pfSense Packages

• 

  Integration of freeRADIUS with MS Active Directory
  captive portal radius freeradius bandwidth • • mohkhalifa  

  1
  0
  Votes
  1
  Posts
  74
  Views

  No one has replied

• E

  2.4.4 TFTP Server 413 Request Entity Too Large
  • Ethereal  

  5
  0
  Votes
  5
  Posts
  306
  Views

  B

  @Ethereal What was the actual fix action
• 

  This topic is deleted!
  • ameliasmith010  

  1
  0
  Votes
  1
  Posts
  9
  Views

  No one has replied

• K

  Pfsense Squid Proxy and Pulse VPN
  • koko_adams  

  2
  0
  Votes
  2
  Posts
  68
  Views

  L

  just guessing, but if I was configuring a business VPN server for remote access such as Pulse, I'd probably have my server setup to disallow clients connecting through proxies as they break the security.
• C

  Softether VPN Package
  • ccmks  

  2
  0
  Votes
  2
  Posts
  153
  Views

  

  No. There is no package for it, and no plans that I am aware of to include it or even to make it available for installation in that way. There is a request open here: https://redmine.pfsense.org/issues/9044
• R

  SG3000 and Telegraf
  • reslip  

  2
  0
  Votes
  2
  Posts
  80
  Views

  V

  Do you mean the SG-3100? I hit the same issue - there was an earlier post on it here. I think Netgate was meant to be fixing it a few months ago (Github link), but that PR got yanked, and last I heard, there was something about native Go/Rust builders for. 2.5.0. - but I haven't heard anything back recently.
• A

  Uninstalled packages in GUI menu after restore
  • aalex954  

  7
  0
  Votes
  7
  Posts
  722
  Views

  

  That config file is very comparable with the Windows Registry, or a file system for that matter. Leftovers are not bad thing, they are just not used any more. The file tends to be somewhat bigger. pfSense settings often get removed are changed during upgrade. Settings - entries in the config.xml - created by packages, on the other hand, are most often not removed when uninstalling.
• E

  No package available in Available Package
  • Eliza  

  6
  0
  Votes
  6
  Posts
  110
  Views

  

  Yep. That confimes : @Gertjan said in No package available in Available Package: Most known reason : pfSense itself can't resolve anymore. Because : @Gertjan said in No package available in Available Package: Popular expression : you broke the DNS .... so it can't find updates and package information (these Netgate's server IPs are not hard coded in the code, they use URLs). You have the solution already ;)
• T

  HAproxy SSL termination & Snort
  • tohil  

  7
  0
  Votes
  7
  Posts
  1242
  Views

  R

  I was thinking about similar setup, haproxy + suricata Frontend: SSL Offloading, Type: http/https Offloading, Public Cert Backend: Adress+Port 80, SSL no Not sure about snort, but suricata can inspect openvpn interface. I would connect webserver via openvpn to pfsense. Traffic would be encrypten within vpn tunnel but it would be still http, which can be fully inspected by suricata I tested it and it was worked. but i am not sure if there is any other security caveat i didn't count with, of course that vpntunnel would need to be extra secured.
• S

  This topic is deleted!
  • smith0022  

  2
  0
  Votes
  2
  Posts
  4
  Views
• S

  This topic is deleted!
  • smith0022  

  1
  0
  Votes
  1
  Posts
  5
  Views

  No one has replied

• I

  zabbix-agent4 not running on 32xxx port needed to connect to docker
  • Inack1986  

  1
  0
  Votes
  1
  Posts
  31
  Views

  No one has replied

• M

  pfSense 2.4.5 MIA?
  • meluvalli  

  9
  0
  Votes
  9
  Posts
  416
  Views

  M

  @jimp Got it! Thanks . Just seemed odd it vanished
• A

  Avahi - interface missing
  • AW_sensepf  

  11
  0
  Votes
  11
  Posts
  858
  Views

  

  @mohsh86 said in Avahi - interface missing: I've noticed that Avahi GUI does not list "Virtual IPs" Thinking maybe your not understanding what avahi actually does... It listens on an L2, a VIP is a L3 IP address.
• Z

  unable to ping ip on vlan interface
  • zaber01  

  1
  0
  Votes
  1
  Posts
  26
  Views

  No one has replied

• U

  Basic FTP server Package for pfSense
  • u444665  

  14
  0
  Votes
  14
  Posts
  462
  Views

  

