1. Home
  2. pfSense Packages

Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    N

    Can I use pgblockerng aliases in Haproxy?

    80758505-9bad-4dad-a80b-c159be1045a2-image.png

    If it was a firewall rule, typing pfb would produce a dropdown to select.

    Here it has to be written, but will it work? Is it supported?

  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    cyb3rtr0nianC

    @bmeeks So after upgrading to the newest PfSense 2.8.0 everything is now working like a charm!

    Suricata no longer seems to strip off tags like it did before! Which means I can now use my network segmented by VLANs and still use the benefits of Suricata Inline IPS! Very niiize!

    I checked in the Alerts section and it is indeed generating the correct alerts from the different VLAN sections, I put Inline IPS on the parent interface of all the VLANs.

    I assume this is because the FreeBSD version is also updated with the new PfSense 2.8.0 version?

    Because before, as soon as I selected Inline IPS mode, my entire VLAN tagging would break and nothing was reachable until I switched back to Legacy mode.

  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    K

    @pulsartiger
    The database name is vnstat.db and its location is under /var/db/vnstat.
    With "Backup Files/Dir" we are able to do backup or also with a cron.

  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    W

    @qinn
    Sent him an email Dan an email to the address on his site.. Not sure what is happening, my Teams stopped working. Disable it/turn it off and the problem went away.

  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    99 Topics
    2k Posts
    K

    @elvisimprsntr thanks for your suggestion. I will give it a try.

  • Discussions about the ACME / Let’s Encrypt package for pfSense

    493 Topics
    3k Posts
    GertjanG

    @EChondo

    What's your pfSense version ?
    The instructions are shown here :

    1acdc586-cb29-4148-9e36-81ade4e5e60c-image.png

    A restart of a service will start by re creating their config files. If a certificate changed, it will get included. When the process starts, it will use the new certificate.

    @EChondo said in Issue with ACME Certificates Refresh & Restarting HAProxy:

    I haven't been able to confirm if the above works(mine just renewed, don't feel like doing it again just to test), so we'll see in 60 days I guess.

    No need to wait x days.
    You can re test / renew right away, as you are 'allowed' to renew a couple (5 max ?) of times per week.

  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    R

    I had a similar issue with Routed VTI over IPsec recently. FRR lost its neighbors after rebooting or when a tunnel went down. It never re-discovered it automatically. Only restarting FRR (either in GUI or via CLI) brought the neighbors back.

    When I manually added those under the OSPF neighbors tab in the GUI it seems to solve the problem as well.

  • Discussions about the Tailscale package

    89 Topics
    574 Posts
    A

    Hello,
    I am unable to get the Tailscale package to work. The page at VPN > Tailscale > Authentication is stuck. It displays the error "Tailscale is not online," but also shows a "Logout and Clean" button, with no option to log in.
    link text

    This state persists even after performing the following troubleshooting steps:

    Rebooting the pfSense router.

    Completely uninstalling and reinstalling the Tailscale package multiple times.

    Clearing browser cache and using a private browser window.

    Toggling the main "Enable Tailscale" checkbox in the settings.

    Checking the logs, which show the service gets a "terminate" signal and shuts down cleanly; it does not crash.

    Manually trying to delete the state file with rm /var/db/tailscale/tailscaled.state, which failed because the file does not exist.

    It appears that the package's configuration is corrupted in a way that persists even after reinstallation. Can anyone advise on how to perform a complete manual cleanup of all Tailscale files and settings?

  • Discussions about WireGuard

    689 Topics
    4k Posts
    P

    @patient0 Thanks for further suggestions. The tunnel is definitely up and so I don't think this is a CGNAT issue after all. WAN firewall rule is in place for UDP on port 51823 (otherwise the tunnel wouldn't work, right?). I can ping from client 1 -> client 2 and visa versa and also ping all points in between like you suggest. I just can't open an HTTPS connection from pfSenseB from Client 1 using a browser. But I can do this the other way round i.e. from Client 2 to pfSenseA

    I will try and do some packet capture to see if that reveals anything.

Log in to post
Load new posts
  • S

    Telegraf stopped working after update to 2.7

    13
    0 Votes
    13 Posts
    3k Views
    P

    @pavlos said in Telegraf stopped working after update to 2.7:

    The question remains, why different built dates? 2.7.2 stable should have a frozen repo. All of us who d/l pfsense CE 2.7.2 should have the same built date.

    Very interesting. I stumbled upon this post looking for something else. Well, my build date is different from your two:
    2.7.2-RELEASE (amd64)
    built on Wed Dec 6 15:10:00 EST 2023
    FreeBSD 14.0-CURRENT

    I wonder what's up with that.

  • triksT

    Ram disk breaks ntopng

    1
    0 Votes
    1 Posts
    175 Views
    No one has replied
  • T

    [RESOLVED] Request for help HAPROXY redirection to subdirectory.

    4
    0 Votes
    4 Posts
    5k Views
    S

    @Tueurdragon Thanks!

