Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Request for Continued Support of Squid Package Dear Netgate Team, Could we please continue to support the Squid package? The upstream project has already resolved the known security issues, and it appears the main task remaining is updating the package to accommodate the recent PHP changes affecting the status page and address the decode issue. I’m unsure how to address this on my end and would greatly appreciate any guidance. Has anyone else looked into this, or is there a fix currently in progress? Thank you for your time and support. Jonathan Lee
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    @NRgia said in Suricata on Pfsense: @bmeeks Thank you for what you did for Snort or Suricata. I'm not sure what you want me to do on Redmine, due to is a bug tracker. My question is for Product Management, which I will ask it here to be public: What is the plan for these 2 packages, Suricata and Snort? Thank you Yes, Redmine is for both bug reports and feature requests. Asking for the Suricata binary to be updated to the latest 7.0.11 version from upstream is a legitimate Redmine request. I would suggest simply asking for the binary version update instead of asking about future Netgate strategy (such as the support plans for the packages). Strategy discussions typically don't get very far because they deal with proprietary information or plans that a company may not want to publicly discuss. Redmine is where the Netgate developer team tracks all the code changes they make for pfSense. They will see Redmine reports much quicker than a forum post.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    dennypageD
    @Leon-Straathof Data retention settings are handled inside of ntopng. Documentation here. Pay attention to the RRD note. Also, if you've turned on some of the slice and dice time series information (is off by default), I'd suggest turning them back off. These balloon the storage requirements and are of little actual use.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    fireodoF
    @tinfoilmatt said in Failed or invalid Mime Type: [application/SIMH-tape-data|0]: (ASN data is IPinfo, not Maxmind) Thats correct but "GeoLite2-Country" is from Maxmind ... (that confused me) I'm considering simply adding "application/SIMH-tape-data" to the list to test. Thats what i tought too ... I'll try when I have the time for it ... Edit: I can confirm - adding "application/SIMH-tape-data" to the list at line 257 in /usr/local/pkg/pfblockerng/pfblockerng.inc did the trick - no more error! Edit: OK, problem resolved but I would like to know, whats the cause for that error! (SIMH-tape-data sounds like a "blast from the past" ...) Thanks a lot!
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    496 Topics
    3k Posts
    jimpJ
    Buypass is shutting down their free ACME service: https://community.buypass.com/t/y4y130p Not sure how many (if any) users may be getting their ACME certificates from Buypass, but it is supported in the package, so that number may be non-zero. If you are getting your certificates from Buypass, now is the time to switch to another CA.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    598 Posts
    E
    Updated CE 2.7.2 to 1.86.4 Changelog pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.86.4.pkg Freshports
  • Discussions about WireGuard

    693 Topics
    4k Posts
    L
    @boyan1 said in Wireguard Gateway not coming up after reboot.: W Hey man, im trying to make the SITE A use internet of SITE B as you did, but there is no means of making that works. How did you make that works? Could you tell me please? Thanks!
  • Problem, snort block google server

    5
    0 Votes
    5 Posts
    2k Views
    C
    thankyou i try.
  • bug in web interface for bind package

    17
    0 Votes
    17 Posts
    1k Views
    A
    @serbus very interesting comment John, in vi (ssh), I can see the ^M, but not with the GUI editor, just to check I selected into the editor, and copied that data back into vi again, no ^M
  • FreeRadius rlm_rest.so not found

    2
    0 Votes
    2 Posts
    769 Views
    GertjanG
    Hi, Yep , you're right, /usr/local/etc/raddb/mods-available/rest exists, so, when symlinking it it shoudl work ..... if the needed lib existed in the pfSense FreeRadius package. Or, it doesn't. What about checking the main FreeBSD 11.3 (4 ?) package collection ? The lib comes from there, "as is".
  • TFTP package only works through the GUI

    5
    0 Votes
    5 Posts
    2k Views
    viktor_gV
    The latest pkg improvements: [image: 1600949390368-screenshot-from-2020-09-24-15-09-21.png]
  • zabbix proxy issues?

    1
    0 Votes
    1 Posts
    439 Views
    No one has replied
  • Fetching package: connection reset by peer

    89
    0 Votes
    89 Posts
    18k Views
    F
    It started working after I changed those settings and unbound restarted. This was the only option that changed.
  • NUT and APC SMT1500RM2U?

