1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    T
    You are most likely going to be looking at the advanced -> pass-thru settings. Have you consulted GPT? Drop me an private message, maybe I can assist.

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB
    It's very simple to test the functionality of Snort. Install nmap on any laptop or PC on your network. Run a simple SYN scan against the firewall's interface IP for a network that has a Snort instance running on it with the Emerging Threats SCAN rule set enabled. nmap -sS <target_ip_address> If the above command generates connection attempt alerts, then Snort on that interface is working. If you see nothing, then Snort is either not actually running or the needed rules are not installed/enabled. Note that you won't get blocks from this test because the firewall interface IPs should all be in the automatic Pass List, but you will see ALERTS from the attempts.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    575 Topics
    3k Posts
    JwidessJ
    Just thought I'd share my experience, while not on pfsense, using ntopng Community v.6.7.260105 rev.27191 (FreeBSD 14.0), disabling "Active Network Discovery" was all that was needed for the crashes to stop. Since I disabled this, the service has been up and running nonstop for ~3 days now. Before, it wouldn't last longer than 4-12 hours before crashing/stopping with no logs.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    M
    @colinstu https://redmine.pfsense.org/issues/16588

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    103 Topics
    3k Posts
    dennypageD
    @Rahzadan said in pfSense 2.8.1, NUT 2.8.2_5 package, EcoFlow UPS: Is there a way to upgrade NUT to a newer version in pfSense? I expect it will be updated in the next pfSense release cycle.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    510 Topics
    3k Posts
    frankzF
    Ciao a tutti , ormai da 2 anni uso duck dns per ip dinamico e certificato ACME . oggi non riesco a rinnovare il certificato .mi segnala questo : [Fri Jan 23 20:50:18 CET 2026] fwgate.duckdns.org: Invalid status. Verification error details: While processing CAA for fwgate.duckdns.org: DNS problem: query timed out looking up CAA for fwgate.duckdns.org Credo che il problema sia il solito dei dns oppure no ? ![alt text]([image: 1769198231370-23dfe380-4629-454e-93ef-9c1d7b0cd43b-screenshot-2026-01-23-alle-20.56.25-resized.png] image url) Screenshot 2026-01-23 alle 20.56.25

  • Discussions about the FRR Dynamic Routing package on pfSense

    298 Topics
    1k Posts
    yon 0Y
    https://redmine.pfsense.org/issues/16629 When I add or delete neighbor configurations via the web, there are no corresponding changes in the FRR service. [image: 1768646783025-services_-frr_-bgp_-neighbors-resized.jpg] [image: 1768646791517-services_-frr_-status.jpg]

  • Discussions about the Tailscale package

    95 Topics
    684 Posts
    W
    I have learned that this is currently not supported. :-(

  • Discussions about WireGuard

    728 Topics
    4k Posts
    P
    @luckman212 Thank you for sharing. I wrote the #15554. I see that Netgate has not shown any interest in this proposal.
Log in to post
Load new posts
  • A

    Spamd - Add spam trap E-mail address: + nextMTA

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    S
    @Aderium: Add spam trap E-mail address: if I add a spamtrap email called spamtrap@mydomain.com do I also need to create such user in my email server ? No, basically if a email address is the to: address then SpamD knowns to add this servers IP to the trapped database and then further connections from that mail server will be trapped in a great tarpit which looks like a 110 baud modem communication, wasting the cpu cycles of the mail server in question.  It's neat. @Aderium: nextMTA my internal ip address for mailserver is 10.1.10.10  is this the IP I would add to nextMTA ? Yep.
  • S

    SpamD outlook button

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    H
    Install http://pfsense.com/~sullrich/SpamDOutlookAlpha/SpamD.msi . It will add the outlook plugin. You also need to have SpamD package installed at your pfSense of course.
  • R

    Might I suggest breaking out the packages to their own directories

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    B
    @ronnieredd: Excuse me? Why am I making you click dozens of forums? Did I do something wrong? If so, I'm sorry. Please do elaborate. 13 packages plus the existing dozen or so forums makes for dozens of forums.  I'm old enough to remember and use BBS's, yet I still prefer email - I can sort and filter my inbox based on what I choose to read.  Which means more time spent on email worth replying to.  More forums split the attention the developers (who are still the primary support - although a few souls have certainly stepped up and chipped in on the support from) leaving us with less time to write code.  Until a package becomes enough of a nuisance filling the existing packages forum, it's really not worth splitting it out. –Bill PS. wut sullrich and hoba said
  • R

    Variables for spamd

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    S
    %A expands to the IP in the blacklist. Since each blacklist is added individually then you know what database url to insert for each response. I couldn't locate any other variables in http://www.openbsd.org/cgi-bin/man.cgi?query=spamd.conf&sektion=5 but if you come across any others, please let me know.
  • M

    Squid - Disable Access Log Patch

    Locked
    6
    0 Votes
    6 Posts
    4k Views
    B
    @msamblanet: Thanks - patch form Sorry for all the questions for a fairly trivial patch - hopefully as my current work project calms down I can offer something of more substance… Commited.  Thanks –Bill
  • M

    Securing Package CGIs?

