Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort Whitelist Problem (2.9.2.3 pkg v. 2.5.1)

    Scheduled Pinned Locked Moved pfSense Packages
    15 Posts 6 Posters 88.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      Gloom
      last edited by

      I've also upgraded to the latest package and recreated my white lists but  IPs from the white listed networks are still being blocked.
      I'm not seeing any issues loading the lists

      I'm using an alias list of type networks in the snort white list

      2.0.1-RELEASE (amd64)
      built on Mon Dec 12 18:43:51 EST 2011
      FreeBSD 8.1-RELEASE-p6

      Snort 2.9.2.3 pkg v. 2.5.1

      Never underestimate the power of human stupidity

      1 Reply Last reply Reply Quote 0
      • V
        vbentley
        last edited by

        My box is running the 32 bit distro.

        FreeBSD 8.1-RELEASE-p6 #1: Mon Dec 12 18:18:02 EST 2011 root@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org:/usr/obj./usr/pfSensesrc/src/sys/pfSense.8 i386
        Build Date Sep 20 2011 10:53:14

        I'm not an expert on this but for multibyte character encoding to work in PHP I think it needs to be configured with '–enable-mbstring'. When I ran phpinfo() to check the configuration options I couldn't find mbstring or any evidence of libmbfi being loaded. Is it loaded by another file from the config-file-scan-dir? Is this a configuration bug for the 32-bit build?

        Configure Command './configure' '–with-layout=GNU' '--with-config-file-scan-dir=/usr/local/etc/php' '--disable-all' '--enable-libxml' '--with-libxml-dir=/usr/local' '--enable-reflection' '--with-pcre-regex' '--program-prefix=' '--enable-fastcgi' '--with-regex=php' '--with-zend-vm=CALL' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=i386-portbld-freebsd8.1'

        Trademark Attribution and Credit
        pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

        1 Reply Last reply Reply Quote 0
        • V
          vbentley
          last edited by

          I don't have a spare 64-bit machine that I can test this on. If you are running 64-bit pfSense, can you create a PHP file containing the following code that will confirm a configuration difference between architectures if there is one.

          Create /usr/local/www/phpinfo.php containing the following code:

          phpinfo()
          ?>

          Visit the page in your browser to view the PHP configuration.

          Trademark Attribution and Credit
          pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

          1 Reply Last reply Reply Quote 0
          • M
            mschiek01
            last edited by

            @vbentley:

            I don't have a spare 64-bit machine that I can test this on. If you are running 64-bit pfSense, can you create a PHP file containing the following code that will confirm a configuration difference between architectures if there is one.

            Create /usr/local/www/phpinfo.php containing the following code:

            phpinfo()
            ?>

            Visit the page in your browser to view the PHP configuration.

            Works fine everything displays

            1 Reply Last reply Reply Quote 0
            • V
              vbentley
              last edited by

              Great!

              Please post here what it reports for System, Build Date and Configure Command. Thanks.
              Edit out your hostname if you wish. I only want to check the configuration commands are the same.

              Trademark Attribution and Credit
              pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

              1 Reply Last reply Reply Quote 0
              • M
                mschiek01
                last edited by

                @vbentley:

                Great!

                Please post here what it reports for System, Build Date and Configure Command. Thanks.
                Edit out your hostname if you wish. I only want to check the configuration commands are the same.

                PHP Version 5.2.17

                System FreeBSD XXXXXXXXXXXXXXXXXXXX 8.1-RELEASE-p6 FreeBSD 8.1-RELEASE-p6 #0: Mon Dec 12 18:15:35 EST 2011 root@FreeBSD_8.0_pfSense_2.0-AMD64.snaps.pfsense.org:/usr/obj./usr/pfSensesrc/src/sys/pfSense_SMP.8 amd64
                Build Date Sep 20 2011 10:53:32
                Configure Command './configure' '–with-layout=GNU' '--with-config-file-scan-dir=/usr/local/etc/php' '--disable-all' '--enable-libxml' '--with-libxml-dir=/usr/local' '--enable-reflection' '--with-pcre-regex' '--program-prefix=' '--enable-fastcgi' '--with-regex=php' '--with-zend-vm=CALL' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=amd64-portbld-freebsd8.1'
                Server API CGI/FastCGI
                Virtual Directory Support disabled
                Configuration File (php.ini) Path /usr/local/etc
                Loaded Configuration File /usr/local/etc/php.ini
                Scan this dir for additional .ini files /usr/local/etc/php
                additional .ini files parsed (none)
                PHP API 20041225
                PHP Extension 20060613
                Zend Extension 220060519
                Debug Build no
                Thread Safety disabled
                Zend Memory Manager enabled
                IPv6 Support enabled
                Registered PHP Streams https, ftps, php, file, data, http, ftp, compress.zlib, ssh2.shell, ssh2.exec, ssh2.tunnel, ssh2.scp, ssh2.sftp
                Registered Stream Socket Transports tcp, udp, unix, udg, ssl, sslv3, sslv2, tls
                Registered Stream Filters string.rot13, string.toupper, string.tolower, string.strip_tags, convert., consumed, zlib.

                This server is protected with the Suhosin Patch 0.9.7
                Copyright (c) 2006 Hardened-PHP Project

                This program makes use of the Zend Scripting Language Engine:
                Zend Engine v2.2.0, Copyright (c) 1998-2010 Zend Technologies
                    with Suhosin v0.9.27, Copyright (c) 2007, by SektionEins GmbH

