1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    A
    Docker image for squid 7.3 and above https://hub.docker.com/r/fredbcode/squid If pfsense does not push the update.

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    tinfoilmattT
    @vicking said in No blocks on IP: Is it a bad idea to have the action set to deny both instead of inbound only? Question is squarely for admin. Per the infoblock which explains, in part, the "Deny Inbound", "Deny Outbound", and "Deny Both" actions: 'Deny' Rules: 'Deny' rules create high priority 'block' or 'reject' rules on the stated interfaces. They don't change the 'pass' rules on other interfaces. Typical uses of 'Deny' rules are: Deny Both - blocks all traffic in both directions, if the source or destination IP is in the block list Deny Inbound/Deny Outbound - blocks all traffic in one direction unless it is part of a session started by traffic sent in the other direction. Does not affect traffic in the other direction. One way 'Deny' rules can be used to selectively block unsolicited incoming (new session) packets in one direction, while still allowing deliberate outgoing sessions to be created in the other direction. In other words: When set to "Deny Inbound", incoming connection requests from WAN hosts are blocked and therefore no state will be created. However a LAN host can still establish state to an otherwise listed IP. If set to "Deny Outbound", outgoing connection requests from LAN hosts are blocked and therefore no state will be created. However an incoming connection request from an otherwise listed IP to an 'open' WAN port can still establish state. If set to "Deny Both", both incoming connection requests and outbound connections requests are blocked and therefore no state will be created regardless of connection direction.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    M
    I am using the DNS-Update method I have to use a DNS-Sleep of 5 minutes to let the letsencrypt txt dns record update propagate. During this 5 minutes the acme-webgui times out. when the acme-webgui times out the Action list is NOT executed. How can I solve this ? Would it maybe be an idea to let the acme.sh script execute the actions in the action list as a post-hook instead of the web-gui? Or maybe add an option to add post-hooks in the webUI ?

  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?

  • Discussions about the Tailscale package

    93 Topics
    654 Posts
    C
    @luckman212, Thanks for your suggestion. I will check what I have in /usr/local/pkg/tailscale/state, and also the RAM disk settings others have brought up. I could learn more about where Tailscale and pfSense store system files. If I find anything worth sharing, I will let you know.

  • Discussions about WireGuard

    715 Topics
    4k Posts
    H
    @RNM-0 Thanks for your comment and sharing your fix. Unfortunately I don't want to take down pfsense and downgrade versions. I'm currently fine at the moment since I'm using Tailscale and that works. I also fixed the other crash I was having with pfblocker by changing a line code that wasn't pushed out under this version. Hopefully the stable release won't take too long to release but it appears there's still some open bugs that need to be fixed before that happens, and ironically, both the pfblocker and wireguard issues aren't on that list of bug fixes.
Log in to post
Load new posts
  • S

    Snort unexpectedly terminates / signal 11 error

    Locked
    4
    0 Votes
    4 Posts
    1k Views
    L
    Took me some time to figure it out myself - couldn't find anything on the web. At least now it can be found on the web  ;) Is it a bug? I thought that classtype is not mandatory. Actually all goes well until snort try to output to the alert log.
  • W

    How to reset/delete Squid 3 configurations?

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    marcellocM
    @whanksta: How do I do that via the console interface? Backup /conf/config.xml And edit configuration carefully using viconfig.
  • S

    SquidGuard Installation

    Locked
    8
    0 Votes
    8 Posts
    3k Views
    D
    Check this link for amd64 http://www.pfsense.org/packages/config/squidGuard/squidguard_acl.xml Must be downloaded via browser.
  • S

    Squid Installation

    Locked
    4
    0 Votes
    4 Posts
    1k Views
    D
    Probably you have common problem with http://forum.pfsense.org/index.php/topic,58194.0.html
  • S

    Snort 2.9.2.3 pkg v. 2.5.4 Non start issue solved for myself atleast..

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    S
    agree on that onhel and thanks for your reply. facts I can consistently count on a superduper working and smooth snort until next reboot from a new reinstalled snort + interface defining again. I can consistently get snort up and running doing the package lock clear and reinstall packages method. and I will get this paticular error after a reboot of the pfbox: /libexec/ld-elf.so.1: Shared object "libmysqlclient.so.18" not found, required by "snort" when trying to manually start snort. ofc cant start in in gui either when i see this. does anyone have a workaround or a theory about why snort dont find / use this file…..its there allready i see when im finding for it? snort was doing fine consistenly until i upgraded yesterday =) Going to build a new vm later tonite for this. Will put only snort on it....and see what will happen. Best Regards
  • A

    Nut remote LAN access broken since pfsense 2.0.2

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    A
    Hi Gloom, :) Thanks I guess the problem was that I was mixed up with the fields and that 'localhost' would not be accepted at the 127.0.0.1 address. Now it works: If: LAN Proto: TCP Scr. addr/Ports: * / * Dest Addr/Ports: 192.168.1.1/3493 NAT IP/Ports: 127.0.0.1/3493 Maybe the nut settings page should describe this a bit better. Thanks all, Alfredo.
  • Z

    PfBlocker whitelist issues

    Locked
    9
    0 Votes
    9 Posts
    3k Views
    Z
    I did not get quite the rest I would have liked. Now even having it update from a dropbox link I am having to constantly refresh the link to the file to get it to work. ARGH…. OK. Alias setup, set as first rule in firewall, list auto updates every hour from an external linked file. What could I be missing? From what I've seen the setup is the same as the settings on the other firewall in our other office, which is not having any issues. What else can I look at to track down this issue? EDIT: I did notice a warning on the server this morning. Filter Reloaded - Some unresovable aliases (or something like that).
  • D

    Throttling Streaming Media with Lusca (cacheboy)?

