Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    D
    Retested on 24.11-RELEASE (amd64) all seems to work. So it seems right to file a bug for this issue.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    S
    So since there is no version 25.03. There is an official 25.07 now but only get a 7.08.2 what happen to the rest up to Suricata 7.0.10 or 7.0.12?
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K
    @pulsartiger The database name is vnstat.db and its location is under /var/db/vnstat. With "Backup Files/Dir" we are able to do backup or also with a cron.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    R
    So something showed up again and the Unbound log shows nothing useful. No IP or who requested it. I guess the log level is not enough? Aug 6 11:40:26 mypfsense unbound[24282]: [24282:0] debug: worker request: max UDP reply size modified (1472 to max-udp-size) Aug 6 11:40:28 mypfsense unbound[24282]: [24282:0] debug: validator[module 1] operate: extstate:module_state_initial event:module_event_pass Aug 6 11:40:28 mypfsense unbound[24282]: [24282:0] info: validator operate: query networkhub-Hfl1Jc.local. A IN Aug 6 11:40:28 mypfsense unbound[24282]: [24282:0] debug: iterator[module 2] operate: extstate:module_state_initial event:module_event_pass Aug 6 11:40:28 mypfsense unbound[24282]: [24282:0] info: resolving networkhub-Hfl1Jc.local. A IN Aug 6 11:40:28 mypfsense unbound[24282]: [24282:0] info: finishing processing for networkhub-Hfl1Jc.local. A IN Aug 6 11:40:28 mypfsense unbound[24282]: [24282:0] debug: validator[module 1] operate: extstate:module_wait_module event:module_event_moddone Aug 6 11:40:28 mypfsense unbound[24282]: [24282:0] info: validator operate: query networkhub-Hfl1Jc.local. A IN Aug 6 11:40:28 mypfsense unbound[24282]: [24282:0] info: validate(nxdomain): sec_status_secure Aug 6 11:40:28 mypfsense unbound[24282]: [24282:0] info: validation success networkhub-Hfl1Jc.local. A IN Aug 6 11:40:28 mypfsense unbound[24282]: [24282:0] debug: cache memory msg=124942 rrset=239262 infra=87934 val=85965 Aug 6 11:40:58 mypfsense unbound[24282]: [24282:1] debug: validator[module 1] operate: extstate:module_state_initial event:module_event_pass
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG
    @EChondo What's your pfSense version ? The instructions are shown here : [image: 1753262126227-1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png] A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate. @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy: I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess. No need to wait x days. You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    585 Posts
    L
    @veddy254 said in How to update to the latest Tailscale version?: @lbm_ said in How to update to the latest Tailscale version?: https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2_1.pkg pkg: An error occured while fetching package I would recommend verifying the DNS settings in PfSense and verifying date/time is correct. Barring that, try again later and see if it still fails. I was able to successfully run the command on my 2.8.0 install (I didn't install it because I've already installed it) so it seems localized. Interesting. After I (reinstalled) tailscale the /etc/resolv.conf was overwritten. So I just readded the DNS entries in the Pfsense WebUI, and not it worked. pkg add -f https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2_1.pkg Fetching tailscale-1.84.2_1.pkg: 100% 11 MiB 11.9MB/s 00:01 Installing tailscale-1.84.2_1... Newer FreeBSD version for package tailscale: To ignore this error set IGNORE_OSVERSION=yes - package: 1500054 - running kernel: 1500029 Ignore the mismatch and continue? [y/N]: y package tailscale is already installed, forced install Extracting tailscale-1.84.2_1: 100% And pkg info tailscale tailscale-1.84.2_1 Name : tailscale Version : 1.84.2_1 Installed on : Wed Aug 6 09:17:23 2025 CEST Origin : security/tailscale Architecture : FreeBSD:15:amd64 Prefix : /usr/local Categories : security net-vpn Licenses : BSD3CLAUSE Maintainer : ashish@FreeBSD.org WWW : https://tailscale.com/ Comment : Mesh VPN that makes it easy to connect your devices Shared Libs required: libthr.so.3 libc.so.7 Annotations : FreeBSD_version: 1500054 build_timestamp: 2025-07-30T02:26:16+0000 built_by : poudriere-git-3.4.2-12-g74a54a88 port_checkout_unclean: no port_git_hash : 275975297bc ports_top_checkout_unclean: no ports_top_git_hash: 0cd2c078c1e Flat size : 35.4MiB Description : Tailscale is a mesh VPN alternative, based on WireGuard, that connects your computers, databases, and services together securely without any proxies.
  • Discussions about WireGuard

