1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N

    Can I use pgblockerng aliases in Haproxy?

    80758505-9bad-4dad-a80b-c159be1045a2-image.png

    If it was a firewall rule, typing pfb would produce a dropdown to select.

    Here it has to be written, but will it work? Is it supported?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB

    I saw where the Netgate kernel developer updated the Suricata package in the pfSense 25.07 development branch to work with the new kernel PPPoE driver. But so far as I know that updated package has not been migrated to 2.8 CE.

    Here is the commit into the DEVEL branch: https://github.com/pfsense/FreeBSD-ports/commit/68a06b3a33c690042b61fb4ccfe96f3138e83b72.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG

    @AlexK-0 said in Can't receive GeoIP databases updates anymore, banned:

    Days ago, I received from MaxMind an email, notifying me that my country has been banned to receive GeoLite City database updates.

    You've found a reason to use a VPN.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    EChondoE

    @fxandrei Found this thread via Google. And I figured out what OP did, so here's the explanation:

    In the pfSense webpage do:

    Click on "Services" Select "Acme Certificates" Edit any of your certificate entries by clicking on the pencil icon. Scroll to the bottom of the certificate edit page and find the "Actions list" section. Click on "Add" to add a new action and fill out the information as needed. For HAProxy restarting do: Mode: Enabled Command: /usr/local/etc/rc.d/haproxy.sh restart Method: Shell Command And finally "Save" at the bottom of the cert edit page.

    As far as I can tell, the above action seems to propagate to all certificates that I have, not just a single one. I am not sure if this is just a visual bug, but just something to be aware of.

    I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess.

    Hopefully this helps you and anyone else that finds this thread via searching.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    89 Topics
    574 Posts
    A

    Hello,
    I am unable to get the Tailscale package to work. The page at VPN > Tailscale > Authentication is stuck. It displays the error "Tailscale is not online," but also shows a "Logout and Clean" button, with no option to log in.
    link text

    This state persists even after performing the following troubleshooting steps:

    Rebooting the pfSense router.

    Completely uninstalling and reinstalling the Tailscale package multiple times.

    Clearing browser cache and using a private browser window.

    Toggling the main "Enable Tailscale" checkbox in the settings.

    Checking the logs, which show the service gets a "terminate" signal and shuts down cleanly; it does not crash.

    Manually trying to delete the state file with rm /var/db/tailscale/tailscaled.state, which failed because the file does not exist.

    It appears that the package's configuration is corrupted in a way that persists even after reinstallation. Can anyone advise on how to perform a complete manual cleanup of all Tailscale files and settings?

  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Thanks for further suggestions. The tunnel is definitely up and so I don't think this is a CGNAT issue after all. WAN firewall rule is in place for UDP on port 51823 (otherwise the tunnel wouldn't work, right?). I can ping from client 1 -> client 2 and visa versa and also ping all points in between like you suggest. I just can't open an HTTPS connection from pfSenseB from Client 1 using a browser. But I can do this the other way round i.e. from Client 2 to pfSenseA

    I will try and do some packet capture to see if that reveals anything.

Log in to post
Load new posts
  • A

    Snort Won't Start

    Locked
    11
    0 Votes
    11 Posts
    4k Views
    A

    Thanks for the suggestion of looking in the system log.  After attempting start of snort (failure) and reading the log I disable some rules, retry, disable more rules, retry, etc snort starts successfully.  Each rule that was causing an error I disabled and now it's working.

    Thanks.

    AWS

  • C

    Squid general question

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    marcellocM

    @crazyzoar:

    why people give ram space for caching?

    The answer is Performance.

    Also squid is not that fast and not that smart for dynamic sites.

    Ohter point is that cache age has not much sense after 15 days for example.

  • S

    Snort, NanoBSD & Compact Flash writes

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    S

    Might have been too quick uninstalling it, I didn't tune at all, might have enabled too many patterns as well.

    Not required for my environment anyway, so couldn't be bothered ;D

  • M

    IMSpector IP information

    Locked
    1
    0 Votes
    1 Posts
    876 Views
    No one has replied
  • T

    Proxy filter SquidGuard: Times dont work

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • C

    Snort: how to exclude a lan host from scans?

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    S

    After creating a whitelist, you have to add it in the Snort Interface Settings to a particular interface.

  • C

    Zabbix Proxy will not install in pfSense 2.0.1

    Locked
    11
    0 Votes
    11 Posts
    4k Views
    C

    Fantastic!! Installs ok and talking to my Zabbix server.
    Thank you very much four your help.
    Richard

  • T

    Snort: DynamicPlugin: Rule…rule will not be used.

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    T

    @SeventhSon:

    This is snort starting up and telling you what it loading and not loading. By default a lot of rules are disabled, so you will get a lot of these.

    Thanks, I kinda figured this after posting my question. But good to have conformation :)

  • N

    Want to configure Proxy server: Authentication

    Locked
    6
    0 Votes
    6 Posts
    10k Views
    N

    Sorry, I don't want to be unfriendly. Just want to make sure we are talking about the same config menu ;o)

    As I said above I didn't use that in the past but perhaps this thread will help you:
    http://forum.pfsense.org/index.php?topic=11153.0
    http://forum.pfsense.org/index.php/topic,2004.0.html
    http://forum.pfsense.org/index.php/topic,41501.0.html

  • F

    Avahi fails to install due to dbus dependancy not being met

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    F

    That worked a treat!

    Thanks Marcello!

  • J

    Files.pfsense.org down?

    Locked
    29
    0 Votes
    29 Posts
    12k Views
    C

    Please start a new thread describing what you're attempting code11x2.

  • T

    Snort Won't Start After Upgrade

    Locked
    301
    0 Votes
    301 Posts
    233k Views
    C

    Locking this thread so it won't get hijacked over and over by numerous different issues, please start new threads instead.

