1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    J
    @JonathanLee use Pfsense 2.8.1.

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    DARAD
    Hello team, I have a Netgate 8200 running 24.11-RELEASE (amd64) with Suricata 7.0.8_5 package installed. Suricata doesn't seem to start. It loops to red once I press the Play button on the interface. It leaves no logs in the System logs, it leaves no logs in suricata.log at /var/log/suricata/suricata_ovpns933787/suricata.log I tried launching it manually: # /usr/local/bin/suricata -V or # /usr/local/bin/suricata -c /usr/local/etc/suricata/suricata_33787_ovpns9/suricata.yaml -i suricata_ovpns933787 and I get this output ld-elf.so.1: /usr/local/bin/suricata: Undefined symbol "__strlcpy_chk@FBSD_1.8" Thanks in advance, Dara

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    tinfoilmattT
    @vicking said in No blocks on IP: Is it a bad idea to have the action set to deny both instead of inbound only? Question is squarely for admin. Per the infoblock which explains, in part, the "Deny Inbound", "Deny Outbound", and "Deny Both" actions: 'Deny' Rules: 'Deny' rules create high priority 'block' or 'reject' rules on the stated interfaces. They don't change the 'pass' rules on other interfaces. Typical uses of 'Deny' rules are: Deny Both - blocks all traffic in both directions, if the source or destination IP is in the block list Deny Inbound/Deny Outbound - blocks all traffic in one direction unless it is part of a session started by traffic sent in the other direction. Does not affect traffic in the other direction. One way 'Deny' rules can be used to selectively block unsolicited incoming (new session) packets in one direction, while still allowing deliberate outgoing sessions to be created in the other direction. In other words: When set to "Deny Inbound", incoming connection requests from WAN hosts are blocked and therefore no state will be created. However a LAN host can still establish state to an otherwise listed IP. If set to "Deny Outbound", outgoing connection requests from LAN hosts are blocked and therefore no state will be created. However an incoming connection request from an otherwise listed IP to an 'open' WAN port can still establish state. If set to "Deny Both", both incoming connection requests and outbound connections requests are blocked and therefore no state will be created regardless of connection direction.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    C
    @dennypage Nicely done sir!

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    M
    I am using the DNS-Update method I have to use a DNS-Sleep of 5 minutes to let the letsencrypt txt dns record update propagate. During this 5 minutes the acme-webgui times out. when the acme-webgui times out the Action list is NOT executed. How can I solve this ? Would it maybe be an idea to let the acme.sh script execute the actions in the action list as a post-hook instead of the web-gui? Or maybe add an option to add post-hooks in the webUI ?

  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?

  • Discussions about the Tailscale package

    93 Topics
    654 Posts
    C
    @luckman212, Thanks for your suggestion. I will check what I have in /usr/local/pkg/tailscale/state, and also the RAM disk settings others have brought up. I could learn more about where Tailscale and pfSense store system files. If I find anything worth sharing, I will let you know.

  • Discussions about WireGuard

    715 Topics
    4k Posts
    H
    @RNM-0 Thanks for your comment and sharing your fix. Unfortunately I don't want to take down pfsense and downgrade versions. I'm currently fine at the moment since I'm using Tailscale and that works. I also fixed the other crash I was having with pfblocker by changing a line code that wasn't pushed out under this version. Hopefully the stable release won't take too long to release but it appears there's still some open bugs that need to be fixed before that happens, and ironically, both the pfblocker and wireguard issues aren't on that list of bug fixes.
Log in to post
Load new posts
  • J

    Manually downloading of Packages

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    J
    I always encountered download fail or timedout. I think the best way is to download the packages manually in fast net cafe and then Install it even offline machine. Kindly show me the way on how to manually download all the packages for experimentation please? Thanks for the heads up :) jigp Davao City
  • C

    Avahi install fails with "Call to undefined function"

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • F

    Error in Squidguard when downloading urlblacklist.com

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    F
    Thanks!
  • M

    Traffic by IP

    Locked
    8
    0 Votes
    8 Posts
    3k Views
    V
    I run with no less the 512. The reason being is that with 512 you have elbow room. Currently on my system I am using 212MB of RAM. I have a P4 1.6 w/512 MB ECC RIMMs. Might I also add I love running PfSense on RIMMs. It seems the interface alone runs faster, not sure about everything else  ;) But I prefer to run PfSense on ECC RAM being that this is a network critical machine and as far as I'm concerned errors are not acceptable. Anyhow, I'm running for packages…. darkstat squid squidGuard FreeRADIUS imspector nut snort Any my system does very well and is very stable. Sometimes I use as much as 350MB of RAM but it's not often, that may have been when I was load balancing w/failover
  • M

    Unable to communicate

    Locked
    8
    0 Votes
    8 Posts
    3k Views
    M
    After proper set of the interfaces everything turned to be just fine. Thanx everyone for assistance! Update (notice for possible further hardware issues): I run pfSense on IBM xSeries 220 server with dual P3 CPU/SCSI RAID-1. No additional configuration needed to suit the hardware.
  • A

    How to Install Snort

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    jimpJ
    Try looking in the Doc Wiki, too… http://doc.pfsense.org/index.php/Special:Search?search=snort&go=Go Though your router not being able to contact pfSense for the package list is the real problem, not snort.
  • D

