Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    D
    Retested on 24.11-RELEASE (amd64) all seems to work. So it seems right to file a bug for this issue.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    S
    So since there is no version 25.03. There is an official 25.07 now but only get a 7.08.2 what happen to the rest up to Suricata 7.0.10 or 7.0.12?
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K
    @pulsartiger The database name is vnstat.db and its location is under /var/db/vnstat. With "Backup Files/Dir" we are able to do backup or also with a cron.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    B
    Hi, I upgraded my pfSense to 25.07-RELEASE and with it also pfBlockerNG to 3.2.7, but now the pfb_dnsb service no longer starts... I tried a “force_update” and reboots. I also tried reinstalling pfBlockerNG. When starting the service manually with /usr/local/etc/rc.d/pfb_dnsbl.sh start I get 025-08-05 18:17:28: (/wrkdirs/usr/ports/www/lighttpd/work/lighttpd-1.4.76/src/network.c.604) bind() 10.255.255.254:443: Can't assign requested address 10.255.255.254 is the DNSBL Webserver address... Any ideas? Thx! :)
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG
    @EChondo What's your pfSense version ? The instructions are shown here : [image: 1753262126227-1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png] A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate. @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy: I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess. No need to wait x days. You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    J
    @div444 i'm finding the same - did you find a solution or did reverting fix it? Hoping there is a patch fix or something to get it working! Rather not rollback if i can avoid it
  • Discussions about the Tailscale package

    90 Topics
    583 Posts
    L
    Any ideas to why I get this error? Im running pfsense CE 2.8.0-RELEASE (amd64) pkg add https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2_1.pkg pkg: An error occured while fetching package
  • Discussions about WireGuard

    692 Topics
    4k Posts
    F
    Hi again, to be honest: I guess, I did not remember exactly what I did 2 years ago. May I was mistaken by the interface name opt2 because the SG-3100 has a physical port OPT1 and I mixed up physical and virtual names. The goal was to use 2 different tunnels, one for the mobile clients and one for the site-2-site connection. And now all is running in that way . Regards
  • Suricata 1.4.6 pkg v1.0.2 – Update Release Notes

    41
    0 Votes
    41 Posts
    7k Views
    bmeeksB
    @jflsakfja: Bug: Blocked tab: Warning: inet_pton(): Unrecognized address TCP in /usr/local/www/suricata/suricata_blocked.php on line 247 Warning: inet_pton(): Unrecognized address TCP in /usr/local/www/suricata/suricata_blocked.php on line 247 Rule that caused it: files.rules: 1:22 FILE pdf claimed, but not pdf <<< fires up when spiders (eg googlebot) try to download a part of a pdf, therefore DELETE UPSTREAM (part after <<< is in the upcoming suricata topic) It also breaks the alerts tab, with text all over the place. Thanks for the report.  I will add this to my list.  I'm holding the next Suricata hoping the Ports tree on FreeBSD will soon update to the 2.0.x Suricata branch. Bill
  • Squid not working in no-transparent mode

    5
    0 Votes
    5 Posts
    1k Views
    S
    KOM I use the no-transparent mode to block internet connection  in a user
  • Snort alerts - surely there's more?

    14
    0 Votes
    14 Posts
    5k Views
    bmeeksB
    @fearnothing: OK, posts since last noob question just got reset back to zero  :-[. Now it's beginning to make sense. Tutorials are very good at saying "Do A, then B, then C" but when you ask them why they tend to just go quiet. [/quote] Don't despair.  There are lots of knowledgeable folks here ready to help.  None of us know it all.  I read just today a quote that is appropriate – "everyone you meet knows something you do not".  A corollary would be "all of us are noobs about lots of stuff"… ;).  The whole IDS/IPS world can be a confusing maze to navigate.  Add to that all the wonderful open source options out there and it can be daunting.  One downside of open source software is most developers are happier writing and tweaking code than producing usable documentation.  I include myself in that characterization... :-[ That last comment reminds me to mention that an update to the documentation for Snort and Suricata on the pfSense Doc Wiki is needed.  I started some updates for Snort a month or two back, but have not gotten anything posted for Suricata yet.  If there is a willing user out there, any help would be welcomed.  You can contact the pfSense guys to get a Wiki account that allows updating. Bill
  • IMSpector 20111108 pkg v 0.3.2 MySQL Logging Problem

    6
    0 Votes
    6 Posts
    1k Views
    N
    Install Imspector from package, and then install it from shell with pkg_add . depend on your Mysql Server , you need to install the proper version of mysql_client. pkg_add will not change version of package, just install it manually with freeBSD Package manager.
  • Snort not restarting after rules update - 2.1.3- 2.9.6.0 pkg v3.0.8