  • M

    Squid reverse redirect

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    A

    @Modivion:

    Dear Members,

    I've installed squid and configured it.

    I just need one more thing to configure, which I dont know how to do.

    When users typ in http://remote.xxxx.com I want them to be redirected to https://remote.xxxx.com/OWA

    Any tips how to configure this?

    Many thanks!

    I did it outside of pfS via my DNS manager from my domain manager (like GoDaddy).  Basically it's subdomain forwarding, takes about 5 minutes if you can find your login creds to your domain manager web site.  I had a hard time trying to make it all within pfS.

    AWS

  • P

    PfSense 2.0.1-RELEASE with Squid & HAVP = major problems

    Locked
    27
    0 Votes
    27 Posts
    20k Views
    marcellocM

    @lpallard:

    The frustrating part is that pfsense with NO packages works PERFECTLY.  So I wont blame pfsense devs because I have used it for more than  a year now and it was flawless until I installed the snort/squid/squidguard/havp  >:( stuff..

    Just like I said, packages are contributions, some are maintained by core team, but not all.

    Uncheck block ofenders from snort, so it will not block false positives and not deny your dns resolution.

  • M

    Snort with cisco port mirrorring

    Locked
    7
    0 Votes
    7 Posts
    7k Views
    M

    my pfsense box has 2 nics. 1 nic dedicated to management… 1 nic connected to the mirrored port on the cisco switch.

    I figured that by doing it that way i wouldn't get any "pollution" from management traffic on the IDS interface.

  • J

    Snort, pfBlocker, and/or pfSense minor issue

    Locked
    14
    0 Votes
    14 Posts
    7k Views
    marcellocM

    @darklogic:

    I am still having the same issue with when you click on the snort menu and then try to go to pfblocker, I will get the 404 page cannot be found error.

    It's fixed now with no version bump, just reinstall package.

  • P

    Packages don't install correctly:out of swap space

    Locked
    12
    0 Votes
    12 Posts
    4k Views
    P

    256MB is guess (isn't that old, maybe 2y).The Problem occured before installing any packages btw.
    Internet also fails (on LAN) after a while (while being up).

    last pid: 28374;  load averages:  0.69,  1.52,  0.89                                    up 0+00:08:14  18:47:35
    112 processes: 2 running, 93 sleeping, 4 zombie, 13 waiting
    CPU:  0.4% user,  0.4% nice,  0.8% system,  0.4% interrupt, 98.1% idle
    Mem: 66M Active, 1820K Inact, 61M Wired, 764K Cache, 34M Buf, 104M Free
    Swap:

    PID USERNAME  PRI NICE  SIZE    RES STATE    TIME  WCPU COMMAND
      10 root      171 ki31    0K    8K RUN      2:17 89.99% idle
    21883 root        65  20 10748K  4860K kqread  0:01  1.95% bandwidthd
        0 root      -16    0    0K    48K sched    0:39  0.00% {swapper}
      11 root      -64    -    0K  104K WAIT    0:20  0.00% {irq14: ata0}
        9 root      -16    -    0K    8K psleep  0:02  0.00% pagedaemon
      11 root      -40    -    0K  104K WAIT    0:02  0.00% {swi2: cambio}
        4 root        -8    -    0K    8K -        0:02  0.00% g_down
      13 root      -16    -    0K    8K -        0:02  0.00% yarrow
    46463 root        52    0 33116K    0K accept  0:01  0.00% <php>11 root      -68    -    0K  104K WAIT    0:01  0.00% {irq11: vr1}
    39477 root        64  20 10748K  3852K bpf      0:01  0.00% bandwidthd
    44678 root        76    0 34140K    0K accept  0:01  0.00% <php>11 root      -68    -    0K  104K WAIT    0:01  0.00% {irq10: vr0}
      11 root      -32    -    0K  104K WAIT    0:01  0.00% {swi4: clock}
        3 root        -8    -    0K    8K -        0:01  0.00% g_up
    46390 root        76    0 34140K    0K accept  0:01  0.00% <php>15 root      -16    -    0K    8K psleep  0:01  0.00% vmdaemon
    46945 root        60    0 34140K    0K accept  0:01  0.00% <php>14 root      -64    -    0K    72K -        0:01  0.00% {usbus1}
      35 root        -8    -    0K    8K mdwait  0:01  0.00% md1
    39810 root        64  20  8700K  3132K bpf      0:01  0.00% bandwidthd
    8548 root        44    0  7992K  1948K select  0:00  0.00% sshd
    40169 root        44    0  6588K  2964K kqread  0:00  0.00% lighttpd
    16571 root        64  20  3656K  512K wait    0:00  0.00% sh
    40955 root        76    0 32092K    0K wait    0:00  0.00% <php>41487 root        76    0 32092K    0K wait    0:00  0.00% <php>40749 root        70    0 32092K    0K wait    0:00  0.00% <php>41179 root        76    0 32092K    0K wait    0:00  0.00% <php>42026 root        44    0  3316K  996K select  0:00  0.00% apinger
    11278 root        44    0  9488K  2644K select  0:00  0.00% {mpd5}</php></php></php></php></php></php></php></php>

  • S

    IMSpector for pfSense 2.0?

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    marcellocM

    Did you applied the patch for imspector?

  • L

    Squid and whitelist

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    L

    Hi, i found two webpages that was blocking…

    Thanks for all!

  • S

    Packege manager issues

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    S

    @Nachtfalke:

    Package manager for me is working and downloading and installing files/packages.

    Is this for a specific package ?

    No This was for the whole manager.

    Things seem to be back to normal today. This was not an isolated issue. This seem to be global at the time it happen…. Today everything seems back to normal.

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.