  • G

    Speedtest CLI. Run speedtest on pfSense box

    167
    0 Votes
    167 Posts
    152k Views
    A

    with some minor changes this worked for me on version 24.03-release

    pkg search speedtest py311-speedtest-cli-2.1.3 Command line interface for testing internet bandwidth

    use this command to install

    pkg update ; pkg install -y py311-speedtest-cli && curl -o /usr/local/www/widgets/widgets/speedtest.widget.php https://raw.githubusercontent.com/aln-1/pfsense-speedtest-widget/master/speedtest.widget.php
  • G

    Disable Tailscale status page

    2
    0 Votes
    2 Posts
    260 Views
    E

    @gusIT

    Uninstall Tailscale package 🤣

    Seriously, why do you think you need to?

  • D

    Please add autossh

    1
    0 Votes
    1 Posts
    295 Views
    No one has replied
  • M

    HAproxy and Plex, help to understand

    4
    0 Votes
    4 Posts
    4k Views
    M

    @waffull
    I've been trying tot HAproxy to work how I want as well but I think I am missing a step.

    I can get it to work so long as I include the port number with the address. Which is what I was trying to avoid. I think the problem is that if youre using a port other than 80 or 443 it doesn't forward to those ports (e.g. 5055). The problem I seem to have is that I have a linux box with a handful of apps that all run on different ports. I could set one of them to 443 or another to 80 and I think HAproxy would work how I want, but that would really limit how many apps that box would be able to run. Unless I am missing some step.. With my understanding if plex is on its default 32400 then you couldn't go to plex.myhouse.com without adding the port to the end.. If I am wrong I would be happy to know where I am wrong and what I can do to fix it.

  • wgstarksW

    sshguard update question

    10
    0 Votes
    10 Posts
    1k Views
    GertjanG

    @Gertjan

    @wgstarks : you double clicked posted ?

  • wgstarksW

    How to use the filer package?

    3
    0 Votes
    3 Posts
    333 Views
    wgstarksW

    @mvikman
    Thanks. Looks like it has the ability to create a file but no way to add a file or edit/delete a file. There is also a sync tab but the documentation appears to be missing for that. It just links to the pfsense docs so no idea what that does or how to use filer to modify the auto config backup xml.

  • N

    freeRadius and CRL (certification revocation list) not working - bug with spaces and underscores

    1
    0 Votes
    1 Posts
    450 Views
    No one has replied
  • wgstarksW

    sshguard update question

    1
    0 Votes
    1 Posts
    169 Views
    No one has replied
  • L

    FreeRadius multiple clients problem

    2
    0 Votes
    2 Posts
    194 Views
    L

    Got it, shared secret contained a closing bracket and the client config file misunderstood that.

  • L

    Upgrade pfSense using a repository proxy (Nexus OSS) problem

    1
    0 Votes
    1 Posts
    138 Views
    No one has replied
  • aaronsshA

    FreeRADIUS handing out IPs even when MAC auth fails

    6
    0 Votes
    6 Posts
    400 Views
    aaronsshA

    @keyser Thank you, I was wondering if that is was the case! I will follow up with the switch vendor.

  • R

    Cloudflare DDNS update request no longer valid

    3
    0 Votes
    3 Posts
    346 Views
    R

    @Gertjan My bad, I am sorry.

    I did search but I didn't notice the default is to search by titles only.

    Thanks for the nudge.

  • F

    many problems after upgrading service watchdog

    9
    0 Votes
    9 Posts
    493 Views
    F

    @SteveITS All back to normal. And the fix is really simple. I did a restore of my config and everything was back working again... Thanks again.

  • F

    Does FreeRADIUS (or any other pfSense package) support RadSec? (RADIUS over TLS 2083/tcp)

    2
    0 Votes
    2 Posts
    758 Views
    S

    Hi @Finger79

    have you found any information about it?
    For me it looks like PFsense itself does also not support RadSec as it is defined in RFC from 2012. Nevertheless only a view vendors support it at all.

    Maybe this changes after the Radius-blast issue.

    br
    Thomas

  • B

    Is the current OpenVPN server package, openvpn-2.6.8_1, for pfSense secure?

    3
    0 Votes
    3 Posts
    238 Views
    B

    @kprovost Good to know, thank you.

  • sokeadaS

    CVE-2024-7589

    6
    0 Votes
    6 Posts
    557 Views
    sokeadaS

    @Gertjan your instruction is make sense to me. I already applied that too except turn on/off ssh via GUI when needed. That's another tip. Thanks you so much.

  • P

    Suricata - How to apply different blocking rules per subnet?

    4
    0 Votes
    4 Posts
    378 Views
    bmeeksB

    Suricata by default places the physical interface in promiscuous mode, so all traffic traversing the physical interface is seen by all Suricata instances running on the physical interface. That means there is no benefit to creating separate Suricata instances for each VLAN, because a single instance will see the traffic from all VLANs.

    You can, to a limited extent, tailor how a given Suricata instance responds to traffic by using customized HOME_NET and/or EXTERNAL_NET variables and making sure all the rules you are enabling use the $HOME_NET and $EXTERNAL_NET conditionals in the rule text.

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.