1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N

    Can I use pgblockerng aliases in Haproxy?

    80758505-9bad-4dad-a80b-c159be1045a2-image.png

    If it was a firewall rule, typing pfb would produce a dropdown to select.

    Here it has to be written, but will it work? Is it supported?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    cyb3rtr0nianC

    @bmeeks So after upgrading to the newest PfSense 2.8.0 everything is now working like a charm!

    Suricata no longer seems to strip off tags like it did before! Which means I can now use my network segmented by VLANs and still use the benefits of Suricata Inline IPS! Very niiize!

    I checked in the Alerts section and it is indeed generating the correct alerts from the different VLAN sections, I put Inline IPS on the parent interface of all the VLANs.

    I assume this is because the FreeBSD version is also updated with the new PfSense 2.8.0 version?

    Because before, as soon as I selected Inline IPS mode, my entire VLAN tagging would break and nothing was reachable until I switched back to Legacy mode.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    GertjanG

    @AlexK-0 said in Can't receive GeoIP databases updates anymore, banned:

    Days ago, I received from MaxMind an email, notifying me that my country has been banned to receive GeoLite City database updates.

    You've found a reason to use a VPN.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG

    @EChondo

    What's your pfSense version ?
    The instructions are shown here :

    1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png

    A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate.

    @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy:

    I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess.

    No need to wait x days.
    You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    89 Topics
    574 Posts
    A

    Hello,
    I am unable to get the Tailscale package to work. The page at VPN > Tailscale > Authentication is stuck. It displays the error "Tailscale is not online," but also shows a "Logout and Clean" button, with no option to log in.
    link text

    This state persists even after performing the following troubleshooting steps:

    Rebooting the pfSense router.

    Completely uninstalling and reinstalling the Tailscale package multiple times.

    Clearing browser cache and using a private browser window.

    Toggling the main "Enable Tailscale" checkbox in the settings.

    Checking the logs, which show the service gets a "terminate" signal and shuts down cleanly; it does not crash.

    Manually trying to delete the state file with rm /var/db/tailscale/tailscaled.state, which failed because the file does not exist.

    It appears that the package's configuration is corrupted in a way that persists even after reinstallation. Can anyone advise on how to perform a complete manual cleanup of all Tailscale files and settings?

  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Thanks for further suggestions. The tunnel is definitely up and so I don't think this is a CGNAT issue after all. WAN firewall rule is in place for UDP on port 51823 (otherwise the tunnel wouldn't work, right?). I can ping from client 1 -> client 2 and visa versa and also ping all points in between like you suggest. I just can't open an HTTPS connection from pfSenseB from Client 1 using a browser. But I can do this the other way round i.e. from Client 2 to pfSenseA

    I will try and do some packet capture to see if that reveals anything.

Log in to post
Load new posts
  • S

    Firewalling and Squid

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    L

    Thanks for the reminder, I have been meaning to do this for a while, http://cvstrac.pfsense.com/chngview?cn=11517

    There is also something else before this should work, You will need to create a pass rule for access to webgui and ssh after the block rule. Then disable anitlockout in System -> Advance, then it should work. It should also work for traffic shaper rules for squid.

  • F

    Translate pfsense

    Locked
    8
    0 Votes
    8 Posts
    5k Views
    S

    Fernando Lemos
    "Fernando Lemos" <fernando_at_netfilter.com.br>,</fernando_at_netfilter.com.br>

  • T

    Squid NAT Rule

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    T

    Any hints, hoba?

  • R

    Is squid compile with delay pool??

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    T

    It is, but you have to change the squid.conf manualy until the bug ticket is solved.

  • G

    SquidGuard

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    S

    This has been asked 1,000 times, please search.

  • G

    NTOP Bug / Services Stop and Starting

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    G

    running latest and greatest. I guess it was me being impatient. I thought it wouldn't take as long, I finally was poking through the command prompt and it takes at least a minute of better to load with amount of traffic on it.

    thanks.