    4
    0 Votes
    4 Posts
    1k Views
    BBcan177B
    I have intermittent issues with Snort Interfaces Exiting on Error, usually following a Rules Update. When it happens it happens to several boxes at a time. But the logs don't show very much information to help diagnose why its failing. I think it would be good to have a "debug" option where more details logs could be used as required to help diagnose issues better. All of my boxes are on Static so they don't renew their addresses.
  • Pfblocker and emails

    7
    0 Votes
    7 Posts
    2k Views
    BBcan177B
    @foresthus: How many lists can be added to pfblocker? Whre is the limit? I haven't seen any information to state that it has a limit on the number of Lists? I have a box with about 30 main lists (on the "List" Tab) and within the lists, I have multiple lists per. Only thing you need to watch for is the max number of IPs in the Tables. Advanced:Firewall:Firewall/NAT - Firewall Maximum Table Entries Maximum number of table entries for systems such as aliases, sshlockout, snort, etc,        combined. Note: Leave this blank for the default.
  • [Suricata 1.4.6 v1.0.2] Streaming Content issues

    5
    0 Votes
    5 Posts
    15k Views
    ?
    Those rules were evaluated as false positives on "closed" networks (limited number of users), all trusted. They mostly fired on wifi clients, hence the "wifi clients moving around" comment. That "category" of rules (weird traffic) was generally either caused by a wifi client moving from point A to point B and missing a couple of packets OR more rarely by suricata itself, that is after suricata has cleared the states for a blocked host. Technically the firewall has no record of an active connection, which triggers the "weird traffic" category. As I said, false positives. Disable. Note: By category I'm talking about my categories. There are 3 categories: 1)Rules that should have their creators exiled from earth, subcategories idiotic rules (simple http request), stupidly outdated rules (firefox 3.x rules). 2)Weird traffic rules, includes "unknown" traffic, or theoretically impossible traffic (in theory, theory and practice are equal. Practically they are not) and finally 3) Rules that their creators should be honored with nobel prices and generally thought of as humanity's $deities.
  • Help with stuck/botched Avahi install

    1
    0 Votes
    1 Posts
    683 Views
    No one has replied
  • New packages: Zabbix-2 Agent and Zabbix-2 Proxy

    10
    0 Votes
    10 Posts
    18k Views
    R
    I also want to pipe in and say Thank You! I also have it in a working environment. It works perfectly. Now if I can only get it to work on FreeNAS…....... :-\
  • NTLM Auth - Dansguardian broken package 2.12.0.3_2 pkg v.0.1.9 ?

    2
    0 Votes
    2 Posts
    994 Views
    E
    I give up to use Dansguardian on PFsense since the actual package don't work the NTLM plugin that is a requisite to my implementation. I'm using squidguard now.
  • Stopping NTOP

    2
    0 Votes
    2 Posts
    704 Views
    M
    Ok, I've resolved cd /usr/local/etc/rc.d/ touch ztop.sh chmod +x ztop.sh vi ztop.sh put this line in the file: /usr/local/etc/rc.d/ntop.sh stop save and reboot
  • 0 Votes
    1 Posts
    1k Views
    No one has replied
  • Squid3-dev + pfsense 2.1.3 release

    1
    0 Votes
    1 Posts
    725 Views
    No one has replied
  • 0 Votes
    4 Posts
    1k Views
    T
    Thx finalcut, that runs like a charm  :)
  • I cannot install package in pfsense how i can solve this problem

    1
    0 Votes
    1 Posts
    635 Views
    No one has replied
  • Lightsquid Cron problems

    3
    0 Votes
    3 Posts
    1k Views
    F
    I guess the problem happends when users like me disable the Hard disk cache system (value null instead of ufs) I dont don't use squid for caching things , only keep record of activity. If I dont want a hard disk cache what shall I do to remove the warnings?
  • PfBlocker in Alias Only Mode - Help

    7
    0 Votes
    7 Posts
    2k Views
    W
    Thanks Rick.
  • NUT + APC Back-UPS CS 350 not working

    3
    0 Votes
    3 Posts
    2k Views
    M
    Hi, thx for answer. I try all APC combinations settings, nothing work. my NUT settings (i want use only local usb ups): [image: Sn%C3%ADmka.JPG_thumb] [image: Sn%C3%ADmka.JPG]
  • Reverse-squid OWA,activesync attachement problem

    1
    0 Votes
    1 Posts
    867 Views
    No one has replied
  • Tincd and nat

    4
    0 Votes
    4 Posts
    2k Views
    P
    well this worked.  thanks.  I forgot about the interface assign page…
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.