1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    tinfoilmattT
    @johnpoz said in Please help to configure HAProxy to serve certifficate on internal LAN too: Yeah - what part do you not understand if you always resolve nextcloud.domain.tld so that it hits your haproxy on your pfsense wan IP are you not getting? You have 2 options - use a different domain internally and always go to nextcloud.publicdomain.tld, or use the same domain internally as external and run into the problem of what IP it resolves to.. Change your local domain to say home.arpa or .internal or atleast something different than the public domain your using to point to pfsense wan IP on the public internet. You are shooting yourself in the foot trying to use the same domain externally as internally. There are ways around it, but they complicate the setup. For example you might be able to use views in unbound as one way to work around the problem. You could use only host entries for all your resources. But then again you run into a problem of using the fqdn for this service, now always pointing to your wan IP.. And that is great when you want to access the service haproxy is doing - but if you want to access that resource on some other service that haproxy doesn't handle - like say simple file sharing.. You are going to have problems. Since you clearly do not understand how any of this works - the simple solution is change the local domain you are using so it is not the same as the public domain you want to use to get to your nextcloud. This tone is outrageous directed at somebody who acknowledged right off the rip that English is not their first language. How many languages do you speak, John? And safely assuming it's only one—English of course—take it from a fellow English native that you'd do well to say more with less words. You otherwise were directing OP in the right direction in my opinion.

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    tinfoilmattT
    Here. I think. Referenced as "github.com: vendor-provided URL vendor-advisory" in your link.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    tinfoilmattT
    @netboy said in is something wrong with pfBlockerNG?: After my post, I "changed" DNSBL -> DNSBL mode from "unbound python mode" to "unbound mode" and so far i have no issues. Terrible idea. Moving backwards in development history there.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    dennypageD
    @fjmp24 said in Notification: UPS ups battery is low: If I remove ignorelb directive, my UPS shuts down after 16 seconds This means your UPS is signaling a low battery. Either your battery is bad, or your UPS is bad. Most likely battery, but you never know. I suggest reaching out to Eaton support.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    M
    I am using the DNS-Update method I have to use a DNS-Sleep of 5 minutes to let the letsencrypt txt dns record update propagate. During this 5 minutes the acme-webgui times out. when the acme-webgui times out the Action list is NOT executed. How can I solve this ? Would it maybe be an idea to let the acme.sh script execute the actions in the action list as a post-hook instead of the web-gui? Or maybe add an option to add post-hooks in the webUI ?

  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?

  • Discussions about the Tailscale package

    93 Topics
    649 Posts
    luckman212L
    @mightykong @CarlMRoss Looks like you might be experiencing https://github.com/tailscale/tailscale/issues/17793 I also have a 6100 + Tailscale 1.90.6 so I will test mine now. update: I don't seem to be having this problem, which is odd because I'm usually that one guy in a thousand who has the strange bug that nobody else can reproduce. Have you tried deleting the contents of /usr/local/pkg/tailscale/state ?

  • Discussions about WireGuard

    715 Topics
    4k Posts
    patient0P
    @andresbraga can show a diagram of your network layout (hand-draw is ok)? What was the reason to deactivate NAT? Did you decative it in general or only for the WG connection? Do you have firewall rule(s) for the WG connection that allows clients to access the firewall? relevant pfSense documentation: Remote Access VPN: https://docs.netgate.com/pfsense/en/latest/recipes/wireguard-ra.html Wireguard help overview: https://docs.netgate.com/pfsense/en/latest/vpn/wireguard/index.html
Log in to post
Load new posts
  • J

    Certificate error when installing packages on 21.05.1

    4
    0 Votes
    4 Posts
    1k Views
    J
    @jimp It worked, many thanks!
  • P

    SARG -x SARG: Cannot set the locale LC_ALL to the environment variable

    2
    0 Votes
    2 Posts
    1k Views
    E
    @periquito said in SARG -x SARG: Cannot set the locale LC_ALL to the environment variable: Ola a todos, instalei o e2guardian + sarg, nao consigo executar o sarg sarg -x SARG: Cannot set the locale LC_ALL to the environment variable ja fiz os procedimento rm -rf /usr/local/sarg-reports ln -s /usr/pbi/sarg-amd64/local/sarg-reports /usr/local/sarg-reports mesmo assim no view report aparece. Error: Could not find report index file. Check and save Sarg settings and try to force Sarg schedule. observação ja setei no general o index. desdeja obrigado O amigo conseguiu!? Estou com mesmo problema...
  • W

    Remote Logging over VPN (Syslog-NG?)

