1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N

    Can I use pgblockerng aliases in Haproxy?

    80758505-9bad-4dad-a80b-c159be1045a2-image.png

    If it was a firewall rule, typing pfb would produce a dropdown to select.

    Here it has to be written, but will it work? Is it supported?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB

    I saw where the Netgate kernel developer updated the Suricata package in the pfSense 25.07 development branch to work with the new kernel PPPoE driver. But so far as I know that updated package has not been migrated to 2.8 CE.

    Here is the commit into the DEVEL branch: https://github.com/pfsense/FreeBSD-ports/commit/68a06b3a33c690042b61fb4ccfe96f3138e83b72.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG

    @AlexK-0 said in Can't receive GeoIP databases updates anymore, banned:

    Days ago, I received from MaxMind an email, notifying me that my country has been banned to receive GeoLite City database updates.

    You've found a reason to use a VPN.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    johnpozJ

    @MacUsers

    https://help.zerossl.com/hc/en-us/articles/360060119933-Certificate-Revocation

    edit: oh you prob out of luck

    You can revoke any certificate issued via the ZeroSSL portal. Currently, certificates issued via ACME can not be revoked from inside the portal - please follow the instructions of your ACME client for revoking those certificates.

    the gui in pfsense does not have the ability to revoke - you prob have to move the certs to something you have certbot installed to and revoke that way.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    89 Topics
    574 Posts
    A

    Hello,
    I am unable to get the Tailscale package to work. The page at VPN > Tailscale > Authentication is stuck. It displays the error "Tailscale is not online," but also shows a "Logout and Clean" button, with no option to log in.
    link text

    This state persists even after performing the following troubleshooting steps:

    Rebooting the pfSense router.

    Completely uninstalling and reinstalling the Tailscale package multiple times.

    Clearing browser cache and using a private browser window.

    Toggling the main "Enable Tailscale" checkbox in the settings.

    Checking the logs, which show the service gets a "terminate" signal and shuts down cleanly; it does not crash.

    Manually trying to delete the state file with rm /var/db/tailscale/tailscaled.state, which failed because the file does not exist.

    It appears that the package's configuration is corrupted in a way that persists even after reinstallation. Can anyone advise on how to perform a complete manual cleanup of all Tailscale files and settings?

  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Thanks for further suggestions. The tunnel is definitely up and so I don't think this is a CGNAT issue after all. WAN firewall rule is in place for UDP on port 51823 (otherwise the tunnel wouldn't work, right?). I can ping from client 1 -> client 2 and visa versa and also ping all points in between like you suggest. I just can't open an HTTPS connection from pfSenseB from Client 1 using a browser. But I can do this the other way round i.e. from Client 2 to pfSenseA

    I will try and do some packet capture to see if that reveals anything.

Log in to post
Load new posts
  • Z

    Squid Maximum Object Size

    4
    0 Votes
    4 Posts
    3k Views
    Z

    Ok I got you !

    I have a server with 3 HDDs configured as RAID 0, I've set up my server to 40 MBytes for the Maximum Object Size to cache all files under 40 MBytes, and it didn't show any sign of slowness nor a sign of saturated Disk … so I guess that's an almost optimal configuration for my server :)

  • KOMK

    Squid as a filtering platform only

    5
    0 Votes
    5 Posts
    1k Views
    marcellocM

    @KOM:

    OK, the GUI allows you to set everything to 0, but it doesn't allow you to not specify a cache_dir.  I'll play with it and check the logs.  Thanks for the help.

    Check resulting squid.conf, withot cache, it points to /dev/null IIRC.

  • T

    Squid3 Reverse Proxy - Force Cache and Suppress Version

    1
    0 Votes
    1 Posts
    755 Views
    No one has replied
  • M

    Pfsense 2.2 squidguard don't block - Solved by work around

    14
    0 Votes
    14 Posts
    5k Views
    KOMK

    So I added IP to Unrestricted field and nothing happen …

    By 'nothing happens', you mean that the admin user is still being blocked from some domains?  BTW I used to use Transparent mode but I found that it was a major hassle trying to filter HTTPS, so I switched to non-Transparent mode with WPAD.  So much better, everything works and easier to control to do what you want.

  • B

    Error enabling cachemgr with squid

    6
    0 Votes
    6 Posts
    1k Views
    B

    Thanks again KOM. When I tried the commandsquidclient -p 3128 mgr:infoI got timeout errors, but could be easily fixed by including the server IP address (I used loopback address).```
    squidclient -p 3128 -h 127.0.0.1  mgr:info

  • B

    Squid-2 and squidGuard-1.4 on pfSense 2.2 do not work.

