Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N

    Can I use pgblockerng aliases in Haproxy?

    80758505-9bad-4dad-a80b-c159be1045a2-image.png

    If it was a firewall rule, typing pfb would produce a dropdown to select.

    Here it has to be written, but will it work? Is it supported?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    bmeeksB

    I saw where the Netgate kernel developer updated the Suricata package in the pfSense 25.07 development branch to work with the new kernel PPPoE driver. But so far as I know that updated package has not been migrated to 2.8 CE.

    Here is the commit into the DEVEL branch: https://github.com/pfsense/FreeBSD-ports/commit/68a06b3a33c690042b61fb4ccfe96f3138e83b72.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    A

    @wbmstr2000 : Thanks! I will investigate it, greetings

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    johnpozJ

    @MacUsers

    https://help.zerossl.com/hc/en-us/articles/360060119933-Certificate-Revocation

    edit: oh you prob out of luck

    You can revoke any certificate issued via the ZeroSSL portal. Currently, certificates issued via ACME can not be revoked from inside the portal - please follow the instructions of your ACME client for revoking those certificates.

    the gui in pfsense does not have the ability to revoke - you prob have to move the certs to something you have certbot installed to and revoke that way.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    88 Topics
    573 Posts
    luckman212L

    For 25.07 RC, this worked for me (run sh first)

    [25.07-RC][root@r1.lan]/root: sh # export IGNORE_OSVERSION=yes # pkg add https://pkg.freebsd.org/FreeBSD:15:amd64/latest/All/tailscale-1.84.2.pkg # service tailscaled restart # tailscale up # tailscale version 1.84.2 go version: go1.24.4 # tailscaled -version 1.84.2 go version: go1.24.4
  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Thanks for further suggestions. The tunnel is definitely up and so I don't think this is a CGNAT issue after all. WAN firewall rule is in place for UDP on port 51823 (otherwise the tunnel wouldn't work, right?). I can ping from client 1 -> client 2 and visa versa and also ping all points in between like you suggest. I just can't open an HTTPS connection from pfSenseB from Client 1 using a browser. But I can do this the other way round i.e. from Client 2 to pfSenseA

    I will try and do some packet capture to see if that reveals anything.

  • Squid Package Status

    Locked
    13
    0 Votes
    13 Posts
    9k Views
    ?

    Yeah, I invested heavily in php related source material over the holiday and I highly recommend the Core PHP book.  I know most of the same material is available online, but its sometimes nice to just sit down and go over a chapter and maybe learn a few new ways of doing things or to bone up on the minutia of a particular function.

  • NMap installation failed

    Locked
    16
    0 Votes
    16 Posts
    11k Views
    S

    NMAP has been marked as broken.  We'll get back to it later on.

  • Ntop

    Locked
    5
    0 Votes
    5 Posts
    6k Views
    J

    ntop package seems particularly buggy at the moment. I have problem acessing it occasionally and to fix it I have to go into ntop settings from PFsense and click on the LAN then click change.  Which seems to reset all the stats even though it was already monitoring that.  And then the password you set doesn't even work when you get into Ntop.

    Plus heaps of other stuff.  It's hardly worth using,  it used to work better back in .90a.

    I would just wait till after release once someone has done some work on it before trying it again.

  • Packages depending on PHP4 and Apache? [SOLVED]

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    F

    It's just me and a big misunderstanding, ignore this topic…

  • How to make pfsense packages ??

    Locked
    2
    0 Votes
    2 Posts
    4k Views
    S

    There is not a howto atm.  You're best bet is to check out:

    http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/pkg_config.xml <– Master package manifest

    And individual packages themselves:

    http://cvs.pfsense.com/cgi-bin/cvsweb.cgi/tools/packages/

  • 10gig filled up in 10 days.

    Locked
    3
    0 Votes
    3 Posts
    4k Views
    J

    I assume it was loging stats for ALL hosts,  for example it was logging every ip/website statistics anyone visited.  It is anoying when all I want is the LAN ips logged with some basic stats stored like total MB sent/recieved.  But for some reason it is no longer giving me the number value beside the graphs either I just get the graphs.

    Sort given up on ntop.

  • Shaper mask

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    S

    @sharingzee:

    This is a feature available in Monowall, but not in pfSense. It is the "Mask", which applies the shaper's children pipes individually to each destination and source IP in the LAN.

