Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    D
    Retested on 24.11-RELEASE (amd64) all seems to work. So it seems right to file a bug for this issue.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    cyb3rtr0nianC
    @rlrobs Yes it’s still working fine here.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K
    @pulsartiger The database name is vnstat.db and its location is under /var/db/vnstat. With "Backup Files/Dir" we are able to do backup or also with a cron.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    R
    @Gertjan I have not set that in Unbound. No Python Module is active there. I saw that in another thread but I don't think it will change anything. Also which of these settings for the unbound python mode should be enabled here? [image: 1754379047075-settings.png] I also have no script to select under Unbound: [image: 1754379337036-unbound.png]
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG
    @EChondo What's your pfSense version ? The instructions are shown here : [image: 1753262126227-1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png] A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate. @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy: I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess. No need to wait x days. You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    J
    @div444 i'm finding the same - did you find a solution or did reverting fix it? Hoping there is a patch fix or something to get it working! Rather not rollback if i can avoid it
  • Discussions about the Tailscale package

    90 Topics
    582 Posts
    dennypageD
    @Gertjan said in can I install a FreeBSD 14 pkg on a FreeBSD 15 pfSense?: If the package contains binaries : forget it. The ABI is different. It's not a hard and fast rule like that. It depends upon what the binary is, what dependencies it has, and how everything was compiled. I am currently running a binary package, which was built on FreeBSD 14.2-RELEASE, on pfSense 25.07 (FreeBSD 15.0-CURRENT) without issue.
  • Discussions about WireGuard

    692 Topics
    4k Posts
    F
    Hi again, to be honest: I guess, I did not remember exactly what I did 2 years ago. May I was mistaken by the interface name opt2 because the SG-3100 has a physical port OPT1 and I mixed up physical and virtual names. The goal was to use 2 different tunnels, one for the mobile clients and one for the site-2-site connection. And now all is running in that way . Regards
  • SquidGuard

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    D
    Check 'Source' names –-- 27.12.2007 00:48:50: sg_build_config: error configuration data. It's all errors: SOURCE ''error: Size of name must be between [2..16]. Invalid name . Valid name symbols: ['a-Z', '_', '0-9', '-']. First symbol must be a letter. –-- Also re-select this name in ACLs
  • Error squid

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    S
    Thank a lots. Now it's working properly.
  • This can be BUG?

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • 0 Votes
    3 Posts
    3k Views
    L
    this is my  squid.conf # less /usr/local/etc/squid/squid.conf |more # Do not edit manually! http_port 192.168.1.253:80 http_port 127.0.0.1:80 transparent icp_port 0 pid_filename /var/run/squid.pid cache_effective_user proxy cache_effective_group proxy error_directory /usr/local/etc/squid/errors/English visible_hostname localhost cache_mgr sniperpr@gmail.com access_log /var/squid/log/access.log cache_log /var/squid/log/cache.log cache_store_log none shutdown_lifetime 3 seconds # Allow local network(s) on interface(s) acl localnet src  192.168.1.0/255.255.255.0 uri_whitespace strip cache_dir [color]diskd[/color] /var/squid/cache 150000 16 256 cache_mem 16 MB maximum_object_size 4096 KB minimum_object_size 0 KB [color]cache_replacement_policy heap[/color] [color]LFUDA[/color] [color]memory_replacement_policy[/color] [color]heap GDSF[/color] offline_mode off # No redirector configured # Setup some default acls acl all src 0.0.0.0/0 acl localhost src 127.0.0.1 acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 443 1025-65535 acl sslports port 443 563 443 acl manager proto cache_object acl purge method PURGE acl connect method CONNECT acl dynamic urlpath_regex cgi-bin \? cache deny dynamic http_access allow manager localhost http_access deny manager http_access allow purge localhost http_access deny purge http_access deny !safeports http_access deny CONNECT !sslports # Always allow localhost connections http_access allow localhost request_body_max_size 0 KB reply_body_max_size 0 allow all delay_pools 1 delay_class 1 2 delay_parameters 1 -1/-1 -1/-1 delay_initial_bucket_level 100 delay_access 1 allow all # Allow local network(s) on interface(s) http_access allow localnet # Custom options [color]cache_swap_low 85[/color] cache_swap_high 99 # Default block all to be sure http_access deny all cache_dir diskd /var/squid/cache 150000 16 256 cache_replacement_policy heap LFUDA memory_replacement_policy heap GDSF cache_swap_low 85 Please note that the red font. Next to explain why such settings. Squid Cache: Version 2.6.STABLE5 configure options: '--bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid' '--localstatedir=/usr/local/squid' '--sysconfdir=/usr/local/etc/squid' '--enable-removal-policies=lru heap' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-epoll' '--enable-auth=basic ntlm digest' '--enable-basic-auth-helpers=NCSA PAM MSNT SMB LDAP YP' '--enable-digest-auth-helpers=password ldap' '--enable-external-acl-helpers=ip_user session unix_group wbinfo_group ldap_group' '--enable-ntlm-auth-helpers=SMB' '--enable-storeio=ufs [color]diskd[/color] null' '--enable-delay-pools' '--enable-ssl' '--with-openssl=/usr' '--enable-wccpv2' '--enable-pf-transparent' '--enable-kqueue' '--enable-err-languages=Azerbaijani Bulgarian Catalan Czech Danish Dutch  English Estonian Finnish French German Greek Hebrew  Hungarian Italian Japanese Korean Lithuanian  Polish Portuguese Romanian Russian-1251 Russian-koi8-r  Serbian Simplify_Chinese Slovak Spanish Swedish  Traditional_Chinese Turkish' '--enable-default-err-language=English' '--prefix=/usr/local' 'i386-portbld-freebsd6.1' 'LDFLAGS= -L/usr/local/lib -rpath=/usr/lib:/usr/local/lib -L/usr/local/lib' 'CFLAGS=-O2 -fno-strict-aliasing -pipe  -I/usr/local/include -I/usr/include' 'CPPFLAGS=' 'host_alias=i386-portbld-freebsd6.1' 'build_alias=i386-portbld-freebsd6.1' 'target_alias=i386-portbld-freebsd6.1' 'CC=cc' The red font, in the squid-rc3 pfsense 1.2 compiler parameter. Why should this parameter? What is the origin? The map to explain why "diskd"    –enable-storeio=ufs diskd nul Thanks Squid: The Definitive Guide By Duane Wessels How to edit / etc / fstab? Mount-u-w / Chmod Ok [image: 1.png] [image: 1.png_thumb] [image: 2.PNG] [image: 2.PNG_thumb]
  • Comparable MRTG! Teach you how to use BanawidthD

