Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    D
    @BBcan177 Thank you for the kind reminder; I am so accustomed to ensuring Save Settings is checked that I didn't follow your instructions properly (thanks @tinfoilmatt for uploading and highlighting the screen shot). I've properly followed the instructions and the update did not report and db problems. Thank you again! drac
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    659 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.
  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
  • 2.0RC1: Force msn messenger to use squid?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    D
    @periko: Hi. My squid is in transparent mode, but looks like msn messenger doesn't pass the traffic over squid, exist a way to force msn messenger to use squid without the user intervention? Thanks!!! Your MSN like HTTP traffic? Look Imspector.
  • Pfsense 2.0-RC1 Squid 2.x reload option?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    perikoP
    squid -k reconfigure on shell works, thanks!!!
  • How to Fix this Ploblem with Squid Installation

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    jimpJ
    Go to Diagnostics > Command, and enter the following two commands in the shell execute box: pkg_delete \*squid\* rm /usr/local/pkg/squid* And then try to reinstall. At most you might have to make a backup, edit the squid package info out of the config, and then restore it, then reinstall.
  • Ntop and merge interfaces, option "-M"

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    T
    Thanks for the quick response. 2.0 has so many impovements that I must encourage everybody to use it anyway. | ;) |
  • Dns blacklist blocking everything

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    W
    Have a look at http://doc.pfsense.org/index.php/SquidGuard_package which shows how to configure SquidGuard. You can exclude categories or even single URLs from been blocked.
  • PfSense 2.0-RC1 Snort and other servicesa error.

    Locked
    3
    0 Votes
    3 Posts
    5k Views
    M
    Hi, EDIT: please see my post here > http://forum.pfsense.org/index.php/topic,37452.0.html. NOt sure if it is even the same issue; however, its worth a shot. I confirm this issue with: snort > 2.8.6.1 pkg v. 1.35 pfsense 2.0 build > 2.0-RC2 (i386) built on Wed Jun 1 12:43:15 EDT 2011 I am unable to see which rules are running. Snort.org : N/A even though I get an alert that my rules are up to date. Oddly, it was working on Jun 3.
  • Detailed web usage report Package for Pfsense ?

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    D
    Thx guys, I did some searching and found lightsquid to give nice reports. What can I say, im a noob  ::)
  • Proxy server & bandwidth Error

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    First check under System > Packages, make sure the packages are really there. If they are, then go to Diagnostics > Backup/Restore and press the button to reinstall all packages. If they aren't there, just install them as usual. It looks like it thinks the packages are there, since the menu entries are there, but they aren't really installed.
  • Snort not able to find all interfaces.

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    V
    Sussed, If you have a hole in your interfaces, snort doesn't see past the hole. This will work, all interfaces are seen by snort GUI: LAN enabled WAN assigned & enabled OPT1 assigned & enabled OPT2 assigned & enabled OPT3 assigned & disabled OPT4 assigned & enabled This won't work, Anything past OPT3 (unassigned) are not seen in the GUI: LAN WAN OPT1 OPT2 OPT4 Now if you temporarily assign OPT3 and create the snort interface on OPT4 and remove OPT3, snort GUI can no longer see rules etc for OPT4 until OPT3 is assigned again. Mark
  • Squid and Lightsquid

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    L
    Ah ok, thats a shame.
  • What snort rules/categories to enable for pfSense?

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Vhosts package status

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    J
    Nobody? Mmmmmm
  • IP-Blocklist won't run after removal of Country Block - 2.0-RC1 May 3

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    T
    This is a bug. I have added this to my to-do list. Thank you!
  • IP-Blocklist not logging blocks 2.0-RC2 (i386)

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    T
    I didn't see this post until now. Post in the official ipblocklist topic next time. ICMP traffic won't get logged because the system is blocking it completely before anything can get logged. For more details on logging information make sure logging is checked. Just to reassure you, the package is working as intended.
  • Squidguard: Yet another not working on reboot…but FIXED!

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    T
    I've had the same issue forever.  On reboots I had to remember to stop and restart the services.  I've just been too lazy to do a search and see if it was a common problem.  Now I have no excuses :)
  • Proxy bypass issues

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    A
    Resolved .. there was a bad rule inserted and the filter breaks on this , no other rules were applied after the error. sorry
  • HAProxy on 1.2.3-RELEASE - Successful!!!

    Locked
    24
    0 Votes
    24 Posts
    30k Views
    N
    For the record, I found my mistake and now, it is working like a charm ! I just forgot to add a non mandatory field : monitor URI - fail
  • Squid3 on amd64 snapshot?

    Locked
    16
    0 Votes
    16 Posts
    7k Views
    A
    Did a clean install of pfsense again. a pain !! Still getting the same errors. On every first fresh install squid2 wont start after reboot. I have to go into var/squid/ and delete cache and logs folders, do a package reinstall to get the cache built again and then it works. Are those errors serious? As I can see the service is started along with Squidguard. I am using aufs file system.
  • Lightsquid package ?

    Locked
    10
    0 Votes
    10 Posts
    4k Views
    jimpJ
    I agree 100%. Lightsquid doesn't belong on a CF/Flash system. Though if there was an easy way to direct the squid logs to a syslog server, where someone could run a separate instance of lightsquid, that would be ideal.
  • Is there any Squidguard Reporting?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    D
    No. Not exists.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.