                Configuration
                PHP Core
                Directive Local Value Master Value
                allow_call_time_pass_reference On On
                allow_url_fopen On On
                allow_url_include Off Off
                always_populate_raw_post_data Off Off
                arg_separator.input & &
                arg_separator.output & &
                asp_tags Off Off
                auto_append_file no value no value
                auto_globals_jit On On
                auto_prepend_file no value no value
                browscap no value no value
                default_charset no value no value
                default_mimetype text/html text/html
                define_syslog_variables Off Off
                disable_classes no value no value
                disable_functions no value no value
                display_errors On On
                display_startup_errors Off Off
                doc_root no value no value
                docref_ext no value no value
                docref_root no value no value
                enable_dl On On
                error_append_string no value no value
                error_log /tmp/PHP_errors.log /tmp/PHP_errors.log
                error_prepend_string no value no value
                error_reporting no value no value
                expose_php Off Off
                extension_dir /usr/local/lib/php/20060613/ /usr/local/lib/php/20060613/
                file_uploads On On
                highlight.bg #FFFFFF #FFFFFF
                highlight.comment #FF8000 #FF8000
                highlight.default #0000BB #0000BB
                highlight.html #000000 #000000
                highlight.keyword #007700 #007700
                highlight.string #DD0000 #DD0000
                html_errors Off Off
                ignore_repeated_errors Off Off
                ignore_repeated_source Off Off
                ignore_user_abort Off Off
                implicit_flush On On
                include_path .:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg .:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg
                log_errors On On
                log_errors_max_len 1024 1024
                magic_quotes_gpc Off Off
                magic_quotes_runtime Off Off
                magic_quotes_sybase Off Off
                mail.force_extra_parameters no value no value
                max_execution_time 99999999 99999999
                max_file_uploads 20 20
                max_input_nesting_level 64 64
                max_input_time 99999999 99999999
                memory_limit 128M 128M
                open_basedir no value no value
                output_buffering 0 0
                output_handler no value no value
                post_max_size 100M 100M
                precision 14 14
                realpath_cache_size 16K 16K
                realpath_cache_ttl 120 120
                register_argc_argv On On
                register_globals Off Off
                register_long_arrays On On
                report_memleaks On On
                report_zend_debug On On
                safe_mode Off Off
                safe_mode_exec_dir /usr/local/php/bin /usr/local/php/bin
                safe_mode_gid Off Off
                safe_mode_include_dir no value no value
                sendmail_from no value no value
                sendmail_path /usr/sbin/sendmail -t -i /usr/sbin/sendmail -t -i
                serialize_precision 100 100
                short_open_tag On On
                SMTP localhost localhost
                smtp_port 25 25
                sql.safe_mode Off Off
                suhosin.log.phpscript.is_safe Off Off
                track_errors Off Off
                unserialize_callback_func no value no value
                upload_max_filesize 100M 100M
                upload_tmp_dir /tmp /tmp
                user_dir no value no value
                variables_order EGPCS EGPCS
                xmlrpc_error_number 0 0
                xmlrpc_errors Off Off
                y2k_compliance On On
                zend.ze1_compatibility_mode Off Off

                apc
                APC Support enabled
                Version 3.1.6
                APC Debugging Disabled
                MMAP Support Enabled
                MMAP File Mask no value
                Locking type File Locks
                Revision $Revision: 303642 $
                Build Date Aug 11 2011 13:58:09

                Directive Local Value Master Value
                apc.cache_by_default On On
                apc.canonicalize On On
                apc.coredump_unmap Off Off
                apc.enable_cli Off Off
                apc.enabled On On
                apc.file_md5 Off Off
                apc.file_update_protection 2 2
                apc.filters no value no value
                apc.gc_ttl 3600 3600
                apc.include_once_override Off Off
                apc.lazy_classes Off Off
                apc.lazy_functions Off Off
                apc.max_file_size 1M 1M
                apc.mmap_file_mask no value no value
                apc.num_files_hint 1000 1000
                apc.preload_path no value no value
                apc.report_autofilter Off Off
                apc.rfc1867 Off Off
                apc.rfc1867_freq 0 0
                apc.rfc1867_name APC_UPLOAD_PROGRESS APC_UPLOAD_PROGRESS
                apc.rfc1867_prefix upload_ upload_
                apc.rfc1867_ttl 3600 3600
                apc.shm_segments 1 1
                apc.shm_size 35M 35M
                apc.slam_defense On On
                apc.stat On On
                apc.stat_ctime Off Off
                apc.ttl 0 0
                apc.use_request_time On On
                apc.user_entries_hint 4096 4096
                apc.user_ttl 0 0
                apc.write_lock On On

                cgi-fcgi
                Directive Local Value Master Value
                cgi.check_shebang_line 1 1
                cgi.fix_pathinfo 1 1
                cgi.nph 0 0
                cgi.rfc2616_headers 0 0
                fastcgi.logging 1 1

                ctype
                ctype functions enabled

                curl
                cURL support enabled
                cURL Information libcurl/7.21.3 OpenSSL/0.9.8n zlib/1.2.3

                date
                date/time support enabled
                "Olson" Timezone Database Version 2010.9
                Timezone Database internal
                Default timezone America/Chicago

                Directive Local Value Master Value
                date.default_latitude 31.7667 31.7667
                date.default_longitude 35.2333 35.2333
                date.sunrise_zenith 90.583333 90.583333
                date.sunset_zenith 90.583333 90.583333
                date.timezone no value no value

                gettext
                GetText Support enabled

                ldap
                LDAP Support enabled
                RCS Version $Id: ldap.c 293036 2010-01-03 09:23:27Z sebastian $
                Total Links 0/unlimited
                API Version 3001
                Vendor Name OpenLDAP
                Vendor Version 20426

                libxml
                libXML support active
                libXML Version 2.7.8
                libXML streams enabled

                mbstring
                Multibyte Support enabled
                Multibyte string engine libmbfl
                Multibyte (japanese) regex support enabled
                Multibyte regex (oniguruma) version 4.4.4
                Multibyte regex (oniguruma) backtrack check On

                mbstring extension makes use of "streamable kanji code filter and converter", which is distributed under the GNU Lesser General Public License version 2.1.

                Directive Local Value Master Value
                mbstring.detect_order no value no value
                mbstring.encoding_translation Off Off
                mbstring.func_overload 0 0
                mbstring.http_input pass pass
                mbstring.http_output pass pass
                mbstring.internal_encoding no value no value
                mbstring.language neutral neutral
                mbstring.strict_detection Off Off
                mbstring.substitute_character no value no value

                mhash
                MHASH support Enabled
                MHASH API Version 20060101

                openssl
                OpenSSL support enabled
                OpenSSL Version OpenSSL 0.9.8n 24 Mar 2010

                pcntl
                pcntl support enabled

                pcre
                PCRE (Perl Compatible Regular Expressions) Support enabled
                PCRE Library Version 8.02 2010-03-19

                Directive Local Value Master Value
                pcre.backtrack_limit 100000 100000
                pcre.recursion_limit 100000 100000

                PDO
                PDO support enabled
                PDO drivers no value

                posix
                Revision $Revision: 293036 $

                Reflection
                Reflection enabled
                Version $Id: php_reflection.c 300129 2010-06-03 00:43:37Z felipe $

                session
                Session Support enabled
                Registered save handlers files user
                Registered serializer handlers php php_binary

                Directive Local Value Master Value
                session.auto_start Off Off
                session.bug_compat_42 On On
                session.bug_compat_warn On On
                session.cache_expire 180 180
                session.cache_limiter nocache nocache
                session.cookie_domain no value no value
                session.cookie_httponly Off Off
                session.cookie_lifetime 0 0
                session.cookie_path / /
                session.cookie_secure Off Off
                session.entropy_file no value no value
                session.entropy_length 0 0
                session.gc_divisor 100 100
                session.gc_maxlifetime 1440 1440
                session.gc_probability 1 1
                session.hash_bits_per_character 4 4
                session.hash_function 0 0
                session.name PHPSESSID PHPSESSID
                session.referer_check no value no value
                session.save_handler files files
                session.save_path no value no value
                session.serialize_handler php php
                session.use_cookies On On
                session.use_only_cookies Off Off
                session.use_trans_sid 0 0

                shmop
                shmop support enabled

                SimpleXML
                Simplexml support enabled
                Revision $Revision: 299016 $
                Schema support enabled

