pfSense Packages

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Subcategories

Cache/Proxy

Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

3.7k
Topics

20.6k
Posts

J

In case you got the ld-elf parser problem, please check my post in

https://forum.netgate.com/post/1199906

and try if it works for you, too. Seems like an old c++ library won't get cleaned up after the system update to 24.03/24.11 so it get's pulled from the link parser as dependency instead of the real one in /lib. So moving the library away from /usr/lib should get squid to start again.

Cheers :)
IDS/IPS

Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

2.2k
Topics

15.6k
Posts

B

@killmasta93 said in Question about thresholds:

hi @bmeeks quick question so i added the following
threshold gen_id 1, sig_id 2009244, type both, track by_src, count 10, seconds 10, priority 1 threshold gen_id 1, sig_id 2009245, type both, track by_src, count 10, seconds 10, priority 1 threshold gen_id 1, sig_id 2009246, type both, track by_src, count 10, seconds 10, priority 1
would the variable
type both
work for both ends?

Thanks

Here is a link to the official Suricata docs describing the type: keyword: https://docs.suricata.io/en/latest/rules/thresholding.html#type-both. both specifies both a rate limit and threshold value.
Traffic Monitoring

Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

555
Topics

2.7k
Posts

S

PROTOCOL-DNS Microsoft SMTP excessive answer records buffer overflow attempt

Just Curious what this is and how to stop it in snort, I first thought someone was trying to get in but now I am not so sure as I changed my external IP and it happened straight away
on the new External IP. From what I can gather its something to do with a vunerability in dns but at a loss where to start, if its not an issue then fine but its happening a lot.
pfBlockerNG

Discussions about the pfBlockerNG package

2.5k
Topics

19.1k
Posts

S

Wanted to get some feedback from folks before I upgrade to 24.11.
Is the latest pfBlockerNG 3.2.0_16 functioning ok on 24.11?
I moved away from Devel to Stable 6 months ago or so but see that the version hasn’t changed with the release of 24.11.
Just want to be sure I can expect all to function ok before I upgrade.
@BBcan177 can we expect a stable release of 3.2.1_20 perhaps or am I good to go?
Thanks in advance.
UPS Tools

Discussions about Network UPS Tools and APCUPSD packages for pfSense

87
Topics

2.3k
Posts

D

@firefox Glad you got it working
ACME

Discussions about the ACME / Let’s Encrypt package for pfSense

478
Topics

2.7k
Posts

K

@tinfoilmatt it looks like I have finally gotten the certificate to pop up but now I am dealing with getting 503 Service Unavailable error. Do you know if this is an HAProxy issue or on the cloudflare side?

Screenshot 2024-12-05 at 12.51.02 PM.png
FRR

Discussions about the FRR Dynamic Routing package on pfSense

280
Topics

1.1k
Posts

S

How is it configured? Does it appear correctly in vtysh 'show run'?
Tailscale

Discussions about the Tailscale package

75
Topics

428
Posts

E

@rocket

1.78.1 now available for FreeBSD 15

Freshports
WireGuard

Discussions about WireGuard

635
Topics

3.3k
Posts

S

@Bob-Dig Indeed it is! I'm out this evening, but will do a full set of screenshots tomorrow.

G

Haproxy forwardedfor option missing in GUI!

• • geek00990

2

0
Votes

2
Posts

1.0k
Views

G

never mind. ssl offloading has to be enabled for that option to show.
(admins can delete this post)
C

Freeradius - VLAN fallback assignement

• • cscoot

5

0
Votes

5
Posts

1.2k
Views

C

@nogbadthebad - Thanks for your reply.

If using 802.1x authentication you can have the radius server pass back the VLAN for the authenticated user (either using username/password or MAC authentication).

This is all working as expected for authenticated users - I have one SSID thats broadcast, depending on the user or device (in the case of my IoT) it gets dropped onto the correct VLAN as it reads the radius response.

The issue I have at the moment with PFSense is I cannot seem to set a fallback VLAN for failed authentication (ie guests) - Previously in OPNSense (using freeradius) I dropped all unauthenticated users back onto a guest VLAN for segregation. However I dont seem to have the GUI option and when trying to put in the right Syntax for the advanced options, cannot seem to get it to work.
D

Opinions on freeradius3?