  @u444665 said in Basic FTP server Package for pfSense: using Captive Portal which works perfectly, as long as you allow all remaining devices 1 by 1. Normally ..... a captive portal should be run on a dedicated interface (OPTx). Everybody on the 'non-trusted' captive portal interface and up to you if they 'merit' a place on a more trusted LAN (OPTy) interface. Or even LAN - if they are really trustworthy.
• A

  Syslog-NG Feature request
  • aligator638  

  2
  0
  Votes
  2
  Posts
  48
  Views

  

  Goto and help yourself ^^ Btw : This is the FreeBSD 11.2 => so you wind up using "syslog-ng-3.14.1_1". Netgate (pfSense) does not develop FreeBSD, they 'use' it from FreeBSD.org and take it 'as is' with some packages wrapped up to they can be installed on pfSense using the pfSense GUI. Also : this is a firewall, so priority 1 - 2 and 3 are 'security' and 'stability', so you will never find the latest version nginx, php or whatever other package.
• K

  Clear squidgard configuration
  • koko_adams  

  2
  0
  Votes
  2
  Posts
  39
  Views

  K

  any idea please .??
• 

  Mailscanner UNOFFICIAL package for pfSense 2.3.x
  • marcelloc  

  36
  0
  Votes
  36
  Posts
  6054
  Views

  

  @VenimK Try touch /etc/inc/xmlrpc.inc and rerun the install.
• T

  This topic is deleted!
  • taskdick0  

  1
  0
  Votes
  1
  Posts
  11
  Views

  No one has replied

• W

  WAN to LAN Throughput Testing Question
  • WhiteleeMartinze  

  1
  0
  Votes
  1
  Posts
  60
  Views

  No one has replied

• P

  Using syslog-ng to filter for critical events and send alert email
  • peterglock  

  1
  0
  Votes
  1
  Posts
  44
  Views

  No one has replied

• V

  Tinc, multi-wan failover, gateway switching
  • Vetal  

  4
  0
  Votes
  4
  Posts
  1089
  Views

  K

  I'm looking into howto do this. It should be tottally possible. The GUI seems to get in the way though with its enforcements. eg you dont seem to be able to create a bridge without any interfaces in. If i could I would be able to have the ip config under pfsenses control, which would allow me to setup ospf in the gui by selecting the bridge interface. I could then just run a ifconfig addm command in the tinc interface up bit to link it all together. No joy, and why cant I have an ipless tinc setup?
• M

  AVAHI Does not start
  • mcmikev  

  1
  0
  Votes
  1
  Posts
  121
  Views

  No one has replied

• J

  LcdProc on 2.5
  • jmarcosm  

  3
  0
  Votes
  3
  Posts
  52
  Views

  J

  OK ! That's are wonderful news. Thank you
• C

  This topic is deleted!
  • createpower5  

  1
  0
  Votes
  1
  Posts
  11
  Views

  No one has replied

• S

  FreeRADIUS OVPN GAUTH
  • sublunar  

  5
  0
  Votes
  5
  Posts
  130
  Views

  P

  I have changed the XML script a bit. Maybe the one who is responsable for the package can add this in the new version? Changes are made in freeradius.xml (located in /usr/local/pkg) add : <field> <fielddescr>Authenticator Name</fielddescr> <fieldname>varcompanyname</fieldname> <description> <![CDATA[ You can fill in a name to be shown in Googles Authenticator.<br/> <span class="text-info">(Default: FreeRadius). </span> ]]> </description> <type>input</type> <default_value>FreeRadius</default_value> </field> right under the time field (right under </field> and then change: var provider = encodeURIComponent("FreeRADIUS"); in var provider = encodeURIComponent($('#varcompanyname').val());
• C

