1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    tinfoilmattT
    @Draco said in New pfblockerNG install Database Sanity check Failed: I turned off pFBlocker and hit RUN on Update. You what?

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.

  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?

  • Discussions about the Tailscale package

    93 Topics
    657 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.

  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
Log in to post
Load new posts
  • A

    Squid -> howto redirect traffic to opt1 instead of wan?

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • R

    Squid error message

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    R
    Thanks for the reply… I have changed the DNS servers in general setup. i will let you know if the problem repeat again
  • S

    SpamD not in package list anymore

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    jimpJ
    No, there's no documentation of the internal package processes. You'd need to do the install functions manually in some way, and also make sure any required binary files are installed, such as: pkg_add -r http://files.pfsense.org/packages/7/All/spamd-4.1.2.tbz
  • M

    Squid 2.7.9 Delay pool not working?(traffic mgmt)

    Locked
    7
    0 Votes
    7 Posts
    5k Views
    jimpJ
    @anto_DIGIT: Squid 2.7.2, 2.7.8, or 2.7.9  does not support delay-pools. The problem would be finished if we substitute the squid with "lusca-head" .. ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8.1-release/Latest/lusca-head.tbz squid -v Squid Cache: Version LUSCA_HEAD configure options:  '–bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid' '--localstatedir=/usr/local/squid' '--sysconfdir=/usr/local/etc/squid' '--enable-removal-policies=heap' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-epoll' '--disable-unlinkd' '--with-pthreads' '--enable-storeio=aufs coss' '--enable-delay-pools' '--enable-snmp' '--disable-carp' '--enable-htcp' '--disable-wccp' '--disable-ident-lookups' '--enable-arp-acl' '--enable-pf-transparent' '--with-large-files' '--enable-large-cache-files' '--enable-err-languages=English' '--enable-default-err-language=English' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=i386-portbld-freebsd8.0' 'build_alias=i386-portbld-freebsd8.0' 'CC=cc' 'CFLAGS=-O2 -pipe  -fno-strict-aliasing' 'LDFLAGS=' 'CPPFLAGS=' Delay pool support is compiled into 2.7.9. I know. I compiled it myself, and it reports that it does so in the version string: squid -v Squid Cache: Version 2.7.STABLE9 configure options:  '–bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid' '--localstatedir=/var/squid' '--sysconfdir=/usr/local/etc/squid' '--enable-removal-policies=lru heap' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-epoll' '--enable-auth=basic digest negotiate ntlm' '--enable-basic-auth-helpers=DB NCSA PAM MSNT SMB LDAP SASL YP' '--enable-digest-auth-helpers=password ldap' '--enable-external-acl-helpers=ip_user session unix_group wbinfo_group ldap_group' '--enable-ntlm-auth-helpers=SMB' '--enable-negotiate-auth-helpers=squid_kerb_auth' '--with-pthreads' '--enable-storeio=ufs diskd null aufs coss' '–enable-delay-pools' '–enable-snmp' '--enable-htcp' '--enable-forw-via-db' '--enable-cache-digests' '--enable-referer-log' '--enable-arp-acl' '--enable-pf-transparent' '--enable-follow-x-forwarded-for' '--with-large-files' '--enable-large-cache-files' '--enable-err-languages=Armenian Azerbaijani Bulgarian Catalan Czech Danish  Dutch English Estonian Finnish French German Greek  Hebrew Hungarian Italian Japanese Korean Lithuanian  Polish Portuguese Romanian Russian-1251 Russian-koi8-r  Serbian Simplify_Chinese Slovak Spanish Swedish  Traditional_Chinese Turkish Ukrainian-1251  Ukrainian-koi8-u Ukrainian-utf8' '--enable-default-err-language=English' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=i386-portbld-freebsd7.2' 'build_alias=i386-portbld-freebsd7.2' 'CC=cc' 'CFLAGS=-O2 -fno-strict-aliasing -pipe -I/usr/local/include -I/usr/local/include  -DLDAP_DEPRECATED' 'LDFLAGS= -L/usr/local/lib -L/usr/local/lib' 'CPPFLAGS=-I/usr/local/include' If there is a problem in the package code that makes the config file, that is another question. If the maker of the Lusca package would provide us with patches to add their package to the official repo, it would likely be accepted, as long as it was separate and didn't replace the existing squid package.
  • jimpJ

    MOVED: Dropped packets with no logging

    Locked
    1
    0 Votes
    1 Posts
    999 Views
    No one has replied
  • G

    Install package.tar

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    pfSense is a firewall and not a full OS. It does not include a full compiler suite or developer tools.
  • _

    Denyhosts problem

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    R
    Denyhosts stopped functioning for me many months ago and I've since abandoned it. It appears few people are interested in taking the time to get it running, something I'd do if I had the programming know-how to tackle it.
  • T

    Old problem with snort on my pfSense 1.2.3-RC installation.

