1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N

    Can I use pgblockerng aliases in Haproxy?

    80758505-9bad-4dad-a80b-c159be1045a2-image.png

    If it was a firewall rule, typing pfb would produce a dropdown to select.

    Here it has to be written, but will it work? Is it supported?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    cyb3rtr0nianC

    @bmeeks So after upgrading to the newest PfSense 2.8.0 everything is now working like a charm!

    Suricata no longer seems to strip off tags like it did before! Which means I can now use my network segmented by VLANs and still use the benefits of Suricata Inline IPS! Very niiize!

    I checked in the Alerts section and it is indeed generating the correct alerts from the different VLAN sections, I put Inline IPS on the parent interface of all the VLANs.

    I assume this is because the FreeBSD version is also updated with the new PfSense 2.8.0 version?

    Because before, as soon as I selected Inline IPS mode, my entire VLAN tagging would break and nothing was reachable until I switched back to Legacy mode.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    W

    @qinn
    Sent him an email Dan an email to the address on his site.. Not sure what is happening, my Teams stopped working. Disable it/turn it off and the problem went away.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG

    @EChondo

    What's your pfSense version ?
    The instructions are shown here :

    1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png

    A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate.

    @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy:

    I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess.

    No need to wait x days.
    You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    89 Topics
    574 Posts
    A

    Hello,
    I am unable to get the Tailscale package to work. The page at VPN > Tailscale > Authentication is stuck. It displays the error "Tailscale is not online," but also shows a "Logout and Clean" button, with no option to log in.
    link text

    This state persists even after performing the following troubleshooting steps:

    Rebooting the pfSense router.

    Completely uninstalling and reinstalling the Tailscale package multiple times.

    Clearing browser cache and using a private browser window.

    Toggling the main "Enable Tailscale" checkbox in the settings.

    Checking the logs, which show the service gets a "terminate" signal and shuts down cleanly; it does not crash.

    Manually trying to delete the state file with rm /var/db/tailscale/tailscaled.state, which failed because the file does not exist.

    It appears that the package's configuration is corrupted in a way that persists even after reinstallation. Can anyone advise on how to perform a complete manual cleanup of all Tailscale files and settings?

  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Thanks for further suggestions. The tunnel is definitely up and so I don't think this is a CGNAT issue after all. WAN firewall rule is in place for UDP on port 51823 (otherwise the tunnel wouldn't work, right?). I can ping from client 1 -> client 2 and visa versa and also ping all points in between like you suggest. I just can't open an HTTPS connection from pfSenseB from Client 1 using a browser. But I can do this the other way round i.e. from Client 2 to pfSenseA

    I will try and do some packet capture to see if that reveals anything.

Log in to post
Load new posts
  • kiokomanK

    Telegraf Working plugin list

    3
    1 Votes
    3 Posts
    1k Views
    kiokomanK

    haproxy

    https://github.com/influxdata/telegraf/tree/master/plugins/inputs/haproxy

    [[inputs.haproxy]] servers = ["socket:/tmp/haproxy.socket"]

    the socket is already created by haproxy package

  • P

    ng_etf

    7
    0 Votes
    7 Posts
    729 Views
    T

    I believe he is referring to assigning those NICs as interfaces in pfSense (e.g. through the Web Gui -> Interfaces -> Assignments). You should only have the WAN (ngeth0) a LAN (that is not the one the RG is hanging off of), and any other OPT interfaces you may have (that are not igb0/igb1).

  • N

    problem. installed pfsense

    2
    0 Votes
    2 Posts
    330 Views
    GertjanG

    Hi,

    The answer starts here : https://www.pfsense.org/download/ Where did you get that old version from ? Surely not the official source.

    Now you know that you use an old pfSense version, you're close to the final answer : when a new version comes out, there are some notes. See here https://www.netgate.com/blog/pfsense-2-4-5-release-p1-now-available.html and focus on "Upgrade Notes". You will find

    Do not update packages before upgrading pfSense! Either remove all packages or do not update packages before running the upgrade.>

    So : upgrade pfSense first. That's easy as it can upgrade itself. Visit the pfSEnse dachboard : it will tell you it needs an update. If you want to use packages, that's not some optional choice any more.

    So, go ahead. Again, read the Notes first. Always. For every new version. For ever.
    Then installing packages won't be an issue any more.

    Btw : see it like this : do not install a "Windows 10" app on a "Windows 7 or 8" PC. That won't work.
    Added to that : packages are mostly written by volunteers. The always 'support' the latest version, not all the xxx older versions (to much work).

  • K

    help me plese!!!

    2
    0 Votes
    2 Posts
    379 Views
    RicoR

    The full doc is here: https://docs.netgate.com/pfsense/en/latest/book/
    Netgate hangout about RADIUS and LDAP: https://www.youtube.com/watch?v=n2Z3rr4W2xw

    -Rico

  • K

    how can i increase disk space of my pfsense VM

    5
    0 Votes
    5 Posts
    6k Views
    jimpJ

    Upgrade to 2.4.5-p1. It's a VM, there is no reason to stay on such an old version. If it's a 32-bit VM, you'll need to make a new 64-bit VM and redeploy, and when you do, just give it a larger disk.