  This topic is deleted!
  • curediabetes7  

  1
  0
  Votes
  1
  Posts
  6
  Views

  No one has replied

• D

  This topic is deleted!
  • dogtrain9  

  1
  0
  Votes
  1
  Posts
  15
  Views

  No one has replied

• S

  This topic is deleted!
  • slimmingsolution76  

  1
  0
  Votes
  1
  Posts
  11
  Views

  No one has replied

• H

  FreeRADIUS3: 0.15.7_3 -> 0.15.7_6 iOS clients can't connect
  • helical-matte  

  2
  0
  Votes
  2
  Posts
  50
  Views

  H

  Scratch that. I generated a new self-signed certificate and chose that instead of my Let's Encrypt cert and now my iOS devices connected again. Sorry for the false alarm.
• 

  FreeRadius3: MD5-Password encryption
  • JeGr  

  3
  0
  Votes
  3
  Posts
  42
  Views

  

  @jimp said in FreeRadius3: MD5-Password encryption: Is there maybe some whitespace around the password that got ignored for cleartext but included in the MD5 hash? @jimp Nope, double checked that. The internal auth test works with cleartext password, MD5 gets rejected with above error. Don't understand it the least, as my box at home for example is configured exactly the same way and has no problems testing both kinds of users... I'm at a complete loss...
• J

  FreeRadius3: Certificates for TLS gone after updating to 0.15.7_4
  • j_testing  

  9
  0
  Votes
  9
  Posts
  147
  Views

  J

  @jimp I just did, and it works. That was fast, thank you.
• T

  This topic is deleted!
  • Tmoss  

  1
  0
  Votes
  1
  Posts
  6
  Views

  No one has replied

• W

  This topic is deleted!
  • waistburn1  

  1
  0
  Votes
  1
  Posts
  7
  Views

  No one has replied

• 

  Arpwatch Question
  • chudak  

  2
  0
  Votes
  2
  Posts
  106
  Views

  N

  Same problem here with the same problem of router. I have a Linksys E3200 in bridge mode I will put some xxx where its not important hostname: <unknown> ip address: xxx.xxx.1.2 ethernet address: xx:xx:xx:xx:xx:4e ethernet vendor: Linksys old ethernet address: xx:xx:xx:xx:xx:4f old ethernet vendor: Linksys timestamp: Monday, November 25, 2019 21:22:56 -0500 previous timestamp: Monday, November 25, 2019 21:22:48 -0500 delta: 8 seconds
• M

  Suricata does not start the interface
  • mssca  

  2
  0
  Votes
  2
  Posts
  34
  Views

  M

  Finally, I found the solution to my own problem. I am posting this here for others. Deleting the pid file and increasing the memory did not work. Instead, I deleted the interface and increased the Flow Memory Cap on the newly created interface to the maximum I have, which is 33554432 bytes = 32 GB. For some reason, any value lower than that will not work. This makes no sense...... However, at least it works now. I read somewhere that you can be calculated as per: https://forum.netgate.com/topic/84756/suricata-issues/3
• M

  Troubleshooting telegraf - influxdb
  • morlies  

  2
  0
  Votes
  2
  Posts
  192
  Views

  M

  Update: telegraf plugin adds ssl-config to configuration file although plain http is used. I removed the CA-line in the config and now it seems to work. ssl_ca = "/usr/local/etc/telegraf.ca" <<-- removed
• A

  APCUPSD Shutting down PFSense immediatly after boot up
  • amarcino  

  3
  0
  Votes
  3
  Posts
  74
  Views

  A

  Well I have resolved this problem by reinstalling PfSense and applying a backup I made a few days ago. Will do more research into APCUPSD before I consider having that control my device again.
• 

  New Avahi package
  • dennypage  

  57
  2
  Votes
  57
  Posts
  10674
  Views

  L

  @dennypage said in New Avahi package: @logan5247 said in New Avahi package: My BLACKHOLE network isn't allowed to talk back to LAN, let me open some stuff up and see! @dennypage thank you! I had blocked all communication back from BLACKHOLE to my LAN. I had to allow 5353/udp from BLACKHOLE to LAN and now it's working great! I think you want to allow BLACKHOLE to send mDNS (5353) to firewall rather than to any. I just tried that (switching from ANY to FIREWALL) and it didn't work. When I switched back to ANY, it works. The firewall logs show it's trying to send to 224.0.0.251, so maybe I can just allow it to go to that address.