                SPL
                SPL support enabled
                Interfaces Countable, OuterIterator, RecursiveIterator, SeekableIterator, SplObserver, SplSubject
                Classes AppendIterator, ArrayIterator, ArrayObject, BadFunctionCallException, BadMethodCallException, CachingIterator, DirectoryIterator, DomainException, EmptyIterator, FilterIterator, InfiniteIterator, InvalidArgumentException, IteratorIterator, LengthException, LimitIterator, LogicException, NoRewindIterator, OutOfBoundsException, OutOfRangeException, OverflowException, ParentIterator, RangeException, RecursiveArrayIterator, RecursiveCachingIterator, RecursiveDirectoryIterator, RecursiveFilterIterator, RecursiveIteratorIterator, RecursiveRegexIterator, RegexIterator, RuntimeException, SimpleXMLIterator, SplFileInfo, SplFileObject, SplObjectStorage, SplTempFileObject, UnderflowException, UnexpectedValueException

                SQLite
                SQLite support enabled
                PECL Module version 2.0-dev $Id: sqlite.c 298697 2010-04-28 12:10:10Z iliaa $
                SQLite Library 2.8.17
                SQLite Encoding iso8859

                Directive Local Value Master Value
                sqlite.assoc_case 0 0

                ssh2
                libssh2 version 1.2.8
                banner SSH-2.0-libssh2_1.2.8
                remote forwarding enabled
                hostbased auth enabled
                polling support enabled
                publickey subsystem enabled

                standard
                Regex Library Bundled library enabled
                Dynamic Library Support enabled
                Path to sendmail /usr/sbin/sendmail -t -i

                Directive Local Value Master Value
                assert.active 1 1
                assert.bail 0 0
                assert.callback no value no value
                assert.quiet_eval 0 0
                assert.warning 1 1
                auto_detect_line_endings 0 0
                default_socket_timeout 60 60
                safe_mode_allowed_env_vars PHP_ PHP_
                safe_mode_protected_env_vars LD_LIBRARY_PATH LD_LIBRARY_PATH
                url_rewriter.tags a=href,area=href,frame=src,form=,fieldset= a=href,area=href,frame=src,form=,fieldset=
                user_agent no value no value

                suhosin
                Suhosin logo This server is protected with the Suhosin Extension 0.9.27

                Copyright (c) 2006-2007 Hardened-PHP Project
                Copyright (c) 2007-2008 SektionEins GmbH

                Directive Local Value Master Value
                suhosin.apc_bug_workaround Off Off
                suhosin.cookie.checkraddr 0 0
                suhosin.cookie.cryptdocroot On On
                suhosin.cookie.cryptkey [ protected ] [ protected ]
                suhosin.cookie.cryptlist no value no value
                suhosin.cookie.cryptraddr 0 0
                suhosin.cookie.cryptua On On
                suhosin.cookie.disallow_nul 1 1
                suhosin.cookie.disallow_ws 1 1
                suhosin.cookie.encrypt Off Off
                suhosin.cookie.max_array_depth 50 50
                suhosin.cookie.max_array_index_length 64 64
                suhosin.cookie.max_name_length 64 64
                suhosin.cookie.max_totalname_length 256 256
                suhosin.cookie.max_value_length 10000 10000
                suhosin.cookie.max_vars 100 100
                suhosin.cookie.plainlist no value no value
                suhosin.coredump Off Off
                suhosin.disable.display_errors Off Off
                suhosin.executor.allow_symlink Off Off
                suhosin.executor.disable_emodifier Off Off
                suhosin.executor.disable_eval Off Off
                suhosin.executor.eval.blacklist no value no value
                suhosin.executor.eval.whitelist no value no value
                suhosin.executor.func.blacklist no value no value
                suhosin.executor.func.whitelist no value no value
                suhosin.executor.include.blacklist no value no value
                suhosin.executor.include.max_traversal 0 0
                suhosin.executor.include.whitelist no value no value
                suhosin.executor.max_depth 0 0
                suhosin.filter.action no value no value
                suhosin.get.disallow_nul 1 1
                suhosin.get.disallow_ws 0 0
                suhosin.get.max_array_depth 5000 5000
                suhosin.get.max_array_index_length 256 256
                suhosin.get.max_name_length 64 64
                suhosin.get.max_totalname_length 256 256
                suhosin.get.max_value_length 500000 500000
                suhosin.get.max_vars 5000 5000
                suhosin.mail.protect 0 0
                suhosin.memory_limit 512435456 512435456
                suhosin.mt_srand.ignore On On
                suhosin.multiheader Off Off
                suhosin.perdir 0 0
                suhosin.post.disallow_nul 1 1
                suhosin.post.disallow_ws 0 0
                suhosin.post.max_array_depth 5000 5000
                suhosin.post.max_array_index_length 256 256
                suhosin.post.max_name_length 64 64
                suhosin.post.max_totalname_length 256 256
                suhosin.post.max_value_length 500000 500000
                suhosin.post.max_vars 5000 5000
                suhosin.protectkey On On
                suhosin.request.disallow_nul 1 1
                suhosin.request.disallow_ws 0 0
                suhosin.request.max_array_depth 5000 5000
                suhosin.request.max_array_index_length 256 256
                suhosin.request.max_totalname_length 256 256
                suhosin.request.max_value_length 500000 500000
                suhosin.request.max_varname_length 64 64
                suhosin.request.max_vars 5000 5000
                suhosin.server.encode On On
                suhosin.server.strip On On
                suhosin.session.checkraddr 0 0
                suhosin.session.cryptdocroot On On
                suhosin.session.cryptkey [ protected ] [ protected ]
                suhosin.session.cryptraddr 0 0
                suhosin.session.cryptua On On
                suhosin.session.encrypt On On
                suhosin.session.max_id_length 128 128
                suhosin.simulation Off Off
                suhosin.sql.bailout_on_error Off Off
                suhosin.sql.comment 0 0
                suhosin.sql.multiselect 0 0
                suhosin.sql.opencomment 0 0
                suhosin.sql.union 0 0
                suhosin.sql.user_postfix no value no value
                suhosin.sql.user_prefix no value no value
                suhosin.srand.ignore On On
                suhosin.stealth On On
                suhosin.upload.disallow_binary 0 0
                suhosin.upload.disallow_elf 1 1
                suhosin.upload.max_uploads 25 25
                suhosin.upload.remove_binary 0 0
                suhosin.upload.verification_script no value no value

                xml
                XML Support active
                XML Namespace Support active
                libxml2 Version 2.7.8

                xmlreader
                XMLReader enabled

                xmlwriter
                XMLWriter enabled

                zlib
                ZLib Support enabled
                Stream Wrapper support compress.zlib://
                Stream Filter support zlib.inflate, zlib.deflate
                Compiled Version 1.2.3
                Linked Version 1.2.3

