Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N

    Can I use pgblockerng aliases in Haproxy?

    80758505-9bad-4dad-a80b-c159be1045a2-image.png

    If it was a firewall rule, typing pfb would produce a dropdown to select.

    Here it has to be written, but will it work? Is it supported?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB

    I saw where the Netgate kernel developer updated the Suricata package in the pfSense 25.07 development branch to work with the new kernel PPPoE driver. But so far as I know that updated package has not been migrated to 2.8 CE.

    Here is the commit into the DEVEL branch: https://github.com/pfsense/FreeBSD-ports/commit/68a06b3a33c690042b61fb4ccfe96f3138e83b72.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG

    @AlexK-0 said in Can't receive GeoIP databases updates anymore, banned:

    Days ago, I received from MaxMind an email, notifying me that my country has been banned to receive GeoLite City database updates.

    You've found a reason to use a VPN.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG

    @EChondo

    What's your pfSense version ?
    The instructions are shown here :

    1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png

    A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate.

    @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy:

    I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess.

    No need to wait x days.
    You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    89 Topics
    574 Posts
    A

    Hello,
    I am unable to get the Tailscale package to work. The page at VPN > Tailscale > Authentication is stuck. It displays the error "Tailscale is not online," but also shows a "Logout and Clean" button, with no option to log in.
    link text

    This state persists even after performing the following troubleshooting steps:

    Rebooting the pfSense router.

    Completely uninstalling and reinstalling the Tailscale package multiple times.

    Clearing browser cache and using a private browser window.

    Toggling the main "Enable Tailscale" checkbox in the settings.

    Checking the logs, which show the service gets a "terminate" signal and shuts down cleanly; it does not crash.

    Manually trying to delete the state file with rm /var/db/tailscale/tailscaled.state, which failed because the file does not exist.

    It appears that the package's configuration is corrupted in a way that persists even after reinstallation. Can anyone advise on how to perform a complete manual cleanup of all Tailscale files and settings?

  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Thanks for further suggestions. The tunnel is definitely up and so I don't think this is a CGNAT issue after all. WAN firewall rule is in place for UDP on port 51823 (otherwise the tunnel wouldn't work, right?). I can ping from client 1 -> client 2 and visa versa and also ping all points in between like you suggest. I just can't open an HTTPS connection from pfSenseB from Client 1 using a browser. But I can do this the other way round i.e. from Client 2 to pfSenseA

    I will try and do some packet capture to see if that reveals anything.

  • [squidGuard ] block Fecebook, but company profile on Fabebook

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    A

    I already use the group ACL to enable it from a particular client
    but it's an enable all facebook
    Please give a look at this and tell me if it may be the right direction
    http://forum.pfsense.org/index.php/topic,42101.0.html

  • [squidGuard ] block youtube, but video from a specific user/channel

    Locked
    1
    0 Votes
    1 Posts
    9k Views
    No one has replied
  • Snort duplicate categories

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Snort package retaining old settings on reinstall

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    K

    Thanks voovoo

    I figured that out but hit another snag, mentioned here

    http://forum.pfsense.org/index.php/topic,41137.0.html

  • Postfix Forwarder Antispam (Mailscanner + Spamassassin + clamav)

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    marcellocM

    I'm working on this package(gui is almost done), but for now the core team did not finished compiling it to pfsense(they are currently working hard on 2.1 package structure).

    To manually add these packages, you must specify 8.2-release or 8-stable packages folder as freebsd 8.1-release is no longer available.

    Just try this on lab first, I'm not sure if some 8.2 mailscanner package or dependencie will break pfsense 2.0.

    MODIFY
    prefix for 8.1-relase packages:

    http://ftp-archive.freebsd.org/pub/FreeBSD-Archive/ports/amd64/packages-8.1-release/Latest/

  • Squidguard: setup with two time setups doesnt work

    Locked
    7
    0 Votes
    7 Posts
    5k Views
    K

    Thx, that's what I wanted to know (but don't like as the answer :) )

  • Blinkled, gwled question

    Locked
    3
    0 Votes
    3 Posts
    5k Views
    M

    Ok thanks, for some reason I thought gwled was an update made for compatibility on the 2.0.
    In my case I only need the blinkled :)

  • Snort won't run on both interfaces at same time

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    T

    It was running out swap space. I guess that the two instances were just too much for it.

  • HAVP user goes missing on reboot

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    P

    @jedblack:

    I had the same problem, not sure whey – but creating a 'havp' user and group under the "user manager" gui section is a temp workaround.

    did it stay after a reboot.
    i fix it and when i upgrade or if the hydro goes out  and reboot i have to manually fix it.

  • Snort Rules and category questions

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Varnish service is stopped

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    marcellocM

    Can you increase vm RAM and/or set cache to Disk?

    I think the problem could be low mem.

  • 0 Votes
    2 Posts
    3k Views
    D

    Allow - pass, if not deny in other categories.
    Whitelist - pass always.
    Whitelist can be use for allow some categories, blocked in blacklist.

    You can't edit blaacklist, but can use whitelist.

  • Latest versions of Pfsense and varnish: varnish fails to install/start

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    J

    Thanks for the reply, I guessing that would have fixed it since it was bound to port 80 - and that old install XML entry i'm sure was fubar'ing things up…

    I got so fed up in the end that i just rebuilt the entire instance, everything went in smooth ...

    Thanks for the help for future reference.

  • PFSense/Squid Slow

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    marcellocM

    If your switch supports vlans, assing a vlan for wan and use only one interface.

    Your problem should be your USB network device.

    EDIT:

    Take a look at this link for some hints

    http://doc.pfsense.org/index.php/Multi-WAN_using_VLANs_with_pfSense

  • NUT update? >2.4.2 [SOLVED… Ugly? Stupid way?]

    Locked
    6
    0 Votes
    6 Posts
    4k Views
    marcellocM

    ok, so just use it. No problem. :)

    Look for freebsd ports collection to know how freebsd packages works.

  • Reset HAVP blocked list & allow certain files through

    Locked
    9
    0 Votes
    9 Posts
    5k Views
    P

    Thanks a lot for your help my friend!

  • IMSpector MSN logging Fail

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    marcellocM

    Ok.

    Check now via tcpdump if msn2011 is using this port and also check if older clients are still working.

  • Squid and LDAP Authentication

    Locked
    7
    0 Votes
    7 Posts
    25k Views
    K

    Hmm, strange thing, but I can confirm that after fill up port authentication started to work :) I am pretty sure that in earlier verions it was not nessesery to fill up the port field and it works fine.

  • How to make a new package of lcdproc-0.5.4 incl hd44780-lcd2usb?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    marcellocM

    Find the manteiner of this package on other posts and ask him how to build/help.

  • Varnish HTTP purge

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    marcellocM

    Purge is on the TODO list.
    Today varnish setup at pfsense respects client CTRL+F5 and no-cache directives.

    If you look at varnish docs, you will see that PURGE is done only by administrators and also can be done by console.

    If you realy need this at pfsense package gui, let me know how you need this and I Tell you if i can inplement or not.

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.