    Upstreaming the squid proxy package in Pfsense to a FINJAN device

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • C

    Squid Guard pooped out

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    D
    Aaaa A problem solved ?
  • P

    Vnstat added to package tree

    Locked
    11
    0 Votes
    11 Posts
    30k Views
    C
    Perry thanks for the package!! I've manually added vnstat to my box but i prefer a pkg install i ever had to reformat my box
  • V

    Released IMSpector 0.7, pfsense build is needed

    Locked
    36
    0 Votes
    36 Posts
    19k Views
    B
    Starting a new topic to track updates to this package - locking this one. –Bill
  • D

    LCDproc for 1.2.1

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    B
    I'm wondering if there is an update to this? The LCDProc doesn't appear to work with the mini-box 300? Any suggestions, help, advice or anything else to get it to work? Somebody mentioned the driver needs recompiled in FreeBSD 7 - happy to do this but not quite sure how (while I'm a Linux / Windows bod and have recompiled bits and pieces not done so for FreeBSD).
  • U

    Spamd, NAT & Rules [Solved]

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    U
    After some twiddling around it turns out very simple  :) Config spamd: fill in nextMTA Start spamd Don't make any NAT/Rules for port 25 traffic, Spamd will listen on WAN port 25 en forward your mail to the nextMTA after a 25 minutes once the mailserver gets on the whitelist
  • M

    POPFile on pfsense

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    0
    I have used POPFile in the past, both on client side as well as installed as server daemon (Mercury/32 mail server) and know it's a marvelous piece of software. I am however quite concerned about putting too much processing and non-firewall services into the firewall. And even though the same can be said about several packages already in place (and I am also using a few packages myself) I do feel that this type of often busy service and exposed one too, perhaps should not reside in the fw itself. In practice you'd have pfs acting as the MX receiving any and all bits from the outside destined to the receiving mail server then. I'm not saying it's incorrect - people's opinions varies - and there are other software putting all eggs in the basket (like Untangle?) but I think many like firewalls to not do any and all services, by design, and personally I would not like that, from various security and stability perspectives etc. I'd be interested in hearing other views on this though. Cheers,
  • J

    Squid+squidguard not to save the cache and logs of http/https

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    D
    Squid HDD cache exists as part of the proxy. The small size of the HDD cache may reduce the effectiveness of the cache. Ability to disable the cache through the GUI does not exist (as opposed to the system logs) .
  • J

    Imspector and MYSQL database configuration

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    B
    @jigpe: I tried also to logged it in /usr/imspector (pfsense box) where lan is 192.168.1.1 and wan is my isp. Same thing. They also disconnect after sending messages after Day 3 (from fresh install). No problem from Day 1 and Day2 they dont disconnect and it logged. How to configure inside pfsense like  creating folder from there? i tried to create a directory at /usr/imspector/imspectorlog..no logs there either after exploring it.. HD of pfsense is 160 seagate sata and RAM is 3GB , Users: 30…Hope this is enough specs.. Kindly show me the way guys? Thanks Sounds like an IMSpector issue, you'll probably have better luck asking in their support forums.  I don't plan on debugging their code. –Bill PS the package logs to /var/imspector, not /usr and there is no provision to change that in code (nor will there be)
  • T

    [ASK] squid configuration ??

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    J
    Hello. My squid+squidguard is working. I just want to block file extension .exe avi . All is working. But i dont want to log all. I just want squid to just block file extensions and block sites. Please what to do? I just dont want to log.. jigp Davao
  • 0

    IMspector update (0.8-0) broke log viewer badly

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    0
    @billm: This has already been covered in the other IMSpector thread. Perhaps one should starta a new thread when the old one's subject don't match any more..? I'll take a closer look at the latest posts..
  • O

    Diagnostics: Package logs – Which package should I use?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    D
    @odracir: Hi, What is a good package to use in Status-> Package logs? What do I have to install in order to use this feature? I also want to see the firewall logs and packet filter logs in real time. Is that possible? Now this future not usable for packages.
  • J

    IMSPECTOR

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • B

    Which monitor package to use…?

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    S
    Funnily enough I was researching this very topic today….I know the OP asked for a pfs package, but Im also interested in monitoring so I thought Id post this anyway, I came across CactiEZ, but you would have to run it on a spare box, which I plan to do in bridge mode, so it can capture all the data I need, some of the features from the site:- CactiEZ is a self installing Linux Distribution based off CentOS that sets up and configures a customized Cacti install. Everything is designed to be completely automated and working directly out of the box. This compact distro is loaded with extra features such as Syslog and Netflow data collection, Weathermaps, Reports, Auto Discovery, Router Config backup, Nagios, and much more! Both 32 Bit and 64 Bit installations are possible from the same CD. This gives your system administrators more time to work on the real issues, and less time configuring and setting up your Monitoring System. Best of all, its absolutely FREE! Its got quite a few nice plugins, including one for NTOP! http://cactiez.cactiusers.org/ Ill setup it up in a few days or so when I have the time, Ill report back and tell how well it works with pfs. EDIT: another application I found http://www.ossim.net/ Slam
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.