Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    J
    @KOM Good morning. The goal is to keep Pfsense and have another proxy option in case Squid really doesn't work anymore (from what I've researched, Squid has been discontinued).
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    RedDelPaPaR
    @bmeeks Understood. Thank for kindly for your help. I will likely be ordering a new unit soon.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG
    @netboy said in is something wrong with pfBlockerNG?: arm64 That might be a factor. I said that our code base is "bit-wise" identical - and we use the same processors. Actually, that's wrong. X86/amd64 isn't arm64 at all. So, I'm not finger pointing, but I can't test the 'arm' version, as I'm using a 4100, a amd64 device. I has a new unbound version installed yesterday. The previous version was 1.23.x - the new version is 1.24.1. To get it : ssh or console, option 8, and then pkg update pkg upgrade and again, not sure if this is valid for arm.
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    dennypageD
    @fjmp24 said in Notification: UPS ups battery is low: If I remove ignorelb directive, my UPS shuts down after 16 seconds This means your UPS is signaling a low battery. Either your battery is bad, or your UPS is bad. Most likely battery, but you never know. I suggest reaching out to Eaton support.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    M
    I am using the DNS-Update method I have to use a DNS-Sleep of 5 minutes to let the letsencrypt txt dns record update propagate. During this 5 minutes the acme-webgui times out. when the acme-webgui times out the Action list is NOT executed. How can I solve this ? Would it maybe be an idea to let the acme.sh script execute the actions in the action list as a post-hook instead of the web-gui? Or maybe add an option to add post-hooks in the webUI ?
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    644 Posts
    C
    @elvisimprsntr Thank you. I would not be surprised if I ended up with a lengthy solution that works but needs significant improvement. I am using a Netgate 6100 with pfSense+, starting with version 24.x. I had updated Tailscale without trouble per this discussion by using pkg add -f https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-x.y.z.pkg. This worked until pfSense+ version 25.0.07 (FreeBSD 15-CURRENT) and Tailscale upgrade 1.88.3. After several attempts and web searches, I was only able to install that upgrade by using: fetch https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.88.3.pkg, and then IGNORE_OSVERSION=yes pkg-static add -f tailscale-1.88.3.pkg. Then, I could not restart Tailscale, no matter what I tried, including the sequence: service tailscaled stop, tailscale logout, service tailscaled start, and then tailscale up.
  • Discussions about WireGuard

    714 Topics
    4k Posts
    R
    I was on PfSense version 23.xx (don't recall the xx) and was able to start the Wireguard service. I upgraded to the 25.11 beta version and now the Wireguard service will not even start. I am on Wireguard version 2.1, and I see that there are versions that go up to 2.9. How do I upgrade to a later version? The only version in the pfSense updater is 2.1. Thank you
  • Auto Config Backup Error

    4
    1 Votes
    4 Posts
    1k Views
    gregeehG
    I too have just started seeing this error.
  • System_Patches Package & Recommended Patch

    9
    4
    0 Votes
    9 Posts
    2k Views
    N
    @bingo600 My biggest apprehension was applying a patch to an already patched system and what that could mean or for that matter do to my system.
  • This topic is deleted!

    1
    0 Votes
    1 Posts
    7 Views
    No one has replied
  • two openvpn instances via tcp haproxy

    1
    0 Votes
    1 Posts
    653 Views
    No one has replied
  • Prevent packages uninstall & reinstall after restoring a config?

    5
    0 Votes
    5 Posts
    4k Views
    stephenw10S
    Still works. 6 years later. If you're running ZFS though you need different commands to remount /conf: https://docs.netgate.com/pfsense/en/latest/troubleshooting/single-user-mode.html#single-user-mode-zfs Steve
  • Application layer package recommendation?

    1
    0 Votes
    1 Posts
    619 Views
    No one has replied
  • pfsense didn't show packets to install

    2
    1
    0 Votes
    2 Posts
    907 Views
    GertjanG
    @juniorsa_ti The GUI has to be able to connect to the packet server of Netgate to download the list with available packages. The thing is, it can't. Most obvious reason : no WAN ('Internet') connection. Or a broken DNS set up. The same info is also present on the Dashboard : [image: 1662034939288-c4165dbd-f641-49d9-b1d2-1eb3265270d0-image.png] It's says my system is up to date, and the last check was made .... a couple of minuts ago. This means that my pfSense can reach Netgate's server to do the check. See these pages Troubleshooting for more info.
  • Custom error html in haproxy - not allowing entries

