Subcategories

• Cache/Proxy

  Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.
  4k Topics

  21k Posts

  J

  @tinfoilmatt Here you go

  https://forum.netgate.com/topic/195860/mnt-folder-question

  To quote: @stephenw10

  "Jan 6, 2025 at 5:43 AM I would still use a custom location to be sure. I can't find anything off hand but if would conflict with anything that did.

  I'm pretty sure the efi partition is mounted there to test at upgrade for example."

• IDS/IPS

  Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.
  2k Topics

  16k Posts

  C

  @bmeeks That would explain it. Thank you.

• Traffic Monitoring

  Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.
  569 Topics

  3k Posts

  D

  @StealthNet said in Outgoing Portscans - ntopng?:

  Tbh I never thought a default package would do some kind of outbound network discovery based on class C scanning of internet hosts.

  I don´t think this is ok.

  I agree. I was rather shocked when I discovered this while diagnosing the same issue with another pfSense user who happens to be a close friend of min. He had also enabled it because ntopng's description made it sound like a good thing.

  Anyway, I appreciate your, and others, input on this. I believe I will add a set of warning to the next version of the package, to at least have put forth the information/warning.

  Thank you.

• pfBlockerNG

  Discussions about the pfBlockerNG package
  3k Topics

  20k Posts

  D

  @Unoptanio said in I don't receive emails ONLY on Apple devices:

  Mail cannot function in IOS 18.2 if iCloud Private Relay is blocked at a network level

  https://discussions.apple.com/thread/255916395?sortBy=rank

  This reference is/was out of date. The linked discussion referrers to a specific bug introduced iOS 18.2 (December 11, 2024), which was corrected in iOS 18.3 (January 27, 2025). Apple stopped signing of 18.2.X a week later, almost 2 months before this thread began.

• UPS Tools

  Discussions about Network UPS Tools and APCUPSD packages for pfSense
  94 Topics

  2k Posts

  V

  @Vancejo1 said in apcupsd causes restart:

  When I stop the apcupsd service and run apctest then select 10 battery calibration. It cause my router to reboot after reporting the calibration was aborted.

  Is it really rebooting? Or does the UPS cut the power?
  Check the logs to get sure.
  I've seen the latter already, but with old batteries, however.

• ACME

  Discussions about the ACME / Let’s Encrypt package for pfSense
  491 Topics

  3k Posts

  J

  Let's Encrypt is removing the TLS Client Authentication EKU from certificates they sign in the near future:

  https://letsencrypt.org/2025/05/14/ending-tls-client-authentication/

  This shouldn't affect many, if any, users of ACME on pfSense as it isn't used as a client certificate, only as a server certificate in various context (e.g. GUI, Captive Portal, HAProxy)

  In the past we have discouraged using Let's Encrypt certificates in certain contexts (like for clients) since it wasn't typically a secure practice. For example, if you use a Let's Encrypt certificate for OpenVPN, it would trust any certificate signed by Let's Encrypt, which makes it useless as an authentication factor.

  So while this is something to be aware of and check, it's unlikely to be a problem for most people.

• FRR

  Discussions about the FRR Dynamic Routing package on pfSense
  290 Topics

  1k Posts

  F

  Hi Team,

  This is driving me crazy!

  I typically set up FRR manually under PFS, but would like to move to GUI to make life easier for 'new folks'.

  Here's a snippet of my config:

  router ospf
  ospf router-id id.id.id.id
  area 0.0.0.0 shortcut default
  redistribute kernel
  !
  ip prefix-list XXX seq 1 deny 10.0.0.0/16 le 32
  ip prefix-list XXX seq 2 permit any

  route-map XXX permit 10
  match ip address prefix-list XXX
  !
  ip protocol ospf route-map XXX

  I cannot for the life of me figure out how to get the last line into the config via the GUI.

  I've read that setting ABR filters in FFR-OSPF->Areas might be the answer, but that doesn't seem to be it.

  Could someone please explain what I'm missing here?

  Thanks

  ChIP

• Tailscale

  Discussions about the Tailscale package
  85 Topics

  546 Posts

  M

  @jacobhall @Defiling2063
  I think it has something to do with DNS over HTTPS DoH.

  I have all the same issues. For me it worked after setup until i rebooted.

  It seems that the clients are pushed a faulty dns config and thinks it can do dns over https:

  sudo tailscale dns status

  Resolvers (in preference order):

  1.1.1.1 9.9.9.9

  I can use dig to check that the dns resolves using these servers just fine.

  When the system uses tailscales dns servers, the issue arises:

  % tailscale dns query apple.com DNS query for "apple.com" (A) using internal resolver: failed to query DNS: 500 Internal Server Error: resolving using "/dns-query": unrecognized resolver type "/dns-query" unrecognized resolver type "/dns-query"

  My guess is that headscale is pushing a faulty dns config?

• WireGuard

  Discussions about WireGuard
  679 Topics

  4k Posts

  D

  @Bob-Dig yeah lol, but I'm pretty sure I've followed everything to the letter as the other services are working or it's something small I'm overlooking....