Subcategories

• Cache/Proxy

  Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

  3.7k
  Topics
  20.6k
  Posts

  J

  In case you got the ld-elf parser problem, please check my post in

  https://forum.netgate.com/post/1199906

  and try if it works for you, too. Seems like an old c++ library won't get cleaned up after the system update to 24.03/24.11 so it get's pulled from the link parser as dependency instead of the real one in /lib. So moving the library away from /usr/lib should get squid to start again.

  Cheers :)

• IDS/IPS

  Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

  2.2k
  Topics
  15.6k
  Posts

  B

  @killmasta93 said in Question about thresholds:

  hi @bmeeks quick question so i added the following

  threshold gen_id 1, sig_id 2009244, type both, track by_src, count 10, seconds 10, priority 1 threshold gen_id 1, sig_id 2009245, type both, track by_src, count 10, seconds 10, priority 1 threshold gen_id 1, sig_id 2009246, type both, track by_src, count 10, seconds 10, priority 1

  would the variable

  type both

  work for both ends?

  Thanks

  Here is a link to the official Suricata docs describing the type: keyword: https://docs.suricata.io/en/latest/rules/thresholding.html#type-both. both specifies both a rate limit and threshold value.

• Traffic Monitoring

  Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

  555
  Topics
  2.7k
  Posts

  S

  PROTOCOL-DNS Microsoft SMTP excessive answer records buffer overflow attempt

  Just Curious what this is and how to stop it in snort, I first thought someone was trying to get in but now I am not so sure as I changed my external IP and it happened straight away
  on the new External IP. From what I can gather its something to do with a vunerability in dns but at a loss where to start, if its not an issue then fine but its happening a lot.

• pfBlockerNG

  Discussions about the pfBlockerNG package

  2.5k
  Topics
  19.1k
  Posts

  S

  Wanted to get some feedback from folks before I upgrade to 24.11.
  Is the latest pfBlockerNG 3.2.0_16 functioning ok on 24.11?
  I moved away from Devel to Stable 6 months ago or so but see that the version hasn’t changed with the release of 24.11.
  Just want to be sure I can expect all to function ok before I upgrade.
  @BBcan177 can we expect a stable release of 3.2.1_20 perhaps or am I good to go?
  Thanks in advance.

• UPS Tools

  Discussions about Network UPS Tools and APCUPSD packages for pfSense

  87
  Topics
  2.3k
  Posts

  D

  @firefox Glad you got it working

• ACME

  Discussions about the ACME / Let’s Encrypt package for pfSense

  478
  Topics
  2.7k
  Posts

  K

  @tinfoilmatt it looks like I have finally gotten the certificate to pop up but now I am dealing with getting 503 Service Unavailable error. Do you know if this is an HAProxy issue or on the cloudflare side?

  Screenshot 2024-12-05 at 12.51.02 PM.png

• FRR

  Discussions about the FRR Dynamic Routing package on pfSense

  280
  Topics
  1.1k
  Posts

  S

  How is it configured? Does it appear correctly in vtysh 'show run'?

• Tailscale

  Discussions about the Tailscale package

  75
  Topics
  428
  Posts

  E

  @rocket

  1.78.1 now available for FreeBSD 15

  Freshports
  

• WireGuard

  Discussions about WireGuard

  635
  Topics
  3.3k
  Posts

  B

  @stevelup I guess it's show your rules time.