    Locked
    8
    0 Votes
    8 Posts
    4k Views
    D
    @mikesamo: just use layer 7 filter with limiter. Thanks for the reply. I've set up the L7 filtering and it seems to be working well at keeping the videos down to a reasonable level. Is it possible to filter all binary downloads with the layer 7 filter on pfsense as well? I noticed ".EXE" in the list, and have it selected but I've noticed downloads from an adobe update site that cause our bandwidth to max out for a couple of minutes and at least in adobe reader there is no option to change update schedule.
  • W

    Cron package problems

    Locked
    9
    0 Votes
    9 Posts
    3k Views
    P
    There should already be a filterdns process running. It wakes up every 5 minutes, checks the IP address of the names in aliases, and updates the pf/ipfw tables. I can see it on both a 2.0.2 and 2.1-BETA1 system: $ ps ax | grep filterdns 10168  ??  S      0:00.01 sh -c ps ax | grep filterdns 10550  ??  R      0:00.00 grep filterdns 50475  ??  INs    0:00.01 /usr/local/sbin/filterdns -p /tmp/filterdns.pid -i 30 If I understand correctly, what you need should already be happening. Use Diagnostics->Tables to see the current IPs that are in each table to confirm that it is working.
  • U

    DansGaurdian XMLRPC Sync

    Locked
    6
    0 Votes
    6 Posts
    2k Views
    P
    Sorry I don't know how this thread is relevant, please indicate where to look for me, I don't get an Invalid return payload error and my settings doesn't sync at all. Ah, sry. I didn´t read your error log correctly. I think you have to add a static route, otherwise your box's can´t communicate through the IPSEC VPN - > http://doc.pfsense.org/index.php/Why_can%27t_I_query_SNMP,_use_syslog,_NTP,_or_other_services_initiated_by_the_firewall_itself_over_IPsec_VPN%3F
  • W

    Varnish help on setting up for multiple internal webservers

    Locked
    66
    0 Votes
    66 Posts
    33k Views
    S
    @marcelloc: @skipmed: what is wrong? thanks in advance what backend status you get on dashboard varnish widget? both up with green arrow no other value is shown in the fields "cache hits" etc., just shows the two backends with status thanks
  • B

    Mod_security Issues - Won't show in menu

    Locked
    1
    0 Votes
    1 Posts
    984 Views
    No one has replied
  • _

    Snort update to 2.5.3: not starting with fatal error bad-traffic.so

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    bmeeksB
    I am the author of the latest Snort changes, and I also saw the same error when I did a re-install versus an uninstall followed by a re-install.  Searching back through the forum messages, there is a thread about this being a problem with the package manager tools and not with any individual package.  The recommendation is to always do an uninstall and then a re-install, instead of just clicking the re-install icon.  It would be nice if the simple re-install would work, though. As for the changes in this Snort package, probably the most important is the new auto-flowbits resolution feature.  However, in order to for this work properly after a full re-install; you need to first enable the feature in the CATEGORIES tab, update the rules files in the UPDATES tab, and then stop and restart Snort.  Otherwise, the new flowbit resolution won't be registered in the snort.conf file.  I just discovered this glitch during my uninstall and re-install testing today.  I have a fix in mind that I will submit in a day or two for Ermal to consider.  In the meantime, just remember to cycle Snort on your interfaces one more time AFTER doing the initial rules download/update with the UPDATES tab.  Thereafter, things will work fine. Bill
  • D

    Snort and Interface Enable/Disable

    Locked
    60
    0 Votes
    60 Posts
    23k Views
    K
    Thanks all for fixing the update error, I will fix it tonight when I get home.
  • D

    Squidguard Schedule NOT working

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    D
    It is working now…THANK YOU !!! However, I find it strange.  I looked at the link you sent and found that the filter config was missing the "within" clause which was simply a check box in the groups acl, however, the section that contains that check box was missing on some versions of the gui.  I had a snap-shot backup of the machine from three weeks ago when I re-formatted did a clean install of 2.02 and and there entire Time section is missing from the GUI config. Anyway, after all current updates have been applied, the Time selection is there and all is well.  It must have been something I did, but THANK YOU again for your swift response ! pfSense RULES !
  • I

    Pfsense on nanoBSD/embedded device with CF & dansguardian?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    I don't know about dansguardian, but squid and squidguard can run on embedded units provided you disable caching (set a null cache type, and set to 0) and also make sure logging is off.
  • I

    Lightsquid not working since mod_cgi was removed

    Locked
    6
    0 Votes
    6 Posts
    2k Views
    jimpJ
    This should be fixed on current snapshots dated 1/21 or later.
  • T

    Strikeback with iplog and nmap

    Locked
    53
    0 Votes
    53 Posts
    51k Views
    L
    Clicking an IP in Strikeback gives this error now New site coming soon… Visit orlando.dnstools.com or houston.dnstools.com for the old site. I went into /usr/local/www/packages/strikeback/strikeback.php and changed all instances of http://dnstools.com/... into http://orlando.dnstools.com/... and that fixed it. I also tested houston.dnstools.com; it works as well
  • M

    Blocking Youtube ads with SquidGuard

    Locked
    2
    0 Votes
    2 Posts
    6k Views
    B
    Came across this when I switched from IPcop to Pfsense. In ipcop I used to use privoxy to block all ads globally. I never did find a howto on doing this so I created one. If it helps you or others hear is a link http://www.howtoforge.com/node/7237 Note privoxy is not an official Pfsense package so you may not get support on hear if you run into problems
  • G

    Squidguard empty Target Rules

    Locked
    7
    0 Votes
    7 Posts
    9k Views
    D
    @Gabri.91: @dvserg: Need Enable blacklist. Sorry I didn't see that flag, now it works ;D  ;D General Settings tab.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.