask on *BSD we can provide assistence. Thanks for caring. https://leap.se/code/issues/6726
  • Add dictionary to FreeRADIUS?

    2
    0 Votes
    2 Posts
    3k Views
    J
    I figured it out myself. I probably wouldn't have without posting here first, though. You know how that works. I had a syntax error in the vendor file. I fixed that. To reload the service, do service radiusd.sh restart I'll re-edit this if it turns out this didn't actually work.
  • Restart haproxy with pppoe

    1
    0 Votes
    1 Posts
    571 Views
    No one has replied
  • Freeradius (latest) LDAP-Auth not working

    6
    0 Votes
    6 Posts
    1k Views
    K
    vers stupid you guy…. "Not a pfSense employee, they cannot fire me..." no more words to say... fu
  • MOVED: OpenVPN Client Export fault in export for TAP and IOS/Android

    Locked
    1
    0 Votes
    1 Posts
    390 Views
    No one has replied
  • MOVED: pfBlockerNG can block a TOR exit node list?

    Locked
    1
    0 Votes
    1 Posts
    469 Views
    No one has replied
  • Tinc Firewall rules tab

    3
    0 Votes
    3 Posts
    1k Views
    NogBadTheBadN
    Ah it left some entries in interface groups :- <ifgroups><ifgroupentry><ifname>pkg_tinc</ifname></ifgroupentry>                 <ifgroupentry><ifname>pkg_tinc</ifname></ifgroupentry>                 <ifgroupentry><ifname>pkg_tinc</ifname></ifgroupentry></ifgroups>
  • Phantom service - dansguardian

    2
    0 Votes
    2 Posts
    666 Views
    jimpJ
    You'll have to edit it out of config.xml. Either download a backup, edit it out, then restore or use viconfig from the CLI if you are familiar with vi.
  • Package install fails - Lzma library error corrupt input data

    4
    0 Votes
    4 Posts
    3k Views
    jimpJ
    If it is a newly allocated address range it might have still been in the bogons list, which gets updated once per month or so. Have you tried it in the last few days?
  • Softflowd not generating flows

    2
    0 Votes
    2 Posts
    1k Views
    C
    did you ever get this solved? I'm hitting into the same issue. I got the same settings as yours (different host, Solarwinds NTA)
  • Service watchdog doesnt work?

    4
    0 Votes
    4 Posts
    2k Views
    D
    No, not the Cron package. It's not any service either. The cron binary. ps ax | grep /usr/sbin/cron (And if you see the watchdog entry, the Service Watchdog package is working perfectly fine. That's all it does - create a script and add it to crontab.)
  • Nut UPS service won't start following v2.3.3 update

    7
    0 Votes
    7 Posts
    4k Views
    T
    Thanks for your assistance but I figured out the problem: 1. This threw me off: [2.3.3-RELEASE][admin@firewall.*************.internal]/root: whoami root When I saw "root" I thought it meant "root"….  :)  I've reset the permissions to the defaults. 2. The real issue is my UPS's firmware doesn't do plug and play properly, meaning I had to physically reset the UPS to get its USB connection to respond to the firewall. All is working now.  Thanks for your help.
  • VHost replacement for web server

    4
    0 Votes
    4 Posts
    1k Views
    D
    No. In general, pfSense is not a webserver.
  • Sudo

    4
    0 Votes
    4 Posts
    1k Views
    A
    thank you, both, for the help.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.