Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    tinfoilmattT
    @Draco said in New pfblockerNG install Database Sanity check Failed: I turned off pFBlocker and hit RUN on Update. You what?
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    657 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.
  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
  • Snort Rule Update Problem

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    L
    I was browsing through the pfSense bug tracker & see someone has actually already reported this. I commented on the bug stating I was having the same problem. Guess all we can do is wait for it to be fixed. However at this time I can't even get Snort operational so the point is moot.
  • SquidGuard 1.4

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    N
    http://diskatel.narod.ru/sgquick.htm There is no really greate difference (just other labels) than in older versions.
  • Use scheduler with squid… How?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    B
    Is there no way to automatically (with cron?) switch between different squid configs (black- / whitelists) or in some other way achieve automatic control over squid during the day..?
  • Snort 2.9.0.5 - sync of configuration between CARP members

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    S
    This would be really useful.  If you do my make a sync script, please share it! ;)
  • Snort - ET Rules not available for LAN interface

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    S
    I had the same issue.  In the end, I decided I didn't need Snort running on my LAN interface. But I had a lot of weirdness getting the right rules in the right places, e.g. I had the same problem on my WAN interface too, on one of my pfSense 2.0 boxes, but not it's mirror copy. For the WAN interface I found the rules were in a subdir of the rules directory also called rules.  So I just copied everything in /usr/local/etc/snort/snort_XXXXX_XXX/rules/rules to /usr/local/etc/snort/snort_XXXXX_XXX/rules/ and then removed the subdirectory.  Seemed to work for me.  YMMV.  Sounds like a bug that can happen under some circumstances… P.S. Another solution to this or another problem (I forget how I solved each problem as there have been several) was to remove the md5 file for e.g. emerging.rules.tar.gz.md5 or snortrules-snapshot-2905.tar.gz.md5 and then run an update.  Then it will fetch a new copy of the rules and extract it.  Again, YMMV. Let me know if either of these work for you.
  • Squid and Policy-based routing

    Locked
    8
    0 Votes
    8 Posts
    7k Views
    M
    Bump: I was under the impression that gateways were going to be addressable via Squid under pfSense 2.0.  Can anyone else speak to this?  Does a bounty need to be created to get this going?
  • Unable to create whitelist within SNORT

    Locked
    8
    0 Votes
    8 Posts
    5k Views
    L
    @ugur: change browser. LOL, did you not see in the opening post he tried like 6 different ones? Mabye you should suggest a different browser for him since he's already tried 6. Not just "change browser". +1 If you have an extra machine. Do a vmware install of a 2.0. Take your config backup from your current machine & try to load it onto the "virtual" install & see if everything is setup as it is before. That will be the best solution. I could somehow see, that even if another user tells you it does work, things have a way of happening different for different people. One case, & point. Many snort users (me included) are having problems getting it to work. Everyone is throwing different error codes. I'm having an error code which was solved months ago, but the fix posted is not fixing mine & it's back for some reason. So just because someone says "it will transfer settings correctly" doesn't mean on your particular setup it will. To be safe try to do a virtual install & run your backup file from your 1.2.3 box to see if everything is brought up correctly. That will tell you for 100%. Edit:A little more insight is to actually see if you could get snort running on that virtual 2.0 install. It may not even work as of this time. My snort was operating flawlessly until a power outage last night. Short story, pfSense died & had to issue a backup config. Therefore snort was reinstalled from the package list. My guess is developer was working on it, & it auto-updates & now it has bad code that needs to be fixed. My previous install was from about 3 weeks ago. It did not generate the error i'm getting now. For my problem there is no known fix. Guess i'm out of luck until it's fixed. I can't run snort in "alert" or "block offender" mode. Both modes are completely fudged. And yes, you are right the whitelist feature does work in 2.0. It does add a drop down box to type the IP into. I did verify this.
  • Squidguard bypassed by goolge cache and google translate

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    marcellocM
    I think it will only work with proxy filters that analyse page content like dansguardian. Squidguard does only checks urls.
  • Squid error messages on startup

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    C
    Do you think this is also the case in 2.0 release? I am having the same problem and have been ever since 2.0-RC1
  • Squid work but..

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    C
    I just started another thread on this at: http://forum.pfsense.org/index.php/topic,42222.0.html Maybe they can be combined?
  • Squid "include files are missing"

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • NRPE config problem on reboot

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    S
    jimp, Thanks for the commit!
  • Squid & OpenVPN Revisited

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    marcellocM
    Ok, now it's clear to me. You may need to edit squid.inc file and add manualy redirect rule to openvpn interface. At /tmp/rules.debug you can see squid rdr rule.
  • Can't see the package lightsquid in my package manager?

    Locked
    4
    0 Votes
    4 Posts
    1k Views
    G
    Hi, i find a solution: Cause i shouldn't use lightsquid by a ALIX-System, cause it haven't enought write-cycles. So i copy the access.log and format it with the tool sarg. With this i get usefull reports.
  • Squid Configuration

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    N
    For a simple configured version of squid you have to do the following if it isn't the default setting: check "Transparent proxy" check "Allow users on interface" select the interfaces you would like squid to listen to. In general this is/are your LAN interface/s. I think this is the minimal configuration you have to do. on "Cache Management" you can change the settiungs for RAM and harddisk cache so it suits your hardware. But this isn't necessary for the minimum configuration.
  • Howto restart snort on schedule?

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    M
    I will try to write such a script. call package startup routine/function : do you mean to use the status_services.php for that? I am looking at the file and apparently it uses killbypid in order to stop services and start_service(servicename) for startup (for generic services anyway and snort is not one of the special cases there).
  • FreeRADIUS package is not updated properly from pkg v1.0.3 to pkg v1.0.4

    Locked
    12
    0 Votes
    12 Posts
    3k Views
    N
    Thanks for feedback.
  • HAVP and Squid -Version 2.0 stable release

    Locked
    9
    0 Votes
    9 Posts
    3k Views
    L
    @marcelloc: In hapv options choose squid parent mode. do i need to set client browser to use the 8080 ? i using netstat , i see the traffic going through port 80. when browsing. i use mozila many thanks
  • STunnel error after installing latest 2.0 snapshot

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    W
    Is there anyone who can permanently fix this in the package? Wupsje
  • Automation of the backlist of bet to date squidGuard

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    D
    Not applicable. There are functional problems associated with the this.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.