                Directive Local Value Master Value
                zlib.output_compression Off Off
                zlib.output_compression_level 1 1
                zlib.output_handler no value no value

                zmq
                ZMQ extension enabled
                ZMQ extension version @PACKAGE_VERSION@
                libzmq version 2.1.7

                Directive Local Value Master Value

                Additional Modules
                Module Name
                pfSense
                readline

                Environment
                Variable Value
                HOME /
                OLDPWD /
                PATH /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
                PWD /usr/local/www
                PHP_FCGI_CHILDREN 2
                PHP_FCGI_MAX_REQUESTS 500

                PHP Variables
                Variable Value
                _REQUEST["PHPSESSID"] 51d05d436402dbda27dd022a7032efbb
                _COOKIE["PHPSESSID"] 51d05d436402dbda27dd022a7032efbb
                _SERVER["HOME"] /
                _SERVER["OLDPWD"] /
                _SERVER["PATH"] /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
                _SERVER["PWD"] /usr/local/www
                _SERVER["PHP_FCGI_CHILDREN"] 2
                _SERVER["PHP_FCGI_MAX_REQUESTS"] 500
                _SERVER["FCGI_ROLE"] RESPONDER
                _SERVER["SERVER_SOFTWARE"] lighttpd/1.4.29
                _SERVER["SERVER_NAME"] 10.0.0.3
                _SERVER["GATEWAY_INTERFACE"] CGI/1.1
                _SERVER["SERVER_PORT"] 80
                _SERVER["SERVER_ADDR"] 10.0.0.3
                _SERVER["REMOTE_PORT"] 29520
                _SERVER["REMOTE_ADDR"] 10.0.0.2
                _SERVER["SCRIPT_NAME"] /phpinfo.php
                _SERVER["PATH_INFO"] no value
                _SERVER["SCRIPT_FILENAME"] /usr/local/www/phpinfo.php
                _SERVER["DOCUMENT_ROOT"] /usr/local/www/
                _SERVER["REQUEST_URI"] /phpinfo.php
                _SERVER["QUERY_STRING"] no value
                _SERVER["REQUEST_METHOD"] GET
                _SERVER["REDIRECT_STATUS"] 200
                _SERVER["SERVER_PROTOCOL"] HTTP/1.0
                _SERVER["HTTP_HOST"] 10.0.0.3
                _SERVER["HTTP_USER_AGENT"] Mozilla/5.0 (Windows NT 6.1; rv:14.0) Gecko/20100101 Firefox/14.0.1
                _SERVER["HTTP_ACCEPT"] text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
                _SERVER["HTTP_ACCEPT_LANGUAGE"] en-us,en;q=0.5
                _SERVER["HTTP_ACCEPT_ENCODING"] identity,gzip,deflate
                _SERVER["HTTP_COOKIE"] PHPSESSID=51d05d436402dbda27dd022a7032efbb
                _SERVER["HTTP_VIA"] 1.0 localhost:3128 (squid/2.7.STABLE9)
                _SERVER["HTTP_X_FORWARDED_FOR"] 127.0.0.1
                _SERVER["HTTP_CACHE_CONTROL"] max-age=259200
                _SERVER["HTTP_CONNECTION"] keep-alive
                _SERVER["PHP_SELF"] /phpinfo.php
                _SERVER["REQUEST_TIME"] 1343138776
                _SERVER["argv"]

                Array
                (
                )

                _SERVER["argc"] 0
                _ENV["HOME"] /
                _ENV["OLDPWD"] /
                _ENV["PATH"] /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
                _ENV["PWD"] /usr/local/www
                _ENV["PHP_FCGI_CHILDREN"] 2
                _ENV["PHP_FCGI_MAX_REQUESTS"] 500
                _ENV["FCGI_ROLE"] RESPONDER
                _ENV["SERVER_SOFTWARE"] lighttpd/1.4.29
                _ENV["SERVER_NAME"] 10.0.0.3
                _ENV["GATEWAY_INTERFACE"] CGI/1.1
                _ENV["SERVER_PORT"] 80
                _ENV["SERVER_ADDR"] 10.0.0.3
                _ENV["REMOTE_PORT"] 29520
                _ENV["REMOTE_ADDR"] 10.0.0.2
                _ENV["SCRIPT_NAME"] /phpinfo.php
                _ENV["PATH_INFO"] no value
                _ENV["SCRIPT_FILENAME"] /usr/local/www/phpinfo.php
                _ENV["DOCUMENT_ROOT"] /usr/local/www/
                _ENV["REQUEST_URI"] /phpinfo.php
                _ENV["QUERY_STRING"] no value
                _ENV["REQUEST_METHOD"] GET
                _ENV["REDIRECT_STATUS"] 200
                _ENV["SERVER_PROTOCOL"] HTTP/1.0
                _ENV["HTTP_HOST"] 10.0.0.3
                _ENV["HTTP_USER_AGENT"] Mozilla/5.0 (Windows NT 6.1; rv:14.0) Gecko/20100101 Firefox/14.0.1
                _ENV["HTTP_ACCEPT"] text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
                _ENV["HTTP_ACCEPT_LANGUAGE"] en-us,en;q=0.5
                _ENV["HTTP_ACCEPT_ENCODING"] identity,gzip,deflate
                _ENV["HTTP_COOKIE"] PHPSESSID=51d05d436402dbda27dd022a7032efbb
                _ENV["HTTP_VIA"] 1.0 localhost:3128 (squid/2.7.STABLE9)
                _ENV["HTTP_X_FORWARDED_FOR"] 127.0.0.1
                _ENV["HTTP_CACHE_CONTROL"] max-age=259200
                _ENV["HTTP_CONNECTION"] keep-alive

                1 Reply Last reply Reply Quote 0
                • V
                  vbentley
                  last edited by

                  Thanks for confirming that. Your amd64 PHP installation has mbstring loaded, my i386 build does not. Anyone else have the same outcome of mbstring present on amd64 build and not on i386?

                  Trademark Attribution and Credit
                  pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

                  1 Reply Last reply Reply Quote 0
                  • V
                    vbentley
                    last edited by

                    I have been investigating further and the configuration option –with-config-file-scan-dir=/usr/local/etc/php suggests that there may be more configuration files to process in /usr/local/etc/php . Perhaps this is where mbstring is loaded? This subdirectory is not present on my machine.

