Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    perikoP
    @aGeekhere dns_v4_first...have years and they still don't clean the code. But won't affect.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    @NRgia said in Suricata on Pfsense: @bmeeks Thank you for what you did for Snort or Suricata. I'm not sure what you want me to do on Redmine, due to is a bug tracker. My question is for Product Management, which I will ask it here to be public: What is the plan for these 2 packages, Suricata and Snort? Thank you Yes, Redmine is for both bug reports and feature requests. Asking for the Suricata binary to be updated to the latest 7.0.11 version from upstream is a legitimate Redmine request. I would suggest simply asking for the binary version update instead of asking about future Netgate strategy (such as the support plans for the packages). Strategy discussions typically don't get very far because they deal with proprietary information or plans that a company may not want to publicly discuss. Redmine is where the Netgate developer team tracks all the code changes they make for pfSense. They will see Redmine reports much quicker than a forum post.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    dennypageD
    @Leon-Straathof Data retention settings are handled inside of ntopng. Documentation here. Pay attention to the RRD note. Also, if you've turned on some of the slice and dice time series information (is off by default), I'd suggest turning them back off. These balloon the storage requirements and are of little actual use.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    fireodoF
    @tinfoilmatt said in Failed or invalid Mime Type: [application/SIMH-tape-data|0]: (ASN data is IPinfo, not Maxmind) Thats correct but "GeoLite2-Country" is from Maxmind ... (that confused me) I'm considering simply adding "application/SIMH-tape-data" to the list to test. Thats what i tought too ... I'll try when I have the time for it ... Edit: I can confirm - adding "application/SIMH-tape-data" to the list at line 257 in /usr/local/pkg/pfblockerng/pfblockerng.inc did the trick - no more error! Edit: OK, problem resolved but I would like to know, whats the cause for that error! (SIMH-tape-data sounds like a "blast from the past" ...) Thanks a lot!
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    496 Topics
    3k Posts
    jimpJ
    Buypass is shutting down their free ACME service: https://community.buypass.com/t/y4y130p Not sure how many (if any) users may be getting their ACME certificates from Buypass, but it is supported in the package, so that number may be non-zero. If you are getting your certificates from Buypass, now is the time to switch to another CA.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    598 Posts
    E
    Updated CE 2.7.2 to 1.86.4 Changelog pkg add -f https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/tailscale-1.86.4.pkg Freshports
  • Discussions about WireGuard

    693 Topics
    4k Posts
    L
    @boyan1 said in Wireguard Gateway not coming up after reboot.: W Hey man, im trying to make the SITE A use internet of SITE B as you did, but there is no means of making that works. How did you make that works? Could you tell me please? Thanks!
  • pkg-static: Cannot get an advisory lock on a database

    2
    0 Votes
    2 Posts
    528 Views
    GertjanG
    As said here. Also, do a reboot to put things straight.
  • Can't install, reinstall, delete squidgaurd

    2
    0 Votes
    2 Posts
    154 Views
    viktor_gV
    killall -9 pkg-static then try again
  • Can not update or uninstall any packages.

    7
    0 Votes
    7 Posts
    1k Views
    GertjanG
    Same problem ? Same solution ?! See here.
  • RRD_Summary, dates issues

    1
    0 Votes
    1 Posts
    279 Views
    No one has replied
  • Trying to install ntopng, hangs at Writing configuration... done.

    5
    0 Votes
    5 Posts
    844 Views
    G
    @netblues said in Trying to install ntopng, hangs at Writing configuration... done.: @gawainxx Have you tried this? https://docs.netgate.com/pfsense/en/latest/hardware/forcing-a-filesystem-check.html It's working now. Thanks!!! see my above reply.
  • bind dns ipv6 PTR zone and gui options problem.

    4
    0 Votes
    4 Posts
    438 Views
    GertjanG
    @viktor_g said in bind dns ipv6 PTR zone and gui options problem.: BIND Oops. My answer was ... just noise in open space. I'm using the Resolver.
  • FreeRadius with Active Directory and Google authenticator

    1
    1 Votes
    1 Posts
    159 Views
    No one has replied
  • Frezing during package reinstall

