Subcategories

• Cache/Proxy

  Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

  3.8k
  Topics
  20.6k
  Posts

  A

  @viragomann yeah, it was enough of a nightmare to get this VPN setup originally, anytime you involve TCS in something IT related you can add an extra hundred hours!

• IDS/IPS

  Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

  2.2k
  Topics
  15.7k
  Posts

  B

  @Alessiottero said in Uknown VLAN Traffic with Suricata IPS Inline Mode:

  Ciao @bmeeks, thank you again, I have write right know on the Suricata forum!

  If you are interested this is the topic.

  Thank you very much again, we will update soon I hope!

  I checked on your Suricata forum post. Excellent way to phrase your question. It leaves the focus on why that rule would trigger and does not muddy up the water by mentioning pfSense.

  There are several key Suricata developers that frequent the forum. Hopefully one of them will answer soon. I am curious myself about the answer to your question.

• Traffic Monitoring

  Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

  559
  Topics
  2.7k
  Posts

  M

  @periko I agree with you. Most if not all firewalls today provide some ability to peak into what kind of traffic is flowing through your device.

• pfBlockerNG

  Discussions about the pfBlockerNG package

  2.6k
  Topics
  19.4k
  Posts

  G

  @tibere86 said in Null blocking SERVFAIL:

  When I have NULL BLOCK enabled, DNSBL v6 returns SERVFAIL instead of ::

  Hummmm.

  I just tested with "006.freecounters.co.uk" which is part of DNSBL_ADs_Basic.

  When I test with

  ca23059c-ccd3-441a-9434-b918db763d10-image.png
  I saw also a "ServFail".

  Then I started to "play" with the python script ... and now I see :
  (adding logs lines on what I think are interesting places ), like on line 1614:

  log_info("{} Blocked {} Returned IP {} {}".format(q_name, b_ip, q_type_str, q_type))

  I saw :

  <30>1 2025-01-29T17:56:09.484605+01:00 pfSense.hf.tld unbound 13346 - - [13346:0] info: 006.freecounters.co.uk Blocked :: AAAA 28

  98421505-6341-4765-9a80-f261744be26f-image.png

  ... But then humm again.
  If unbound return "::" then what can the browser do with this ?
  It should be the, to be useful, an IPv6 GUA of pfSense .....
  And &@/{#, as I'm in null blocking mode ...
  Done. back to Web server mode.

  Now I see :

  info: 006.freecounters.co.uk Blocked ::10.10.10.1 Returned IP AAAA 28

  But https://[::10.10.10.1]:443 doesn't really work.

  Also : https://serverfault.com/questions/698369/what-is-the-ipv6-equivalent-of-0-0-0-0-0

• UPS Tools

  Discussions about Network UPS Tools and APCUPSD packages for pfSense

  90
  Topics
  2.3k
  Posts

  G

  @rdibley said in Linefeed in pfSense email notifications (with Network UPS Tools):

  So one more question: if most people don't use the Advanced section (and the users.conf is blank), how does a secondary system connect to the primary? Is it that most people don't define a user/password for monitoring, but that the primary is just open to any secondary system that might want to connect?

  I'm using it 😊

  b852fa0b-7f4c-4461-8c73-3867487db57f-image.png

  The third entry is for my Synology NAS :

  And the NAS side :

  c67da02f-ce7a-456c-a7e1-fede22ed4b6b-image.png

  and done.

  I've also installed "Windows NUT Client" on two PC's nearby.
  Example : PC 1 with user name "pcrecep1" and password "secret1" :

  e41ec81d-1698-431f-98f9-17e142c93132-image.png

  Works fine also.
  So I've 4 devices protected with one big 1000 VA APC UPS, where pfSense is the NUT 'server' as it has a USB cabled UPS hooked up to it, and now 4 devices are controlled by this UPS instead of one.

• ACME

  Discussions about the ACME / Let’s Encrypt package for pfSense

  484
  Topics
  2.7k
  Posts

  G

  Make sure this :

  89177f2d-3cdf-4a1f-b7eb-39878b32631d-image.png

  is unchecked.
  Checked means , after Mai 7, 2025 : renewal error.

  Mail from Letsencrypt (2025-01-29) :

  .....
  The certificates for the hostnames below (issued by the Let's Encrypt account associated with this email address) use a feature called "OCSP Must Staple." We are ending our support for that feature (https://letsencrypt.org/2024/12/05/ending-ocsp), along with our support for OCSP in general, and replacing it with Certificate Revocation Lists (https://letsencrypt.org/2022/09/07/new-life-for-crls).

  After May 7th, 2025, requests for certificates with "OCSP Must Staple" will fail.

  To ensure your certificates continue to automatically renew, please change your ACME client configuration to not request OCSP Must Staple.
  ....

• FRR

  Discussions about the FRR Dynamic Routing package on pfSense

  283
  Topics
  1.2k
  Posts

  M

  @michmoor said in FRR 10 coming with script support ?:

  Yep yep that's right. Sorry for confusing issues.

  Np, we need more people engaged in this, FRR is a great software but it is not working smoothly with pfsense IPsec VTIs.

• Tailscale

  Discussions about the Tailscale package

  77
  Topics
  436
  Posts

  E

  @atlmcw

  I had no issues.

• WireGuard

  Discussions about WireGuard

  649
  Topics
  3.4k
  Posts

  P

  Was looking through the system logs around the last failure point in time, and may have found a clue.

  The issue with the service/widget appears to happen after reboots of the pfSense appliance.

  any other logs I can look through? there doesn't appear to be package level logging.