Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N

    Can I use pgblockerng aliases in Haproxy?

    80758505-9bad-4dad-a80b-c159be1045a2-image.png

    If it was a firewall rule, typing pfb would produce a dropdown to select.

    Here it has to be written, but will it work? Is it supported?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB

    I saw where the Netgate kernel developer updated the Suricata package in the pfSense 25.07 development branch to work with the new kernel PPPoE driver. But so far as I know that updated package has not been migrated to 2.8 CE.

    Here is the commit into the DEVEL branch: https://github.com/pfsense/FreeBSD-ports/commit/68a06b3a33c690042b61fb4ccfe96f3138e83b72.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG

    @AlexK-0 said in Can't receive GeoIP databases updates anymore, banned:

    Days ago, I received from MaxMind an email, notifying me that my country has been banned to receive GeoLite City database updates.

    You've found a reason to use a VPN.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG

    @EChondo

    What's your pfSense version ?
    The instructions are shown here :

    1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png

    A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate.

    @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy:

    I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess.

    No need to wait x days.
    You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    89 Topics
    574 Posts
    A

    Hello,
    I am unable to get the Tailscale package to work. The page at VPN > Tailscale > Authentication is stuck. It displays the error "Tailscale is not online," but also shows a "Logout and Clean" button, with no option to log in.
    link text

    This state persists even after performing the following troubleshooting steps:

    Rebooting the pfSense router.

    Completely uninstalling and reinstalling the Tailscale package multiple times.

    Clearing browser cache and using a private browser window.

    Toggling the main "Enable Tailscale" checkbox in the settings.

    Checking the logs, which show the service gets a "terminate" signal and shuts down cleanly; it does not crash.

    Manually trying to delete the state file with rm /var/db/tailscale/tailscaled.state, which failed because the file does not exist.

    It appears that the package's configuration is corrupted in a way that persists even after reinstallation. Can anyone advise on how to perform a complete manual cleanup of all Tailscale files and settings?

  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Thanks for further suggestions. The tunnel is definitely up and so I don't think this is a CGNAT issue after all. WAN firewall rule is in place for UDP on port 51823 (otherwise the tunnel wouldn't work, right?). I can ping from client 1 -> client 2 and visa versa and also ping all points in between like you suggest. I just can't open an HTTPS connection from pfSenseB from Client 1 using a browser. But I can do this the other way round i.e. from Client 2 to pfSenseA

    I will try and do some packet capture to see if that reveals anything.

  • Maximum Throughput with iPerf

    1
    0 Votes
    1 Posts
    332 Views
    No one has replied
  • nut UPS monitoring daemon

    2
    0 Votes
    2 Posts
    556 Views
    T

    @aadder Did you get this working? If not does the acpupsd program work? If you want to used nut for this then connect to the system using ssh and check the permissions on the usb device the ups is connected to. That would be in /dev/usb/ directory. The permissions should be crw-rw---- root uucp

  • freerad - new min tls setting, why no 1.3?

    3
    0 Votes
    3 Posts
    666 Views
    johnpozJ

    Thanks - doing a bit of looking into this, and seems they are working on it ;)

  • Quagga_OSPF: not available in remote repository

    4
    0 Votes
    4 Posts
    948 Views
    bmeeksB

    @adamthemantyler said in Quagga_OSPF: not available in remote repository:

    @bmeeks Thank you. Looks like I am running 2.4.5 on my boxes still. What would you say the upgrade path looks like? Would I just have to manually document my OSPF configuration and remove the module.. Then upgrade to 2.5.0 and install FRR?

    Or is there some migration path that will move settings over from Quagga for me?

    I have some other packages that are out of date too, is it generally a better idea to upgrade packages before a system update or the other way around?

    Regards,
    Adam Tyler

    Sorry Adam, but I don't use either package (Quagga nor FRR), so I wouldn't be of much help. Perhaps someone else will chime in with migration options.

    As for updating other packages, ALWAYS update pfSense itself first if an update is available. If you update or install a package after a new pfSense update is posted, and you haven't installed that pfSense update, then installing a package will break your system -- sometimes to the point of needing to reinstall and restore a config backup.

    If you want to install a package on an older pfSense version, then you must go to SYSTEM > UPDATE and on the Update Settings tab change the drop-down selector there to the option "Previous stable version (2.4.5 deprecated)", save that change, then install the package. Changing that setting points your package system utility to the correct branch of packages. Note that these older packages will not be updated, though. They will be whatever was the "current" version at the time the new pfSense was released.

    There is a dedicated FRR sub-forum on the board here: https://forum.netgate.com/category/79/frr. Perhaps posting your questions in there would generate some helpful replies.

  • 0 Votes
    10 Posts
    1k Views
    bmeeksB

    @slim2016 said in Arpwatch Notification : Cron <root@pfsense> /usr/bin/nice -n20 /usr/local/bin/php-cgi -f /usr/local/pkg/suricata/suricata_check_for_rule_updates.php:

    @bmeeks @eveready1010

    The fix has been posted by Viktor Gurov but the link does not work.

    https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/72

    That is Netgate's private Git respository. It is not publically available. You will need to wait for the change to be merged into the public Github repo. They have a private internal repo where they do testing of changes before migrating them to the public site. Notice the URL is "gitlab.netgate.com". Anytime you see that "gitlab" portion, that is their private repo.