                    Trademark Attribution and Credit
                    pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

                    1 Reply Last reply Reply Quote 0
                    • J
                      java007md
                      last edited by

                      @vbentley:

                      I have been investigating further and the configuration option –with-config-file-scan-dir=/usr/local/etc/php suggests that there may be more configuration files to process in /usr/local/etc/php . Perhaps this is where mbstring is loaded? This subdirectory is not present on my machine.

                      No /usr/local/etc/php directory here either.

                      My whitelist error is different than what you are seeing (Services: Snort: Whitelist: Edit 63463; The following input errors were detected: A valid alias need to be provided), but for what it's worth, the phpinfo output I have (i386) is below:

                      –--------------------------------------------------------
                      PHP Version 5.2.17

                      System FreeBSD pfsense.localdomain 8.1-RELEASE-p6 FreeBSD 8.1-RELEASE-p6 #0: Mon Dec 12 17:53:00 EST 2011 root@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org:/usr/obj./usr/pfSensesrc/src/sys/pfSense_SMP.8 i386
                      Build Date Sep 20 2011 10:53:14
                      Configure Command './configure' '--with-layout=GNU' '--with-config-file-scan-dir=/usr/local/etc/php' '--disable-all' '--enable-libxml' '--with-libxml-dir=/usr/local' '--enable-reflection' '--with-pcre-regex' '--program-prefix=' '--enable-fastcgi' '--with-regex=php' '--with-zend-vm=CALL' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=i386-portbld-freebsd8.1'
                      Server API CGI/FastCGI
                      Virtual Directory Support disabled
                      Configuration File (php.ini) Path /usr/local/etc
                      Loaded Configuration File /usr/local/etc/php.ini
                      Scan this dir for additional .ini files /usr/local/etc/php
                      additional .ini files parsed (none)
                      PHP API 20041225
                      PHP Extension 20060613
                      Zend Extension 220060519
                      Debug Build no
                      Thread Safety disabled
                      Zend Memory Manager enabled
                      IPv6 Support enabled
                      Registered PHP Streams https, ftps, php, file, data, http, ftp, compress.zlib, ssh2.shell, ssh2.exec, ssh2.tunnel, ssh2.scp, ssh2.sftp
                      Registered Stream Socket Transports tcp, udp, unix, udg, ssl, sslv3, sslv2, tls
                      Registered Stream Filters string.rot13, string.toupper, string.tolower, string.strip_tags, convert., consumed, zlib.

                      This server is protected with the Suhosin Patch 0.9.7
                      Copyright (c) 2006 Hardened-PHP Project

                      This program makes use of the Zend Scripting Language Engine:
                      Zend Engine v2.2.0, Copyright (c) 1998-2010 Zend Technologies
                          with Suhosin v0.9.27, Copyright (c) 2007, by SektionEins GmbH

                      Configuration

                      PHP Core

                      Directive Local Value Master Value
                      allow_call_time_pass_reference On On
                      allow_url_fopen On On
                      allow_url_include Off Off
                      always_populate_raw_post_data Off Off
                      arg_separator.input & &
                      arg_separator.output & &
                      asp_tags Off Off
                      auto_append_file no value no value
                      auto_globals_jit On On
                      auto_prepend_file no value no value
                      browscap no value no value
                      default_charset no value no value
                      default_mimetype text/html text/html
                      define_syslog_variables Off Off
                      disable_classes no value no value
                      disable_functions no value no value
                      display_errors On On
                      display_startup_errors Off Off
                      doc_root no value no value
                      docref_ext no value no value
                      docref_root no value no value
                      enable_dl On On
                      error_append_string no value no value
                      error_log /tmp/PHP_errors.log /tmp/PHP_errors.log
                      error_prepend_string no value no value
                      error_reporting no value no value
                      expose_php Off Off
                      extension_dir /usr/local/lib/php/20060613/ /usr/local/lib/php/20060613/
                      file_uploads On On
                      highlight.bg #FFFFFF #FFFFFF
                      highlight.comment #FF8000 #FF8000
                      highlight.default #0000BB #0000BB
                      highlight.html #000000 #000000
                      highlight.keyword #007700 #007700
                      highlight.string #DD0000 #DD0000
                      html_errors Off Off
                      ignore_repeated_errors Off Off
                      ignore_repeated_source Off Off
                      ignore_user_abort Off Off
                      implicit_flush On On
                      include_path .:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg .:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg
                      log_errors On On
                      log_errors_max_len 1024 1024
                      magic_quotes_gpc Off Off
                      magic_quotes_runtime Off Off
                      magic_quotes_sybase Off Off
                      mail.force_extra_parameters no value no value
                      max_execution_time 99999999 99999999
                      max_file_uploads 20 20
                      max_input_nesting_level 64 64
                      max_input_time 99999999 99999999
                      memory_limit 128M 128M
                      open_basedir no value no value
                      output_buffering 0 0
                      output_handler no value no value
                      post_max_size 100M 100M
                      precision 14 14
                      realpath_cache_size 16K 16K
                      realpath_cache_ttl 120 120
                      register_argc_argv On On
                      register_globals Off Off
                      register_long_arrays On On
                      report_memleaks On On
                      report_zend_debug On On
                      safe_mode Off Off
                      safe_mode_exec_dir /usr/local/php/bin /usr/local/php/bin
                      safe_mode_gid Off Off
                      safe_mode_include_dir no value no value
                      sendmail_from no value no value
                      sendmail_path /usr/sbin/sendmail -t -i /usr/sbin/sendmail -t -i
                      serialize_precision 100 100
                      short_open_tag On On
                      SMTP localhost localhost
                      smtp_port 25 25
                      sql.safe_mode Off Off
                      suhosin.log.phpscript.is_safe Off Off
                      track_errors Off Off
                      unserialize_callback_func no value no value
                      upload_max_filesize 100M 100M
                      upload_tmp_dir /tmp /tmp
                      user_dir no value no value
                      variables_order EGPCS EGPCS
                      xmlrpc_error_number 0 0
                      xmlrpc_errors Off Off
                      y2k_compliance On On
                      zend.ze1_compatibility_mode Off Off

                      apc

                      APC Support enabled
                      Version 3.1.6
                      APC Debugging Disabled
                      MMAP Support Enabled
                      MMAP File Mask no value
                      Locking type File Locks
                      Revision $Revision: 303642 $
                      Build Date Aug 11 2011 14:06:10

