The graphs are drawn from the data in the RRD files, the RRD summary package attempts to add the values up from the same files and produce a sum from them, giving you total usage.

Same data, two different views.

zktech, you might look at the snort package in pfSense, too - even the portscan preprocessor (ie. without downloading any snort rulesets) catches a lot of ssh port scans, and can automatically block (and later remove) the scanning ip addrs.

ok i have one problem with this….my structur :(

i cant like this:   http://forum.pfsense.org/index.php?topic=14609.0

edit the acl localhost to my lan addy

acl localhost 127.0.0.1/255.255.255.255

change to:

acl localhost 192.168.10.10/255.255.255.255

this it not possible because of
squid:
http_port 127.0.0.1:3333

Example with result solution ;)

when your structur:

intranet (wan) –- squid cache --- havp --- intranet (lan)

because of havp dont understand ftp protokoll

then you have to configure

/usr/local/etc/squid/cachemgr.conf

localhost:"your squid port"
f.e.
localhost:6666

you schouldnt write ips 127.0.0.1:port          !!!!!!!!!!

step two:

/usr/local/etc/squid/squid.conf

at first add some lines before acl entries:

cachemgr_passwd disable offline_toggle reconfigure shutdown
cachemgr_passwd none all

and second add some lines after acl entries!

http_access allow manager localhost
http_access allow manager localnet
#http_access deny manager

i know the entry is false, but i dont have a solution to access with deny all manager rule???!!!!

thats all and you can access a perfect cache manager tool for squid ! :)
questions = pm

Good Luck

That's /usr/local/pkg/squid.inc if you're having trouble locating the file.

ok thanks a lot jimp!!!!
have a nice day!

IDK, it just shows "started" on the antivirus screen for the pfsense package page. This is a screen shot after the HAVP fails to work.

To make it work, I have to uninstall and reinstall the package each time I reboot or install an update of pfsense.

antivirus.png
antivirus.png_thumb

Thanks for the tip, Sambo.

I told OSPF to use then LAN port but the OSPF traffic didn't show up on the other server. I have moved away from that setup now anyway as it was causing me other problems.

Should this package work with talking to pf v2 and v1.2.3 as when I got it working traffic wouldn't flow between the 2 nic's.

@dvserg:

Pls read tutorial about SG.

Thank you, dvserg! You are best.
I got my problem here:

0-order A_rule for Source 10.0.0.0/24

1-order B_rile for Source 10.0.0.15. In this situation

In this situation B_rule never applying for 10.0.0.15 source, becose A_rule already worked

Even with a fresh install of pfsense, when I implement the updates and the firewall does the updated pfSense, when it "sync"'s the packages upon initial boot after updating pfsense, the package doesn't load and it crashes with the above errors in the system logs.
After that, in order to get HAVP running again, I have to uninstall and install the package again.  No reconfiguration, just an uninstall and reinstall, then everything is working great and correctly.  It just sucks having to keep uninstalling and reinstalling the package all the time since snaps are created close to every 12 hours.

Do you have FTP access directly via squid (not HAVP)?

after remove block.log, squidguard.log and then i reboot the firewall, i still can't access squidguard log via webGUI. weird…  ???

igor u were right i have libbz2.so which is linked to libbz2.so.3, and both are present, but i can't find the libbz2.so.4( the missing one), there is no such file by the name libbz2.so.4 . What should i do now ?

hi all,
        I made a complete reinstall of havp.The installation for HAVP from shell was a success, it didn't gave any errors. But when i executed freshclam it gave the following error :

/libexec/ld-elf.so.1:Shared object "libbz2.so.4" not found, required by "freshclam"

what should i do now ? Also how to start havp from shell ? Because i installed havp from the shell itself it is not listed in the Web GUI installed packages.

Thanks in advance.
NM04

Still working on it?

@_igor_:

Who maintains the squid3-package? To me it looks as if not much happens (still alpha), for this reason i didn't test till now. But i don't want to offend anyone, if i'm completely wrong with my opinion.

Would test it with 2.0.

Any status-update would be apreciated. Thanks!

It had not been touched in a while. I tried to bring it up to date a bit last week by syncing the code from the 2.x package since someone had said it should be config-compatible, and I made it use Squid 3.1.x (which may be where the incompatibility came in). It should be possible to make it work, it just needs some TLC.

@cmb991:

I have squid installed, do I just list websites that I want blocked under the blacklist of squid and they will be blocked?

you can also use dns blacklist, check it out if it helps.

HI Thanks

about this

"You can get rid of that error by removing the blocked ips from the snort2c pf table."

I have removed every thing from Block log and alert log. it does not have anything in there

still i have seeing the same error

Or php programm was eating too much memory almost 99% of the cpu .

what shall i do ??
Thanks