    3
    0 Votes
    3 Posts
    560 Views
    M
    Alright. Second never mind. Turns out it works with both NUT and apcupsd. Looks like I just plugged the UPS cable into an usupported USB3 port. When I moved it to one of the USB2 ports, everything seems to be working again.
  • packages for 2.2.16 version

    2.2.16
    11
    0 Votes
    11 Posts
    950 Views
    johnpozJ
    see how easy stay current.. 2.5 will be out sometime here not too long.. I would think.. So make sure you updated to it before 3.6 is out ;)
  • 0 Votes
    2 Posts
    339 Views
    J
    I changed the logging to level 4 and can not see the correct ip, Issue resolved
  • Modification of /usr/local/etc/rc.d/tftpd.sh What can go wrong?

    3
    0 Votes
    3 Posts
    561 Views
    viktor_gV
    Feature request created: https://redmine.pfsense.org/issues/10893
  • TFTP server

    10
    0 Votes
    10 Posts
    3k Views
    N
    In case someone comes here looking for solution via search engine continue here: https://forum.netgate.com/topic/156706/modification-of-usr-local-etc-rc-d-tftpd-sh-what-can-go-wrong
  • pfBlockerNG DNSBL Feeds and EasyList no default list?

    4
    0 Votes
    4 Posts
    1k Views
    J
    @nasheayahu said in pfBlockerNG DNSBL Feeds and EasyList no default list?: Okay thanks, I shall do that. Can I save my current settings I've done so far and reload them or I would just have to start over? You should be able to save your settings.
  • LCDproc on HP PROCURVE MSM760?

    1
    0 Votes
    1 Posts
    192 Views
    No one has replied
  • LCDproc on Watchguard XTM 5 series with pfSense 2.4.4

    30
    0 Votes
    30 Posts
    5k Views
    stephenw10S
    Unless you have a load of packages it should pass more than that, especially if you've replaced the CPU. But this is not the right thread for that discussion, better to open a new thread in Hardware or General. Steve
  • Status_Traffic_Totals Loading Slow

    1
    0 Votes
    1 Posts
    195 Views
    No one has replied
  • Finding pfSense on WAN, using Zeroconf

    2
    0 Votes
    2 Posts
    447 Views
    GertjanG
    @cmcqueen said in Finding pfSense on WAN, using Zeroconf: I access the pfSense web config via its WAN interface (on my LAN Not a good test test set up. You should bring a collection of devices, if not all of them, - your "test environment" - and hook them all up to a LAN on pfSense. Then test that LAN segment - and pfSense. You'll be having a router-after-router setup which is for outgoing (== Internet) traffic completely transparent. Making WAN accessible is not part of real set up. The exception might be : testing a NAT rule (while IPv4 lasts). "Zeroconf" (whatever it actually is) needs ports to be open and/or redirected to some LAN (pfSense) based device with a running service that implements Zeroconf. That will normally never be the case as you do not want the Internet to "Zeroconf" your installation. Keep in mind that pfSense is a firewall and router : nothing from a WAN perspective can be seen. Shut down the firewall part, define routes on your main LAN's router (the one that hands out a WAN IP to pfSense) and set up pfSEnse as a basic router. @cmcqueen said in Finding pfSense on WAN, using Zeroconf: how can I find the pfSense address? If the initial LAN works well, the DHCP (client) request made by pfSense to the upstream ISP router registers it's DNS name 'pfsense' into the upstream LAN DNS (your ISP router). So, as soon as it is powered on, you could use it's name : [image: 1599028033505-cb2465ae-5965-4e8c-9f83-e2045b3c61a7-image.png] Typically, when you type ping pfsense on a PC on the ISP LAn, it (the ISP router) would resolve 'pfsense' to pfSense's IP first, and then starts to ping to this IP. But nothing will happen ... no reply. You have to add a firewall rule on the pfSense WAN interface so it can actually receive these ICMP requests - and thus reply.
  • squidGuard not upgrading

    9
    0 Votes
    9 Posts
    795 Views
    H
    Running on 2.4.5-RELEASE-p1 Same problems again trying to upgrade squidGuard to 1.16.18_7 I think I am giving up trying to update these packages (squid and squidGuard) Had a hard time even uninstalling them. The best I can tell 0. reboot Dashboard - Services Status - stop right away (c-icap, Clamd and squid) uninstall Watchdog uninstall squidGuard uninstall squid reboot
  • (No) Available Packages

    5
    0 Votes
    5 Posts
    531 Views
    GertjanG
    Also do some checks using these : pfsense manual package maintenance
  • Possible bug in Arpwatch

    1
    0 Votes
    1 Posts
    158 Views
    No one has replied
  • Samba package

    4
    1 Votes
    4 Posts
    709 Views
    H
    the points in setting up a separate server: -it's not a massive security risk -it's faster, safer & easier to setup a new VM, then it is to fuck with your only way out to the internet
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.