pfSense Packages

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Subcategories

Cache/Proxy

Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

3.8k
Topics

20.6k
Posts

C

Hi all. After updated squid should I use or any alternative ?

squid.png
IDS/IPS

Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

2.2k
Topics

15.7k
Posts

B

@tchadrack:
I was not able to replicate the exact behavior you are seeing, but I did find some potential edge-case scenarios where the PID file might get deleted prematurely.

I've submitted Pull Requests to address some issues in the package and also cleanup the Suricata binary startup and shutdown scripts. Look for a new 7.0.8_1 Suricata package version to appear in the near future containing these improvements.

The Pull Requests are waiting on the Netgate developer team to review and merge them into the pfSense branches for CE, DEVEL, and Plus. Here is the PR for the current CE Release: https://github.com/pfsense/FreeBSD-ports/pull/1404.
Traffic Monitoring

Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

558
Topics

2.7k
Posts

K

Simple configuration, WAN1-LAN-WAN2-UNUSED. I’d like to view both WAN1 and WAN2 at the same time (ideally, same pane). At the moment, the closest I can come is running multiple browser windows. Am I simply missing a configuration option, or is there an existing RFE?
pfBlockerNG

Discussions about the pfBlockerNG package

2.6k
Topics

19.3k
Posts

C

According tò the site, they have decided to hang up their hats.
https://www.nixspam.net/

This list should be removed from pfBlockerNG
UPS Tools

Discussions about Network UPS Tools and APCUPSD packages for pfSense

89
Topics

2.3k
Posts

Z

@dennypage I will go for your suggested solution:

UPS 1: pfSense as NUT server and the rest as NUT clients
UPS 2: one system attached to the UPS as the NUT server and the others as NUT clients

Since I don't have enough knowledge of NUT I guess I will be back several time to this forum.
Thanks for you gudelines and Merry Christmas !!!
ACME

Discussions about the ACME / Let’s Encrypt package for pfSense

482
Topics

2.7k
Posts

I

Hello,

Since 24.11 I've had PHP errors flagged in the pfsense interface, I tracked them down to ACME so thought the simplest thing would be to reinstall. I get this on install now...
Executing custom_php_install_command()...<pre style="white-space: pre-wrap;">PHP ERROR: Type: 1, File: /usr/local/pkg/acme/acme.inc, Line: 2938, Message: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/acme/acme.inc:2938 Stack trace: #0 /usr/local/pkg/acme/acme.inc(2916): pfsense_pkg\acme\acme_convert_letsencryptv1_to_letsencryptv2() #1 /etc/inc/pkg-utils.inc(800) : eval()'d code(1): pfsense_pkg\acme\acme_custom_php_install_command() #2 /etc/inc/pkg-utils.inc(800): eval() #3 /etc/inc/pkg-utils.inc(917): eval_once() #4 /etc/rc.packages(76): install_package_xml() #5 {main} thrown</pre>===== Message from php83-ftp-8.3.12:
Running on a Netgate 3100, no other mods, very vanilla.

Any ideas?
FRR

Discussions about the FRR Dynamic Routing package on pfSense

283
Topics

1.2k
Posts

M

@michmoor said in FRR 10 coming with script support ?:

Yep yep that's right. Sorry for confusing issues.

Np, we need more people engaged in this, FRR is a great software but it is not working smoothly with pfsense IPsec VTIs.
Tailscale

Discussions about the Tailscale package

77
Topics

436
Posts

E

@atlmcw

I had no issues.
WireGuard

Discussions about WireGuard

647
Topics

3.4k
Posts

L

ok, maybe let's take a step back. You wrote that it works once you disable IPv6 in your WAN interface.

Are you using IPv6 at all? If yes, have you configure IPv6 for your wireguard tunnel?

Maybe it's worth checking out the video from Chris McDonald: https://www.youtube.com/watch?v=wYe7FzZ_0X8
Chris is the maintainer of the wireguard package for pfSense. In this video he shows the config for a wireguard tunnel for IPv4 AND IPv6

D

Please add autossh

• • doctorxray

1

0
Votes

1
Posts

122
Views

No one has replied
M

HAproxy and Plex, help to understand

• • mcury

4

0
Votes

4
Posts

3.7k
Views

M

@waffull
I've been trying tot HAproxy to work how I want as well but I think I am missing a step.

