Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N

    Can I use pgblockerng aliases in Haproxy?

    80758505-9bad-4dad-a80b-c159be1045a2-image.png

    If it was a firewall rule, typing pfb would produce a dropdown to select.

    Here it has to be written, but will it work? Is it supported?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB

    I saw where the Netgate kernel developer updated the Suricata package in the pfSense 25.07 development branch to work with the new kernel PPPoE driver. But so far as I know that updated package has not been migrated to 2.8 CE.

    Here is the commit into the DEVEL branch: https://github.com/pfsense/FreeBSD-ports/commit/68a06b3a33c690042b61fb4ccfe96f3138e83b72.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    M

    @Laxarus This worked for me as well. Though I had to search the web how to edit the file (the easiest way).

    Therefore:

    Addition for anyone struggling to find where to edit files on your pfsense system.

    Go to Diagnostics --> Edit File --> insert the location of the file:

    /usr/local/pkg/pfblockerng/pfblockerng.sh

    Go to line number 1232 by filling it in the Go to line field.

    That line should read:

    s1="$(grep -cv ^${ip_placeholder2}$ ${masterfile})"

    replace only (leave the rest intact):

    masterfile

    to

    mastercat

    Then follow the above instructions from @Laxarus https://forum.netgate.com/post/1219635

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    johnpozJ

    @MacUsers

    https://help.zerossl.com/hc/en-us/articles/360060119933-Certificate-Revocation

    edit: oh you prob out of luck

    You can revoke any certificate issued via the ZeroSSL portal. Currently, certificates issued via ACME can not be revoked from inside the portal - please follow the instructions of your ACME client for revoking those certificates.

    the gui in pfsense does not have the ability to revoke - you prob have to move the certs to something you have certbot installed to and revoke that way.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    88 Topics
    573 Posts
    luckman212L

    For 25.07 RC, this worked for me (run sh first)

    [25.07-RC][root@r1.lan]/root: sh # export IGNORE_OSVERSION=yes # pkg add https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2.pkg # service tailscaled restart # tailscale up # tailscale version 1.84.2 go version: go1.24.4 # tailscaled -version 1.84.2 go version: go1.24.4
  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Thanks for further suggestions. The tunnel is definitely up and so I don't think this is a CGNAT issue after all. WAN firewall rule is in place for UDP on port 51823 (otherwise the tunnel wouldn't work, right?). I can ping from client 1 -> client 2 and visa versa and also ping all points in between like you suggest. I just can't open an HTTPS connection from pfSenseB from Client 1 using a browser. But I can do this the other way round i.e. from Client 2 to pfSenseA

    I will try and do some packet capture to see if that reveals anything.

  • Firewalling and Squid

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    L

    Thanks for the reminder, I have been meaning to do this for a while, http://cvstrac.pfsense.com/chngview?cn=11517

    There is also something else before this should work, You will need to create a pass rule for access to webgui and ssh after the block rule. Then disable anitlockout in System -> Advance, then it should work. It should also work for traffic shaper rules for squid.

  • Translate pfsense

    Locked
    8
    0 Votes
    8 Posts
    5k Views
    S

    Fernando Lemos
    "Fernando Lemos" <fernando_at_netfilter.com.br>,</fernando_at_netfilter.com.br>

  • Squid NAT Rule

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    T

    Any hints, hoba?

  • Is squid compile with delay pool??

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    T

    It is, but you have to change the squid.conf manualy until the bug ticket is solved.

  • SquidGuard

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    S

    This has been asked 1,000 times, please search.

  • NTOP Bug / Services Stop and Starting

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    G

    running latest and greatest. I guess it was me being impatient. I thought it wouldn't take as long, I finally was poking through the command prompt and it takes at least a minute of better to load with amount of traffic on it.

    thanks.

  • Transparent proxy on opt?

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    R

    is this correct for using opt1 as bridge for lan interface (portforwarding for opt1 3128->80)?

  • Free billing system from LMS

    Locked
    1
    0 Votes
    1 Posts
    6k Views
    No one has replied
  • Squid errors

    Locked
    60
    0 Votes
    60 Posts
    43k Views
    S

    @rexster:

    just installed squid on pfsense beta2.

    it works fine right after it's installed.

    but when i start configure things from the gui,
    it gives me error just like the one in my post before this.

    why the options in the gui is not same with default installed squid.conf ??

    tia
    rex

    Bugs.  Squids maintainer seems to be MIA so we are trying to mop up the issues as they arise but I am pretty burned out on the situation.

    Patches accepted.

  • Squid Poll

    Locked
    12
    0 Votes
    12 Posts
    8k Views
    A

    Thanks Myntric
    just register for this post ^^

    using Squid as the proxy

  • Squid failing to start

    Locked
    10
    0 Votes
    10 Posts
    7k Views
    L

    Its broken. When time permits I'll probably take a look at it to see if I can sort that out, provided no-one is already working on it.
    I'd get a chance to try out Scott's flashy CoreGUI.  ;D

  • Ntop not working correctly/ subtitute

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    J

    I would if I knew what I was doing,  sadly I don't.  I was just looking for some confirmation.  Which I have gotten by the lack of posts :).

  • Squid, optionally?

    Locked
    6
    0 Votes
    6 Posts
    4k Views
    H

    Create a portforward at firewall>nat, portforward tab. choose LAN or OPTx interface instead of WAN, depending at which interface your clients are coming from.

  • PPTP VPN Users Statistic

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    S

    Patches accepted.

  • SSL-Explorer

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    F

    You also have OpenVPN.

  • For_throttled_binary squid its not working

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    S

    Sorry, I don't follow.  Can you explain what you mean?

