Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N

    Can I use pgblockerng aliases in Haproxy?

    80758505-9bad-4dad-a80b-c159be1045a2-image.png

    If it was a firewall rule, typing pfb would produce a dropdown to select.

    Here it has to be written, but will it work? Is it supported?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB

    I saw where the Netgate kernel developer updated the Suricata package in the pfSense 25.07 development branch to work with the new kernel PPPoE driver. But so far as I know that updated package has not been migrated to 2.8 CE.

    Here is the commit into the DEVEL branch: https://github.com/pfsense/FreeBSD-ports/commit/68a06b3a33c690042b61fb4ccfe96f3138e83b72.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG

    @AlexK-0 said in Can't receive GeoIP databases updates anymore, banned:

    Days ago, I received from MaxMind an email, notifying me that my country has been banned to receive GeoLite City database updates.

    You've found a reason to use a VPN.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG

    @EChondo

    What's your pfSense version ?
    The instructions are shown here :

    1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png

    A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate.

    @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy:

    I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess.

    No need to wait x days.
    You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    89 Topics
    574 Posts
    A

    Hello,
    I am unable to get the Tailscale package to work. The page at VPN > Tailscale > Authentication is stuck. It displays the error "Tailscale is not online," but also shows a "Logout and Clean" button, with no option to log in.
    link text

    This state persists even after performing the following troubleshooting steps:

    Rebooting the pfSense router.

    Completely uninstalling and reinstalling the Tailscale package multiple times.

    Clearing browser cache and using a private browser window.

    Toggling the main "Enable Tailscale" checkbox in the settings.

    Checking the logs, which show the service gets a "terminate" signal and shuts down cleanly; it does not crash.

    Manually trying to delete the state file with rm /var/db/tailscale/tailscaled.state, which failed because the file does not exist.

    It appears that the package's configuration is corrupted in a way that persists even after reinstallation. Can anyone advise on how to perform a complete manual cleanup of all Tailscale files and settings?

  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Thanks for further suggestions. The tunnel is definitely up and so I don't think this is a CGNAT issue after all. WAN firewall rule is in place for UDP on port 51823 (otherwise the tunnel wouldn't work, right?). I can ping from client 1 -> client 2 and visa versa and also ping all points in between like you suggest. I just can't open an HTTPS connection from pfSenseB from Client 1 using a browser. But I can do this the other way round i.e. from Client 2 to pfSenseA

    I will try and do some packet capture to see if that reveals anything.

  • WhideScreen Package…

    7
    0 Votes
    7 Posts
    2k Views
    K

    The complaints about widescreen being broken should be lodged here:

    Somewhere in this threat JIMP has posted a secret link to a ubber hush-hush temp-fix for the widescreen problem for 2.1

    The prize for finding the link may include working wide-screen or unexpected side effects.  Not sure yet.

    http://forum.pfsense.org/index.php/topic,62410.msg364641.html#msg364641

  • Pfsense 2.1 HAVP bug?

    2
    0 Votes
    2 Posts
    1k Views
    C

    It seems to have fixed itself. I had to put 2.0.3 back on and then perform the updates to get Havp running. When I upgraded again to 2.1 it started just fine.

  • Snort command

    3
    0 Votes
    3 Posts
    6k Views
    T

    snort on pfSense 2.1

    can you provide me with an example script that would apply the changes to the enforcing rules file after each automatic rule update, or any change in enabled rules preprocessors.

    thanks

  • PfSense 2.1-RC1 + Squid3 + DansGuardian - Not filtering correctly

    13
    0 Votes
    13 Posts
    7k Views
    T

    Got merged on Github, looks to be fixed on new installs.

  • PfSense-2.1-RELEASE-AMD64 Squid3 and Dansguardian not filtering anymore?!

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Pfsense 2.1-RELEASE (amd64) + Snort

    2
    0 Votes
    2 Posts
    933 Views
    A

    Nevermind, i figured it out, another firewall was blocking it from accessing the emerging threats rule set.

    Thanks.

  • LightSquid report - blank page/no report

    2
    0 Votes
    2 Posts
    2k Views
    K

    How many interfaces is lightsquid supposed to report on for you?

    Are there firewall rules that would prevent all the interfaces from seeing each other?

    In services > proxy server > access control

    in the External Cache-Managers, is the IP for all of the interfaces you are attempting to monitor listed there?

