1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    J
    @KOM Good morning. The goal is to keep Pfsense and have another proxy option in case Squid really doesn't work anymore (from what I've researched, Squid has been discontinued).

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    RedDelPaPaR
    @bmeeks Understood. Thank for kindly for your help. I will likely be ordering a new unit soon.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    573 Topics
    3k Posts
    dennypageD
    @kabeda If memory serves, that old version of ntopng did not run as user ntopng, but as user nobody. There are lots of problems in that old version. Anyway, check the ownership and permissions of /var/db/ntopng and make sure it matches the user that ntopng runs as. You may need to set ownership of the entire hierarchy. Example: /usr/sbin/chown -R nobody:nobody /var/db/ntopng However, the better choice would be to upgrade to a more recent version.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG
    @netboy said in is something wrong with pfBlockerNG?: arm64 That might be a factor. I said that our code base is "bit-wise" identical - and we use the same processors. Actually, that's wrong. X86/amd64 isn't arm64 at all. So, I'm not finger pointing, but I can't test the 'arm' version, as I'm using a 4100, a amd64 device. I has a new unbound version installed yesterday. The previous version was 1.23.x - the new version is 1.24.1. To get it : ssh or console, option 8, and then pkg update pkg upgrade and again, not sure if this is valid for arm.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    102 Topics
    3k Posts
    dennypageD
    @fjmp24 said in Notification: UPS ups battery is low: If I remove ignorelb directive, my UPS shuts down after 16 seconds This means your UPS is signaling a low battery. Either your battery is bad, or your UPS is bad. Most likely battery, but you never know. I suggest reaching out to Eaton support.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    503 Topics
    3k Posts
    M
    I am using the DNS-Update method I have to use a DNS-Sleep of 5 minutes to let the letsencrypt txt dns record update propagate. During this 5 minutes the acme-webgui times out. when the acme-webgui times out the Action list is NOT executed. How can I solve this ? Would it maybe be an idea to let the acme.sh script execute the actions in the action list as a post-hook instead of the web-gui? Or maybe add an option to add post-hooks in the webUI ?

  • Discussions about the FRR Dynamic Routing package on pfSense

    296 Topics
    1k Posts
    C
    This one has been tricky still not sure what to try. Any ideas?

  • Discussions about the Tailscale package

    93 Topics
    644 Posts
    C
    @elvisimprsntr Thank you. I would not be surprised if I ended up with a lengthy solution that works but needs significant improvement. I am using a Netgate 6100 with pfSense+, starting with version 24.x. I had updated Tailscale without trouble per this discussion by using pkg add -f https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-x.y.z.pkg. This worked until pfSense+ version 25.0.07 (FreeBSD 15-CURRENT) and Tailscale upgrade 1.88.3. After several attempts and web searches, I was only able to install that upgrade by using: fetch https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.88.3.pkg, and then IGNORE_OSVERSION=yes pkg-static add -f tailscale-1.88.3.pkg. Then, I could not restart Tailscale, no matter what I tried, including the sequence: service tailscaled stop, tailscale logout, service tailscaled start, and then tailscale up.

  • Discussions about WireGuard

    714 Topics
    4k Posts
    R
    I was on PfSense version 23.xx (don't recall the xx) and was able to start the Wireguard service. I upgraded to the 25.11 beta version and now the Wireguard service will not even start. I am on Wireguard version 2.1, and I see that there are versions that go up to 2.9. How do I upgrade to a later version? The only version in the pfSense updater is 2.1. Thank you
Log in to post
Load new posts
  • M

    Dual wan and package install

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    Cry HavokC
    Set up an explicit route?
  • L

    Package reload hangs

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • N

    How to disable squid without removing it?? –RESLOVED--

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    N
    WORKS. THANKS
  • D

    Frickin Question

    Locked
    17
    0 Votes
    17 Posts
    7k Views
    A
    Once again this has come up :) What have I tried meantime is that I installed Frickin 2.0 beta2 onto my FreeBSD-6.2. I also enabled scrub only for udp and tcp, but well.. still stuck on "Verifying username and password..". Looks like I forgot to MFC a few items.  Please try a snapshot about 2 hours from now. I didn't quite get what snapshot should one try - Frickin or pfSense or …? And I'm quite confused about PF and PPTP issue. Some people seem to claim that it's possible to use PPTP through PF, but all the guidlines end up somewhere.. Is there any hope to get it working with PF or should I just go back to IPFW (which to my mind had no such problems)?
  • P

