Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    perikoP
    @aGeekhere dns_v4_first...have years and they still don't clean the code. But won't affect.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    @NRgia said in Suricata on Pfsense: @bmeeks Thank you for what you did for Snort or Suricata. I'm not sure what you want me to do on Redmine, due to is a bug tracker. My question is for Product Management, which I will ask it here to be public: What is the plan for these 2 packages, Suricata and Snort? Thank you Yes, Redmine is for both bug reports and feature requests. Asking for the Suricata binary to be updated to the latest 7.0.11 version from upstream is a legitimate Redmine request. I would suggest simply asking for the binary version update instead of asking about future Netgate strategy (such as the support plans for the packages). Strategy discussions typically don't get very far because they deal with proprietary information or plans that a company may not want to publicly discuss. Redmine is where the Netgate developer team tracks all the code changes they make for pfSense. They will see Redmine reports much quicker than a forum post.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    dennypageD
    @Leon-Straathof Data retention settings are handled inside of ntopng. Documentation here. Pay attention to the RRD note. Also, if you've turned on some of the slice and dice time series information (is off by default), I'd suggest turning them back off. These balloon the storage requirements and are of little actual use.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    keyserK
    @jrey Thank you so much for the detailed explanation and help. I will adapt and apply the patch to move the job timing like suggested at 01:35 Are you just a user or are you also involved in package maintenance on one or more packages?
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    495 Topics
    3k Posts
    M
    @raidflex said in updating to acme 1.0 breaks system beyond repair: need to restore from backup: maybe uninstall Crowdsec when applying other updates first. It seems like it doesn't help at least from what I see on my system... it changes something.. so it must be definitely reported to their github. I have never experienced that before and crowsec was installed.. maybe with 2.8.0 something have changed
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    597 Posts
    ryan.goodfellowR
    Upgraded 25.07 and Tailscale is broken in the way users here describe. I can manually log in using sudo /usr/local/bin/tailscale login, but the tailscale service in pfSense does not pick this up and restarting the service clobbers the login state. Given 16004 was logged 7 months ago with zero activity, this is an indication that Netgate devices no longer support Tailscale.
  • Discussions about WireGuard

    693 Topics
    4k Posts
    L
    @boyan1 said in Wireguard Gateway not coming up after reboot.: W Hey man, im trying to make the SITE A use internet of SITE B as you did, but there is no means of making that works. How did you make that works? Could you tell me please? Thanks!
  • [ask] throttle ftp download

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    J
    ftp is impossible.they can ssh-d too.. how did you set your squid to throttle http downloads? what number or size you put for http downloads? jigp Davao City
  • How to start IMspector

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    J
    Try re-install the package. This is what i did awhile ago and it works in 1.2.2 :) jigp Davao City
  • Who is online now ?

    Locked
    8
    0 Votes
    8 Posts
    4k Views
    J
    Ntop eats alot of RAM . My RAM is 3gb and users 15.. jigp Davao City
  • Change default block time in snort2c, how?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    J
    Is it possible? Whats the command? Thanks jigp Davao City
  • Where is Snort?

    Locked
    4
    0 Votes
    4 Posts
    5k Views
    J
    Snort is working in 1.2.2 which is im using it now. You should try 1.2.2 and download the latest snort rules. But again, my Q is can we block torrents ports in snort? Ive tried blocking the torrent ports though using firewall rules LAN and open the ports only e.g http/https/53 … jigp Davao City
  • Snort does not update

    Locked
    6
    0 Votes
    6 Posts
    2k Views
    M
    I noticed that after updating 1.2.3 RC1 the snort install and updates are working great.  Just FYI.
  • Dashboard : unable to add widgets (only system info shows up)

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    M
    Ok forget about it :) Turns out my microdrive was bad. It crapped on me right after I tried reinstalling the project again. Now the box won't boot anymore. I will be waiting for a new microdrive which I should receive in a few days.
  • Can not browse the web

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • HAVP installation problems

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    D
    What version pfSense you use? And VMWare or no ?
  • Can i know How to set simple local VOIP(only softphone) in pfsense?

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    C
    First you want to create the extension after you have done that go to the 'Status' tab and click on 'reloadxml' for it to read the change. If you have a static ip for your WAN you can skip this step. If you do not have a static ip then you would want to setup dynamic dns and then set the domain that you chose on the 'Vars' tab. Make sure you have the dynamic dns getting updated with pfsense Services->Dynamic DNS so that the domain stays updated with the right IP Address. Then restart freeswitch so that it uses the new domain name. Then register configure your phone with the dynamic dns domain name. (Remember: by default FreeSWITCH binds to the WAN ip and your phone needs to register to that IP). At this point your phone should now be able to register to FreeSWITCH and you can test to make sure it works by dialing *9999 and you should hear music. Dial *5000 to hear the default auto attendant. Wiki:  http://doc.pfsense.org/index.php/FreeSWITCH IRC:  #pfsense-freeswitch
  • Snort stop blocking even alerts is shown !!?

    Locked
    6
    0 Votes
    6 Posts
    2k Views
    G
    I have been edit my snort.sh file as shown in the forums a while back open and edit yours to match the example if you need more help past your snort.sh file
  • Problem with Squidguard ACL's

    Locked
    8
    0 Votes
    8 Posts
    15k Views
    D
    Basic error - use several ACL with same or overlapping Source setting. Will used only one - first by order ( Highlander)
  • Snort

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    K
    I think this https://services.netscreen.com/restricted/sigupdates/nsm-updates/HTML/SHELLCODE:X86:NOOP-TCP.html would help you.
  • Services Status in Dashboard - does it refresh?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    No, the services status widget does not use any AJAX, and thus is static. As you found, it will only update when the entire page has been refreshed.
  • SIPorxd - 7 VOIP cisco 7960 - States -

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    A
    Ok so I solved the issue, It seems that at least for this office configuration changing the Outbound NAT to Manual solves the issue …. Pfsense 1.2.2 will create the default automatic NAT and that will be a great starting point ...
  • Squid Proxy very slow

    Locked
    5
    0 Votes
    5 Posts
    8k Views
    E
    Ok. I found my error. I found in this forum that internal https redirection doesn't work for squidguard. Thanks to all. Kind regards Ernie
  • Squid hapv sandwich setup? (is there a guide, is it possible?)

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    T
    Just clarification.  I use squid with a parent proxy of HAVP.  And, at current, that is set up to be transparent proxy.
  • Old package repo

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    W
    his update fixed the filter reload but it didn't remove all the errors. i still get this Warning: Invalid argument supplied for foreach() in /etc/inc/pkg-utils.inc(303) : eval()'d code on line 1 squid
  • Squid Startup Error with PPTP

    Locked
    17
    0 Votes
    17 Posts
    9k Views
    W
    still get this error that i never got before Generating RRD graphs... ERROR: unknown DS name 'qPenaltyUp' done. and this one Warning: Invalid argument supplied for foreach() in /etc/inc/pkg-utils.inc(303) : eval()'d code on line 1 squid
  • Ftp proxy with antivirus

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.