  • PAQUETE CRON

    1
    0 Votes
    1 Posts
    270 Views
    No one has replied
  • pfblockerNG deny logs are empty after pfsense 2.50 upgrade

    11
    0 Votes
    11 Posts
    1k Views
    S

    @gertjan this feed def gets logged in the reports/log files section.

    in the test area, I am going to try some more IP feeds.

  • XDR package?

    1
    0 Votes
    1 Posts
    635 Views
    No one has replied
  • Avahi - Android APP not capturing broadcast from Player

    3
    0 Votes
    3 Posts
    720 Views
    B

    I must admit that I have never heard before about squeezebox, therefore I have never used it before. Most of the time I listen to music through Spotify using my wireless headphones. I especially like doing so while training, and since lately most of my workouts are done at home, I enjoy using my headphones even more. I understand that your problem is with Avahi, so my basic question is why did you decide to use this app? I get my apps only from https://appcrood.com, who I consider to be trustworthy, and because of that I always get quality.

  • digests.txt 404

    2
    0 Votes
    2 Posts
    261 Views
    jimpJ

    Why do you think that's a problem or necessary?

    Is something actually not working that you expect?

    Those URLs are not meant to be browsed by humans, but used by pkg.

  • Can't access my internal servers trough external URL anymore (HAProxy)

    5
    0 Votes
    5 Posts
    1k Views
    F

    Solved.

    I did an update from 2.4.5_1 to 2.5.0, and now it works...
    It might just be the reboot, but idk

  • Packages list is empy

    14
    0 Votes
    14 Posts
    1k Views
    S

    I did the upgade to version 2.4.5_1 and I had no problems (unlike the update to version 2.5 which did not work), after this update I see all the additional packages.
    thanks.

  • Telegraf's built-in ping plugin showing higher latency since v2.5

    2
    0 Votes
    2 Posts
    818 Views
    gnitingG

    @ibbetsion said in Telegraf's built-in ping plugin showing higher latency since v2.5:

    Since upgrading to 2.5, the built-in Telegraf ping plugin is reporting results with a higher latency then what I get if I were to ping the same system from the pfsense CLI. And the diff is 2x, sometimes more. This wasn't an issue in 2.4.5x. Is this a known issue?

    For more clarity, I'm pinging a system on LAN, so am expecting <0.3ms response time. Telegraf shows >0.8ms, sometimes even >2ms.

  • Quagga OSPF missing in 21.02-RELEASE-p1

    4
    0 Votes
    4 Posts
    868 Views
    bmeeksB

    @steveb53 said in Quagga OSPF missing in 21.02-RELEASE-p1:

    @nogbadthebad HI,
    FRR was already in the previous release but its not as user friendly.

    Quagga is missing in the current package manager.

    If its been dropped, why, if not when might we see it in the newer release. All the pfsense docs refer to Quagga too and not FFR.

    Quagga and several other packages were officially retired back in November last year. Here is the entry on Redmine: https://redmine.pfsense.org/projects/pfsense/repository/revisions/85652efd5dfee9f66c7c7f3c97eb1c368f690ae3.

  • 0 Votes
    8 Posts
    1k Views
    S

    @wyang

    Hello!

    I dont think the openvpn-client-export install is related to the FRR deinstall. FRR would have been deinstalled by simply switching to the 2.4.5p1 repo.

    Now that you have switched back to the 2.4.5p1 repo, I would try reinstalling FRR from the Package Manager. My experience is that the packages that were auto-purged still had their settings saved.

    John

  • Snort not working on 21.02_1

    2
  • Upgraded to 2.5.0 - Update Status and CPU data don't stop spinning

    3
    0 Votes
    3 Posts
    648 Views
    znamlootZ

    @allang thanks for this....fortunately not something serious. All fixed.

    Thanks from Canada ..... 🍁

    Cheers

    Tim

  • NUT Eaton 9SX UPS

    1
    0 Votes
    1 Posts
    290 Views
    No one has replied
  • FreeRADIUS2 - EAP-TLS and Users Certificates

    5
    0 Votes
    5 Posts
    4k Views
    K

    @dcd018
    Hello Everyone , I face the issue now.
    User able to log in without any certificate.....

  • APCUPSD 3.14.14 not working on 21.02. Status COMMLOST

    7
    0 Votes
    7 Posts
    7k Views
    L

    To the people following this thread, i couldn't make this work.

    Steve from Netgate did his best to provide support for this via a ticket that I opened and not even he could understand why APCUPSD was working on my ubuntu box but not on pfsense.

    In any event, i decided to give nut a more serious try and got it working. I migrated my ubuntu box from APCUPSD to nut, as a slave, and everything seems to be working fine. At least both, the SG-1100 and the Ubuntu box can monitor the ups and retrieve it's status and parameters.

    The key for this was to restart pfSense after installing the nut package. If not, I kept getting an error saying that nut "could not connect to the UPS : Not such file or directory".

    This tip was provided in the following webpage https://blog.victormendonca.com/2020/10/28/how-to-setup-ups-on-pfsense/

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.