pfSense Packages

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Subcategories

Cache/Proxy

Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

2321
Topics

14012
Posts

btw I would strongly recommend against running in transparent mode. Too many issues and hassles with https sites. IMO it's much better to run explicit and use WPAD to let devices autodiscover the proxy on their own. https://doc.pfsense.org/index.php/WPAD_Autoconfigure_for_Squid I looked around for your problem and found these: https://www.linuxquestions.org/questions/linux-server-73/tag_none-409-connect-squid-3-5-20-a-4175620518/ http://squid-web-proxy-cache.1019090.n4.nabble.com/Intermittent-409-Error-to-google-com-td4683329.html
IDS/IPS

Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

1106
Topics

6969
Posts

H

As of now I only have the pass list enabled for External Net. Do I also need to enable it on Home Net and Pass List?
Traffic Monitoring

Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

267
Topics

1427
Posts

C

Hello I am using pfsense 2.4 with squid and squidguard, i cant block extensions like .exe on my browser . i use this code (./..(exe)) and its no use. then i tried (./..(asf|wm|wma|wmv|zip|rar|cab|mp3|avi|mpg|swf|exe|mpeg|mp.|mpv|mp3|wm.|vpu)) and paste under Target categories and regular expression but its still allowing downloads How to block downloads using pfsense and squid . thanks
pfBlockerNG

Discussions about the pfBlockerNG package

782
Topics

7165
Posts

Did you disable pfblockerNG before removing the package? You could try to uncheck both, save, then remove the package.
ACME

Discussions about the ACME / Let’s Encrypt package for pfSense

130
Topics

837
Posts

@jimp said in Feature Idea: scheduled rule for acme.sh certificate process: I'm sure there is a way but it hasn't been something directly on my todo list for ACME yet. If you already have port 80 forwarded somehwere, the easiest thing to do is let ACME glom onto that and use sftp to push the ACME challenge/response files on that web server. HAProxy may also help here. If you must do standalone mode, one tactic you can do is to bind standalone mode to a weird port on localhost that nothing else will use. Then setup a NAT rule on WAN without an automatic firewall rule to forward WAN:80 to localhost:yourport. Then setup a schedule to activate a firewall rule for the 15 minute block around when the check will happen. In an ideal world, everyone would use DNS validation instead, but... It would be really helpful to consider a feature when Acme is listening to an odd port and NAT/WF Rule is enabled/disabled only when Acme needs this check (for standalone). Could be a check box on general tab something like "auto enable NAT on port: xxx"