    692 Topics
    4k Posts
    F
    Hi again, to be honest: I guess, I did not remember exactly what I did 2 years ago. May I was mistaken by the interface name opt2 because the SG-3100 has a physical port OPT1 and I mixed up physical and virtual names. The goal was to use 2 different tunnels, one for the mobile clients and one for the site-2-site connection. And now all is running in that way . Regards
  • SIPROXD and Asterisk / Trixbox

    Locked
    7
    0 Votes
    7 Posts
    7k Views
    M
    I wish I knew what the difference is… I am planning to convert to "PBX in a Flash" soon to see if it will fix issues I am having with poor sound quality on IAX calls but I get occasional one-way audio with SIP and pfSense. the interesting thing is that the one-way audio goes away after about 10 seconds and it works for a little bit and then I get it again. The 10 seconds appears to be related to the externrefresh=10 setting. BTW... I am using voipstreet for SIP and IAX but I had the same one-way audio problems with Broadvoice a year or so ago. Mike
  • Squid supported SNMP?

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Snort stops working

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    J
    With only Exploit and BAckdoor rules, snort still crashes. It can work without "core dumping" between 1 and 4 days. What I have seen is that snort does not give the right amount of ram in the logs : "Ram free BEFORE starting Snort: 166M – Ram free AFTER starting Snort: 166M "  Or "Ram free BEFORE starting Snort: 67M -- Ram free AFTER starting Snort: 67M "  just restarted ten minutes ago: "SnortStartup[29480]: Ram free BEFORE starting Snort: 112M – Ram free AFTER starting Snort: 112M -- Mode ac-sparsebands -- Snort memory usage:" I have 2GB on that machine!!!! Any clue ?
  • SquidGuard ACL ?

    Locked
    6
    0 Votes
    6 Posts
    6k Views
    D
    @wompy: good point, that might be a pain. I guess I could just cut and paste the data from blk_spyware and place that in a new destination. My main objective is to block the spyware category, but since most of it is ads on websites, I want it to look transparent to the users. If you use HTTP WebGIU & Internal redirection, possible another way - modification /usr/local/www/sgerror.php. SG sent many information to redirected page http://10.62.0.3/sgerror.php?url=404&a=%a&n=%n&i=%i&s=%s&t=%t&u=%u [a] - client address #                [n] - client name #                - client user #                - client group #                [t] - target group #                - client url need checking 't' param with 'blk_spyware' and return redirection to blank Image
  • Snort core dumped

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    S
    Thx hoba, I read it, the rules are disabled, I've seen it before. Memory consumption has been at ap. 40%, CPU at 10% max Yesterday the machine slowed down the whole traffic, I had to disable snort. Today I will try to analyse if the box itself (no shaping, no ids) is able to handle the traffic. Just NAT some rules and that's it.
  • Bandwidthd BETA 2.0.1.1 not working on PF 1.2

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    W
    Hi I'm interested in installing this package on 1.2 Stable and just want to check if the installation issue has been resolved before I try it on my new install and stuff up my router.
  • SquidGuard and blank redirects?

    Locked
    57
    0 Votes
    57 Posts
    48k Views
    W
    I knew it was a problem, just hoped that there was a solution now. Oh well, once again thank you!
  • Snort custom rules/config?

    Locked
    9
    0 Votes
    9 Posts
    4k Views
    G
    NP
  • XML error: no packagegui object found!

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    X
    @hoba: Download the config.xml from diagnostics>backup/restore. Edit it with a texteditor that can handle the unix specific textfile (like http://pspad.com). Strip out the section for that package, save and reupload it again (pfSense will reboot). Now pfSense won't know that this package was ever installed. Try to reinstall it. Also make sure your pfSense is on the latest version when working with packages. This makes complete sense and is the solution to my problem. Thinking out of the box! Thank you for the quite response.
  • Bandwidth.conf deleted at each reboot ?

