Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    J
    @JonathanLee use Pfsense 2.8.1.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    tinfoilmattT
    @vicking said in No blocks on IP: Is it a bad idea to have the action set to deny both instead of inbound only? Question is squarely for admin. Per the infoblock which explains, in part, the "Deny Inbound", "Deny Outbound", and "Deny Both" actions: 'Deny' Rules: 'Deny' rules create high priority 'block' or 'reject' rules on the stated interfaces. They don't change the 'pass' rules on other interfaces. Typical uses of 'Deny' rules are: Deny Both - blocks all traffic in both directions, if the source or destination IP is in the block list Deny Inbound/Deny Outbound - blocks all traffic in one direction unless it is part of a session started by traffic sent in the other direction. Does not affect traffic in the other direction. One way 'Deny' rules can be used to selectively block unsolicited incoming (new session) packets in one direction, while still allowing deliberate outgoing sessions to be created in the other direction. In other words: When set to "Deny Inbound", incoming connection requests from WAN hosts are blocked and therefore no state will be created. However a LAN host can still establish state to an otherwise listed IP. If set to "Deny Outbound", outgoing connection requests from LAN hosts are blocked and therefore no state will be created. However an incoming connection request from an otherwise listed IP to an 'open' WAN port can still establish state. If set to "Deny Both", both incoming connection requests and outbound connections requests are blocked and therefore no state will be created regardless of connection direction.
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    M
    I am using the DNS-Update method I have to use a DNS-Sleep of 5 minutes to let the letsencrypt txt dns record update propagate. During this 5 minutes the acme-webgui times out. when the acme-webgui times out the Action list is NOT executed. How can I solve this ? Would it maybe be an idea to let the acme.sh script execute the actions in the action list as a post-hook instead of the web-gui? Or maybe add an option to add post-hooks in the webUI ?
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    654 Posts
    C
    @luckman212, Thanks for your suggestion. I will check what I have in /usr/local/pkg/tailscale/state, and also the RAM disk settings others have brought up. I could learn more about where Tailscale and pfSense store system files. If I find anything worth sharing, I will let you know.
  • Discussions about WireGuard

    715 Topics
    4k Posts
    H
    @RNM-0 Thanks for your comment and sharing your fix. Unfortunately I don't want to take down pfsense and downgrade versions. I'm currently fine at the moment since I'm using Tailscale and that works. I also fixed the other crash I was having with pfblocker by changing a line code that wasn't pushed out under this version. Hopefully the stable release won't take too long to release but it appears there's still some open bugs that need to be fixed before that happens, and ironically, both the pfblocker and wireguard issues aren't on that list of bug fixes.
  • MOVED: Squid3-dev ICAP Protocol Error on 32-bit

    Locked
    1
    0 Votes
    1 Posts
    765 Views
    No one has replied
  • Pfsense 2.2 package installation - mysql

    4
    0 Votes
    4 Posts
    3k Views
    I
    I´ve fixed mysql install read https://forum.pfsense.org/index.php?topic=90962.msg504199#msg504199, now my only problem is freeradius2 don´t start after boot only manually, I think mysql is not ready when freeradius try to connect but works fine after.
  • Apache with mod_security-dev No protocol handler was valid for the URL

    2
    0 Votes
    2 Posts
    2k Views
    G
    Had the same issue and this worked for me: Make sure the Backend Path path contains a slash and isnt empty in the Location(s) tab. And in apache conf, it looks like the below in /usr/pbi/proxy_mod_security-amd64/local/etc/apache24/Includes/virtualhosts.conf. This didnt work: ProxyPass        balancer://mysite   ProxyPassReverse balancer://mysite This did: ProxyPass        balancer://mysite/   ProxyPassReverse balancer://mysite/
  • Apache with mod_security-dev 2.4.9_2pkg v0.43 on pfense 2.2

    3
    0 Votes
    3 Posts
    1k Views
    G
    Had the same issue and this worked for me: Make sure the Backend Path path contains a slash and isnt empty in the Location(s) tab. And in apache conf, it looks like the below in /usr/pbi/proxy_mod_security-amd64/local/etc/apache24/Includes/virtualhosts.conf. This didnt work: ProxyPass        balancer://mysite   ProxyPassReverse balancer://mysite This did: ProxyPass        balancer://mysite/   ProxyPassReverse balancer://mysite/
  • MOVED: nTop fonts in RRD graphs are Squares.