    Alternately:

    Increase the size of the disk in the hypervisor touch /root/force_growfs Reboot the VM

    I can't remember when that was added, might have been after 2.3.x.

  • K

    Snort is causing issue

    2
    0 Votes
    2 Posts
    306 Views
    NogBadTheBadN

    Check your DNS is working, also you really need to update to 2.4.5-p1.

  • SpearfootS

    Has anyone ever gotten stunnel to work?

    1
    0 Votes
    1 Posts
    174 Views
    No one has replied
  • D

    Pfsense Squid Proxy web filtering issues

    3
    0 Votes
    3 Posts
    331 Views
    D

    Yes, it's third party plugins but after installed squid plugins then issues will be occurs not showing squid proxy web filtering options on services of pfsense pfsense.1..jpg

  • D

    Bind

    3
    0 Votes
    3 Posts
    401 Views
    D

    @Gertjan I played with the freeze and thaw, then figured it was time for a step back.

    Uninstalled Bind

    Cleaned all the files /cf/named/* /usr/local/etc/named /etc/named/

    did a reinstall of package

    Rebooted

    STopped Bind

    Layed out the zone

    Started Bind

    (An things worked) I think part of the trick was to configure zones with bind stopped)

    But hard to tell, thank yo for your advice

  • S

    Using zabbix-proxy with multiple networks

    1
    1 Votes
    1 Posts
    380 Views
    No one has replied
  • perikoP

    (SOLVE)Small UPS working USB?

    1
    0 Votes
    1 Posts
    182 Views
    No one has replied
  • K

    CRON doesn't run my script

    7
    0 Votes
    7 Posts
    738 Views
    jimpJ

    pfSense does not include the bash shell by default. If that isn't a plain sh script, then you have to install bash and explicitly run it through bash. For example, pkg install -y bash and then change the shabang line to #!/usr/local/bin/bash.

  • A

    Quagga OSPF neighbor adjacencies using IPSEC/VTI

    1
    0 Votes
    1 Posts
    136 Views
    No one has replied
  • D

    Possible memory leak in nut package?

    2
    0 Votes
    2 Posts
    351 Views
    S

    Hello, I seem to be running into the same thing, and can confirm that it seems to be related to using Nut.

    I have 9 SG-3100's that don't have UPS's so don't run Nut.

    And 6 that are hooked up to cyberpower UPS's and use nut + usbhid to monitor the UPS. Two firewalls locked up today out of memory after 13 days of uptime.

    I am using memdisks on all of them, so I probably have less available kmem than the poster, so my lockups are happening faster.

    Sample of sysctl vm.kmem_map_free on firewalls not running nut All have ramdisk setup for /tmp and /var

    2.4.4-Release-p3 vm.kmem_map_free: 110714880 2.4.5-RELEASE-p1 vm.kmem_map_free: 3776512 2.4.5-RELEASE-p1 vm.kmem_map_free: 4608000

    Sample of values for 2.4.5-Release-P1 SG-3100 that are running nut

    vm.kmem_map_free: 4722688 (Nut enabled) vm.kmem_map_free: 1785856 (Nut disabled???)

    Here is the value of a 2.4.5-Release-p1 SG-2220, same amount of system ram, but vastly different numbers.

    vm.kmem_map_free: 1999176794

    I'm also running arpwatch on the firewalls that have Nut, I just tried disabling arpwatch, and that freed up quite a bit of kmem? So the reason I hit this issue faster may also be because arpwatch uses more kmem.

  • iorxI

    Package idea: Autoconfig of site-to-site VPN using other ends backup configs as source?

    1
    0 Votes
    1 Posts
    219 Views
    No one has replied
  • A

    Open-VM-Tools 10.1.0_2,1 to 10.1.0_3,1. upgrade fails

    13
    0 Votes
    13 Posts
    928 Views
    jimpJ

    It's this: https://redmine.pfsense.org/issues/10610

    In your case the upgrade never fully finished because the same problem affects quagga so it was sitting there waiting on quagga to complete still.

    We're still working on that problem.

  • D

    Block vpn connection on port 443

    14
    0 Votes
    14 Posts
    2k Views
    DaddyGoD

    @Gertjan said in Block vpn connection on port 443:

    Not everybody uses OpenVPN.

    I agree....

    ExpressVPN also uses several connection methods depending on the point from which it starts..

    router usually OpenVPN
    ExpVPN app usually IKEv2 + EAP

    etc....

  • F

    FreeRadius problem

    2
    0 Votes
    2 Posts
    482 Views
    GertjanG

    " Package is configured but not (fully) installed or deprecated "
    means that lines shown in reds are packages that are ot (fully) installed or deprecated.
    Your FreeRadius is installed and up to date, so not shown in red.
    Your issue is purely configuration.

    I advise you to stop Freeradius in the GUI?
    Open up the console (SSH access is the one to use now).
    Option 8.
    Start freeradius with :

    radiusd -X

    and you will see all the details. The ones printed red mean : no good.

  • K

    pkg-static: Cannot get an advisory lock on a database

    2
    0 Votes
    2 Posts
    523 Views
    GertjanG

    As said here.

    Also, do a reboot to put things straight.

  • K

    Can't install, reinstall, delete squidgaurd

    2
    0 Votes
    2 Posts
    148 Views
    viktor_gV

    killall -9 pkg-static
    then try again

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.