Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    JonathanLeeJ
    Squid can be configured externally, I would love a how to guide on how to do this correctly.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    BBcan177B
    @Draco try to goto the General Tab, first ensure that the Keep Settings option is checked. Then unchecked Enable pfBlockerNG so that its disabled. Hit save. Force Update. Then reenable pfBlockerNG and Force update.
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    GPz1100G
    @agitelzon I have no issue connecting to LE servers from pf shell. The issue is cloudflare security setting is configured as a whitelist for api zone record changes. The whitelist includes my ipv4 address only, as a /32. As I mentioned, I could add the ipv6 prefix as a /64. Given that pf is configured to prefer ipv4, I thought that would carry over to acme as well.
  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?
  • Discussions about the Tailscale package

    93 Topics
    657 Posts
    C
    @lbm_ I have the same problem: pfSense v25.07.1 on FreeBSD 15-Current, Netgate 6100. Could you let me know if you found a solution? I haven't. I have been updating Tailscales from Freshports while keeping the Tailscale Package installed. I have recently read that this can cause problems with routes, interfaces, firewall rules, and others. I am leaning towards deleting the Tailscale package.
  • Discussions about WireGuard

    716 Topics
    4k Posts
    chpalmerC
    @tinfoilmatt Thanks! I have done that and it worked when forcing just her TV out the Centurylink.. My problem is my local box here. Im missing something because I can not get it to pass traffic from the WAN to the Wireguard tunnel. Ive got some time today so will chip away on my lab setup to see if I can finally accomplish it here first.
  • (Snort) Question about false positives…

    Locked
    3
    0 Votes
    3 Posts
    4k Views
    S
    Thank you! That's exactly what I needed to figure out. -Sean
  • Snort screwing up VoIP states

    Locked
    6
    0 Votes
    6 Posts
    4k Views
    J
    Thanx to TreeTopFlyer  I was able to figure out the whitelist issue. I going to recode and I will have the issue fixed I soon as I am free. James
  • Error after OpenVPN Enhancements package install

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    A
    Hi to all, in my case… is a nanobsd installation. Regards, Andrea Menchetti.
  • Anyone who uses Snort needs to thank Jamesdean

    Locked
    9
    0 Votes
    9 Posts
    3k Views
    J
    Thanks for nice words. I have to admit I could not have done alot without the help from the other pfsense devs. James
  • Reinstalling Snort nulled everything

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    P
    It was a touch and go week with snort and pfs, but thanks to JamesDean things are running excellent. I am using v1.24 with Premium Rules and have no more issues to report. Screens appear much faster and all the rules are updating as expected.
  • How could make authentication with free RADIUS

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    M
    any help or idea i couldn't use the net work though,net do you think it dosn't here in radius auth or i shoud use any package else >:(
  • Problem downloading snort rules

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    V
    Ok, so I disabled my WAN rule and stopped the SNORT service.  Rule updating worked the first time after that.
  • Snort - Barnyard2 not working

    Locked
    14
    0 Votes
    14 Posts
    32k Views
    L
    James, After reading my last post it might have come off a bit accusatory, that was not my intent at all. Thanks for all your work, I was just posting the work around I found in an effort to help others out there.
  • HAVP, Squid and SquidGaurd even possible?

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    T
    V 1.2.3 I was hoping someone could respond with a successful configure.
  • Snort 2.8.5.3 pkg v. 1.24 upgrade issues

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    J
    Try to reinstall the package, my first code upload of snort package 1.24 was corrupted. James
  • Snort pkg v1.22 (possibly later vers too) uninstall broke system

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • [RESOLVED]direct internet access(outbound nat) too slow

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    E
    Problem solved by addding local direct access ip addresses to services>proxy server>access control>Unrestricted IPs
  • Snort Problems

    Locked
    16
    0 Votes
    16 Posts
    11k Views
    P
    Good news! Just saw an updated snort package is out. Version 2.8.5.3 pkg v. 1.23 is working with Premium Rules. Not only was I able to download all the rules, but snort started with no errors when I enabled every category (with defaults) on the WAN interface. Thanks to the pfSense team for an awesome product!
  • Imspector icq-aim issue

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Squidguard IP Destinations

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    D
    @Johan449: Thanks Will give it a try Should I include the () or not? Yes. if you need more IPs - 196.38.192.5 or 196.38.192.10 Expressions can be as (196.38.192.5)|(196.38.192.10)
  • LightSquid Refresh Schedule Data Loss (bug w/ details to fix)

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    D
    Fixed as per day fresh will started at 23:45 added new yesterday fresh at 0:15 Thanks!
  • SIP stops working after a while

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    G
    I have found that pfsense has to be rebooted when you have two providers on the same or separate interface being when you use VLANs, PPPoe or Load balancing. Also, if I register on one interface with the same provider then try to do it on another pfsense refuses to allow it to work unless you reboot.
  • Rate not showing last number of IP address

    Locked
    8
    0 Votes
    8 Posts
    3k Views
    D
    I installed it fresh a few minutes ago and see all 4 octets. I do however see that the rate that is displayed is pretty inaccurate for whatever reason.
  • Squid ACL not working with SquidGuard installed

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    G
    I might be taking a shot in the dark but I believe you have to use squidguards ACL instead of squids when it is installed.
  • Snort…working on Bugs today.....

    Locked
    26
    0 Votes
    26 Posts
    12k Views
    G
    Do you use VLANs?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.