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • A

    Vnstat losing data on restart

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    A
    shoot well that didn't work try here again so more details I was before and am now running pfsense as a virtual machine with vmware server (before with vmware server version 1 now with version 2) I downloaded the vmware appliance and then restored my config to that. everything seems to be fine except that vnstat drops all it data for various interfaces every couple days.    Sometimes it will drop the lan data but the OPT1 and WAN data will remain then it will drop the WAN data but the OPT1 and LAN data remains. I would really like to get this working as I find vnstat useful for tracking our usage monthly and all. anyone got any other ideas?
  • F

    Squid & transparent proxy not working in no-transparent mode

    Locked
    10
    0 Votes
    10 Posts
    29k Views
    F
    The proxy started working on my deployment after a machine reboot. So before the reboot it was only working as transparent, after a reboot it was working also explicitly. I suspect there was a problem with the reloading of the squid configuration, but I didn't tested the old squid port (the default one) before the reboot.
  • H

    SQUID 2.7.8_1 works only in transparent mode.

    Locked
    6
    0 Votes
    6 Posts
    4k Views
    H
    thanks man. it workd. another bug to fix…
  • T

    Whre is the squid proxy pakage??? pls hel me!

    Locked
    12
    0 Votes
    12 Posts
    5k Views
    T
    Very nice work thank you very mutch!! :)
  • Z

    Snort on 2.0 Not starting on wan

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    Z
    Is this because WAN = PPPoE and is assigned to fxp1 (NIC) and snort can not bind to it as it does not know what fxp1 is. it only knows WAN/LAN . tried to much around with interfaces - assign - ppps but no matter what I did either snort would work and connection to internet would not, or connection to internet would work but snort would not. (sorry my pfsense/snort understanding is limited) both outstanding! works on lan side Initializing Network Interface fxp0 Decoding Ethernet on interface fxp0
  • G

    File php.ini

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • K

    General Package bug?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    Usually the packages are only reinstalled if the definition is in the configuration file, not just if the files are on the HDD. I may be thinking of how it's handled in 2.0 though. It's a known issue that a factory reset doesn't remove package files from the HDD (it just resets the config, not files on the HDD), but that shouldn't result in the packages being reinstalled, however.
  • M

    Lightsquid not showing DNS names

    Locked
    9
    0 Votes
    9 Posts
    13k Views
    M
    Interesting solution chiddy, could be helpful. I have tried the solution of Seth and I can confirm that it works!
  • R

    SQUID and SQUIDGUAR wont start after updating

    Locked
    4
    0 Votes
    4 Posts
    6k Views
    D
    same here - reinstalling hasn't helped (yet!) edit:  squidguard also refuses to start, and it won't uninstall :( edit: after many attempts & reboots, squidgaurd uninstalled OK - reinstall squid OK - reinstall squidguard OK. All services seem to be running OK. Oddness!
  • J

    Squidguard does not work after reboot

    Locked
    13
    0 Votes
    13 Posts
    7k Views
    O
    Hi all, I've been experiencing this same problem which made me do a lot of re-installations and testing the packages one after the other. During these times, I noticed that Sqiud + Squidguard + Havp always cause this problem. So I installed Squid + Squidguard alone and the problem stopped. So the problem seems to be with HAVP if installed together with Squidguard. If i reboot many times,the Squid and Squidguard always start. I'm running v.123 on Gigabyte board + Dual Core + 4Gb memory. One can give it a try. Okwuy.
  • J

    RRD Graphs Color Mod

    Locked
    14
    0 Votes
    14 Posts
    14k Views
    J
    Wow! Nice job crnet! I've been playing around with that script for pfSense v.2 beta3. Here it goes: $colortrafficup = array("00c000", "000000");  /* mod */ $colortrafficdown = array("de0202", "000000");  /* mod */ $colorpacketsup = array("00c000", "000000");  /* mod */ $colorpacketsdown = array("de0202", "000000");  /* mod */ $colorstates = array('ece904','757575','0000ff','00c000','de0202');  /* mod */ $colorprocessor = array('ece904','00c000','0000ff','ff0000','808080','000000'); /* mod */ $colormemory = array('c00000','00c000','0000ff','ffff00','808080','000000'); /* mod */ [image: rrd_mem.png] [image: rrd_mem.png_thumb] [image: rrd_packs.png] [image: rrd_packs.png_thumb]
  • B

    [SOLVED]Squid Package Missing 1.2.3 nanobsd (but not anymore)

    Locked
    6
    0 Votes
    6 Posts
    4k Views
    jimpJ
    FYI- I re-enabled squid and squidguard on NanoBSD today. I added squid's "null" cache type which disables caching. Those using squid on nanobsd should use this type, and disable ALL logging.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.