pfSense Packages

V

SSL-Explorer
• varruss

4

0
Votes

4
Posts

3634
Views

F

You also have OpenVPN.
C

For_throttled_binary squid its not working
• camil

2

0
Votes

2
Posts

1808
Views

S

Sorry, I don't follow. Can you explain what you mean?
L

Transparent Squid and Traffic Shaping!!
• Leoandru

2

0
Votes

2
Posts

4942
Views

S

Bravo! Thats awesome!
S

Squid Installation Error
• sterilegenie

12

0
Votes

12
Posts

5152
Views

S

Ok I finally got around to installing the squid package but im having a bit of trouble getting it to work. I set it up for "transparent mode" but get an "access denied" output. Am I missing something? I was under the impression that no other configuration was needed when using squid in "transparent mode". Feb 28 09:23:53 squid[68134]: Exiting due to repeated, frequent failures Feb 28 09:23:53 squid[68134]: Squid Parent: child process 68525 exited with status 1 Feb 28 09:23:53 squid[68134]: Squid Parent: child process 68525 started Feb 28 09:23:50 squid[68134]: Squid Parent: child process 68523 exited with status 1 Feb 28 09:23:50 squid[68134]: Squid Parent: child process 68523 started Feb 28 09:23:47 squid[68134]: Squid Parent: child process 68521 exited with status 1 Feb 28 09:23:47 squid[68134]: Squid Parent: child process 68521 started Feb 28 09:23:44 squid[68134]: Squid Parent: child process 68519 exited with status 1 Feb 28 09:23:44 squid[68134]: Squid Parent: child process 68519 started Feb 28 09:23:41 squid[68134]: Squid Parent: child process 68517 exited with status 1 Feb 28 09:23:41 squid[68134]: Squid Parent: child process 68517 started Feb 28 09:23:38 squid[68504]: Squid Parent: child process 68507 started Feb 28 09:23:38 squid[68134]: Squid Parent: child process 68137 exited due to signal 15 Feb 28 09:22:22 squid[67784]: Exiting due to repeated, frequent failures Feb 28 09:22:22 squid[67784]: Squid Parent: child process 68320 exited with status 1 Feb 28 09:22:22 squid[67784]: Squid Parent: child process 68320 started Feb 28 09:22:19 squid[67784]: Squid Parent: child process 68281 exited with status 1 Feb 28 09:22:19 squid[67784]: Squid Parent: child process 68281 started Feb 28 09:22:16 squid[67784]: Squid Parent: child process 68165 exited with status 1 Feb 28 09:22:16 squid[67784]: Squid Parent: child process 68165 started Feb 28 09:22:13 squid[67784]: Squid Parent: child process 68163 exited with status 1 Feb 28 09:22:13 squid[67784]: Squid Parent: child process 68163 started Feb 28 09:22:10 squid[67784]: Squid Parent: child process 68161 exited with status 1 Feb 28 09:22:10 squid[67784]: Squid Parent: child process 68161 started Feb 28 09:22:07 squid[68134]: Squid Parent: child process 68137 started Feb 28 09:22:07 squid[67784]: Squid Parent: child process 67984 exited due to signal 15 Feb 28 09:21:25 squid[67784]: Squid Parent: child process 67984 started Feb 28 09:21:22 squid[67784]: Squid Parent: child process 67787 exited due to signal 15 Feb 28 09:21:00 squid[67784]: Squid Parent: child process 67787 started Feb 28 09:20:51 squid[67373]: Squid Parent: child process 67376 exited with status 0 Feb 28 09:17:47 squid[67030]: Exiting due to repeated, frequent failures Feb 28 09:17:47 squid[67030]: Squid Parent: child process 67394 exited with status 1 Feb 28 09:17:47 squid[67030]: Squid Parent: child process 67394 started Feb 28 09:17:44 squid[67030]: Squid Parent: child process 67392 exited with status 1 Feb 28 09:17:43 squid[67030]: Squid Parent: child process 67392 started Feb 28 09:17:40 squid[67030]: Squid Parent: child process 67390 exited with status 1 Feb 28 09:17:39 squid[67030]: Squid Parent: child process 67390 started Feb 28 09:17:36 squid[67030]: Squid Parent: child process 67388 exited with status 1 Feb 28 09:17:35 squid[67030]: Squid Parent: child process 67388 started Feb 28 09:17:32 squid[67030]: Squid Parent: child process 67386 exited with status 1 Feb 28 09:17:31 squid[67030]: Squid Parent: child process 67386 started Feb 28 09:17:28 squid[67373]: Squid Parent: child process 67376 started Feb 28 09:17:28 squid[67030]: Squid Parent: child process 67033 exited due to signal 15 Feb 28 09:15:59 squid[67030]: Squid Parent: child process 67033 started Feb 28 09:15:43 squid[66701]: Squid Parent: child process 66704 exited with status 0 Feb 28 09:13:42 squid[66701]: Squid Parent: child process 66704 started Feb 28 09:11:49 squid[65989]: Squid Parent: child process 65992 exited with status 0 Feb 28 09:10:01 squid[65989]: Squid Parent: child process 65992 started Feb 28 09:10:00 squid[65849]: Squid Parent: child process 65852 exited with status 0 Feb 28 09:09:34 squid[65849]: Squid Parent: child process 65852 started
L

Spamd - removing incorrect trap in the spamd database
• lawred

3

0
Votes

3
Posts

1980
Views

L

This is box number 2. Box number 1 is the unit that I am unable to install spamd on.
N

Error installing packages
• nexusone

15

0
Votes

15
Posts

6714
Views

M

thank scott, http://www.pfsense.com/~sullrich/1.0-BETA1-TESTING-SNAPSHOT-2-8-06/ is ok, installing packages work ;)
M

Can I install packages without connecting to the Internet?
• masters

4

0
Votes

4
Posts

2378
Views

S

Not at the moment. This will be addressed in 1.1.
S

Interesting SpamD statistics by one of its authors
• sullrich

1

0
Votes

1
Posts

1935
Views

No one has replied
M

New packages
• masters

10

0
Votes

10
Posts

4062
Views

M

Thanks submicron for your help ;) I can't speek English, I speek only Russian, that's why it's wery difficult to me to explain my needs :)
L