    2
    0 Votes
    2 Posts
    1k Views
    C
    OK. Never mind... user confusion. I decided I wanted to add some html content. I thought the process would to go to the backend definition and expand the error files section and add my html to a record called 503. But what we actually have to do is go, first, to the Files tab in the HAProxy screen, add the HTML in a record... then go back and add a reference to the file in the error files section. I put in some simple html and it rejected that. Apparently it needed some pre-html references. I could not find a good reference about what was needed but I found an example, modified it and this worked: HTTP/1.0 503 Service Unavailable Cache-Control: no-cache Connection: close Content-Type: text/html <html> <head> <title>Site Down for Maintenance</title> </head> <body style="font-family:Arial,Helvetica,sans-serif;"> <div style="margin: 10 auto; width: 960px;"> <h2>Site Maintenance</h2> </div> <p>The site is down for maintenance. If the condition persists for more than a few hours, please notify the site administrator.</p> <p>Error 503</p> </body> </html> As you were...
  • BIND DNS, IPv6, DHCPv6-PD and ACL configuration

    1
    0 Votes
    1 Posts
    848 Views
    No one has replied
  • FreeRADIUS

    3
    0 Votes
    3 Posts
    1k Views
    fatheadF
    eap_tls: (TLS) Alert read:fatal:internal error Debug: (5) eap_tls: (TLS) Server : Need to read more data: error ERROR: (5) eap_tls: (TLS) Failed reading from OpenSSL: /var/jenkins/workspace/pfSense-img-build/BUILD_NODE/amd64-ce/OS_MAJOR_VERSION/freebsd12/PLATFORM/aws/sources/FreeBSD-src-RELENG_2_6_0/crypto/openssl/ssl/record/rec_layer_s3.c[1544]:error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error Debug: (5) eap_tls: (TLS) In Handshake Phase Debug: (5) eap_tls: (TLS) Application data. ERROR: (5) eap_tls: (TLS) Cannot continue, as the peer is misbehaving. ERROR: (5) eap_tls: [eaptls process] = fail ERROR: (5) eap: Failed continuing EAP TLS (13) session. EAP sub-module failed Error: /usr/local/etc/raddb/mods-enabled/eap[3]: Failed to link to module 'rlm_tls-config': Cannot open "/usr/local/lib/freeradius-3.0.25/rlm_tls-config.so" how to wpa2&3 tls384? File does not exist? rlm_tls-config.so
  • Install Wireguard and OpenVPN?

    3
    0 Votes
    3 Posts
    1k Views
    J
    @spyder0552 said in Install Wireguard and OpenVPN?: Super simple one for you all. Is it possible to install and run Wireguard on a device that already has OpenVPN all setup and running? I really want to try Wireguard, however, I don't have the resources to setup a standalone test device so I need to use my production router...and I dont want to break anything. I assume it is just fine...but wanted to ask the group. Thanks Everyone!! It's fine. One has nothing to do with the other. I have both running on more than one pfSense. Just make sure you don't use the same IP's between the two.
  • Speedtest http issue

    1
    0 Votes
    1 Posts
    680 Views
    No one has replied
  • Package list not working

    4
    2
    0 Votes
    4 Posts
    1k Views
    V
    @jorgyate The recent is only one which is supported. If you're on CE that is 2.6.0.
  • How can I change the config file haproxy.cfg manually ? Please Help me

    1
    0 Votes
    1 Posts
    704 Views
    No one has replied
  • How to me configuration haproxy for redis cluster with autentification?

    1
    0 Votes
    1 Posts
    814 Views
    No one has replied
  • Softflowd не отправляет данные в Nfsen

    1
    0 Votes
    1 Posts
    776 Views
    No one has replied
  • Squid Proxy Server Crashing System

    1
    0 Votes
    1 Posts
    897 Views
    No one has replied
  • Squidguard and loopback questions

    1
    2
    0 Votes
    1 Posts
    769 Views
    No one has replied
  • This topic is deleted!

    1
    0 Votes
    1 Posts
    4 Views
    No one has replied
  • [Haproxy-devel] GZIP-Compression?

    3
    0 Votes
    3 Posts
    3k Views
    C
    Hello, Is there an updated step by step way to do this? It is unclear if things have been changed since this original post was made but there isn't an apparent way to do this. Thanks in advance!
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.