Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    D
    Retested on 24.11-RELEASE (amd64) all seems to work. So it seems right to file a bug for this issue.
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    cyb3rtr0nianC
    @rlrobs Yes it’s still working fine here.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K
    @pulsartiger The database name is vnstat.db and its location is under /var/db/vnstat. With "Backup Files/Dir" we are able to do backup or also with a cron.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    M
    I resolved this by accepting the T+Cs via https://www.maxmind.com/en/accounts/1205389/geolite2/eula
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG
    @EChondo What's your pfSense version ? The instructions are shown here : [image: 1753262126227-1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png] A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate. @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy: I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess. No need to wait x days. You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    J
    @div444 i'm finding the same - did you find a solution or did reverting fix it? Hoping there is a patch fix or something to get it working! Rather not rollback if i can avoid it
  • Discussions about the Tailscale package

    90 Topics
    580 Posts
    T
    @Gertjan Thanks. This is a compiled binary the tailscale vpn network mesh using wireguard. So this is s definite no then.
  • Discussions about WireGuard

    692 Topics
    4k Posts
    F
    Hi, about 2 years ago I tried to setup a site-2-site VPN with WG between pfSense and a Fritzbox. But due the to weird Fritzbox WG implementation I dismissed that after several fails and continued to use IPsec. Now I have a new site with a new Fritzbox and again I am trying to setup WG. But I stuck at one point: as far as I remember during my trials 2 years ago, I was able to use for both tunnels the same interface assignment: [image: 1754322720877-dba32db1-75fa-4d24-9d50-d78ee39f8caa-grafik.png] But now I cant set the VPNWG on tun_wg1 too, no chance. Do I remembering wrong? Or was there change in pfSense/WG package? Regards
  • Understanding SquidGuard ACL - hierarchy

    Locked
    9
    0 Votes
    9 Posts
    26k Views
    N
    Hi sully, thanks for your feedback. Nice to hear, that it is working now and we didn't something wrong :) If you like to see, if squidguard is blocking sites correctly than you have to enable the logs in squidguard. In squidguard there is a tab "Log" in which you find all logs according to squidguard. So here you can see if you son is browsing lego.com and then there is a redirect to another domain, e.g. lego-xyz.com and then this page will be blocked. so you are able to find out the URL which is blocked and than can add this to your target rules. The logging capability of squid is for the whole traffic which passes squid. it shows you urls, ips. I think this is not what you intend to do. How the hierarchy is working exaclty I do not know because I just have got one target rule and one Group ACL. But your order sounds good. But in Group ACL you have one option on top "Order". I think this is the order the Group ACLs will be apllied. If you do further tests in this case please post back your results.
  • How do i change the default proxy error page?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    S
    Found it… =) /usr/local/etc/squid/errors/English ERR_TOO_BIG
  • Can´t get my head around siproxd

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    R
    Ok thanks! I got the phones from the provider preprogrammed and password locked but I will have chat with their support and see if we can sort it out so the phones gets proper settings. Everything has worked flawless though sine the firmware upgrade and reboot as I wrote about in my last reply, so for now I am quite happy. Cheers! //Peter
  • Snort & IP Blocklist & StrikeBack

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    C
    @jigpe: @ Cino Whats the requirement of IP-Blocklist? (RAM), Can we uninstall it too in 2.0? And also, can we add exemption to this? jigp i'm not really sure on the ram and there i believe there is a whitelist function for it… there is a thread  just for IP-Blocklist under the Packages board. You can install and uninstall with no issues under 2.0
  • SquidGuard installation problem on pfsense 2.0 RC3

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    J
    Try one of the following: 1. Clear package lock in Diagnostic>Backup/Restore then reinstall squdiguard. 2. Sometimes, you need to uninstall it first before reinstalling 3. Follow LostInIgnorance's tip: http://forum.pfsense.org/index.php/topic,39420.msg205616.html#msg205616 (it worked for me).
  • IGMPProxy Thinks its there but isn't [SOLVED]

    Locked
    7
    0 Votes
    7 Posts
    2k Views
    C
    The snapshot upgrade worked! The igmpproxy is fully working again. Perhaps something to add into the 2.0 upgrade script. If the old package is there - uninstall automatically before doing the 2.0 upgrade. Glad this worked!
  • Delete Squid configuration?

    Locked
    5
    0 Votes
    5 Posts
    8k Views
    N
    did the trick, but didn't fix the problems… but this does it : http://areyousecure.blogspot.com/2009/12/pfsense-speed-up-transparent-squid.html So it still apply! :) Thanks! :D edit: Not... maybe it was catched in my browser. It still take forever to load! :(
  • I don't think my SNORT is wurkin

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Snort Crashes with IPv6 DNS Servers

    Locked
    6
    0 Votes
    6 Posts
    3k Views
    C
    Your welcome :-)
  • Ntop settings

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    S
    @jimp: I seem to recall the question has come up before, searching the forum a bit may help, but if I do recall correctly, I believe that person simply reset the database directory every week and started fresh. Thanks for the rply jimp. Ill search around a bit better and see. I can put in a cron job to clear the db manually. Thanks!
  • Bandwidthd total almost doube the RRD summary

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Snort UI Issues on 1.2.3 [SOLVED]

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    C
    I managed to fix this myself. Yep, real proud now. :) I checked the web source and none of the javascript files it included were in the javascript folder. All js files were in the root of www. Not sure how or why this happened but once I copied them all to the javascript folder thinmgs started working properly. Perhaps a bug with the latest package installer script? Hopefully this will help anyone else who has the same issue. Btw, I used winscp with SSH access on to do the moves. It was quite easy then.
  • Squidguard Web Filter Issues

    Locked
    44
    0 Votes
    44 Posts
    41k Views
    N
    Hmmmm, I can not see any difference to my filter config. Not sure why it is not working. Please try to save and apply settings in squid guard again and then check "Filter GUI" in squid guard. Perhaps there is some info because it isn't working. please also try to check system logs after reconfiguring squidguard. perhaps you can focus the maintainer of SquidGuard "dvserge" to this thread. I am at the end of my know how.
  • Anyone using the Varnish plugin on amd64?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    marcellocM
    I'm using. vesion 0.8 was realy in alpha stage. I've send some fixes and improvements while using it for about a month. Now it is in version 0.8.6 in beta. It's really a very fast reverse proxy.
  • Squidguard Auto Blacklist Updating

    Locked
    16
    1 Votes
    16 Posts
    31k Views
    B
    thans scripts is very good. :)
  • SNORT - start service and it stops on the interface

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    E
    You should not use the services->status for snort since it does not work in the way you expect since snort might have more that one process running.
  • Integrating Snort reports with Snort Package

    Locked
    1
    0 Votes
    1 Posts
    997 Views
    No one has replied
  • Modify Widescreen

    Locked
    15
    0 Votes
    15 Posts
    3k Views
    L
    I am working on a lot of stuff for the dashboard.  I would like to have a "add column" "delete column" buttons to the top, so if you would like to add more (within reason of calculation of minimum width of 375 per column) you can add or subtract columns as you please, though I have to edit it so when you take away columns it would regroup them to the currently available columns…if that makes sense
  • Softflow

    Locked
    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • Can't download blacklist from URL in squidGuard?

    Locked
    2
    0 Votes
    2 Posts
    4k Views
    R
    Nevermind!  It was a DNS issue.  Doh!  :P
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.