Package installation Problems
• lawred

5

0
Votes

5
Posts

2811
Views

L

Remove & rerun don't fit it. There is still the same problem. But there is another problem to: The CPU-usage is permanently on 100%. After reboot the system the usage is normaly (3-5%), but if the system run around a half hour the usage goes up to 100%. On the shell I have run "top" and I have seen that php needs a lot of CPU-power… So long Henry
I

Ntop Help
• Ivako

4

0
Votes

4
Posts

4715
Views

H

I guess that was some kind of memory overuse then somehow. Please report back if that really fixed the issue.
C

Unofficial, Unsupported Cacti Install Guide
• cmb

21

0
Votes

21
Posts

14450
Views

E

@sullrich: This REALLY is not a priority for us. Atleast it isn't for me. Yes I know that this is not a priority for the pfSense team… No problem... I ask only why I can't download mySQL serve package....
W

Enabling package support for Wrap Microdive based system?
• Wookie7

9

0
Votes

9
Posts

3920
Views

B

Yeah, before we removed keyboard from the embedded image the Soekris' boxes booted fine. This is a WRAP bios limitation. What's more interesting is a PC based CF image with video/keyboard enabled. It's unlikely that'll show up anytime soon, but it's more likely than a specialized WRAP only version. –Bill
E

CACTI
• Emab

10

0
Votes

10
Posts

4175
Views

E

@cmb: just posted. http://forum.pfsense.org/index.php?topic=485.0 will this become a package? I don't know, possibly in the future. We're not putting a lot of focus on packages right now, and this will take a little work. Maybe we can see this as a package sometime before 1.1 is released. Thank you!! I'll start to test asap! I'll let you know if I'll have any problems…
M

Start on boot of services without rc file
• Marteze

2

0
Votes

2
Posts

1896
Views

S

The package manager will parse that out and automatically create a startup script in /usr/local/etc/rc.d
L

MOVED: error on firmware page
• lsf

1

0
Votes

1
Posts

1816
Views

No one has replied
E

Packages pfflowd and snmpd
• EmanuelG

3

0
Votes

3
Posts

2103
Views

E

Ok thanks again Scott, I'll be looking for it! :)
N

Keep OpenVPN
• nkr1ptd

4

0
Votes

4
Posts

2327
Views

S

No, I meant have you tried it on pfSense. It exists if you know how to enable it.
S

NTOP updated
• sullrich

2

0
Votes

2
Posts

1916
Views

R

weird… my pfsense beta2 shows ntop Installed: 3.81 ???
A

Adding FreeRadius to Embeded WRAP board? Plz help
• alexus

9

0
Votes

9
Posts

3331
Views

A

ok thanks hoba, thas wjhat i neede… as to the freeradius, it doent need to write anything to itself if it works w/ SQL. Well it writes the temp file that contains the list of connected users, but if you disable it the server will still work... anyway that file is duplicated in acccounting table... so ill see if I get anything working and I let you know how it goes THANKS!
R

Slice dedicated for squid?
• rexster

2

0
Votes

2
Posts

1654
Views

S

Even if you could do this, the code will not handle it ATM. Sorry but there is no real easy way to do this ATM.
E

Using FreeRadius package
• EmanuelG

4

0
Votes

4
Posts

2581
Views

J

here is what i dit to get freeradius working on pfsense beta 1 iso login on the consul or by ssh on the shell give these comands cd /usr/local/etc/raddb ls *.sample you see now a list of files witch had to bechanched to te same name without the .sample mv acct_users.sample acct_users mv clients.conf.sample clients.conf do this for all the files now the last step ee radiusd.conf look for pidfile = chance it to pidfile = /var/run/radiusd.pid press Ctrl and c type in exit now exit agian when you reboot pfsense you will see freeradius is now started and can be used
F

What's the proper way to set up PHP bindings from a package XML?
• fernandotcl

8

0
Votes

8
Posts

3379
Views

S

Yes, we went to a static PHP. However, in beta2 looks like we may be back on a dynamic build.
D

Installed packages - link dissapears…
• Dakhor

1

0
Votes

1
Posts

1808
Views

No one has replied
?