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    L
    @sullrich: Can you submit a patch with these package changes? If the choice is the LAN interface, can be monitored submit the. And the WAN can monitor the flow of that port. I would like to test concrete, after all, just on the line BanawidthD day. [image: 12.PNG] [image: 12.PNG_thumb]
  • Lightsquid Install Failed

    Locked
    12
    0 Votes
    12 Posts
    6k Views
    D
    May be Lighttpd settings have changes or different webGUI port (not 80)?
  • Packages squidguard ??

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    D
    Please check update. Modifications: supporting GUI-port changes (only need Apply) background blacklist rebuilding Need check owner /var/db/squidGuard files after installation and after blacklist download
  • DNS server on multi wan

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    S
    Not currently.  It can only bind to one IP address.
  • Should I use Snort?

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    G
    unfortunately I'm not sure how to do that, or which rules I should or should not use, but I'm sure I could figure it out.
  • Can't get LCDproc package to work.

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    C
    I'll try to be patient then.  :)
  • Reverse Proxy

    Locked
    6
    0 Votes
    6 Posts
    6k Views
    S
    @riogrande100: Would it be an idea to modify a exiting xml, to allow this conf to be writtem, or best practise to use another application, without risking lighttp? I would force the webConfigurator's port to be changed to somethig other than 80 and then fire off a new lighty service just for the reverse proxy.
  • Squid/squidguard Group: Howto ??

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    R
    While using 1.2 RC2 I have found that SquidGuard doesn't always seem to proxy users content correctly, maybe it's the way we configured it in our test. But have looked around, and according to the pfsense wiki squid is currently not working right. http://en.wikipedia.org/wiki/PfSense
  • Ntop bug?

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Snort Problem

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    AhnHELA
    Take a look at this http://forum.pfsense.org/index.php/topic,7028.0.html
  • Install squidguard

    Locked
    21
    0 Votes
    21 Posts
    16k Views
    D
    Uninstall full and install from normal package list (pfsense.com server).
  • IMSpector on PFSense 1.0.2 BETA

    Locked
    7
    0 Votes
    7 Posts
    10k Views
    R
    @josempinto: Hi,   I have installed the imspector package with PFSense V.1.2 RC3 (and tested also on RC2) and it doesn't seems to work…  by that i meant, i don't see any logging showing and i have done a couple of check/uncheck to restart... help???? Please do not post the same question in multiple threads. If you had read this thread you would have seen how to run imspector in debug mode. Do this and see if the clients are connection and if the messages are being shown.
  • Snort difficulties

    Locked
    13
    0 Votes
    13 Posts
    18k Views
    D
    @Hilozer: Change /usr/local/www/snort_download_rules.php lines 182 and 183. $snort_filename = "snortrules-snapshot-CURRENT{$premium_subscriber}.tar.gz"; $snort_filename_md5 = "snortrules-snapshot-CURRENT.tar.gz.md5"; To $snort_filename = "snortrules-snapshot-2.6{$premium_subscriber}.tar.gz"; $snort_filename_md5 = "snortrules-snapshot-2.6.tar.gz.md5"; The best fix would probably be to update the snort package with the latest version of snort. However, this seems to allow the current version to work properly. It would be shame to fix it for manual updates only to have it replaced on the next auto-update.  Therefore, there is another place to change as well: /usr/local/pkg/snort_check_for_rule_updates.php The change is completely analogous to the quoted change and shouldn't need additional explanation. Dave
  • Help! problem with squid cache

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    E
    I re-installed 1.2-RC3 and squid and it seems to be working now.
  • What happend to netio?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    E
    The package iperf does pretty much the same thing.
  • Squid NTLM

    Locked
    3
    0 Votes
    3 Posts
    4k Views
    C
    I would really like to see a squid winbind ntlm package. How much is it worth ?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.