• • DominikHoffmann

4

0
Votes

4
Posts

1.0k
Views

D

@dominikhoffmann I also use freerad, good tool but the GUI is a little old. Have you looked at the captive portal on PFsense? Just another option though I think I saw somewhere a few years ago about issues with IPv6. Supports radius as well
H

openvpn-client-export update request

• • herr_xyz

2

0
Votes

2
Posts

857
Views

V

@herr_xyz
Until then it's up to you to download the new version by yourself from there and install it on your Windows or even integrate it into the installer package manually.
D

This topic is deleted!

• • DominikHoffmann

2

0
Votes

2
Posts

14
Views
G

HAProxy: https redirect frontend not working

haproxy • • GCTWorks

9

0
Votes

9
Posts

2.5k
Views

G

@viragomann Oh man! So, I finally figured out the problem. You were correct from the beginning. In fact, nearly every scenario we tried works.

The problem had nothing to do with my setup. My ISP decided to up and block port 80 all of a sudden without telling me. I figured this out by going back to basics. I started up a simple webserver that listened to port 80 and just forwarded directly to that server. Worked on most every other port except 80. Spent 3 hours on the phone with my ISP to get this fixed.

All works now.

I really appreciate the help. I did learn a few things along the way, so not a total waste of time.
O

PIMD not showing all interfaces

• • OffstageRoller

1

1
Votes

1
Posts

630
Views

No one has replied
T

stunnel 5.50_11 Will Not Start on Clean Install of 22.05

• • TheQuank

1

0
Votes

1
Posts

524
Views

No one has replied
P

Anynone have Postfix addon working on any version of pfSsense?

• • planetinse

2

0
Votes

2
Posts

766
Views

J

No, and nobody should. A mail server does not belong on a firewall.
C

Certificate: HAProxy stats default (593eb764abd89): Expiring soon, in 20 days

• • coreybrett

3

0
Votes

3
Posts

776
Views

C

Yep! I was able to just renew the cert on that page. Thanks
G

Bulk FreeRADIUS User Add

• • gprakosa

6

0
Votes

6
Posts

2.1k
Views

T

@gprakosa Thanks, it works perfect and doesn't require to reboot, changes are applied to FreeRadius package instantly. Regards.
J

Squid guard configuration dead by daylight

• • jeje_68

1

0
Votes

1
Posts

463
Views

No one has replied
B

Anyone create new GrayLog Extractors v21.02_1?

• • beachbum2021

3

0
Votes

3
Posts

1.8k
Views

C

@beachbum2021 I used this one. It seems to only be missing snort.

https://github.com/jbsky/graylog
E

Client Export Can't Locate "the Requested Certificate"

• • EveningStarNM

9

1
Votes

9
Posts

1.3k
Views

C

@jimp Fixed!
S

iperf3 won't automatically restart after reboot

• • sgseidel

7

0
Votes

7
Posts

1.9k
Views

S

@sgseidel,

Understood. I just posted into the developer forum asking for some assistance in getting started to setup a development environment, how to build pfSense packages and that. I am hopeful that I will get some guidance and then move forward in improving the pfSense implementation of iPerf3.

Stuart
C

Patches package gone from 2.5.2 branch??

• • Cool_Corona

14

0
Votes

14
Posts

1.3k
Views

C

@bcdouglas a77176e9-98be-4909-84d9-d182f3597f01-billede.png
J

HAProxy 301 Redirect

• • johnoatwork

9

0
Votes

9
Posts

1.6k
Views

V

@johnoatwork
Dude, you have two ACLs in this single rule which are mutually exclusive!
So this rule cannot work at all.

www.example.net - requires that the host name includes "www.example.net"
aclcrt_SharedFrontendHTTPS - requires that the host name includes "example.com"

Both will never match to the requested host. So remove the second ACL from this rule.
T

HAProxy php error after devel-update

• • TonyStone

1

0
Votes

1
Posts

453
Views

No one has replied
R

PfSense 2.0.3 OpenVPN Client Export Utility config file name

• • raventrickster

4

0
Votes

4
Posts

3.9k
Views

B

@jimp after so many years, searching in the forum came to this post.

I need to rename the config file for the export, to be more clearly named. Is there any way to have it in the Additional configuration options ?
D

ntopng Ghost hosts?

• • deanfourie

3

0
Votes

3
Posts

1.3k
Views

M

@deanfourie did u ever find out? i would also like to understand this as i have the same issue

18 / 461

This topic is deleted!