    2
    0 Votes
    2 Posts
    1k Views
    awebsterA
    @wblanton I don't think the built-in syslog has the capability to store and forward syslog messages. I did find this article where the author uses rsyslog to do what you describe, but I don't know if/how you can get that working inside pfSense, as there is no rsyslog package available. Depending on your environment, you could conceivably run the rsyslog on a *nix box/vm beside the pfSense and have pfSense forward its syslog output to this box which in turn is responsible to forward it to your central syslog over VPN, and it would queue up whatever it can't send until the link is restored. Ultimately though, this whole concept relies on the fact that TCP is a reliable transport, but there is no validation that log message "x" was successfully recorded on the central server. Furthermore, in the event of a link outage, using the above system, once the link is restored a stream of log messages would be added to the central syslog, which would then not have a linear view of time. Your central syslog would have to record the message generation time separately from the message reception time. A mechanism would be required to view records at the time they were generated, not simply received, since they could conceivably be out of order.
  • R

    Double VPN'd?

    1
    0 Votes
    1 Posts
    768 Views
    No one has replied
  • M

    Packages won’t update

    9
    0 Votes
    9 Posts
    1k Views
    bmeeksB
    @markn62 said in Packages won’t update: @bmeeks Thanks again. Was a quick checkbox fix from this post. Working now.
  • P

    syslog-ng latest package broke tls

    Moved
    11
    1
    0 Votes
    11 Posts
    2k Views
    J
    I did upgrade the package today and now everything is working ! Thank you
  • J

    Syslog-Ng fails after 2.5.2 update due to tls not found

    2
    1 Votes
    2 Posts
    1k Views
    J
    I did upgrade the package today and now everything work ! Thank you
  • M

    ntopng history of used applications

    1
    0 Votes
    1 Posts
    617 Views
    No one has replied
  • D

    Snort not starting on WAN Interface

    5
    0 Votes
    5 Posts
    1k Views
    D
    @bmeeks This is excellent news!!!
  • O

    FreeRADIUS - Local CA and Cert for EAP-TLS, but Trusted CA and Cert for EAP-PEAP

    1
    0 Votes
    1 Posts
    883 Views
    No one has replied
  • M

    latest version of ntopng

    1
    0 Votes
    1 Posts
    616 Views
    No one has replied
  • 1

    pfsense available packages not showing

    3
    1
    0 Votes
    3 Posts
    1k Views
    1
    @kom Thanks for your help, I've found the problem, it was a slow internet connection, was too far from my AP, now all is showing again, cheers.
  • S

    PIMD configuration help

    17
    0 Votes
    17 Posts
    8k Views
    I
    @stan said in PIMD configuration help: @iHaveAstream Some further thoughts about your situation. Using a switch to create VLANs and UPnP for connectivity has a certain attraction as being elegantly simple. However, if you're already running pfSense, I think you would have more effective control and fewer problems by adding the VLANs to pfSense, using firewall rules to accomplish your goals, and disabling UPnP. That would also avoid security issues associated with UPnP. thanks for your detailed replies. I'm gonna go thru it soon. The reason why I decided to manage VLANs on L2 is because when done so on pfSense, there is the limit of 1 GB/s which is the bandwidth limit of the physical LAN port of the NIC...
  • I

    Wireguard mass peer adding using direct XML or conf edit doesn't work

    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • R

    Antivirus

    8
    0 Votes
    8 Posts
    4k Views
    noplanN
    @bmeeks said in Antivirus: Pick and choose carefully, and monitor things frequently so you can get ahead of any false-positive blocks. yeeeep ... nothing to add here ! and because it's always commin up ... do not start with an IDS/IPS system start with pfBlocker and keep in mind what @bmeeks mentioned
  • D

    Avahi daemon interferes with Apple’s HomeKit

    3
    1 Votes
    3 Posts
    2k Views
    T
    As an alternative, I'd recommend trying udpbroadcastrelay: https://forum.netgate.com/topic/155698/how-can-i-get-this-udp-relay-package-for-casting-across-vlans Hope this helps.
  • S

    Strange behavior for OpenVPN

    1
    1
    0 Votes
    1 Posts
    584 Views
    No one has replied
  • A

    I can't install crontab on version 2.4.2.

    Moved
    3
    0 Votes
    3 Posts
    829 Views
    A
    @gertjan Oh yes, thank you very much for your answer, it's just that I didn't want to update PFsense now, as I have openvpn configured and I'm using openbgp with routing protocol, and I saw that in newer versions there is no support for openbgp, but it does have the frr which supports all other routing protocols.
  • A

    This topic is deleted!

    1
    0 Votes
    1 Posts
    7 Views
    No one has replied
  • N

    Apcupsd - Widget question.

    2
    2
    0 Votes
    2 Posts
    833 Views
    fireodoF
    @nullvalue I dont know why it shows a full Battery in red and if you klick on the Widget Title you get an "404 Not Found nginx" so i think there is still some work to do on this Widget Code ... Regards, fireodo
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.