    Locked
    1
    0 Votes
    1 Posts
    805 Views
    No one has replied
  • MOVED: Dansguardian SSL Blocking not redirecting

    Locked
    1
    0 Votes
    1 Posts
    428 Views
    No one has replied
  • Need correct configuration for SSL vHosts

    3
    0 Votes
    3 Posts
    927 Views
    D
    @jetberrocal: I found a way to use HTTP instead of HTTPS with my WebGui. Congrats on digging holes into your firewall. Sigh…  ::)
  • MOVED: BandwidthD data backups

    Locked
    1
    0 Votes
    1 Posts
    560 Views
    No one has replied
  • MOVED: SQUID and SQUIDGUARD problems with auth AD

    Locked
    1
    0 Votes
    1 Posts
    386 Views
    No one has replied
  • AutoConfigBackup enable/disable

    2
    0 Votes
    2 Posts
    1k Views
    R
    Sorry to dig up an old thread, but after a Google search, this thread seemed the most relevant to what I was looking to do, and may be a good start to helping anyone else looking to do the same. Currently it just adds a 'Disable ACB' checkbox to the Settings tab of 'Diagnostics: Auto Configuration Backup', and skips uploading the config if that's set (not too sure if that's the best way, but it works for now). Tested with AutoConfigBackup 1.28. It needs two patches. (can you change multiple files in the same patch?) Fields not listed can be left at the default of a new patch. add new patch. Description: autoconfigbackup.xml - disable ACB Patch contents: *** /usr/local/pkg/autoconfigbackup.xml.orig --- /usr/local/pkg/autoconfigbackup.xml *************** *** 132,137 **** --- 132,143 ----                         <fieldname>crypto_password2</fieldname>                         <type>password</type> +              <field>+                      <fielddescr>Disable ACB</fielddescr> +                      <description>+                      <fieldname>disable_autoconfigbackup</fieldname> +                      <type>checkbox</type> +</description></field>         <custom_php_validation_command>                 custom_php_validation_command($_POST, $input_errors);</custom_php_validation_command> add new patch. Description: autoconfigbackup.inc - disable ACB Patch contents: *** /usr/local/pkg/autoconfigbackup.inc.orig --- /usr/local/pkg/autoconfigbackup.inc *************** *** 139,144 **** --- 139,149 ----         if($g['booting'])                 return; +      if ($config['installedpackages']['autoconfigbackup']['config'][0]['disable_autoconfigbackup'] == "on") { +              log_error(gettext("AutoConfigBackup: Config not uploaded - ACB is disabled.")); +              return; +      } +         /*         *  pfSense upload config to pfSense.org script         *  This file plugs into config.inc (/usr/local/pkg/parse_config) It needs two patches. (can you change multiple files in the same patch?) Seems you can. add new patch. Description: Disable ACB Patch contents: diff *** /usr/local/pkg/autoconfigbackup.inc.orig --- /usr/local/pkg/autoconfigbackup.inc *************** *** 139,144 **** --- 139,149 ----         if($g['booting'])                 return; +      if ($config['installedpackages']['autoconfigbackup']['config'][0]['disable_autoconfigbackup'] == "on") { +              log_error(gettext("AutoConfigBackup: Config not uploaded - ACB is disabled.")); +              return; +      } +         /*         *  pfSense upload config to pfSense.org script         *  This file plugs into config.inc (/usr/local/pkg/parse_config) diff *** /usr/local/pkg/autoconfigbackup.xml.orig --- /usr/local/pkg/autoconfigbackup.xml *************** *** 132,137 **** --- 132,143 ----                         <fieldname>crypto_password2</fieldname>                         <type>password</type> +              <field>+                      <fielddescr>Disable ACB</fielddescr> +                      <description>+                      <fieldname>disable_autoconfigbackup</fieldname> +                      <type>checkbox</type> +</description></field>         <custom_php_validation_command>                 custom_php_validation_command($_POST, $input_errors);</custom_php_validation_command>
  • MOVED: pfsense 2.2 snort install issues

    Locked
    1
    0 Votes
    1 Posts
    476 Views
    No one has replied
  • MOVED: Snort missing under services?

    Locked
    1
    0 Votes
    1 Posts
    411 Views
    No one has replied
  • MOVED: Squid3 Configuration Trouble

    Locked
    1
    0 Votes
    1 Posts
    538 Views
    No one has replied
  • PfBlockerng Alias Rules

    2
    0 Votes
    2 Posts
    2k Views
    D
    Yeah, it will make the alerts/counters not work since there is nothing to match against.
  • PfblockerNG not working?

    3
    0 Votes
    3 Posts
    2k Views
    R
    Working! Thanks!  Do I need to force update on "Force Cron" and "Force Reload"?
  • Start freeradius2 after mysql

    1
    0 Votes
    1 Posts
    564 Views
    No one has replied
  • MOVED: pfsense 1 wan 2 lan siproxd

    Locked
    1
    0 Votes
    1 Posts
    450 Views
    No one has replied
  • MOVED: Sarg Not Showing Reports

    Locked
    1
    0 Votes
    1 Posts
    497 Views
    No one has replied
  • MOVED: FTP Client Proxy Package Problem

    Locked
    1
    0 Votes
    1 Posts
    527 Views
    No one has replied
  • MOVED: FTP Client Proxy Package

    Locked
    1
    0 Votes
    1 Posts
    547 Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.