  • Transparent Squid and Traffic Shaping!!

    Locked
    2
    0 Votes
    2 Posts
    5k Views
    S

    Bravo!  Thats awesome!

  • Squid Installation Error

    Locked
    12
    0 Votes
    12 Posts
    6k Views
    S

    Ok I finally got around to installing the squid package but im having a bit of trouble getting it to work. I set it up for "transparent mode" but get an "access denied" output. Am I missing something? I was under the impression that no other configuration was needed when using squid in "transparent mode".

    Feb 28 09:23:53 squid[68134]: Exiting due to repeated, frequent failures
    Feb 28 09:23:53 squid[68134]: Squid Parent: child process 68525 exited with status 1
    Feb 28 09:23:53 squid[68134]: Squid Parent: child process 68525 started
    Feb 28 09:23:50 squid[68134]: Squid Parent: child process 68523 exited with status 1
    Feb 28 09:23:50 squid[68134]: Squid Parent: child process 68523 started
    Feb 28 09:23:47 squid[68134]: Squid Parent: child process 68521 exited with status 1
    Feb 28 09:23:47 squid[68134]: Squid Parent: child process 68521 started
    Feb 28 09:23:44 squid[68134]: Squid Parent: child process 68519 exited with status 1
    Feb 28 09:23:44 squid[68134]: Squid Parent: child process 68519 started
    Feb 28 09:23:41 squid[68134]: Squid Parent: child process 68517 exited with status 1
    Feb 28 09:23:41 squid[68134]: Squid Parent: child process 68517 started
    Feb 28 09:23:38 squid[68504]: Squid Parent: child process 68507 started
    Feb 28 09:23:38 squid[68134]: Squid Parent: child process 68137 exited due to signal 15
    Feb 28 09:22:22 squid[67784]: Exiting due to repeated, frequent failures
    Feb 28 09:22:22 squid[67784]: Squid Parent: child process 68320 exited with status 1
    Feb 28 09:22:22 squid[67784]: Squid Parent: child process 68320 started
    Feb 28 09:22:19 squid[67784]: Squid Parent: child process 68281 exited with status 1
    Feb 28 09:22:19 squid[67784]: Squid Parent: child process 68281 started
    Feb 28 09:22:16 squid[67784]: Squid Parent: child process 68165 exited with status 1
    Feb 28 09:22:16 squid[67784]: Squid Parent: child process 68165 started
    Feb 28 09:22:13 squid[67784]: Squid Parent: child process 68163 exited with status 1
    Feb 28 09:22:13 squid[67784]: Squid Parent: child process 68163 started
    Feb 28 09:22:10 squid[67784]: Squid Parent: child process 68161 exited with status 1
    Feb 28 09:22:10 squid[67784]: Squid Parent: child process 68161 started
    Feb 28 09:22:07 squid[68134]: Squid Parent: child process 68137 started
    Feb 28 09:22:07 squid[67784]: Squid Parent: child process 67984 exited due to signal 15
    Feb 28 09:21:25 squid[67784]: Squid Parent: child process 67984 started
    Feb 28 09:21:22 squid[67784]: Squid Parent: child process 67787 exited due to signal 15
    Feb 28 09:21:00 squid[67784]: Squid Parent: child process 67787 started
    Feb 28 09:20:51 squid[67373]: Squid Parent: child process 67376 exited with status 0
    Feb 28 09:17:47 squid[67030]: Exiting due to repeated, frequent failures
    Feb 28 09:17:47 squid[67030]: Squid Parent: child process 67394 exited with status 1
    Feb 28 09:17:47 squid[67030]: Squid Parent: child process 67394 started
    Feb 28 09:17:44 squid[67030]: Squid Parent: child process 67392 exited with status 1
    Feb 28 09:17:43 squid[67030]: Squid Parent: child process 67392 started
    Feb 28 09:17:40 squid[67030]: Squid Parent: child process 67390 exited with status 1
    Feb 28 09:17:39 squid[67030]: Squid Parent: child process 67390 started
    Feb 28 09:17:36 squid[67030]: Squid Parent: child process 67388 exited with status 1
    Feb 28 09:17:35 squid[67030]: Squid Parent: child process 67388 started
    Feb 28 09:17:32 squid[67030]: Squid Parent: child process 67386 exited with status 1
    Feb 28 09:17:31 squid[67030]: Squid Parent: child process 67386 started
    Feb 28 09:17:28 squid[67373]: Squid Parent: child process 67376 started
    Feb 28 09:17:28 squid[67030]: Squid Parent: child process 67033 exited due to signal 15
    Feb 28 09:15:59 squid[67030]: Squid Parent: child process 67033 started
    Feb 28 09:15:43 squid[66701]: Squid Parent: child process 66704 exited with status 0
    Feb 28 09:13:42 squid[66701]: Squid Parent: child process 66704 started
    Feb 28 09:11:49 squid[65989]: Squid Parent: child process 65992 exited with status 0
    Feb 28 09:10:01 squid[65989]: Squid Parent: child process 65992 started
    Feb 28 09:10:00 squid[65849]: Squid Parent: child process 65852 exited with status 0
    Feb 28 09:09:34 squid[65849]: Squid Parent: child process 65852 started

  • Spamd - removing incorrect trap in the spamd database

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    L

    This is box number 2.  Box number 1 is the unit that I am unable to install spamd on.

  • Error installing packages

    Locked
    15
    0 Votes
    15 Posts
    8k Views
    M

    thank scott, http://www.pfsense.com/~sullrich/1.0-BETA1-TESTING-SNAPSHOT-2-8-06/ is ok, installing packages work  ;)

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.