• Identifying traffic spikes

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    S
    I'd like a simple method for this as well. The best I have so far is to access DarkStat and then hosts. From there I just refresh to see what's doing the most bandwidth. From there it's tricky though, sometimes I can figure it out just from the device, but if it's my mac, I have to use something like Little Snitch to see what process/port is being naughty. If someone has a simple solution, I'm all ears.
  • What could be causing my pfSense Instability?

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    C
    IPv6 has no relation to the DHCP server. All that checkbox does is either add rules blocking all IPv6 or not add them. Neither way has any impact on anything with IPv4. Is the DHCP server running when it stops giving leases? Check Status>Services, and the system logs. The only time I've seen the DHCP server stop handing out leases is when it doesn't have any to hand out. It may be possible there is some missing input validation somewhere that lets you generate an invalid config file that stops dhcpd, which would be in the logs, but that would have to be something atypical you're doing.
  • Imspector exclude certain computers

    Locked
    1
    0 Votes
    1 Posts
    914 Views
    No one has replied
  • RRD Traffic Graph Incorrect

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    C
    bump
  • I want to increase speed of my users at night

    Locked
    9
    0 Votes
    9 Posts
    2k Views
    L
    there is a FreeRADIUS package on pfsense, but from testing it in the past it is very limited in comparison to a standalone FreeRADIUS server. (I havent tried the package for a while so it may have gotten better)
  • Find hard drive size in pfSense

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    E
    @marcelloc: Does a df -h answer what you want or you need a kind of fdisk tool? Perfect! Thanks!
  • Block internet access accept windows update??

    Locked
    4
    0 Votes
    4 Posts
    5k Views
    S
    depends easiest way  create rules that  based  alias  change the lan net to single or alias create an alias with the ips you wish to have access to the internet or use network and only allow it that way x.x.x.x/24 I usually  create a couple of rules one that allows ports 1-79 (tcp/udp) and one that allows 81- 1000 (tcp/udp)   that way if people have email clients they work behind the system but web surfing is dead . ( you can create a third rule if you want to omit the https port 443 if you want ) in your case probably would add in a rule for the ports for logmein too ( what ever they are)  i believe microsoft updates use a specific port  443 then  create an alias  firewall rule that allows port 80 to certain ips or range that you wish to have access to the internet. that way client email will work and  so should windows updates but web surfing is limited to those who are found with in the alias ip range if you keep the maxium port at 1000 then there are very few if any proxy servers that use anything under this port range. so it be  but surfing via proxy port usually sucks any ways.. oops miss read your first post I thought  you wanted updates on all computer and websurfing  to only a select few. but the rules still apply  just block port 80  and any thing over a 1000 or only allow  port 443 and what every log me in ports are it still works though you might have access to other 443 site then you just allow microsoft  443 ports and what ever else 443 websites you might want. it pretty  hard to surf with out port 80 for most people.  if you still having problems with windows update  because of lack of port 80  simple fix to that is schedule  port 80 in during down times and have your computer do their updates during that time period as a added foot note: if they have hotmail login page booked mark that will still show up. but once  they log in it switches form https to http and the page will fail to load as do all  most web based emails for the most part .. just pointing this out so you do not get perturbed when you first try and then complain it does not work..
  • Loader.conf.local Question

    Locked
    6
    0 Votes
    6 Posts
    15k Views
    jimpJ
    You can edit /boot/loader.conf and/or /boot/loader.conf.local from Diagnostics > Edit File or over ssh. It's possible that loader.conf is empty if all defaults are being used there.
  • Vhost and web content management systems

    Locked
    6
    0 Votes
    6 Posts
    6k Views
    S
    oh I have it working now and it works fine. just can not upload pictures because of no GD support basically it is really easy to install CMS and works fine steps how to very easy: install vhost set up vhost is you want to use port 80 you have to give pfsense a different port and disable webgui redirect in the system advance to set up vhost enter in host name  (use something simple ie: info) enter in ip you wish to binded too enter in port  (80 if the above is disabled) save go to service and start Vhost it will not change to green  but it is statred test enter in webpage in url it should work  (http://x.x.x.x/"hostname"   example ( if using port 80) : http://pfsense.local/info  or http://192.168.1.1/info if using port 8001 then http://pfsense.local:8001/info or http://192.168.1.1:8001/info) to get sqlite to work enable ssh in system advance ssh in to pfsense  via putty in windows or console in a linux box ssh root@x.x.x.x  (x.x.x.x being the ip either wan or lan ip) goto shell ( 8 ) touch /etc/php_dynamodules/pdo touch /etc/php_dynamodules/pdo_sqlite /etc/rc.php_ini_setup exit restart webconfiguator (11) restart system (5) after it restarted use filezilla to log in with sftp user name is not admin  but root ( password is what ever your password is) go too  usr/local/vhost/ up load  CMS into your host directory working CMS frog ( will have to disable ( comment out) the security feature in the index.php and do not forget to place the database in a readable directory) XE mediawiki cmsimple ( does not require sqlite) dokuwiki  (does not require sqlite) plus other open browser enter in vhost address into uRL follow instillation procedure finished a working CMS just no GD support until someone say how to get them activated in Vhost
  • Packet Loss issue

    Locked
    19
    0 Votes
    19 Posts
    7k Views
    stephenw10S
    I would not have guessed that, though it makes sense. Good to know. Hopefully this will help anyone else with a similar issue. Steve
  • Ssh port 22 unusable (realy slow)

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    C
    There was no problem with the line … did a new installation from 2.0 to 2.01 and everything was ok again ??
  • Log message error?

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    C
    In general, yes that will cause significant Internet connectivity problems in almost every circumstance, you need to get rid of the IP conflict.
  • Uploading files from any machine KILLS latency for everyone on the network

    Locked
    11
    0 Votes
    11 Posts
    4k Views
    chpalmerC
    I was able to control my voip qos issues by using the soproxd package which I actually installed for another reason. The "qos" settings (Ill call them) seem to have made a huge difference for my office. May or may not be an option for you. But for reference…  http://cable-dsl.navasgroup.com/#Asymmetry Are you using a cable gateway (has own router) device at the office location? Or just a bridge?
  • Etherchannel on pFsense

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    pttP
    Check "LAGG" on the Docs: http://doc.pfsense.org/index.php/LAGG_Interfaces
  • Integration with Active Directory

    Locked
    3
    0 Votes
    3 Posts
    4k Views
    D
    pfSense is not a content filter and web reporting system. Squid can authenticate against AD, so you can get much of the functionality found in commercial UTMs by installing squid (proxy) + squidguard (filter) + lightsquid (reporting), but it won't be a tightly-integrated system. Personally, I don't think this functionality belongs on a router/firewall.
  • High Latency on WAN links. Server Downsized?

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • NFS mount problems

    Locked
    13
    0 Votes
    13 Posts
    7k Views
    V
    Hi podilarius, I have change the exports options on the nfs server. Br, Vukomir
  • How to clear the logs of IMSpector ?

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    M
    @marcelloc: @mousehat: Hi! How can i clear IMSpector Logs? Example i want to clear a certain date of logs only, is it possible? thanks in advance take a look on /var/imspector pfsense dir sorry im a newbie, what will i do next? thanks.
  • Can PFsense host both VPN IPSec Tunnel and Captive Portal?

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    C
    Yes you can do that.
  • VoIP Telenor

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    V
    What do you see from your end? what is the problem? If the pfSense sits between the VoIP server and the VoIP client, you might need to set a rule to allow the connection between them.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.