I can get it to work so long as I include the port number with the address. Which is what I was trying to avoid. I think the problem is that if youre using a port other than 80 or 443 it doesn't forward to those ports (e.g. 5055). The problem I seem to have is that I have a linux box with a handful of apps that all run on different ports. I could set one of them to 443 or another to 80 and I think HAproxy would work how I want, but that would really limit how many apps that box would be able to run. Unless I am missing some step.. With my understanding if plex is on its default 32400 then you couldn't go to plex.myhouse.com without adding the port to the end.. If I am wrong I would be happy to know where I am wrong and what I can do to fix it.
W

sshguard update question

• • wgstarks

10

0
Votes

10
Posts

393
Views

G

@Gertjan

@wgstarks : you double clicked posted ?
W

How to use the filer package?

• • wgstarks

3

0
Votes

3
Posts

131
Views

W

@mvikman
Thanks. Looks like it has the ability to create a file but no way to add a file or edit/delete a file. There is also a sync tab but the documentation appears to be missing for that. It just links to the pfsense docs so no idea what that does or how to use filer to modify the auto config backup xml.
N

freeRadius and CRL (certification revocation list) not working - bug with spaces and underscores

• • newbie1975

1

0
Votes

1
Posts

175
Views

No one has replied
W

sshguard update question

• • wgstarks

1

0
Votes

1
Posts

82
Views

No one has replied
L

FreeRadius multiple clients problem

• • Laszlo82

2

0
Votes

2
Posts

103
Views

L

Got it, shared secret contained a closing bracket and the client config file misunderstood that.
L

Upgrade pfSense using a repository proxy (Nexus OSS) problem

• • luckybuilding

1

0
Votes

1
Posts

76
Views

No one has replied
A

FreeRADIUS handing out IPs even when MAC auth fails

• • aaronssh

6

0
Votes

6
Posts

187
Views

A

@keyser Thank you, I was wondering if that is was the case! I will follow up with the switch vendor.
R

Cloudflare DDNS update request no longer valid

• • Ritmo2k

3

0
Votes

3
Posts

154
Views

R

@Gertjan My bad, I am sorry.

I did search but I didn't notice the default is to search by titles only.

Thanks for the nudge.
F

many problems after upgrading service watchdog

• • fbrunken

9

0
Votes

9
Posts

251
Views

F

@SteveITS All back to normal. And the fix is really simple. I did a restore of my config and everything was back working again... Thanks again.
F

Does FreeRADIUS (or any other pfSense package) support RadSec? (RADIUS over TLS 2083/tcp)

• • Finger79

2

0
Votes

2
Posts

612
Views

S

Hi @Finger79

have you found any information about it?
For me it looks like PFsense itself does also not support RadSec as it is defined in RFC from 2012. Nevertheless only a view vendors support it at all.

Maybe this changes after the Radius-blast issue.

br
Thomas
B

Is the current OpenVPN server package, openvpn-2.6.8_1, for pfSense secure?

• • beedsley

3

0
Votes

3
Posts

142
Views

B

@kprovost Good to know, thank you.
S

CVE-2024-7589

• • sokeada

6

0
Votes

6
Posts

402
Views

S

@Gertjan your instruction is make sense to me. I already applied that too except turn on/off ssh via GUI when needed. That's another tip. Thanks you so much.
P

Suricata - How to apply different blocking rules per subnet?

suricata blocking rules • • pslinn

4

0
Votes

4
Posts

157
Views

B

Suricata by default places the physical interface in promiscuous mode, so all traffic traversing the physical interface is seen by all Suricata instances running on the physical interface. That means there is no benefit to creating separate Suricata instances for each VLAN, because a single instance will see the traffic from all VLANs.

You can, to a limited extent, tailor how a given Suricata instance responds to traffic by using customized HOME_NET and/or EXTERNAL_NET variables and making sure all the rules you are enabling use the $HOME_NET and $EXTERNAL_NET conditionals in the rule text.
B

Official Wazuh agent support?

• • buggz

2

2
Votes

2
Posts

278
Views

B

@buggz I second this. It would make things much easier than enabling the FreeBSD repos, if that still even works. I might end up giving it a whirl with one of my internal fws. I've also considered the syslog route but the agent seems like it may provide more info/customization etc.
A

Pfsense new install no software packages available

• • adrianp918

38

0
Votes

38
Posts

21.4k
Views

B

Thanks for all the replies.

