Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Ipguard package

    Scheduled Pinned Locked Moved pfSense Packages
    57 Posts 20 Posters 37.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Z
      z3r0tech
      last edited by

      thanks! will test later and post results…

      1 Reply Last reply Reply Quote 0
      • S
        sand_hero
        last edited by

        very Thx For who made this package alive :) AND THX FOR PFSENSE ITS FREEEEEEEEEEEE :) AND VERY HELPFUL :)

        1 Reply Last reply Reply Quote 0
        • S
          senser
          last edited by

          about the libipcap: its there on 2.0.x: /lib/libpcap.so.7
          I have linked /lib/libpcap.so.7 to /lib/libpcap.so.1 and the binary from the v0.1 package is happy.
          so, you can either create the link when you install the package or compile the bin to use /lib/libpcap.so.7

          there are some issues with the webgui: sorting (moving things up or down) is not permanent and there are empty entries shown for previously deleted mac/ip address sets.
          otherwise, nice package! I hope it's still being worked on. :)

          We use the mighty pf, we cannot be fooled.

          1 Reply Last reply Reply Quote 0
          • S
            senser
            last edited by

            two more things I would like to suggest:

            1. drop root privileges (add '-s nobody' to the startup parameters).
            2. don't use '-u 300', instead send SIGHUP to the process to reload the config when the user clicks save.

            We use the mighty pf, we cannot be fooled.

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              I'll take a look on it as soon as time permits.

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • R
                rolysent
                last edited by

                Hi,

                I have a problem with ipguard. I guess it is not working with DHCP. In my network, I have allocated IP addresses for WIFI clients ranging from 172.16.4.150-172.16.4.250 but when I run ipguard, wifi users can't obtain IP addresses. Can anyone help me please. Thanks.

                1 Reply Last reply Reply Quote 0
                • C
                  chevot
                  last edited by

                  Hello there,
                  I'm Using Ip guard on my pfsense captive portal to to restricted user for change ip address, here's my scenario :

                  –----------------------------------------------------------------------------------------------------------------------------------------------------------

                  Internet ----------WAN (20.20.20.221/24)* pfsense (captive portal + Ipguard)*LAN (192.168.1.1/24) ---------------- client PC

                  My ipguard rule :

                  on wan 00:0c:29:ed:61:11 20.20.20.221 Pfsense WAN Interface
                  on lan 00:0c:29:ed:63:1e 192.168.1.1 Pfsense LAN Interface
                  on wan 00:00:00:00:00:00 20.20.20.0/24 WAN Net
                  on lan 1c:65:9d:b9:4f:f5 192.168.1.90 PC Manager

                  another my firewall rules:

                  allow LAN & WAN to any rule

                  I'm using dhcp client for another client, and mapping dchp static for special client


                  my purpose is to block another client with dhcp to using PC manager Ip Address using static IP on 192.168.1.90

                  the problem that i face is another user using dhcp client can use the PC manager Ip address with changing their ip address to static and using PC Manager Ip Address.

                  How can I can create best ip guard rule with this situation?
                  can anyone hel me. Thanks

                  1 Reply Last reply Reply Quote 0
                  • A
                    axaios
                    last edited by

                    Ipguard is great! Tried it yesterday and is really what I was looking for. I have a suggestion though. Say I have a network client that I want to restrict to a single IP but I want everyone else to get IP through DHCP on the same subnet. It would be nice if overlapping rules were supported and followed priorities. Example:

                    00:00:00:00:00:00    192.168.0.0/24    Everyone is able to get any IP in this subnet
                    00:0c:29:ed:61:11    192.168.0.150    This computer can only get this IP. So this rule has a higher priority than the first one.

                    I tried configuring that way and it didn't work.

                    As an alternate scenario I could try to register every single client's mac address but it really is a big annoyance. Hope the above could work.

                    1 Reply Last reply Reply Quote 0
                    • R
                      rjcrowder
                      last edited by

                      @axaios:

                      Ipguard is great! Tried it yesterday and is really what I was looking for.

                      I was hoping you could describe what you are doing with it. I've tried using if several times and have never been able to get it to work the way I expect - I ended up creating custom IPFW rules…

                      What I want:
                        1.) allow dhcp to assign dynamic IP addresses (i.e. not turn on feature to deny unknown clients).
                        2.) block all network access for any client that uses a statically assigned IP address.

                      For example, my XBox gets a statically assigned address. If another mac tries to use the same IP address, I want to block them from the network. Is this possible? When I've tried this with IPguard (by adding the mac and IP of the XBox), the second client (stealing the XBox address) seems to work just fine.

                      1 Reply Last reply Reply Quote 0
                      • L
                        lokapal
                        last edited by

                        I badly need in ipguard for old 2.03 pfsense. Where can I get it (as pfsense package)?
                        Right now there is no ipguard package in the list of available packages.
                        Thanks in advance.

                        1 Reply Last reply Reply Quote 0
                        • A
                          amd_mda
                          last edited by

                          Some news regarding removed packages from 2.3: https://doc.pfsense.org/index.php/2.3_Removed_Packages . I also regret that ipguard was not included in pfSense 2.3.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.