pfSense Packages

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Subcategories

Cache/Proxy

Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

Topics

Posts

J

@Antibiotic

Ref:
http://www.squid-cache.org/Doc/config/memory_pools_limit/

Try to change this to a higher value if your firewall can handle it
IDS/IPS

Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

Topics

Posts

B

@Snailkhan:
It is not possible in pfSense to tie IDS/IPS rules or policies to the pf firewall engine. Thus it is impossible to tie IDS/IPS rules to IP source or destination pairs as evaluated by the firewall engine. That's just not how pfSense is designed. If you need this level of granularity, then pfSense is not the product for you. The best you could do is write your own custom IDS/IPS rules where you customize the Source/Destination fields of each IDS/IPS rule. I seriously doubt you want to get into that level of maintainence.

Snort is an add-on volunteer-maintained package for pfSense. It is not baked into the operating system nor into the design of the firewall. Therefore its capabilities will be nowhere near as flexible as say a customized Cisco hardware/software solution might be.

Later Edit: but compare the price you pay for pfSense and its Snort package to what the Cisco solution costs you 😁. Many times compromises are necessary when taking advantage of the "free" option.
Traffic Monitoring

Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

Topics

Posts

S

@dennypage
Thank you for your comment. Yes, I have an SSD (original) and I thought that setting it to "RAM" could also protect the SSD and thus let it live much longer.

I had read something about this, but can't find it anymore

EDIT
well ... after some thought ja'i removed the "RAM" option and I'll see what happens next :-)
pfBlockerNG

Discussions about the pfBlockerNG package

Topics

Posts

B

Ok, thanks for a well written explanation. I don't expect to get complaints about "your network is wonky" on this topic.
UPS Tools

Discussions about Network UPS Tools and APCUPSD packages for pfSense

Topics

Posts

C

@dennypage thanks, will check it out tomorrow!
ACME

Discussions about the ACME / Let’s Encrypt package for pfSense

Topics

Posts

J

ACME package version 0.8 is available now for pfSense Plus 24.03 and 23.09.1, and CE 2.7.2.

Bug fixes/changes:
Synchronizes with upstream acme.sh version 3.0.8 (master branch) Various upstream bug fixes for DNS providers. Failed updates for INWX registrar
https://redmine.pfsense.org/issues/14796 acme.sh ignored certificates in CA trust store
https://redmine.pfsense.org/issues/14815 Failed updates for nsupdate method with challenge alias
https://redmine.pfsense.org/issues/15061 Selfhost updates fail due to missing record ID and password encoding
https://redmine.pfsense.org/issues/15229 Cleaned up/reformatting a significant chunk of backend provider code.
New DNS Providers:
ArtFiles.de BookMyName DNSExit.com lima-city.de Tencent West.cn Domain API
Contains contents of PRs:
Ports PR #1299 by MIPMHannes @ GitHub Ports PR #1330 by seyfidin @ GitHub
FRR

Discussions about the FRR Dynamic Routing package on pfSense

Topics

Posts

D

I will get hands-on tomorrow so I am hoping to nail down what exactly needs done to get this to work.

I am not exactly clear on how to implement an AS-Path filter in my situation. I may try to test the Prefix filter mentioned in that last link with the any/any option to see if it makes my 2nd connection advertise the routes to the cloud.

Any thoughts or suggestions?
Tailscale

Discussions about the Tailscale package

Topics

Posts

T

After finding no other information, did a config wipe and clean install and reconfigured Tailscale, it is working now, but a bit frustrating. Fortunately I was local to this system and could configure it. My remote systems are stuck at the older version until I get physical access to them, since I can’t trust the upgrade.
WireGuard

Discussions about WireGuard

Topics

Posts

B

@tman222 Good question. Try it!

J

System Patches Package v2.2.10_1

• • jimp

Votes

Posts

Views

J

They can't be in the release notes immediately along with the release since the issues are marked private until after the release is out, but they'll be added shortly.
1

DNS Broken for pkg.pfsense.org

• • 10101000

Votes

Posts

Views

J

https://forum.netgate.com/topic/115789/pkg-pfsense-org-appears-to-be-dead/2
R

Packages wishlist?