                      Directive Local Value Master Value
                      apc.cache_by_default On On
                      apc.canonicalize On On
                      apc.coredump_unmap Off Off
                      apc.enable_cli Off Off
                      apc.enabled On On
                      apc.file_md5 Off Off
                      apc.file_update_protection 2 2
                      apc.filters no value no value
                      apc.gc_ttl 3600 3600
                      apc.include_once_override Off Off
                      apc.lazy_classes Off Off
                      apc.lazy_functions Off Off
                      apc.max_file_size 1M 1M
                      apc.mmap_file_mask no value no value
                      apc.num_files_hint 1000 1000
                      apc.preload_path no value no value
                      apc.report_autofilter Off Off
                      apc.rfc1867 Off Off
                      apc.rfc1867_freq 0 0
                      apc.rfc1867_name APC_UPLOAD_PROGRESS APC_UPLOAD_PROGRESS
                      apc.rfc1867_prefix upload_ upload_
                      apc.rfc1867_ttl 3600 3600
                      apc.shm_segments 1 1
                      apc.shm_size 35M 35M
                      apc.slam_defense On On
                      apc.stat On On
                      apc.stat_ctime Off Off
                      apc.ttl 0 0
                      apc.use_request_time On On
                      apc.user_entries_hint 4096 4096
                      apc.user_ttl 0 0
                      apc.write_lock On On

                      cgi-fcgi

                      Directive Local Value Master Value
                      cgi.check_shebang_line 1 1
                      cgi.fix_pathinfo 1 1
                      cgi.nph 0 0
                      cgi.rfc2616_headers 0 0
                      fastcgi.logging 1 1

                      ctype

                      ctype functions enabled

                      curl

                      cURL support enabled
                      cURL Information libcurl/7.21.3 OpenSSL/0.9.8n zlib/1.2.3

                      date

                      date/time support enabled
                      "Olson" Timezone Database Version 2010.9
                      Timezone Database internal
                      Default timezone America/New_York

                      Directive Local Value Master Value
                      date.default_latitude 31.7667 31.7667
                      date.default_longitude 35.2333 35.2333
                      date.sunrise_zenith 90.583333 90.583333
                      date.sunset_zenith 90.583333 90.583333
                      date.timezone no value no value

                      gettext

                      GetText Support enabled

                      ldap

                      LDAP Support enabled
                      RCS Version $Id: ldap.c 293036 2010-01-03 09:23:27Z sebastian $
                      Total Links 0/unlimited
                      API Version 3001
                      Vendor Name OpenLDAP
                      Vendor Version 20426

                      libxml

                      libXML support active
                      libXML Version 2.7.8
                      libXML streams enabled

                      mbstring

                      Multibyte Support enabled
                      Multibyte string engine libmbfl
                      Multibyte (japanese) regex support enabled
                      Multibyte regex (oniguruma) version 4.4.4
                      Multibyte regex (oniguruma) backtrack check On

                      mbstring extension makes use of "streamable kanji code filter and converter", which is distributed under the GNU Lesser General Public License version 2.1.

                      Directive Local Value Master Value
                      mbstring.detect_order no value no value
                      mbstring.encoding_translation Off Off
                      mbstring.func_overload 0 0
                      mbstring.http_input pass pass
                      mbstring.http_output pass pass
                      mbstring.internal_encoding no value no value
                      mbstring.language neutral neutral
                      mbstring.strict_detection Off Off
                      mbstring.substitute_character no value no value

                      mhash

                      MHASH support Enabled
                      MHASH API Version 20060101

                      openssl

                      OpenSSL support enabled
                      OpenSSL Version OpenSSL 0.9.8n 24 Mar 2010

                      pcntl

                      pcntl support enabled

                      pcre

                      PCRE (Perl Compatible Regular Expressions) Support enabled
                      PCRE Library Version 8.02 2010-03-19

                      Directive Local Value Master Value
                      pcre.backtrack_limit 100000 100000
                      pcre.recursion_limit 100000 100000

                      PDO

                      PDO support enabled
                      PDO drivers no value

                      posix

                      Revision $Revision: 293036 $

                      Reflection

                      Reflection enabled
                      Version $Id: php_reflection.c 300129 2010-06-03 00:43:37Z felipe $

                      session

                      Session Support enabled
                      Registered save handlers files user
                      Registered serializer handlers php php_binary

                      Directive Local Value Master Value
                      session.auto_start Off Off
                      session.bug_compat_42 On On
                      session.bug_compat_warn On On
                      session.cache_expire 180 180
                      session.cache_limiter nocache nocache
                      session.cookie_domain no value no value
                      session.cookie_httponly Off Off
                      session.cookie_lifetime 0 0
                      session.cookie_path / /
                      session.cookie_secure Off Off
                      session.entropy_file no value no value
                      session.entropy_length 0 0
                      session.gc_divisor 100 100
                      session.gc_maxlifetime 1440 1440
                      session.gc_probability 1 1
                      session.hash_bits_per_character 4 4
                      session.hash_function 0 0
                      session.name PHPSESSID PHPSESSID
                      session.referer_check no value no value
                      session.save_handler files files
                      session.save_path no value no value
                      session.serialize_handler php php
                      session.use_cookies On On
                      session.use_only_cookies Off Off
                      session.use_trans_sid 0 0

                      shmop

                      shmop support enabled

                      SimpleXML

                      Simplexml support enabled
                      Revision $Revision: 299016 $
                      Schema support enabled

                      SPL

                      SPL support enabled
                      Interfaces Countable, OuterIterator, RecursiveIterator, SeekableIterator, SplObserver, SplSubject
                      Classes AppendIterator, ArrayIterator, ArrayObject, BadFunctionCallException, BadMethodCallException, CachingIterator, DirectoryIterator, DomainException, EmptyIterator, FilterIterator, InfiniteIterator, InvalidArgumentException, IteratorIterator, LengthException, LimitIterator, LogicException, NoRewindIterator, OutOfBoundsException, OutOfRangeException, OverflowException, ParentIterator, RangeException, RecursiveArrayIterator, RecursiveCachingIterator, RecursiveDirectoryIterator, RecursiveFilterIterator, RecursiveIteratorIterator, RecursiveRegexIterator, RegexIterator, RuntimeException, SimpleXMLIterator, SplFileInfo, SplFileObject, SplObjectStorage, SplTempFileObject, UnderflowException, UnexpectedValueException

                      SQLite

                      SQLite support enabled
                      PECL Module version 2.0-dev $Id: sqlite.c 298697 2010-04-28 12:10:10Z iliaa $
                      SQLite Library 2.8.17
                      SQLite Encoding iso8859

                      Directive Local Value Master Value
                      sqlite.assoc_case 0 0

                      ssh2

                      libssh2 version 1.2.8
                      banner SSH-2.0-libssh2_1.2.8
                      remote forwarding enabled
                      hostbased auth enabled
                      polling support enabled
                      publickey subsystem enabled

                      standard

                      Regex Library Bundled library enabled
                      Dynamic Library Support enabled
                      Path to sendmail /usr/sbin/sendmail -t -i