  • R

    Transparent proxy on opt?

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    R

    is this correct for using opt1 as bridge for lan interface (portforwarding for opt1 3128->80)?

  • H

    Free billing system from LMS

    Locked
    1
    0 Votes
    1 Posts
    6k Views
    No one has replied
  • E

    Squid errors

    Locked
    60
    0 Votes
    60 Posts
    43k Views
    S

    @rexster:

    just installed squid on pfsense beta2.

    it works fine right after it's installed.

    but when i start configure things from the gui,
    it gives me error just like the one in my post before this.

    why the options in the gui is not same with default installed squid.conf ??

    tia
    rex

    Bugs.  Squids maintainer seems to be MIA so we are trying to mop up the issues as they arise but I am pretty burned out on the situation.

    Patches accepted.

  • M

    Squid Poll

    Locked
    12
    0 Votes
    12 Posts
    8k Views
    A

    Thanks Myntric
    just register for this post ^^

    using Squid as the proxy

  • S

    Squid failing to start

    Locked
    10
    0 Votes
    10 Posts
    7k Views
    L

    Its broken. When time permits I'll probably take a look at it to see if I can sort that out, provided no-one is already working on it.
    I'd get a chance to try out Scott's flashy CoreGUI.  ;D

  • J

    Ntop not working correctly/ subtitute

    Locked
    4
    0 Votes
    4 Posts
    3k Views
    J

    I would if I knew what I was doing,  sadly I don't.  I was just looking for some confirmation.  Which I have gotten by the lack of posts :).

  • C

    Squid, optionally?

    Locked
    6
    0 Votes
    6 Posts
    4k Views
    H

    Create a portforward at firewall>nat, portforward tab. choose LAN or OPTx interface instead of WAN, depending at which interface your clients are coming from.

  • M

    PPTP VPN Users Statistic

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    S

    Patches accepted.

  • V

    SSL-Explorer

    Locked
    4
    0 Votes
    4 Posts
    4k Views
    F

    You also have OpenVPN.

  • C

    For_throttled_binary squid its not working

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    S

    Sorry, I don't follow.  Can you explain what you mean?

  • L

    Transparent Squid and Traffic Shaping!!

    Locked
    2
    0 Votes
    2 Posts
    5k Views
    S

    Bravo!  Thats awesome!

  • S

    Squid Installation Error

    Locked
    12
    0 Votes
    12 Posts
    6k Views
    S

    Ok I finally got around to installing the squid package but im having a bit of trouble getting it to work. I set it up for "transparent mode" but get an "access denied" output. Am I missing something? I was under the impression that no other configuration was needed when using squid in "transparent mode".

