Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    D
    @BBcan177 Thank you for the kind reminder; I am so accustomed to ensuring Save Settings is checked that I didn't follow your instructions properly (thanks @tinfoilmatt for uploading and highlighting the screen shot). I've properly followed the instructions and the update did not report and db problems. Thank you again! drac
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    659 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.
  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
  • Spamd - Buttons Whitelist, Blacklist, Delete, and Spamtrap weird behavior

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Pfflowd sends data for 1 interface only?

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    A
    I had issues with netflow , switched to PRTG you can have 10 sensors with the free version. Set up a new sensor per IP you want to monitor . Set the active time out starting at 800 or higher minutes and it seems to be fine.
  • Cant be that hard, monitor web traffic

    Locked
    9
    0 Votes
    9 Posts
    24k Views
    johnpozJ
    Like I said if your going to install squidguard your going to have to configure it to allow traffic, and then create your blocks. I have some RL work to do currently, but after I finish that I will create a walkthru for setting up squidguard package But here is a doc that more than likely has eveything you need to do to get squidguard working http://doc.pfsense.org/index.php/SquidGuard_package Keep in mind you don't actually need squidguard to block stuff, you can just use squid.  squidguard allows for easy use of blacklists and categories, etc.  But if you are just wanting to block a few specific urls, then you don't even need squidguard installed.
  • SQUID PACKAGE - Store.log

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • TinyDNS as a secondary DNS

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Squid 3 and squidguard problems

    Locked
    13
    0 Votes
    13 Posts
    24k Views
    T
    Thanks for the clarification.  I'm running 2.X right now and it's running with no issues.  I've always been confused as to the point of the 3.x packages.
  • Squid and Pfsense firewall rules

    Locked
    9
    0 Votes
    9 Posts
    11k Views
    J
    Hi everyone, Version 2.0 installed. Based on my first scenario posted a couple of weeks ago (Squid and Pfsense firewall rules), right now everything works the way it should. On version 1.x even with no rules defined Squid comes out to the public interface (WAN). On 2.0, no rule, no Squid packet routing to the public interface. Then I was able to define a rule to only allow Squid to receive packets from the subnet via port 3128. Traffic to the WAN interface then is based on the firewall routing policies by default. Now I can make clients go out to the cloud by only using the proxy which finally handles out port 80 and 443 for https. Now I wanna use the floating rules to restrict the use of port 443 by some clients. Excellent work on the side of the pfsense development team. I have enjoyed this enhancement. Joe
  • Vhosts won't start in 2.0 RC1 (even in May 9 2011 snapshot)

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    N
    file /usr/local/lib/libxml2.so.5 /usr/local/lib/libxml2.so.5: ELF 32-bit LSB shared object, Intel 80386, version 1 (FreeBSD), dynamically linked, not stripped service not running
  • No FreeSWITCH with 2.0????

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    F
    Saw this on the mailing list the other day… http://article.gmane.org/gmane.comp.security.firewalls.pfsense.support/23039/match=freeswitch+2 …speaking of VoIP, does anyone know if the FreeSwitch packages are ever getting updated? It won't be, it's going to be replaced with FusionPBX, the successor to our Freeswitch package. Mark Crane created it, then moved on to FusionPBX, and will be creating a package for it to replace the Freeswitch package at some point (not sure of his exact plans).
  • VHosts Problem

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Force LAN IP range to use Squid / SquidGuard and bypass for all others

    Locked
    1
    0 Votes
    1 Posts
    3k Views
    No one has replied
  • Snort block outbound "offender"

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • County Block Parse Error

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Memcached on pfsense 2

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Lightsquid Error Report (Urgent)

    Locked
    6
    0 Votes
    6 Posts
    11k Views
    J
    @LostInIgnorance: I already tried that. I clicked the Refresh Now/Full and the Save buttons, I opened a webpage, refresh the page, refresh the lightsquid again but still no report. So I left my computer running overnight and in the morning i tried again and wallah, the report was already there.  :o I don't know what happened but there it is. The only thing that is not working is the Graph Report, I only have a blank page. Is there an additional tweak that I need to do before I can view the Graph? Sorry again for my ignorance and thank you LostInIgnorance.  ;D
  • Squidguard allow only 2 website access problem

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • IfBWStats package

    Locked
    11
    0 Votes
    11 Posts
    5k Views
    J
    Sorry for bringing this thread up. After some snapshots upgrade, my box showed this error. I am not sure what specific snapshot that this problem occurred but i already did a lot of snapshot upgrades but the same error result. Also, the firewall log is empty. Is ifbwstats and the firewall related? Sorry I am very novice with this. Version 2.0-RC2 (i386) built on Wed Jun 8 17:08:47 EDT 2011 Packages installed: bandwidth, squid and squidguard <title>404 Not Found</title> # Not Found The requested URL /packages/config/ifbwstats/ifbwstats.inc was not found on this server. [image: fw.jpg]
  • Can i add a mib file to NUT (for snmp ups)?

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    K
    Hi jimp, This way is long shot for me. I can't configure that with my knowlege ;). But thanks for your answer anyway.
  • Adding acls in squid

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    E
    Can I block "https" domain please?
  • Countryipblocks needs our help

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    R
    This is a direct quote from their website from June 4th. "Today is day four of our effort to raise enough money to help us offset our operating costs. We have raised $5 in four days. This just won’t do it. We have choice to make. We can either continue offering our high level of service, at great personal cost, or we can cut back on all services until we get enough cash flow to enable us to meet our financial obligations. We would prefer to continue providing all our services for free; but we cannot do so and keep Country IP Blocks running."
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.