    Snort not working

    Locked
    2
    0 Votes
    2 Posts
    6k Views
    S
    Sep 19 15:47:54    snort[11015]: PID path stat checked out ok, PID path set to /var/run/ Sep 19 15:47:54    snort[11015]: PID path stat checked out ok, PID path set to /var/run/ Sep 19 15:47:54    snort[11015]: FATAL ERROR: Failed to Lock PID File "/var/run//snort_ng0.pid" for PID "11015" Sep 19 15:47:54    snort[11015]: FATAL ERROR: Failed to Lock PID File "/var/run//snort_ng0.pid" for PID "11015" Do you connect to the internet via PPoE? I am currently having the same error but on ath0 but I've set snort to listen on to bfe0 (WAN) Slam
  • R

    RC2 doesn't list packages

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    R
    Thanks  ;D i was searching for subversion pkg
  • R

    Subversion(SVN)

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    R
    Thanks for the info, anyone has tryied to use pkg_add?? on a pfsense?
  • K

    Ip on whitelist but snort is stil triggering/blocking

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • S

    Snort

    Locked
    9
    0 Votes
    9 Posts
    7k Views
    AhnHELA
    I see the same exact thing on a reboot.  Snort apparently takes some coaxing to run properly and yes I've seen that line 40 error as well as of late. This is not specific to just your system Slam, so no more clean installs, ok?  ;)
  • U

    Proxy and load balancer

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    A
    Correct usuarioforum, that's my understanding too
  • S

    Squid - Transparent Proxy for ALL Web Traffic

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    M
    @Seth: including traffic on unique ports and SSL.  Is this possible? Transparently intercepting SSL is not possible, that's part the design of SSL.  As for non-standard ports, just block them: this is standard enterprise filtering technique and all service operators are aware of this, and hence the invention of HTTP tunnelling. Sneakily I want to add my own question, as of 1.2-RC2 is it possible to install transparent Squid to HAVP+ClamAV proxy from packages without manual configuration file hacking?  Would this even remotely run on a WRAP device with 128MB system memory and 4GB CF microdrive?  I'm checking for convenient embedded alternatives.
  • G

    UPNP service not working correctly on multiple interfaces

    Locked
    8
    0 Votes
    8 Posts
    4k Views
    R
    My mistake, I use vim in windows to edit the files and didn't realize it wasn't in unix format. Whats interesting is I tested it on my pfSense box and it ran fine. Anyway I updated the file using dos2unix to make sure.
  • D

    About IMSpector file transfer and wishlists

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    R
    Not at this time. Visit the http://imspector.org/ page for contact information.
  • J

    AC-bnfa

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    D
    How about looking at the snort community? :)
  • J

    NUT Package

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    R
    @lorenzr: I am having the same problem both on 1.2RC2 and the last stable version before it.  After some tinkering I got a similar error.  "upsmon[xxxx]: user uucp not found" I looked at the passwd file and uucp isn't there.  Perhaps another package installs this or it apprear when a serial port is present? I tried to replace uucp with root but I must have missed a spot or it set on a file generated on install. Ray Looks like an easy fix. The uucp user existed on earlier builds. Heres the line in the /etc/passwd on my box. uucp:*:66:66:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico
  • I

    Squid - whitelist

    Locked
    2
    0 Votes
    2 Posts
    8k Views
    M
    1.  Fill in the whitelist as you would expect.  List out the sites you want to allow the computers access to.  2.  List out the computers by IP that are NOT subject to the whitelist only rules and put them in the 'Unrestricted IPs' box, one per line.  You might have to make one group static and the other on DHCP, or set reservations in DHCP.  Depends on your situation and number of hosts to deal with. 3.  Place a single '.' (no quotes) in the blacklist.  This is the wild card character for squid. This is exactly how we have a production system running, it's amazing.
  • B

    FreeRADIUS

    Locked
    12
    0 Votes
    12 Posts
    6k Views
    A
    I found that freeradius will stop running (Status>Services) everytime i manually disconnect and reconnect my WAN connection (PPPoE). Has anyone got the same problem?
  • P

    Mdmfs package

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    P
    A few notes: 1. apparently you need to log in to the forums to see the screen shots 2. mfs mounts = aka "RAM disk".  Basically if you have a box running pfsense with lots of RAM, why not use some spare RAM to save wear and tear on your CF or hard drive while still allowing for a full install of pfsense. 3. has an option to create a default set of mfs mount points for a few common directories that are accessed/written to on a frequent basis with two clicks of your mouse. 4. an initial package is complete, I am looking on what the procedures are to submit this for review.  (I have email the coreteam, etc)
  • D

    Adding Widgets to Dashboard

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    Y
    I'll test it out this weekend and add it to the package.
  • P

    UPNP

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    P
    Thank you for your help. For future readers, the package did not show up in the backup file as it never finished installing the package. Reloading the update fixed the problem.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.