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    H
    thx, i was pretty sure about that but i was expecting a specialist to say it :) anyway, i found a way to customize the /usr/local/pkg/bandwidthd.inc so now even after the reboot the item i added is still loaded in the config !
  • Squid Installation and basic parameters to get it running

    Locked
    14
    0 Votes
    14 Posts
    8k Views
    H
    hi i am using squid for quite some times, i used the upstream proxy in the past when i had the option to use it by my isp, but now my isp oblige me to do so, and if i don't my internet will be very slow, so if i use it now squid stops immediately, i tried it with 5 different pfsense boxes, any body aware of this and solved it? thanks in advance
  • AIM issue

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    R
    AIM 6 uses a new version of the AIM/ICQ protocol which is not supported by IMSpector. Try an older version of AIM or ICQ and it should work fine.
  • SIPROXD is working!

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    W
    Hi Guys I too would love to see how this was setup! Thanks in advance
  • Snort dual-WAN Hack

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    S
    Excellent work!  I've commited your changes.
  • Snort not running

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    F
    I can't remember, I'll look into it, when I'm around the system again…
  • 0 Votes
    13 Posts
    4k Views
    T
    I am building something like this. It's already working steady, howver I can't write the webgui pages for it. If anyone is interested we could make a package. I have to questions though, it works with lighthttpd (nog the webgui's) on the outside, is this dangerous? Is there a systemwide variable for the WAN interface, and if pptp is used do their need to be rules added on both the pptp interface and the WAN interface?
  • Snort memory usage. how much is needed?

    Locked
    5
    0 Votes
    5 Posts
    4k Views
    G
    I'm running ac-sparsebands with about half of the rules enabled.  I'm using approx. 240 MB per interface.  This is on top of whatever else you're running. -GTM
  • Lightsquid - monthly view - graph gives 500 - Internal Server Error

    Locked
    18
    0 Votes
    18 Posts
    9k Views
    F
    ls -l total 100 -r–r--r--  1 www  www      56 Mar 24  2007 .htaccess -r-xr-xr-x  1 www  www    2307 Mar 24  2007 bigfiles.cgi -r-xr-xr-x  1 www  www    2556 Mar 24  2007 check-setup.pl -r-xr-xr-x  1 www  www    9185 Mar 24  2007 common.pl -r-xr-xr-x  1 www  www    4740 Mar 24  2007 day_detail.cgi -r-xr-xr-x  1 www  www    1324 Mar 24  2007 fixreport.pl -r-xr-xr-x  1 www  www    1210 Mar 24  2007 get.cgi -r-xr-xr-x  1 www  www    10054 Mar 24  2007 graph.cgi -r-xr-xr-x  1 www  www    6710 Mar 24  2007 group_detail.cgi -r-xr-xr-x  1 www  www    7015 Mar 24  2007 index.cgi -r-xr-xr-x  1 www  www    16353 Mar 24  2007 lightparser.pl -r-xr-xr-x  1 www  www    3779 Mar 24  2007 month_detail.cgi -r-xr-xr-x  1 www  www    4757 Mar 24  2007 topsites.cgi drwxr-xr-x  6 root  wheel    512 Apr  9 22:04 tpl -r-xr-xr-x  1 www  www    4038 Mar 24  2007 user_detail.cgi -r-xr-xr-x  1 www  www    3132 Mar 24  2007 user_month.cgi -r-xr-xr-x  1 www  www    4049 Mar 24  2007 user_time.cgi -r-xr-xr-x  1 www  www    3572 Mar 24  2007 whousesite.cgi This is how it looks here, I've changed the loginpage to http, no change. Best regards
  • IFTOP how to install?

    Locked
    2
    0 Votes
    2 Posts
    5k Views
    S
    Unsupported, but here you go: pkg_add -r http://files.pfsense.org/packages/All/iftop-0.17.tbz From a shell ( option 8 ). rehash iftop
  • Heavy hard disk load when squidGuard activated and shallalist used

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    D
    After downloading Blacklist system start SG with non-builded bases and starting base rebuild. That's all making slowing down of system. With rebuilded base SG started on 3-5 times quickly.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.