    2
    0 Votes
    2 Posts
    1k Views
    KOMK

    Try squid3.  If you want to stay on Squid2, you could check your logs at /var/squid/logs/cache.log and see what's going on.

  • F

    Correct syntax for hosts (whitelist for Snort)

    3
    0 Votes
    3 Posts
    2k Views
    F

    Thanks for the info, I was already on the right track, but good to have a confirmation! One has only so much time for reading. The thread you are mentioning is very interesting and I am reading it whole; thanks once again, the forum suppression topic already helped a lot.

    This is [/SOLVED]

  • K

    PFBlocker/PFBlockerNG dest IP blocked but logged as pass WTF?

    1
    0 Votes
    1 Posts
    627 Views
    No one has replied
  • S

    PfBlockerNG - Causing reboot failure?

    8
    0 Votes
    8 Posts
    4k Views
    W

    All countries are permitted by default. On the top 20, you still have to select the countries on the list. I could be me, but how would that make sense?

    @switchman:

    @BBcan177,

    Thanks for the info, I will go back an read the full thread to see how to enable your recommendation to ". I would also recommend that you look at the pfBlockerNG thread and reverse your approach for blocking all countries (except for a few) and change that to a "Permit" certain countries instead. "

    I am new to pfSense and it takes a while to get an handle on it and all of the packages that can be utilized and how they work.

  • M

    Reverse Proxy for OWA, Webserver and Seafile

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • M

    NtopNG errors

    2
    0 Votes
    2 Posts
    1k Views
    M

    Uninstalled, reinstalled, same issues.  Preferences aren't sticky, constant errors to syslog server, uninstalled until it's more compatible with 2.2R.  Worked great with 2.1.5R, was very nice while it lasted.

  • A

    Pfflowd - Service Won't Start Since Latest Update

    6
    0 Votes
    6 Posts
    2k Views
    A

    Any way to fix this?  Should this package even be listed as the 2.2 platform?

  • M

    Squidguard time schedule does not run properly

    7
    0 Votes
    7 Posts
    1k Views
    ?

    Dear PfSense developers,

    This problem is become chronic! "Squidguard time schedule does not run healtly"  :'(  :'(  :'(

    Please, help us.

  • F

    Barnyard2: WARNING database [Database()]: Called with Event[0x0] Event Type [0]

    3
    0 Votes
    3 Posts
    4k Views
    bmeeksB

    @floz:

    Ok, phew, found the culprit.

    It seems that the issue arises only when I have Application ID Detection enabled (in the snort device's pre-processor tab). If I disable it, then the warnings go away and the events are correctly logged to the DB.

    And indeed, this post confirms this.

    Now, it would still be great to use the pre-processor and resulting app-stats. Is there a way of using it, but without setting the appid_event_types option on the output unified2 statement?

    Thanks for any comments / insights!

    I don't believe so.  The APP ID preprocessor apparently is logging events to the Unified2 file whenever APP ID is enabled.  Barnyard2 looks to be choking on those events.  This is an upstream problem for the Barnyard2 and Snort folks to sort out.

    Bill

  • M

    Pfsense 2.2 and vHosts won't start

    1
    0 Votes
    1 Posts
    835 Views
    No one has replied
  • M

    Can't start Clamav Antivirus

    1
    0 Votes
    1 Posts
    905 Views
    No one has replied
  • G

    Active Zabbix proxy failure

    2
    0 Votes
    2 Posts
    2k Views
    D

    Hello.

    I am using active proxy with 2.4 (agent/proxy/server).
    Maybe the database wasn't updated.
    Try to delete "/var/db/zabbix2/proxy.db" and restart your zabbix proxy.
    If it not fix, send the log please. (/var/log/zabbix2/zabbix_proxy.log).

    Regards.

  • Q

    Problem in export OpenVPN client while server is using intermediate CA

    3
    0 Votes
    3 Posts
    909 Views
    Q

    Noted with many thanks. This may solve the problem temporary.
    :)

    Qho

  • N

    NRPEv2 problem on run_rc_command

    3
    0 Votes
    3 Posts
    794 Views
    N

    Great, thank you.

  • E

    Squid3 Antivirus Redirect to HTTPS

    3
    0 Votes
    3 Posts
    1k Views
    M

    Here is what i did:
    https://forum.pfsense.org/index.php?topic=87591.msg487817#msg487817

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.