    5
    0 Votes
    5 Posts
    694 Views
    hugoeyngH
    Hello. I uninstalled Lightsquid and after this I could reinstall/uninstall/ squidGuard. Solved. Thank you.
  • 0 Votes
    3 Posts
    3k Views
    K
    @Gertjan said in Packages reinstall issue when restoring config in a brand new pfsense installation: @kevindd992002 said in Packages reinstall issue when restoring config in a brand new pfsense installation: ideas Yes, one that works for you right now. Your list :remove right away : Service_Watchdog is it is dangerous, and you're probably not a developer (and even they would not use it). Netgate_Coreboot_Upgrade as this updates Netgate devices only (is Netgate_Coreboot_Upgrade a Netgate device ?). After a pfSense install, make WAN work - and stop there. Install the packages by hand, one after another. Then import your backed up config to finalize the setup. Do a reboot, and you'll be fine. Somewhere on the forum, you'll fuind a reason for why the initial automatic install can fail. It's has something to do with a process that didn't get restarted (or something like that). Sorry, what do you mean "yes, one that works for you right now."? Why is Service_Watchdog dangerous? I have Netgate_Coreboot_Upgrade for the sole reason that I want flashrom installed (I know I can install it manually in the CLI but I want it to keep it this way so that I have a reference in the GUI). Regardless, I am fine with my list, this is simply a home firewall/router :) Your suggestion makes sense but it's just that I had no problems with my other box (same model, APU2C4) when I did this a month ago. That other box even has more packages on top of the list that I posted here. I can install the packages manually (and that's probably what I'll be doing anyways) but I just want to know what's causing this. I have to find that thread you're talking about.
  • Zabbix Proxy 4.2 Missing after pfSense v2.4.5-p1 update

    5
    0 Votes
    5 Posts
    906 Views
    viktor_gV
    @DaddyGo said in Zabbix Proxy 4.2 Missing after pfSense v2.4.5-p1 update: @zimmy6996 because EOL!? https://www.freshports.org/net-mgmt/zabbix42-agent [image: 1594576965341-37bdb3ec-e236-4fb0-8f40-581e52a65bb7-image.png] Correct, See https://redmine.pfsense.org/issues/10688
  • NGINX as a Load balancer

    2
    0 Votes
    2 Posts
    208 Views
    jimpJ
    There are no current plans to do that internally, but if someone wants to write up a package for it, we'd certainly be open to reviewing it for inclusion.
  • rpz 'rpz.local' is not a master or slave zone crash BIND

    5
    0 Votes
    5 Posts
    3k Views
    viktor_gV
    See https://redmine.pfsense.org/issues/10445#note-3
  • Traffic Total not working

    2
    0 Votes
    2 Posts
    377 Views
    RicoR
    Did you try the Reset Graphing Data button? -Rico
  • New SG-1100 can't install packages from the web UI

    2
    0 Votes
    2 Posts
    308 Views
    J
    Well it turns out there's something with the web UI that doesn't like Firefox. Chrome seems to work just fine.
  • 0 Votes
    8 Posts
    909 Views
    nzkiwi68N
    I too am having this problem. with 2.4.5-p1 I can't cleanly upgrade Squid or FRR, they just hang, even when left for 30+ minutes. I've tried rebooting, uninstalling the packages (that mostly hangs too). In the end I tried; # pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade and # pkg-static upgrade -f But, guess what, that hung also once it got to installing the packages.
  • pfsesne - freeradius with ldap, a/d and dynamic vlan conf

    1
    1 Votes
    1 Posts
    146 Views
    No one has replied
  • Avahi Help!

    19
    0 Votes
    19 Posts
    2k Views
    W
    it looks like everything IS working...discovery app return a number of things from the IOT vlan while I was on my trust network. Thanks for putting up with and helping a newbie.
  • Help with configuring NUT master and slave

    1
    0 Votes
    1 Posts
    370 Views
    No one has replied
  • Did updater get broken?!?!

    2
    0 Votes
    2 Posts
    263 Views
    GertjanG
    @OverLabyss said in Did updater get broken?!?!: I am running the 2.4.5 train Download an original version from here : https://www.pfsense.org/download/ Also : what about reading, for example, this : https://docs.netgate.com/pfsense/en/latest/install/upgrade-troubleshooting.html @OverLabyss said in Did updater get broken?!?!: Did the updater get broken We'll be having a hard time explain why thousands did upgrade since "1/11". @OverLabyss said in Did updater get broken?!?!: snapshots are only available for 2.5.0 (called 'the bleeding edge'). @OverLabyss said in Did updater get broken?!?!: hasn't updated since 1/11 At least two major versions came out, and you stay silent ? Btw : For example : https://www.netgate.com/blog/pfsense-2-4-5-release-p1-now-available.html - read the fat lines.
  • AVAHI and Sonos

    2
    0 Votes
    2 Posts
    2k Views
    SetarcosS
    Check your firewall logs for the corresponding interfaces and you will likely see UDP multicast traffic on port 5353 still being blocked. It looks like * doesn't include multicast destinations. I found another forum poster had added an alias for something like this, recreated it, and it solved my problems with Avahi traffic being blocked: [image: 1592896841426-51f6b17e-897c-4b59-8b6c-a2bb50603d3d-image.png]
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.