                      Directive Local Value Master Value
                      assert.active 1 1
                      assert.bail 0 0
                      assert.callback no value no value
                      assert.quiet_eval 0 0
                      assert.warning 1 1
                      auto_detect_line_endings 0 0
                      default_socket_timeout 60 60
                      safe_mode_allowed_env_vars PHP_ PHP_
                      safe_mode_protected_env_vars LD_LIBRARY_PATH LD_LIBRARY_PATH
                      url_rewriter.tags a=href,area=href,frame=src,form=,fieldset= a=href,area=href,frame=src,form=,fieldset=
                      user_agent no value no value

                      suhosin

                      This server is protected with the Suhosin Extension 0.9.27

                      Copyright (c) 2006-2007 Hardened-PHP Project
                      Copyright (c) 2007-2008 SektionEins GmbH

                      Directive Local Value Master Value
                      suhosin.apc_bug_workaround Off Off
                      suhosin.cookie.checkraddr 0 0
                      suhosin.cookie.cryptdocroot On On
                      suhosin.cookie.cryptkey [ protected ] [ protected ]
                      suhosin.cookie.cryptlist no value no value
                      suhosin.cookie.cryptraddr 0 0
                      suhosin.cookie.cryptua On On
                      suhosin.cookie.disallow_nul 1 1
                      suhosin.cookie.disallow_ws 1 1
                      suhosin.cookie.encrypt Off Off
                      suhosin.cookie.max_array_depth 50 50
                      suhosin.cookie.max_array_index_length 64 64
                      suhosin.cookie.max_name_length 64 64
                      suhosin.cookie.max_totalname_length 256 256
                      suhosin.cookie.max_value_length 10000 10000
                      suhosin.cookie.max_vars 100 100
                      suhosin.cookie.plainlist no value no value
                      suhosin.coredump Off Off
                      suhosin.disable.display_errors Off Off
                      suhosin.executor.allow_symlink Off Off
                      suhosin.executor.disable_emodifier Off Off
                      suhosin.executor.disable_eval Off Off
                      suhosin.executor.eval.blacklist no value no value
                      suhosin.executor.eval.whitelist no value no value
                      suhosin.executor.func.blacklist no value no value
                      suhosin.executor.func.whitelist no value no value
                      suhosin.executor.include.blacklist no value no value
                      suhosin.executor.include.max_traversal 0 0
                      suhosin.executor.include.whitelist no value no value
                      suhosin.executor.max_depth 0 0
                      suhosin.filter.action no value no value
                      suhosin.get.disallow_nul 1 1
                      suhosin.get.disallow_ws 0 0
                      suhosin.get.max_array_depth 5000 5000
                      suhosin.get.max_array_index_length 256 256
                      suhosin.get.max_name_length 64 64
                      suhosin.get.max_totalname_length 256 256
                      suhosin.get.max_value_length 500000 500000
                      suhosin.get.max_vars 5000 5000
                      suhosin.mail.protect 0 0
                      suhosin.memory_limit 512435456 512435456
                      suhosin.mt_srand.ignore On On
                      suhosin.multiheader Off Off
                      suhosin.perdir 0 0
                      suhosin.post.disallow_nul 1 1
                      suhosin.post.disallow_ws 0 0
                      suhosin.post.max_array_depth 5000 5000
                      suhosin.post.max_array_index_length 256 256
                      suhosin.post.max_name_length 64 64
                      suhosin.post.max_totalname_length 256 256
                      suhosin.post.max_value_length 500000 500000
                      suhosin.post.max_vars 5000 5000
                      suhosin.protectkey On On
                      suhosin.request.disallow_nul 1 1
                      suhosin.request.disallow_ws 0 0
                      suhosin.request.max_array_depth 5000 5000
                      suhosin.request.max_array_index_length 256 256
                      suhosin.request.max_totalname_length 256 256
                      suhosin.request.max_value_length 500000 500000
                      suhosin.request.max_varname_length 64 64
                      suhosin.request.max_vars 5000 5000
                      suhosin.server.encode On On
                      suhosin.server.strip On On
                      suhosin.session.checkraddr 0 0
                      suhosin.session.cryptdocroot On On
                      suhosin.session.cryptkey [ protected ] [ protected ]
                      suhosin.session.cryptraddr 0 0
                      suhosin.session.cryptua On On
                      suhosin.session.encrypt On On
                      suhosin.session.max_id_length 128 128
                      suhosin.simulation Off Off
                      suhosin.sql.bailout_on_error Off Off
                      suhosin.sql.comment 0 0
                      suhosin.sql.multiselect 0 0
                      suhosin.sql.opencomment 0 0
                      suhosin.sql.union 0 0
                      suhosin.sql.user_postfix no value no value
                      suhosin.sql.user_prefix no value no value
                      suhosin.srand.ignore On On
                      suhosin.stealth On On
                      suhosin.upload.disallow_binary 0 0
                      suhosin.upload.disallow_elf 1 1
                      suhosin.upload.max_uploads 25 25
                      suhosin.upload.remove_binary 0 0
                      suhosin.upload.verification_script no value no value

                      xml

                      XML Support active
                      XML Namespace Support active
                      libxml2 Version 2.7.8

                      xmlreader

                      XMLReader enabled

                      xmlwriter

                      XMLWriter enabled

                      zlib

                      ZLib Support enabled
                      Stream Wrapper support compress.zlib://
                      Stream Filter support zlib.inflate, zlib.deflate
                      Compiled Version 1.2.3
                      Linked Version 1.2.3

                      Directive Local Value Master Value
                      zlib.output_compression Off Off
                      zlib.output_compression_level 1 1
                      zlib.output_handler no value no value

                      zmq

                      ZMQ extension enabled
                      ZMQ extension version @PACKAGE_VERSION@
                      libzmq version 2.1.7

                      Directive Local Value Master Value

                      Additional Modules

                      Module Name
                      pfSense
                      readline

                      Environment

                      Variable Value
                      HOME /
                      OLDPWD /
                      PATH /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
                      PWD /usr/local/www
                      PHP_FCGI_CHILDREN 2
                      PHP_FCGI_MAX_REQUESTS 500