    Feb 28 09:23:53 squid[68134]: Exiting due to repeated, frequent failures
    Feb 28 09:23:53 squid[68134]: Squid Parent: child process 68525 exited with status 1
    Feb 28 09:23:53 squid[68134]: Squid Parent: child process 68525 started
    Feb 28 09:23:50 squid[68134]: Squid Parent: child process 68523 exited with status 1
    Feb 28 09:23:50 squid[68134]: Squid Parent: child process 68523 started
    Feb 28 09:23:47 squid[68134]: Squid Parent: child process 68521 exited with status 1
    Feb 28 09:23:47 squid[68134]: Squid Parent: child process 68521 started
    Feb 28 09:23:44 squid[68134]: Squid Parent: child process 68519 exited with status 1
    Feb 28 09:23:44 squid[68134]: Squid Parent: child process 68519 started
    Feb 28 09:23:41 squid[68134]: Squid Parent: child process 68517 exited with status 1
    Feb 28 09:23:41 squid[68134]: Squid Parent: child process 68517 started
    Feb 28 09:23:38 squid[68504]: Squid Parent: child process 68507 started
    Feb 28 09:23:38 squid[68134]: Squid Parent: child process 68137 exited due to signal 15
    Feb 28 09:22:22 squid[67784]: Exiting due to repeated, frequent failures
    Feb 28 09:22:22 squid[67784]: Squid Parent: child process 68320 exited with status 1
    Feb 28 09:22:22 squid[67784]: Squid Parent: child process 68320 started
    Feb 28 09:22:19 squid[67784]: Squid Parent: child process 68281 exited with status 1
    Feb 28 09:22:19 squid[67784]: Squid Parent: child process 68281 started
    Feb 28 09:22:16 squid[67784]: Squid Parent: child process 68165 exited with status 1
    Feb 28 09:22:16 squid[67784]: Squid Parent: child process 68165 started
    Feb 28 09:22:13 squid[67784]: Squid Parent: child process 68163 exited with status 1
    Feb 28 09:22:13 squid[67784]: Squid Parent: child process 68163 started
    Feb 28 09:22:10 squid[67784]: Squid Parent: child process 68161 exited with status 1
    Feb 28 09:22:10 squid[67784]: Squid Parent: child process 68161 started
    Feb 28 09:22:07 squid[68134]: Squid Parent: child process 68137 started
    Feb 28 09:22:07 squid[67784]: Squid Parent: child process 67984 exited due to signal 15
    Feb 28 09:21:25 squid[67784]: Squid Parent: child process 67984 started
    Feb 28 09:21:22 squid[67784]: Squid Parent: child process 67787 exited due to signal 15
    Feb 28 09:21:00 squid[67784]: Squid Parent: child process 67787 started
    Feb 28 09:20:51 squid[67373]: Squid Parent: child process 67376 exited with status 0
    Feb 28 09:17:47 squid[67030]: Exiting due to repeated, frequent failures
    Feb 28 09:17:47 squid[67030]: Squid Parent: child process 67394 exited with status 1
    Feb 28 09:17:47 squid[67030]: Squid Parent: child process 67394 started
    Feb 28 09:17:44 squid[67030]: Squid Parent: child process 67392 exited with status 1
    Feb 28 09:17:43 squid[67030]: Squid Parent: child process 67392 started
    Feb 28 09:17:40 squid[67030]: Squid Parent: child process 67390 exited with status 1
    Feb 28 09:17:39 squid[67030]: Squid Parent: child process 67390 started
    Feb 28 09:17:36 squid[67030]: Squid Parent: child process 67388 exited with status 1
    Feb 28 09:17:35 squid[67030]: Squid Parent: child process 67388 started
    Feb 28 09:17:32 squid[67030]: Squid Parent: child process 67386 exited with status 1
    Feb 28 09:17:31 squid[67030]: Squid Parent: child process 67386 started
    Feb 28 09:17:28 squid[67373]: Squid Parent: child process 67376 started
    Feb 28 09:17:28 squid[67030]: Squid Parent: child process 67033 exited due to signal 15
    Feb 28 09:15:59 squid[67030]: Squid Parent: child process 67033 started
    Feb 28 09:15:43 squid[66701]: Squid Parent: child process 66704 exited with status 0
    Feb 28 09:13:42 squid[66701]: Squid Parent: child process 66704 started
    Feb 28 09:11:49 squid[65989]: Squid Parent: child process 65992 exited with status 0
    Feb 28 09:10:01 squid[65989]: Squid Parent: child process 65992 started
    Feb 28 09:10:00 squid[65849]: Squid Parent: child process 65852 exited with status 0
    Feb 28 09:09:34 squid[65849]: Squid Parent: child process 65852 started

  • L

    Spamd - removing incorrect trap in the spamd database

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    L

    This is box number 2.  Box number 1 is the unit that I am unable to install spamd on.

  • N

    Error installing packages

    Locked
    15
    0 Votes
    15 Posts
    8k Views
    M

    thank scott, http://www.pfsense.com/~sullrich/1.0-BETA1-TESTING-SNAPSHOT-2-8-06/ is ok, installing packages work  ;)

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.