Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    D
    Retested on 24.11-RELEASE (amd64) all seems to work. So it seems right to file a bug for this issue.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    cyb3rtr0nianC
    @rlrobs Yes it’s still working fine here.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K
    @pulsartiger The database name is vnstat.db and its location is under /var/db/vnstat. With "Backup Files/Dir" we are able to do backup or also with a cron.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    M
    I resolved this by accepting the T+Cs via https://www.maxmind.com/en/accounts/1205389/geolite2/eula
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG
    @EChondo What's your pfSense version ? The instructions are shown here : [image: 1753262126227-1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png] A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate. @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy: I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess. No need to wait x days. You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    J
    @div444 i'm finding the same - did you find a solution or did reverting fix it? Hoping there is a patch fix or something to get it working! Rather not rollback if i can avoid it
  • Discussions about the Tailscale package

    90 Topics
    580 Posts
    T
    @Gertjan Thanks. This is a compiled binary the tailscale vpn network mesh using wireguard. So this is s definite no then.
  • Discussions about WireGuard

    691 Topics
    4k Posts
    U
    Hi. My SG-2100 is currently setup with Surfshark utilising OpenVPN which is working however the bandwidth isn't great. I was hoping that switching to WireGuard would speed things up. I enquired about this a while ago and it seemed like openVPN was still the best option at the time but perhaps things have changed..... I have created my key pair and have the config info for WireGuard from Surfshark. Questions: Is it worth it? Should I back up and reset the 2100 before configuring WireGuard? Can you advise on the steps to configure WireGuard with my Surfshark VPN info within pfsense+ on my SG-2100? Thank you.
  • SquidGuard Default Blacklist SafeSearch settings and Shallalist

    Locked
    39
    0 Votes
    39 Posts
    41k Views
    D
    @boipie01: Is bing safesearch supported? thanks No. I not found this mechanism in the Bing.
  • Peer guadian for PFsense?

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    S
    @tester_02: Comments? Sure! Stop downloading illegal content and you wont need peer guardian! Sorry couldn't resist :)
  • Issue with Snort on PFSense 1.2.2

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    T
    Please, do that. I waste a few hours to solve this problem, it have no online documentation, and may help a lot people. ;) Thanks!
  • Still cant get squid working

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    M
    @trinli: okay, what happens if you set up squid as non-transparent and set proxy settings in the browsers to point at it?  Does everything work correctly?  I'm just wondering about a configuration error in squid itself so that it doesn't work, or if the problem is in the redirect of the traffic. And, just for curiosity, is the PF box set up as a bridge or something?  What is the gateway for the individual computers in the network? as in the first post Setup: Router doing DHCP -> PF sense machine -> rest of network so the PFsense box is doing bridging, and not much else. since IP's are assigned via the router, i assume it will be the default gateway as well. To be honest i dont even know what settings i'd need to use to set it up as a non transparent proxy, that was the appeal of setting it up transparently.
  • Snort blocking gotomypc even after disabling gotmypc rule

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    S
    If is not in the block tab or in the alerts tab than its not been blocked. Looks like a different issue to me. what version of snort do you have?
  • Update accelrator advanced proxy to enhance file cache

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    B
    WSUS is the fella you're after. Failing that, Heise's offline update is a champ, I use it extensively and it never misses a beat. If you're managing more than a handful of machines then you really need to consider WSUS and/or a controlled approach to updates anyway. Allowing random users to install the latest and greatest update at their own whim will introduce you to a whole new world of pain.
  • Squidguard configuration problem?