    It's something imprescindible when using pfSense to evenly share an Internet connection.

    Att, SharingZee.

    PF + Dummynet (m0n0walls shaper) do not work at all together.  When you try to queue something with dummynet ALL traffic comes to a halt.

    This is a huge PFIL hooks freebsd issue and will be a lot of work to get it working.

  • Php4-pfsense

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    S

    @moo:

    Hi,
    Is it possible to rebuild the php4-pfsense port that is on cvs withou break anything? That is, without a previous uninstall of the php build installed by default? I would like to do some tests with pear.

    Thanks

    Should be …  co the directory tools then cd to pfPorts/php4-pfsense && make

  • Packages vs ports

    Locked
    7
    0 Votes
    7 Posts
    5k Views
    S

    @ffugita:

    @moo:

    @ffugita:

    hum… how I do this? Any docs?

    use the freebsd ports documentation, however, as someone already said… it can be a disaster  ;D

    the problem is: how integrate ports into pfsense?  ??? :o

    I want some more packages into my pfsense (ie: mysql server), but… how?  ???

    Again, it's not supported.  This means nobody is going to hold your hand to make this work.

  • Error when installing packages

    Locked
    1
    0 Votes
    1 Posts
    3k Views
    No one has replied
  • Has anyone had any luck with pfflowd?

    Locked
    8
    0 Votes
    8 Posts
    6k Views
    S

    @pbs:

    So … I guess that "in the real world" nobody figured out how to make this PKG working! I think it should be marked as broken. If anyone has suggestion I will be more than happy to test them on my box.

    It's been marked broken for over a week!

  • Ntop 3.2 memory question

    Locked
    6
    0 Votes
    6 Posts
    5k Views
    ?

    Definitely not enough memory.

  • What about L7?

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    S

    @sharingzee:

    PFSense w/ Layer-7.

    Authors needed….

  • Ntop + Rrd but no records/graphs

    Locked
    4
    0 Votes
    4 Posts
    6k Views
    J

    @charles.regan:

    plugins –> rrdplugins --> Data to Dump --> select Host --> save settings!

    Yeh I tried that.  Didn't work. Reinstalled clean without restoring configuration and it works now.

    Although now it only has graphs.  It used to show a total beside the graphs but that is gone in the new version.  Anyone know how to enable the totals or what numbers on the graph now represent the totals.  The graphs really arn't so easy to read aye.

  • Asterisk

    Locked
    4
    0 Votes
    4 Posts
    5k Views
    R

    Neat!
    That's one of the things that really turned me on to pfSense project.
    Even though pfSense will never allow for such packages to be installed on the "main box" (aka firewall/router) it will be wonderfull to see an "alternate 1 box" or an "alternate 2 box" running packages such as IDS, Antivirus, soft PBX, etc… but all that inside a wonderfull GUI.
    I'm loving this :D.
    Cheers

  • NTOP & Stunnel

    Locked
    1
    0 Votes
    1 Posts
    3k Views
    No one has replied
  • AV + Spam assasin

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    S

    @sgnet:

    Im now expert on linux or know much about programming, but I am willing to get my hands
    dirty and learn something , how would i got about trying to intergrate such packages like spam assasin or even clam av on it

    Review/study the existing code:

    http://pfsense.com/cgi-bin/cvsweb.cgi/tools/packages/

  • AdZapping with squid

    Locked
    2
    0 Votes
    2 Posts
    4k Views
    ?

    AdZapper is a neat little redirector for Squid.  Unfortunately squid only supports the use of only one redirector at a time.  There is a perl script called zapchain that lets you chain multiple redirectors but its not especially well written and certainly not speedy.  A debatably better solution would be to maintain a block list of the various adservers (there are lots of places to find these lits online) as an ACL in your squid.conf.  This approach has its own drawbacks as well, so consider each.

  • Nice squid feature

    Locked
    5
    0 Votes
    5 Posts
    5k Views
    H

    Not sure what all will be build into the package, but something that makes trading settings easy (maybe similiar to the backup/restore process to be able to restore different sections of settings)  :)

  • 11/11/2005 - Squid Commit & Changelog

    Locked
    15
    0 Votes
    15 Posts
    9k Views
    ?

    Posted to the "Squid Errors" thread, it seemed more appropriate.  This was just a first-pass at the WebGUI, I'm hoping to give it a more thorough beating tomorrow.

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.