Pfstat
• Guest

2

0
Votes

2
Posts

2292
Views

H

Packages will be adressed again after 1.0 stable is out. The basesystem is the only focus at the current state of developement.
K

Packages without config files silently fail to install
• Kiloman

2

0
Votes

2
Posts

2072
Views

K

Anyways, I hacked it to skip parse_xml_config_pkg if $configfile is unset. The package appears to have installed OK, the RC scripts and binaries are there… I'm just not sure how it's going to start. I suppose I could just SSH in and start it manually from the shell, but that's not really a permanent fix. What's the deal?
M

Squid Package Status
• Myntric

13

0
Votes

13
Posts

7716
Views

?

Yeah, I invested heavily in php related source material over the holiday and I highly recommend the Core PHP book. I know most of the same material is available online, but its sometimes nice to just sit down and go over a chapter and maybe learn a few new ways of doing things or to bone up on the minutia of a particular function.
E

NMap installation failed
• Emab

16

0
Votes

16
Posts

9866
Views

S

NMAP has been marked as broken. We'll get back to it later on.
E

Ntop
• Emab

5

0
Votes

5
Posts

5751
Views

J

ntop package seems particularly buggy at the moment. I have problem acessing it occasionally and to fix it I have to go into ntop settings from PFsense and click on the LAN then click change. Which seems to reset all the stats even though it was already monitoring that. And then the password you set doesn't even work when you get into Ntop. Plus heaps of other stuff. It's hardly worth using, it used to work better back in .90a. I would just wait till after release once someone has done some work on it before trying it again.
F

Packages depending on PHP4 and Apache? [SOLVED]
• fernandotcl

4

0
Votes

4
Posts

3064
Views

F

It's just me and a big misunderstanding, ignore this topic…
J

How to make pfsense packages ??
• jeroen234

2

0
Votes

2
Posts

3272
Views

S

There is not a howto atm. You're best bet is to check out: http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/pkg_config.xml <– Master package manifest And individual packages themselves: http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/packages/
J

10gig filled up in 10 days.
• Jesse7

3

0
Votes

3
Posts

3107
Views

J

I assume it was loging stats for ALL hosts, for example it was logging every ip/website statistics anyone visited. It is anoying when all I want is the LAN ips logged with some basic stats stored like total MB sent/recieved. But for some reason it is no longer giving me the number value beside the graphs either I just get the graphs. Sort given up on ntop.
S

Shaper mask
• sharingzee

2

0
Votes

2
Posts

2309
Views

S

@sharingzee: This is a feature available in Monowall, but not in pfSense. It is the "Mask", which applies the shaper's children pipes individually to each destination and source IP in the LAN. It's something imprescindible when using pfSense to evenly share an Internet connection. Att, SharingZee. PF + Dummynet (m0n0walls shaper) do not work at all together. When you try to queue something with dummynet ALL traffic comes to a halt. This is a huge PFIL hooks freebsd issue and will be a lot of work to get it working.
M

Php4-pfsense
• moo

2

0
Votes

2
Posts

2570
Views

S

@moo: Hi, Is it possible to rebuild the php4-pfsense port that is on cvs withou break anything? That is, without a previous uninstall of the php build installed by default? I would like to do some tests with pear. Thanks Should be … co the directory tools then cd to pfPorts/php4-pfsense && make
M

Packages vs ports
• moo

7

0
Votes

7
Posts

4648
Views

S

@ffugita: @moo: @ffugita: hum… how I do this? Any docs? use the freebsd ports documentation, however, as someone already said… it can be a disaster ;D the problem is: how integrate ports into pfsense? ??? :o I want some more packages into my pfsense (ie: mysql server), but… how? ??? Again, it's not supported. This means nobody is going to hold your hand to make this work.
N

Error when installing packages
• nicon

1

0
Votes

1
Posts

2455
Views

No one has replied
B

Has anyone had any luck with pfflowd?
• blodulv

8

0
Votes

8
Posts

5416
Views

S

@pbs: So … I guess that "in the real world" nobody figured out how to make this PKG working! I think it should be marked as broken. If anyone has suggestion I will be more than happy to test them on my box. It's been marked broken for over a week!
T

Ntop 3.2 memory question
• thinair

6

0
Votes

6
Posts

3969
Views

?

Definitely not enough memory.
S

What about L7?
• sharingzee

2

0
Votes

2
Posts

2709
Views

S

@sharingzee: PFSense w/ Layer-7. Authors needed….
J

Ntop + Rrd but no records/graphs
• Jesse7

4

0
Votes

4
Posts

5386
Views

J

@charles.regan: plugins –> rrdplugins --> Data to Dump --> select Host --> save settings! Yeh I tried that. Didn't work. Reinstalled clean without restoring configuration and it works now. Although now it only has graphs. It used to show a total beside the graphs but that is gone in the new version. Anyone know how to enable the totals or what numbers on the graph now represent the totals. The graphs really arn't so easy to read aye.