    Locked
    6
    0 Votes
    6 Posts
    4k Views
    B
    @msamblanet: OK - thanks - I have a better sense where things are going now…as you have seen in my other email, I took the first pass option of forcing users to enable the cachemgr so you have to choose to accept the risk... If I ever find enough free time I am qualified to write the module you propose - but time is always the trick...my hat is off to you - I don't know how you (and many other good OpenSource authors) find the time to do this... An option I was toying with overnight was how one could make a PHP wrapper so that the cgi was kept outside the web directory and content was in an iframe or similar with the PHP wrapper handlng security - would even allow us to keep the pfsense menus on the screen :)  ...unfort my PHP is pretty weak (I'm just an old Asm/C/C++ dev turned Java in the current day/age) - so I don't know how hard doing the CGI calls from PHP would be...can't imagine it's too bad but caveat coder Hmmm…that's actually not a half bad idea.  I dunno about an iframe, but we could probably allow auth.inc to do it's job and use passthru() or something to run a cgi.  I'll have to think about that a bit. --Bill
  • D

    Install other packages

    Locked
    6
    0 Votes
    6 Posts
    5k Views
    D
    Ok, thks Success to you in work
  • S

    Ntop errors

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    J
    Ntop has all sorts of problems.  No one is currently looking after the package as far as I know so they probably won't get fixed.  But I think something better is getting added to 1.1 anyway, maybe maybe not.
  • R

    Problem at Status>Services

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    L
    Thanks, fixed.
  • S

    Firewalling and Squid

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    L
    Thanks for the reminder, I have been meaning to do this for a while, http://cvstrac.pfsense.com/chngview?cn=11517 There is also something else before this should work, You will need to create a pass rule for access to webgui and ssh after the block rule. Then disable anitlockout in System -> Advance, then it should work. It should also work for traffic shaper rules for squid.
  • F

    Translate pfsense

    Locked
    8
    0 Votes
    8 Posts
    5k Views
    S
    Fernando Lemos "Fernando Lemos" <fernando_at_netfilter.com.br>,</fernando_at_netfilter.com.br>
  • T

    Squid NAT Rule

    Locked
    5
    0 Votes
    5 Posts
    4k Views
    T
    Any hints, hoba?
  • R

    Is squid compile with delay pool??

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    T
    It is, but you have to change the squid.conf manualy until the bug ticket is solved.
  • G

    SquidGuard

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    S
    This has been asked 1,000 times, please search.
  • G

    NTOP Bug / Services Stop and Starting

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    G
    running latest and greatest. I guess it was me being impatient. I thought it wouldn't take as long, I finally was poking through the command prompt and it takes at least a minute of better to load with amount of traffic on it. thanks.
  • R

    Transparent proxy on opt?

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    R
    is this correct for using opt1 as bridge for lan interface (portforwarding for opt1 3128->80)?
  • H

    Free billing system from LMS

    Locked
    1
    0 Votes
    1 Posts
    6k Views
    No one has replied
  • E

    Squid errors

    Locked
    60
    0 Votes
    60 Posts
    48k Views
    S
    @rexster: just installed squid on pfsense beta2. it works fine right after it's installed. but when i start configure things from the gui, it gives me error just like the one in my post before this. why the options in the gui is not same with default installed squid.conf ?? tia rex Bugs.  Squids maintainer seems to be MIA so we are trying to mop up the issues as they arise but I am pretty burned out on the situation. Patches accepted.
  • M

    Squid Poll

    Locked
    12
    0 Votes
    12 Posts
    8k Views
    A
    Thanks Myntric just register for this post ^^ using Squid as the proxy
  • S

    Squid failing to start

    Locked
    10
    0 Votes
    10 Posts
    7k Views
    L
    Its broken. When time permits I'll probably take a look at it to see if I can sort that out, provided no-one is already working on it. I'd get a chance to try out Scott's flashy CoreGUI.  ;D
Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.