Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    KOMK
    @jucelio_rosa Squid runs on 2.8.1 but there was a library bug IIRC. If you manually start squid then check the system log, do you see this error? The command '/usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was 'ld-elf.so.1: /usr/local/sbin/squid: Undefined symbol "_ZTVNSt3__117bad_function_callE"'
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    RedDelPaPaR
    @bmeeks Understood. Thank for kindly for your help. I will likely be ordering a new unit soon.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    N
    @Gertjan said in is something wrong with pfBlockerNG?: "is something wrong with my pfBlockerNG?". First off, thanks for the detail reply. After my post, I "changed" DNSBL -> DNSBL mode from "unbound python mode" to "unbound mode" and so far i have no issues. I understand what you are saying & hinting "maybe something is wrong with my settings" - my response is this: Everything was working before i upgraded the pfsense software to " 25.07.1-RELEASE (arm64)" -- Before the update my DNSBL Mode was set as "unbound python mode" and everything worked. Here is my "inference" - something broke in pfBlockerNG after the upgrade and I cannot 100% point to what that setting (my) is? I will observe for some days how this change in DNSBL mode works out and report the findings.
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    dennypageD
    @fjmp24 said in Notification: UPS ups battery is low: If I remove ignorelb directive, my UPS shuts down after 16 seconds This means your UPS is signaling a low battery. Either your battery is bad, or your UPS is bad. Most likely battery, but you never know. I suggest reaching out to Eaton support.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    M
    I am using the DNS-Update method I have to use a DNS-Sleep of 5 minutes to let the letsencrypt txt dns record update propagate. During this 5 minutes the acme-webgui times out. when the acme-webgui times out the Action list is NOT executed. How can I solve this ? Would it maybe be an idea to let the acme.sh script execute the actions in the action list as a post-hook instead of the web-gui? Or maybe add an option to add post-hooks in the webUI ?
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    642 Posts
    C
    For pfSense+ Version 25.0.7 FreeBSD 15.0-CURRENT: I had a recent issue after upgrading Tailscale to 1.90.4 and afterwards rebooting pfSense. Tailscale would not authenticate. After researching, I found a solution and a suggested workflow for future upgrades. First, I was able to get Tailscale to re-authenticate by executing the following commands (Tailscale Service was offline after the reboot): service tailscaled stop tailscale logout sysrc tailscaled_enable="YES" service tailscaled start tailscale up So that you know, here is the AI-generated one-liner for future upgrades on 25.x FreeBSD 15.0-CURRENT systems. I will test with the next available upgrade package: "service tailscaled stop && tailscale logout || true && fetch https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-X.Y.Z.pkg || exit 1 && IGNORE_OSVERSION=yes pkg-static add -f tailscale-X.Y.Z.pkg && rm -f tailscale-X.Y.Z.pkg && sysrc tailscaled_enable="YES" && service tailscaled start && tailscale up && tailscale version && tailscale status"
  • Discussions about WireGuard

    714 Topics
    4k Posts
    R
    I was on PfSense version 23.xx (don't recall the xx) and was able to start the Wireguard service. I upgraded to the 25.11 beta version and now the Wireguard service will not even start. I am on Wireguard version 2.1, and I see that there are versions that go up to 2.9. How do I upgrade to a later version? The only version in the pfSense updater is 2.1. Thank you
  • Dansguardian banned url regex

    2
    0 Votes
    2 Posts
    921 Views
    jimpJ
    And now you know why keyword blocking is and always will be ineffective. :-)
  • OpenVPN Client Export Utility - different config on 1.1.3

    5
    0 Votes
    5 Posts
    2k Views
    jimpJ
    There is a choice in the latest version to use tls-remote if you need to. If you have issues with verify-x509-name then you are not running an OpenVPN 2.3-based version. Make sure you uninstall OpenVPN and reinstall it again with the most current version. An in-place run of the client would likely skip over the actual install if it already detected OpenVPN present on the system.
  • TFTP doesn't seem to work out-of-the-box on 2.1