  • 0 Votes
    3 Posts
    2k Views
    P
    /usr/local/pkg/autoconfigbackup.inc

    It sounds like your system has some autoconfigbackup setting enabled (or maybe just having the package mentioned in the config is enough) and thus various operations on the system try to invoke that automagically. But the "inc" file is only half there.
    I would get the file from GitHub - https://raw.github.com/pfsense/pfsense-packages/master/config/autoconfigbackup/autoconfigbackup.inc - copy the raw code from the GitHub raw display. Use Diagnostics->Edit File to open /usr/local/pkg/autoconfigbackup.inc , select all, paste the good code over the top, save.
    Now the code should be callable. Then you can access System->Packages and (hopefully) remove or reinstall or whatever you want.

  • Question about snort - help

    9
    0 Votes
    9 Posts
    2k Views
    F

    Another image

    777.png
    777.png_thumb

  • Pkg_add never works

    8
    0 Votes
    8 Posts
    2k Views
    K

    Well then…

    I think it might be worth your time to go ahead with a 64GB install just to say you did if you can lay your hands on more RAM later.
    RAM can be had for cheap and running squid with a RAM cache makes things speedy.
    You can simultaneously fulfil your childish-gimmicky love of the word 64-bit while preparing for future upgrade.
    Its supported.  http://ark.intel.com/products/59682

    pebkac.jpg
    pebkac.jpg_thumb

  • Pfsense 2.1-RC1 squid cache setup recommendation for home network

    6
    0 Votes
    6 Posts
    5k Views
    K

    Well - I only run squid at home here and with a house full of people banging away on keyboards it takes weeks to fill 25000 of disk cache for me.  Assuming the cache isn't stale, that might = better performance, but I'd bet it would make a much bigger difference if a couple hundred people were on it or more.

  • Syslog-ng and arpwatch - i don't see the lan interface listed ?

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Squid on a NanoBSD installation of pfSense 2.0.1

    6
    0 Votes
    6 Posts
    5k Views
    F

    Personally, I think the blacklists from Squidblacklist.org are much better than the ones from Shallalist.de that are the default with SquidGuard.  8)

  • Can't connect to get packages

    3
    0 Votes
    3 Posts
    1k Views
    A

    @Amirkabir:

    Have you changed files like globals.inc? for example, product_website must be valid.

    I haven't edited any files, I went in and looked at the file you mentioned and that variable points to "www.pfsense.org"

    EDIT

    I've been fighting with this for several hours with no luck and now out of the blue it works… It's baffling to me why it would suddenly start working without me doing anything, but I guess i can't complain >_>

  • SquidGuard syntax question.

    9
    0 Votes
    9 Posts
    2k Views
    C

    @dvserg:

    The Squid/SquidGuard can not take users/groups from User Manager. Look exists Squid auth methods - squid have self local users list & it is (usernames) also can be used with SquidGuard. Squid - master application, that defined how users will be identified; and, the squidGuard - a slave application, that only receives this usernames for filtering.

    Nice a straight answer thanks so much!  I will look in to this and I will also be clicking your thanks button!

    DrClaw

  • Cloning Package repository issue

    5
    0 Votes
    5 Posts
    1k Views
    ?

    What script in pfsense tools can be used to build PBI?

  • Barnyard2 can't find library

    6
    0 Votes
    6 Posts
    3k Views
    N

    I tried everything above and still did not solve the problem for me – barnyard2 would not start on reboot. I had to reinstall snort each time.

    A simple symlink solves the problem though. See my reply in this other thread:

    http://forum.pfsense.org/index.php/topic,65090.msg362664.html#msg362664

  • Automatic DNS server configuration with PPTP

    1
    0 Votes
    1 Posts
    859 Views
    No one has replied
  • IP watchdog or IP monitor

    7
    0 Votes
    7 Posts
    2k Views
    C

    @michel2013:

    Hi,

    I was looking for a certain package that can show(prefere html view) status of several static ip address within the network (Access Points) . And it would be great if PfSense can sent a email when one of the configured IP's is down.

    For example:

    IP                                Status                              Up or down since
    192.168.1.201            up                                    2013-09-09 5:12 AM
    192.168.1.202            up                                    2013-09-09 5:12 AM
    192.168.1.202            down                                2013-06-05 1:45 PM

    If this can not be done , is there maybe an easy way to include a PHP page within the PfSense admin environment to implement this functionality?

    I don't know if this will help you much but if you have a PC with Windows there are 2 tools I find useful in this instance.

    http://www.softperfect.com/products/networkscanner/  <– Great tool to see whats happening now and link to connect to various services and devices.

    http://www.overlooksoft.com/fing This will do what you want on demand.  It keeps track of all the computers as they appear and lets you know if there offline.  If you have a VPN you can access it right from your smart phone from anywhere.

    Hope you find these useful.

    DrClaw

  • PfJailctl jail thinks it's i386?

    3
    0 Votes
    3 Posts
    1k Views
    J

    I see. Thanks for the reply. ezjail works fine for now then.

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.