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    T
    Actually, I think I found the problem.  I had been choosing deny for test in the "overtime" column, and time was not defined.  This might have just been user error.  If I have more problems, I'll post.
  • Fit123 package

    Locked
    6
    0 Votes
    6 Posts
    2k Views
    jahonixJ
    Did you mention NOT having installed the embedded version? Don't think so. On a full install it's just a package to install. This gives the option for another theme to choose from. There shouldn't be any performance reasons not to use it. And if you don't like it just select another theme again, there's not really a risk involved in trying ot yourself.
  • Snort error message in blocked list

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    K
    Hey there! ;D I got the same error just on line 801! Fatal error: Allowed memory size of 33554432 bytes exhausted (tried to allocate 98692142 bytes) in /usr/local/pkg/snort.inc on line 801 I have read many posts about a php.ini problem, but the error message point on a snort.inc file. I does not check it out, but i found this link: http://us2.php.net/manual/en/ini.core.php#ini.memory-limit
  • So I've installed Squid

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    G
    @mentalhemroids: Have you installed squid before?  Is this your first time using pfSense?  If you have a box setup with pfSense and the Squid package is installed then the answer is yes, you will need to configure some settings.  I've noticed with new installs of Squid it is missing some settings such as "allow user…" should be set, and if you want transparent proxy, then you will need to set that.  Most of the other settings I just copied from one of my other boxes.  Enable logging, if you want, and use this directory /var/squid/log  also put in the proxy port of 3128, make sure the language is set correctly and you should be fine.  You may even want to put something in for host name and administrator email.  You will probably want to be using Firefox to browse since the IE's don't work for drop downs.  Other than that you should change your cache options to what you would like to have and you'll be in business. Good Luck. Thanks for your accurate response! ^^ I happened to set all those options. Was just wondering if thats all I needed to do you know ^^. - I'm curious to know if there are any parameters that can be set sub Gui level. (?) That is - ones I'd have to set using the console. - wish I could view the console via GUI :D lol. First time using PFs yes - but I've configured firewalls before :) - so I get around with it. These other settings that you say you copy from your other boxes (upon a new install I suppose), are they just the ones we view in the web Gui? (saved to a config file no doubt). OR, are they some other configurable variables that the Gui doesn't display? (Id like to set my cache size - you speak of cache settings - where do I find those!?) if you're aware. –-EDIT!-- my goodness. I JUST realized there was a whole drop down tab of options on that page :o :o. :p Checking it out
  • Router with Bandwidth Management(QoS, TOS etc)

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • New Install Snort Fun

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    D
    Good point.  Since I am the one who set this thing up, I think I elected myself to be the admin for it.  I do want it to be as stable and fuss free as it can be. I'll change snort to watch the LAN side of the force and see how that works.  I'm still amazed at how well pfSense works! Next up will be getting SquidGuard working, but that's another topic of course. Thanks!
  • How to configure freeradius

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Last snort version on last 1.2.3 RC2 and carp

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Lightsquid 1.7.1 installl error on 1.2.2

    Locked
    4
    0 Votes
    4 Posts
    1k Views
    D
    Look lightsquid inc and xml in /usr/local/pkg/ - exists? not empty ?
  • Bypass Transparent Proxy - All But One IP

    Locked
    7
    0 Votes
    7 Posts
    5k Views
    V
    Sorry, I think I confused you… there are all kinds of rules when I run pfctl -sn, and my firewall is on. I just don't see that one rule.
  • How to trigger squidGuard package to export squidguard config?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    D
    PHP require_once('squidguard.inc'); sg_reconfigure();
  • Importing lists for SquidGuard

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    K
    Try to check this http://doc.pfsense.org/index.php/SquidGuard_package hope this help.
  • Pop3 Question

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Is the Cron Package Broken ?

    Locked
    6
    0 Votes
    6 Posts
    2k Views
    C
    As suggested by jimp I have modified the require to use require_once and committed the changes. I hope that helps. @jamesdean: Also ask mcrane to email me, he needs to tell me what SIP PROXY PORTS the freeswitch package uses. Snort uses 5060 for voip. Its for the custom pfsense voip rules. FreeSWITCH SIP ports typically uses 5060 - 5090 tcp or udp. RTP uses UDP ports 16384 - 32768
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.