I ran the upgrade in the command line
pfSense-upgrade -y
and am on 2.7.2 now.

All packages seems to be populating again.
C

Crowdsec finally comming to pfSense

• • cloudroot

66

2
Votes

66
Posts

10.2k
Views

W

@wgstarks said in Crowdsec finally comming to pfSense:

@mmetc said in Crowdsec finally comming to pfSense:

@wgstarks said in Crowdsec finally comming to pfSense:

[24.03-RELEASE][root@heimdall.dahoney.me]/root: pkg add -f https://github.com/crowdsecurity/pfSense-pkg-crowdsec/releases/download/v0.1.3-1.6.2/crowdsec-firewall-bouncer-0.0.28_3.pkg Fetching crowdsec-firewall-bouncer-0.0.28_3.pkg: 100% 4 MiB 3.8MB/s 00:01 Installing crowdsec-firewall-bouncer-0.0.28_3... pkg: wrong architecture: FreeBSD:14:amd64 instead of FreeBSD:15:amd64 Extracting crowdsec-firewall-bouncer-0.0.28_3: 100%

If you click "Assets" on the release page you will find the archive for your version

https://github.com/crowdsecurity/pfSense-pkg-crowdsec/releases/download/v0.1.3-1.6.2/freebsd-15-amd64.tar

Download, untar and then pkg install in the right order.

Also not sure what the commands are to download, untar and install since I’m pretty sure the links will change for the untarred files.

Tracked down the answers for myself.
To download-
fetch <link to tarball>
To untar-
tar xvf <name of file>
Install commands-
# setenv IGNORE_OSVERSION yes # pkg add -f /root/abseil-20230125.3.pkg # pkg add -f /root/re2-20240501.pkg # pkg add -f /root/crowdsec-firewall-bouncer-0.0.28_3.pkg # pkg add -f /root/crowdsec-1.6.2.pkg # pkg add -f /root/pfSense-pkg-crowdsec-0.1.3.pkg
Install whitelist-
sudo cscli parsers install crowdsecurity/whitelists
I deleted the originally installed pkg so re-registered-
sudo cscli capi register
And re-enrolled-
sudo cscli console enroll -e context clzeha7k80004l6087uikulpm
And then reloaded the pkg-
sudo service crowdsec onereload
Still no crowdsec package in package manager though. Maybe that will get fixed later???
F

LCDproc

• • fireodo

5

0
Votes

5
Posts

181
Views

F

Hi,

there is another problem with LCDpros 0.12_1 (beside the increase processor activity since the update 12-13.05.24) when there is a Gateway latency problem or the WAN gets unexpectedly down,

Aug 6 04:28:48 rc.gateway_alarm 23648 >>> Gateway alarm: WAN_PPPOE (Addr:217.xxx.xxx.xxx Alarm:0 RTT:9.355ms RTTsd:.223ms Loss:5%)
LCDProc is flooding the log with this:

Aug 6 04:30:03 php 25120 lcdproc: Connection to LCDd process lost ()
Aug 6 04:28:55 php 25120 lcdproc: Connection to LCDd process lost ()
Aug 6 04:28:54 php 25120 lcdproc: Connection to LCDd process lost ()
Have a nice day,
fireodo
O

LCDproc totally broken in 0.12_1?

• • ohmantics

3

0
Votes

3
Posts

103
Views

F

Hi,

there is another problem with LCDpros 0.12_1 (beside the increase processor activity since the update 12-13.05.24) when there is a Gateway latency problem or the WAN gets unexpectedly down,
Aug 6 04:28:48 rc.gateway_alarm 23648 >>> Gateway alarm: WAN_PPPOE (Addr:217.xxx.xxx.xxx Alarm:0 RTT:9.355ms RTTsd:.223ms Loss:5%)
LCDProc is flooding the log with this:
Aug 6 04:30:03 php 25120 lcdproc: Connection to LCDd process lost () Aug 6 04:28:55 php 25120 lcdproc: Connection to LCDd process lost () Aug 6 04:28:54 php 25120 lcdproc: Connection to LCDd process lost ()
Have a nice day,
fireodo

3 / 462