    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    It works fine for me here. I installed the package, selected LAN, clicked save, then uploaded a file using the GUI and I was able to fetch that over TFTP from another system on the network.
  • Openvpn export - verify-x509-name option

    4
    0 Votes
    4 Posts
    5k Views
    N
    All OK now :) Thanks!
  • PfSense 2.1 & Squid

    5
    0 Votes
    5 Posts
    2k Views
    G
    Hi netwiz, iplayer is being blocked in the 'movies' group This site has been classed as non work related. If this is an error, please contact IT.: 403 Forbidden Reason: Client address: xxx.xxx.xxx.xxx Client group: default Target group: blk_BL_movies URL: http://www.bbc.co.uk/iplayer/ If you didn't want to block all movie sites, you could always make at target category of blacklist sites and then enforce your own :) I get my blacklists from http://www.shallalist.de/ Cheers, grievsa93
  • Squid Stopping Download Progress

    1
    0 Votes
    1 Posts
    764 Views
    No one has replied
  • Can't start varnish, missing cc dependency or something

    16
    0 Votes
    16 Posts
    7k Views
    marcellocM
    Thanks for the feedback, I've pushed a fix for the package and seems that only missing thing was a ln -s from gcc to cc.
  • How large should my Squid 3 cache be?

    5
    0 Votes
    5 Posts
    2k Views
    B
    I see, thank you. :)
  • Dansguardian unusable

    25
    0 Votes
    25 Posts
    7k Views
    T
    great, thanks for the tip, I will check that out sometime soon…
  • Dansguardian clamav and other issues fix

    19
    0 Votes
    19 Posts
    5k Views
    ?
    Very bad practice!
  • Mailscanner configuration

    1
    0 Votes
    1 Posts
    807 Views
    No one has replied
  • SARG and Dansguardian problem

    9
    0 Votes
    9 Posts
    3k Views
    T
    I could try to use the console, what commands would I need to run? Funny thing is if I go to the schedule and do a "force update now", no errors are produced in the log.
  • Understanding squid proxy server

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • PfBlocker Fails to start

    3
    0 Votes
    3 Posts
    1k Views
    D
    Hi All, Problem resolved. Dan.
  • Log Squid in Syslog

    3
    0 Votes
    3 Posts
    5k Views
    C
    Ok, I managed to get things working.  Doing log analysis is soooo great using splunk!  I uninstalled all my packages.  I then installed Dansguardian first, then squid3.  I think the first time I had selected the "squid" package vs the "squid3' package.  I then added the following in the Custom Options section of the proxy server settings page: access_log syslog:local5.info squid Hope this helps if anyone else has this issue!
  • Google TV with Squid

    1
    0 Votes
    1 Posts
    911 Views
    No one has replied
  • Dansguardion drives me mad… :/

    3
    0 Votes
    3 Posts
    1k Views
    R
    Thanks for you answer. Its good to have an explanation and to see that it is not a faulty configuration but ment that way and yes I would surely appreciate any kind of example configuration. It might give me some hints about a proper setup. If I could wish something for a new version of ds (and NO I don't claim!) it would be a bit more in place help. First time I entered the gui I really didn't know where to start and how the whole system works. Took me a lot of trial and error. BTW I got the /tmp access error directly after a new installation.
  • Squid dropping connection.

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • 0 Votes
    21 Posts
    11k Views
    marcellocM
    @brasilnut: Okay - Let me rephrase my question: Where is this value? It's on the first post of this thread System -> Advanced -> Firewall Maximum Table Entries @pppfsense: I already tried some very high values for the Firewall Maximum Table Entries  with no success (System - Advanced - Firewall Maximum Table Entries = 999999999)
  • Widentd without a syslog message every single time

    1
    0 Votes
    1 Posts
    936 Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.