Products

Applications

Support

Services

News

Resources

Company

Our Mission

As host of the pfSense open source firewall project, Netgate believes in enhancing network connectivity that maintains both security and privacy. We also believe everyone should be able to afford it.

Subscribe to our Newsletter

Product information, software announcements, and special offers. See our newsletter archive for past announcements.

203 / 204

Cache/Proxy

IDS/IPS

Traffic Monitoring

pfBlockerNG

ACME

SSL-Explorer • varruss

For_throttled_binary squid its not working • camil

Transparent Squid and Traffic Shaping!! • Leoandru

Squid Installation Error • sterilegenie

Spamd - removing incorrect trap in the spamd database • lawred

Error installing packages • nexusone

Can I install packages without connecting to the Internet? • masters

Interesting SpamD statistics by one of its authors • sullrich

New packages • masters

Package installation Problems • lawred

Ntop Help • Ivako

Unofficial, Unsupported Cacti Install Guide • cmb

Enabling package support for Wrap Microdive based system? • Wookie7

CACTI • Emab

Start on boot of services without rc file • Marteze

MOVED: error on firmware page • lsf

Packages pfflowd and snmpd • EmanuelG

Keep OpenVPN • nkr1ptd

NTOP updated • sullrich

Adding FreeRadius to Embeded WRAP board? Plz help • alexus

Slice dedicated for squid? • rexster

Using FreeRadius package • EmanuelG

What's the proper way to set up PHP bindings from a package XML? • fernandotcl

Installed packages - link dissapears… • Dakhor

Pfstat • Guest

Packages without config files silently fail to install • Kiloman

Squid Package Status • Myntric

NMap installation failed • Emab

Ntop • Emab

Packages depending on PHP4 and Apache? [SOLVED] • fernandotcl

How to make pfsense packages ?? • jeroen234

10gig filled up in 10 days. • Jesse7

Shaper mask • sharingzee

Php4-pfsense • moo

Packages vs ports • moo

Error when installing packages • nicon

Has anyone had any luck with pfflowd? • blodulv

Ntop 3.2 memory question • thinair

What about L7? • sharingzee

Ntop + Rrd but no records/graphs • Jesse7

Products

Applications

Support

Services

News

Resources

Company

Our Mission

Subscribe to our Newsletter

SSL-Explorer
• varruss

For_throttled_binary squid its not working
• camil

Transparent Squid and Traffic Shaping!!
• Leoandru

Squid Installation Error
• sterilegenie

Spamd - removing incorrect trap in the spamd database
• lawred

Error installing packages
• nexusone

Can I install packages without connecting to the Internet?
• masters

Interesting SpamD statistics by one of its authors
• sullrich

New packages
• masters

Package installation Problems
• lawred

Ntop Help
• Ivako

Unofficial, Unsupported Cacti Install Guide
• cmb

Enabling package support for Wrap Microdive based system?
• Wookie7

CACTI
• Emab

Start on boot of services without rc file
• Marteze

MOVED: error on firmware page
• lsf

Packages pfflowd and snmpd
• EmanuelG

Keep OpenVPN
• nkr1ptd

NTOP updated
• sullrich

Adding FreeRadius to Embeded WRAP board? Plz help
• alexus

Slice dedicated for squid?
• rexster

Using FreeRadius package
• EmanuelG

What's the proper way to set up PHP bindings from a package XML?
• fernandotcl

Installed packages - link dissapears…
• Dakhor

Pfstat
• Guest

Packages without config files silently fail to install
• Kiloman

Squid Package Status
• Myntric

NMap installation failed
• Emab

Ntop
• Emab

Packages depending on PHP4 and Apache? [SOLVED]
• fernandotcl

How to make pfsense packages ??
• jeroen234

10gig filled up in 10 days.
• Jesse7

Shaper mask
• sharingzee

Php4-pfsense
• moo

Packages vs ports
• moo

Error when installing packages
• nicon

Has anyone had any luck with pfflowd?
• blodulv

Ntop 3.2 memory question
• thinair

What about L7?
• sharingzee

Ntop + Rrd but no records/graphs
• Jesse7