pfSense Packages

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Subcategories

Cache/Proxy

Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

3.7k
Topics

20.6k
Posts

J

In case you got the ld-elf parser problem, please check my post in

https://forum.netgate.com/post/1199906

and try if it works for you, too. Seems like an old c++ library won't get cleaned up after the system update to 24.03/24.11 so it get's pulled from the link parser as dependency instead of the real one in /lib. So moving the library away from /usr/lib should get squid to start again.

Cheers :)
IDS/IPS

Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

2.2k
Topics

15.6k
Posts

B

@killmasta93 said in Question about thresholds:

hi @bmeeks quick question so i added the following
threshold gen_id 1, sig_id 2009244, type both, track by_src, count 10, seconds 10, priority 1 threshold gen_id 1, sig_id 2009245, type both, track by_src, count 10, seconds 10, priority 1 threshold gen_id 1, sig_id 2009246, type both, track by_src, count 10, seconds 10, priority 1
would the variable
type both
work for both ends?

Thanks

Here is a link to the official Suricata docs describing the type: keyword: https://docs.suricata.io/en/latest/rules/thresholding.html#type-both. both specifies both a rate limit and threshold value.
Traffic Monitoring

Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

555
Topics

2.7k
Posts

S

PROTOCOL-DNS Microsoft SMTP excessive answer records buffer overflow attempt

Just Curious what this is and how to stop it in snort, I first thought someone was trying to get in but now I am not so sure as I changed my external IP and it happened straight away
on the new External IP. From what I can gather its something to do with a vunerability in dns but at a loss where to start, if its not an issue then fine but its happening a lot.
pfBlockerNG

Discussions about the pfBlockerNG package

2.5k
Topics

19.1k
Posts

S

Wanted to get some feedback from folks before I upgrade to 24.11.
Is the latest pfBlockerNG 3.2.0_16 functioning ok on 24.11?
I moved away from Devel to Stable 6 months ago or so but see that the version hasn’t changed with the release of 24.11.
Just want to be sure I can expect all to function ok before I upgrade.
@BBcan177 can we expect a stable release of 3.2.1_20 perhaps or am I good to go?
Thanks in advance.
UPS Tools

Discussions about Network UPS Tools and APCUPSD packages for pfSense

87
Topics

2.3k
Posts

D

@firefox Glad you got it working
ACME

Discussions about the ACME / Let’s Encrypt package for pfSense

478
Topics

2.7k
Posts

K

@tinfoilmatt it looks like I have finally gotten the certificate to pop up but now I am dealing with getting 503 Service Unavailable error. Do you know if this is an HAProxy issue or on the cloudflare side?

Screenshot 2024-12-05 at 12.51.02 PM.png
FRR

Discussions about the FRR Dynamic Routing package on pfSense

280
Topics

1.1k
Posts

S

How is it configured? Does it appear correctly in vtysh 'show run'?
Tailscale

Discussions about the Tailscale package

75
Topics

428
Posts

E

@rocket

1.78.1 now available for FreeBSD 15

Freshports
WireGuard

Discussions about WireGuard

633
Topics

3.3k
Posts

C

@jmdomini I used this page when I first tried it..

https://www.wundertech.net/how-to-set-up-wireguard-on-pfsense/

B

radsecproxy package

• • beatvjiking

1

0
Votes

1
Posts

185
Views

No one has replied
R

Enabling/disabling interfaces creates issues for ntopng

• • Ryzon62

1

0
Votes

1
Posts

209
Views

No one has replied
J

System Patches package version 2.2.4

• • jimp

1

10
Votes

1
Posts

468
Views

No one has replied
S

Should I uninstall a patch before/after an upgrade?

• • scottlindner

5

0
Votes

5
Posts

731
Views

J

If you added a patch manually and that fix is included in the new release, then just delete the entry from the package without touching it.

If you revert a patch after upgrading you undo the fix and put back the bad code.

Manual patch entries are never automatically removed. Only the "recommended" list changes automatically by version.
K

pkg repository update fall

• • kirrn6100

1

0
Votes

1
Posts

332
Views

No one has replied
O

lcdproc crystalfontz problem

• • ohifra

11

0
Votes

11
Posts

1.4k
Views

D

@fireodo said in lcdproc crystalfontz problem:

@Dobby_ said in lcdproc crystalfontz problem:

Thank you very much indeed, would be one of my
next options (project) to enrich my small APU´s.

If you like to look here too:

https://lcdstore.de/CF635TMFKU

Cool after installing the Power and reset button
in/on the APU I would assume that could be the next "project" or perhaps later if the Bluetooth
serial port is ready installed.
F

[Solved] pfSense-pkg-System_Patches reinstallation failed!

• • furom

8

0
Votes

8
Posts

981
Views

F

@SteveITS said in [Solved] pfSense-pkg-System_Patches reinstallation failed!:

@furom They’re working on something. There’s an open redmine from a couple years ago but I don’t have the URL handy. At least it blocks it now. Per my sig it was… worse.

