Subcategories

• Cache/Proxy

  Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

  3.7k
  Topics
  20.5k
  Posts

  O

  @viragomann

  Thanks for your comments. I'm at work now but I can try to share more details on the configuration later.

  The more I think about it, the more I think the problem is not on the HAProxy side. HAProxy is returning subdomains correctly on the LAN listener and I created the WAN listener by copying it.

  I'm pretty sure I can set my firewall rules so that the incoming WAN traffic lands on the LAN listener and get the same result.

  Leads me to believe it's something to do with how my VPN service provider is forwarding the traffic, or my NAT / firewall rule configuration.

  I'm not sure how to troubleshoot traffic getting passed, but getting striped of http headers along the way. Believe I am talking about HTTP, haha to the extent of my knowledge. Will have to come back to dig/nslookup. But the domain is resolving correctly.

• IDS/IPS

  Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

  2.2k
  Topics
  15.6k
  Posts

  K

  @bmeeks THank you so much will do thanks

• Traffic Monitoring

  Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

  553
  Topics
  2.7k
  Posts

  A

  @CZvacko said in Telegraf service stops when the physical interface is reconnected or reconfigured:

  In the last version 2.7.2 I noticed several times that the Telegraf service stopped working, now I found that it happens when reconnecting the physical interface. Probably also when adjusting interface parameters such as MTU. Is this considered a bug or how to prevent it ? (I have to remember to check it after such actions)

  This might be a bug. Check Telegraf logs for details, and configure it to restart automatically by editing its service file:

  Restart=always
  Restart with sudo systemctl daemon-reload && sudo systemctl restart telegraf. Update to the latest version and report the issue on Telegraf's GitHub if it persists.

• pfBlockerNG

  Discussions about the pfBlockerNG package

  2.5k
  Topics
  19.0k
  Posts

  R

  @reberhar so I can get to the 3 edit dots on my display. To be deleted later

• UPS Tools

  Discussions about Network UPS Tools and APCUPSD packages for pfSense

  86
  Topics
  2.3k
  Posts

  D

  @netboy Glad you got it sorted.

• ACME

  Discussions about the ACME / Let’s Encrypt package for pfSense

  476
  Topics
  2.7k
  Posts

  T

  @killuhbyte Without reviewing /tmp/acme/firewall-cert/acme_issuecert.log to possibly discern more, the script appears to be failing at actually reading the zone file—or failing to match it to what you've entered under "Domainname".

  Relevant code:

  _debug "First detect the root zone" if ! _get_root "$fulldomain"; then _err "invalid domain" return 1 fi

  Without seeing more of your configuration, there's something wrong with the "Domainname", the API Token, or the Zone ID.

  How is the token configured on the Cloudflare side?

• FRR

  Discussions about the FRR Dynamic Routing package on pfSense

  279
  Topics
  1.1k
  Posts

  M

  Found the issue. RPKI is not supported although its an option available.
  Dont know why this is a problem in 24.11
  I did have RPKI enabled prior.

  Spoiler

  /usr/sbin/service frr restart bgpd
  bgpd not running? (check /var/run/frr/bgpd.pid).
  Starting bgpd.
  frr_init: loader error: dlopen(/usr/local/lib/frr/modules/bgpd_rpki.so): /usr/local/lib/libssh.so.4: version LIBSSH_4_5_0 required by /usr/local/lib/librtr.so.0 not defined
  frr_init: loader error: dlopen(/usr/local/lib/frr/modules/rpki.so): Cannot open "/usr/local/lib/frr/modules/rpki.so"
  frr_init: loader error: dlopen(rpki): Shared object "rpki" not found, required by "bgpd"
  /usr/local/etc/rc.d/frr: WARNING: failed to start bgpd
  [36398|mgmtd] sending configuration
  [36518|zebra] sending configuration
  [39070|watchfrr] sending configuration
  [39648|bfdd] sending configuration
  Waiting for children to finish applying config...
  [39585|staticd] sending configuration
  [36398|mgmtd] done
  [39070|watchfrr] done
  [39585|staticd] done
  [36518|zebra] done
  [39648|bfdd] done
  

• Tailscale

  Discussions about the Tailscale package

  74
  Topics
  417
  Posts

  D

  Screenshot_20241113_175104.jpg Good day everyone,
  Im getting this notification on my pfsense, can someone tell me what is it?

• WireGuard

  Discussions about WireGuard

  627
  Topics
  3.3k
  Posts

  T

  So I'm finally got around to setting up a VPN to my home network so I can access files and thing on my LAN when I'm away from home. It works quite nicely actually, but I was under the impression all my LAN devices would show up in macOS Finder sidebar like they do at home.

  I've setup Wireguard as per this https://docs.netgate.com/pfsense/en/latest/recipes/wireguard-ra.html and a lil help from Chat which suggested the same.

  I also have Avahi package installed and working with "Repeat mdns packets across subnets" set.

  But then I saw this here Re: Avahi mDNS on Wireguard

  @cypherpunk AFAIK, the pfSense Wireguard implementation does not support multicast.

  But it's still unclear to me.
  So would I be correct then in assuming Bonjour will never work on this setup and I should switch the OpenVPN to get the experience I'm after?