Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    BBcan177B
    @Draco try to goto the General Tab, first ensure that the Keep Settings option is checked. Then unchecked Enable pfBlockerNG so that its disabled. Hit save. Force Update. Then reenable pfBlockerNG and Force update.
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    657 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.
  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
  • Freeradius 2 (1.7.3_2) doesn't start

    4
    0 Votes
    4 Posts
    1k Views
    D
    [image: bea8a66f67.gif]
  • Radius with LDAP only without EAP

    1
    0 Votes
    1 Posts
    818 Views
    No one has replied
  • Tinc package on 2.3

    41
    0 Votes
    41 Posts
    18k Views
    Y
    @doktornotor: Everything got sorted out eventually - https://github.com/pfsense/FreeBSD-ports/pull/149 any chance of this being part of 2.3.2?
  • 0 Votes
    2 Posts
    1k Views
    K
    I have the same problem. Did you find a solution?
  • BIND on pfSense 2.3.2

    9
    0 Votes
    9 Posts
    3k Views
    D
    Looks like you have some empty line/entry in the trusted clients ACL.
  • MOVED: Can Snort & Suricata exist on same installation?

    Locked
    1
    0 Votes
    1 Posts
    464 Views
    No one has replied
  • Freeradius2 not running on 2.3.2 upgrade

    2
    0 Votes
    2 Posts
    873 Views
    M
    @arriflex: However, still nothing registers in either the General Log or in /var/log/radius.log with the word radius. I have the same problem, nothing in logs.
  • Howto use pfsense as mailproxy?

    6
    0 Votes
    6 Posts
    2k Views
    jahonixJ
    You surely already read this thread: https://forum.pfsense.org/index.php?topic=40622.705 ?
  • MOVED: Clamav doesn't stop download of virus signature file

    Locked
    1
    0 Votes
    1 Posts
    394 Views
    No one has replied
  • AutoConfig Backup Not Working

    2
    0 Votes
    2 Posts
    680 Views
    D
    The server is rather unreliable lately. Perhaps file a bug.
  • Configuring softflowd

    1
    0 Votes
    1 Posts
    925 Views
    No one has replied
  • MOVED: pfsense squid + squidguard ssl filtering error

    Locked
    1
    0 Votes
    1 Posts
    500 Views
    No one has replied
  • Does pfsense have?

    2
    0 Votes
    2 Posts
    718 Views
    M
    Use of an RBL is a part of the mail server package configuration and running an external smtp server on your firewall is a BadIdea for a host of reasons. There are quite a few RBLs around, many are free within certain usage limits. Once you set up your mail server on another box you can put pfSense packages to work.  A couple of examples are:- pfBlockerNG which can be fed lists of spammer IPs to drop, some updated hourly. Snort or Suricata which can be configured to intercept attempts to compromise your mail server and block offenders.
  • MOVED: ntop question

    Locked
    1
    0 Votes
    1 Posts
    475 Views
    No one has replied
  • MOVED: traffic totals error (call this solved)

    Locked
    1
    0 Votes
    1 Posts
    530 Views
    No one has replied
  • MOVED: Darkstat explained?

    Locked
    1
    0 Votes
    1 Posts
    450 Views
    No one has replied
  • MOVED: Snort Passlist - Only 1 Alias

    Locked
    1
    0 Votes
    1 Posts
    426 Views
    No one has replied
  • Avahi Fine-tuning

    5
    0 Votes
    5 Posts
    5k Views
    D
    You won't really have much luck with editing config files manually; to add custom options, you need to patch the avahi.inc shipped with the package (and avahi.xml if you want this configurable via the GUI). Good luck.
  • Update alerts

    2
    0 Votes
    2 Posts
    439 Views
    D
    https://forum.pfsense.org/index.php?topic=122881.0
  • Zabbix proxy on pfsense

    5
    0 Votes
    5 Posts
    3k Views
    B
    I was going to reply with that. Glad you found it.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.