                      PHP Variables

                      Variable Value
                      _REQUEST["PHPSESSID"] e13cca999b4984b78514dc425c71271b
                      _COOKIE["PHPSESSID"] e13cca999b4984b78514dc425c71271b
                      _SERVER["HOME"] /
                      _SERVER["OLDPWD"] /
                      _SERVER["PATH"] /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
                      _SERVER["PWD"] /usr/local/www
                      _SERVER["PHP_FCGI_CHILDREN"] 2
                      _SERVER["PHP_FCGI_MAX_REQUESTS"] 500
                      _SERVER["FCGI_ROLE"] RESPONDER
                      _SERVER["SERVER_SOFTWARE"] lighttpd/1.4.29
                      _SERVER["SERVER_NAME"] 192.168.0.1
                      _SERVER["GATEWAY_INTERFACE"] CGI/1.1
                      _SERVER["SERVER_PORT"] 443
                      _SERVER["SERVER_ADDR"] 192.168.0.1
                      _SERVER["REMOTE_PORT"] 4457
                      _SERVER["REMOTE_ADDR"] 192.168.2.186
                      _SERVER["SCRIPT_NAME"] /phpinfo.php
                      _SERVER["PATH_INFO"] no value
                      _SERVER["SCRIPT_FILENAME"] /usr/local/www/phpinfo.php
                      _SERVER["DOCUMENT_ROOT"] /usr/local/www/
                      _SERVER["REQUEST_URI"] /phpinfo.php
                      _SERVER["QUERY_STRING"] no value
                      _SERVER["REQUEST_METHOD"] GET
                      _SERVER["REDIRECT_STATUS"] 200
                      _SERVER["SERVER_PROTOCOL"] HTTP/1.1
                      _SERVER["HTTPS"] on
                      _SERVER["HTTP_HOST"] 192.168.0.1
                      _SERVER["HTTP_CONNECTION"] keep-alive
                      _SERVER["HTTP_USER_AGENT"] Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.49 Safari/537.1
                      _SERVER["HTTP_ACCEPT"] text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
                      _SERVER["HTTP_ACCEPT_ENCODING"] gzip,deflate,sdch
                      _SERVER["HTTP_ACCEPT_LANGUAGE"] en-US,en;q=0.8
                      _SERVER["HTTP_ACCEPT_CHARSET"] ISO-8859-1,utf-8;q=0.7,;q=0.3
                      _SERVER["HTTP_COOKIE"] PHPSESSID=e13cca999b4984b78514dc425c71271b
                      _SERVER["PHP_SELF"] /phpinfo.php
                      _SERVER["REQUEST_TIME"] 1343144697
                      _SERVER["argv"]
                      Array
                      (
                      )
                      _SERVER["argc"] 0
                      _ENV["HOME"] /
                      _ENV["OLDPWD"] /
                      _ENV["PATH"] /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
                      _ENV["PWD"] /usr/local/www
                      _ENV["PHP_FCGI_CHILDREN"] 2
                      _ENV["PHP_FCGI_MAX_REQUESTS"] 500
                      _ENV["FCGI_ROLE"] RESPONDER
                      _ENV["SERVER_SOFTWARE"] lighttpd/1.4.29
                      _ENV["SERVER_NAME"] 192.168.0.1
                      _ENV["GATEWAY_INTERFACE"] CGI/1.1
                      _ENV["SERVER_PORT"] 443
                      _ENV["SERVER_ADDR"] 192.168.0.1
                      _ENV["REMOTE_PORT"] 4457
                      _ENV["REMOTE_ADDR"] 192.168.2.186
                      _ENV["SCRIPT_NAME"] /phpinfo.php
                      _ENV["PATH_INFO"] no value
                      _ENV["SCRIPT_FILENAME"] /usr/local/www/phpinfo.php
                      _ENV["DOCUMENT_ROOT"] /usr/local/www/
                      _ENV["REQUEST_URI"] /phpinfo.php
                      _ENV["QUERY_STRING"] no value
                      _ENV["REQUEST_METHOD"] GET
                      _ENV["REDIRECT_STATUS"] 200
                      _ENV["SERVER_PROTOCOL"] HTTP/1.1
                      _ENV["HTTPS"] on
                      _ENV["HTTP_HOST"] 192.168.0.1
                      _ENV["HTTP_CONNECTION"] keep-alive
                      _ENV["HTTP_USER_AGENT"] Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.49 Safari/537.1
                      _ENV["HTTP_ACCEPT"] text/html,application/xhtml+xml,application/xml;q=0.9,                      /;q=0.8
                      _ENV["HTTP_ACCEPT_ENCODING"] gzip,deflate,sdch
                      _ENV["HTTP_ACCEPT_LANGUAGE"] en-US,en;q=0.8
                      _ENV["HTTP_ACCEPT_CHARSET"] ISO-8859-1,utf-8;q=0.7,                      ;q=0.3
                      _ENV["HTTP_COOKIE"] PHPSESSID=e13cca999b4984b78514dc425c71271b

                      PHP License

                      This program is free software; you can redistribute it and/or modify it under the terms of the PHP License as published by the PHP Group and included in the distribution in the file: LICENSE

                      This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

                      If you did not receive a copy of the PHP license, or have any questions about PHP licensing, please contact license@php.net.

                      –--------------------------------------------------------

                      At this point, I have blocking disabled until I get the whitelist issue resolved.

                      I am loading both the snort vrt and emergingthreats rules BTW.

                      1 Reply Last reply Reply Quote 0
                      • V
                        vbentley
                        last edited by

                        Thanks. It appears that the failure to load mbstring is something my box does and is not necessarily a build issue as your i386 has no problem loading mbstring functions.

                        I'm going to build another machine from a fresh CD just to be sure mine is not an upgrade fault. The one I am running was upgraded from the console on release 1.2.3 .

                        Trademark Attribution and Credit
                        pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

                        1 Reply Last reply Reply Quote 0
                        • M
                          Metu69salemi
                          last edited by

                          code brackets would help a lot for readability

                          1 Reply Last reply Reply Quote 0
                          • V
                            vbentley
                            last edited by

                            I rebuilt my pfSense host today using a completely fresh install on another hard drive. After correcting a few typos for 'gettet' that should be 'gettext' in snort_interfaces_global.php and snort_preprocessors.php, this problem with whitelists has been resolved. I suspect that it may have been caused by upgrading from the console a 1.2.3 system with Snort already installed instead of installing 2.0.1 from CD.

                            Trademark Attribution and Credit
                            pfSense® and pfSense Certified® are registered trademarks of Electric Sheep Fencing, LLC in the United States and other countries.

                            1 Reply Last reply Reply Quote 0
                            • J
                              JMBARRETO
                              last edited by

                              The WhiteList don't works for me too. Neither with networks or single IP adress.
                              I'm using PFSense 2.0.1 with Snort 2.9.2.3 pkg v.2.5.1.

                              After some days searching for solution I found a workaround that worked for me.
                              Add in Suppress List the networks in CIDR notation like that (example with 3 networks in supress list working as WhiteList):

                              suppress gen_id 0, sig_id 0, track by_src, ip [xxx.xxx.xxx.xxx/29,yyy.yyy.yyy.yyy/28,zzz.zzz.zzz.zzz/28]

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.