That is great. And fully agree, this is much to prefer over ruining your system, no doubt at all so with some more insight, only grateful it (as usual with pfSense) turned out well :)
F

Several vulnerable packages without update

• • fadinzr

16

0
Votes

16
Posts

1.2k
Views

D

@fadinzr
[23.05-RELEASE][root@xx xx xx]/root: pkg audit -F vulnxml file up-to-date libxml2-2.10.3_1 is vulnerable: libxml2 -- multiple vulnerabilities CVE: CVE-2023-29469 CVE: CVE-2023-28484 WWW: https://vuxml.FreeBSD.org/freebsd/0bd7f07b-dc22-11ed-bf28-589cfc0f81b0.html curl-8.0.1 is vulnerable: curl -- multiple vulnerabilities CVE: CVE-2023-28322 CVE: CVE-2023-28321 CVE: CVE-2023-28320 CVE: CVE-2023-28319 WWW: https://vuxml.FreeBSD.org/freebsd/a4f8bb03-f52f-11ed-9859-080027083a05.html py39-setuptools-63.1.0 is vulnerable: py39-setuptools -- denial of service vulnerability CVE: CVE-2022-40897 WWW: https://vuxml.FreeBSD.org/freebsd/1b38aec4-4149-4c7d-851c-3c4de3a1fbd0.html redis-7.0.10 is vulnerable: redis -- HINCRBYFLOAT can be used to crash a redis-server process CVE: CVE-2023-28856 WWW: https://vuxml.FreeBSD.org/freebsd/96b2d4db-ddd2-11ed-b6ea-080027f5fec9.html 4 problem(s) in 4 installed package(s) found.
27latest.jpg

27latestpkg.jpg
S

Minor UI bug in udpbroadcastrelay

• • soz

1

0
Votes

1
Posts

286
Views

No one has replied
T

Package Upgrades via CLI

• • tman222

4

0
Votes

4
Posts

546
Views

J

Pkg update
Pkg clean

Clean gets rid of old versions no longer needed
T

system_patches update question

• • troysjanda

12

0
Votes

12
Posts

1.1k
Views

R

@jimp
Looks fine to me now [running 23.05]. 👍

A few minutes ago:

2023-05-26 at 13.39.19.png

Now:

2023-05-26 at 13.40.17.png

☕️
P

After upgrade to 23.05 RELEASE, Syslog-NG won't start

• • provels

16

0
Votes

16
Posts

1.4k
Views

P

@jimp Yes, great work as always. All it takes is another one of us mooks to run your code and it's, "Oh, yeah, that..."!
G

RRDSummary not working after upgrade to 23.05

• • gpfountz

5

0
Votes

5
Posts

458
Views

G

I confirm the RRD_Summary 2.1 update fixes the issue. Thanks!!
D

Service Watchdog Race Condition Possible?

• • demux

2

0
Votes

2
Posts

346
Views

J

The service watchdog package is not smart. It only knows to run on a timer from cron, and it only knows to see if a process is running or not.

So yes, race conditions are easily possible. Not just at boot but also during any deliberate stop/restart of a service, package ugprades, etc.
B

Telegraf does not facilitate InfluxDB2 (when using pfSense GUI)

• • bn1980

1

0
Votes

1
Posts

480
Views

No one has replied
F

freeRadius / Unifi AP / EAP-TTLS ?

• • furom

97

0
Votes

97
Posts

22.1k
Views

F

@johnpoz said in freeRadius / Unifi AP / EAP-TTLS ?:

@furom said in freeRadius / Unifi AP / EAP-TTLS ?:

Samsung A8

I was looking at those for my train tablet, but ended up with the p11, slightly bigger screen and slightly more battery.

Yeah, the bigger screen would have been nice, but price jumped quite a bit for just those points of an inch, and when ordering I still wasn't sure I would make it work. Now I have two... But will keep the old one around for a while. It has some update I apparently haven't installed yet. Didn't have time today to verify if it actually is a legit one or not, but would really expect it to be. Just weird I haven't seen it before.

Documenting this all now, but the main issue all along was the 2100's switch...
D

LCDProc: PHP Error: Reboot from front panel

• • DrKappy

3

0
Votes

3
Posts

389
Views

D

@steveits Makes sense - will do. Thanks!
M

Suricata Kills down speed

• • maverikh

22

0
Votes

22
Posts

2.6k
Views

M

@dobby_ Perhaps my tunables is part of issues....

3a9eebce-21b7-4482-9dcf-cef2b7499b16-image.png
S

HAProxyD Issue in PFsense+ - I am unable to get actual of IP of client in backend NGINX server

• • ShahidAkhter

6

0
Votes

6
Posts

652
Views

V

@shahidakhter
Does this also happen if you bypass HAproxy?
Simply add a NAT port forwarding rule on WAN to the backend server for testing.
K

Syslog-ng package install problem

• • kkayan

1

0
Votes

1
Posts

213
Views

No one has replied

13 / 461