• • rds_correia

Votes

Posts

Views

N

Haha, NordLynx integration
J

pfSense 2.7 and UDP Broadcast Relay

• • johlc

Votes

Posts

Views

S

@Nyxtorm Hi,
I built the source code with success but now I'm not using pfsense anymore because I switched to openwrt.
You can try to run a virtual machine with freebsd and manually build udpbroadcastrelay from source code.
C

Crowdsec finally comming to pfSense

• • cloudroot

Votes

Posts

Views

P

@Antibiotic No idea. I hadn't even heard of it before this thread.
J

arpwatch and voluminous amounts of SPAM

• • justme2

Votes

Posts

Views

J

@justme2 you could for sure put in a feature request for that.. It makes sense to me to have that option as well.

Its just arpwatch was never an oh I need this package sort of package.. Kind of slick, yeah if wasn't so noisy.. I could even live with the noise since once it finds all the devices it shouldn't really send that many.. But my latest frustration was it sending stuff for bogon.

Here is a thread from last year, where this same sort of stuff was discussed.

https://forum.netgate.com/post/1096586
V

23.09.1 from 23.05.1 freeRadius broke

• • vanwinkle.rip

Votes

Posts

Views

P

@vanwinkle-rip, thanks for posting this! The log suggested to make that change but didn't specify where. You pointed in the right direction.

Do you or anyone else know how to make this change permanent? Any changes in the GUI revert the changes. Maybe we can create an eap.local file or something like this?
R

Configuring UDP Broadcast Relay

• • RickyBaker

Votes

Posts

Views

R

@iptvcld i'm sure there's a more eloquent and effective way to find out but I've actually just googled and messaged various companies to ask them what the udp forwarding port the app uses and been moderately successful. Can't get the the printer to reliably talk across the vlans but that could be a "printers are terrible" thing
A

Netmap root directory

• • Antibiotic

Votes

Posts

Views

No one has replied
I

Rebooting pfsense on wan gateway failure

• • ipfftw

Votes

Posts

Views

S

@ipfftw Try this

link text
A

Pfsense new install no software packages available

• • adrianp918

Votes

Posts

Views

S

@antoniojf
I tried this as I have the same issue with package manager on PF sense community edition
The command pkg-static bootstrap -f returns with this output -
pkg(8) is already installed. Forcing reinstallation through pkg(7).
The package management tool is not yet installed on your system.
Please set ASSUME_ALWAYS_YES=yes environment variable to be able to bootstrap in non-interactive (stdin not being a tty)
Please let me know how to set this variable. Thanks Stu
P

FreeRADIUS

• • peterlecki

Votes

Posts

Views

P

The screenshot I posted above got removed somehow so I'm posting in text
sshguard 14637 Blocking "192.168.4.103/32" for 480 secs (1 attacks in 0 secs, after 3 abuses over 693 secs.)
D

no Available Packages in Package Manager

• • dhenzler

Votes

Posts

Views

D

@ClanThrasher I received the fix from a developer of the product. He said it was an oversight not to include that in the upgrade. I can't imagine how many users were affected. But grateful that he answered my plea for help.

D
T

Freeradius TLS 1.0 and 1.1 not activated anymore

• • Trey

Votes

Posts

Views

No one has replied
M

Package missing list 23.09.1

• • mathais

Votes

Posts

Views

M

@ahking19 I chose the free version of OPNsense. I had already tested pfsense CE in the past. I had to switch to pfsense+ because the CE version was not compatible with my equipment.

I didn't want to waste time on that. And in principle, I do not accept the fact that Pfsense+ became chargeable for home use, even though it was announced to be free. the price is excessively expensive…
X

Snort blocking VPN traffic

• • xokia

Votes

Posts

Views

B

Why don't you just disable that rule instead? It is an ET Policy rule. Those are usually used just for notification or to enforce some corporate policy. You've discovered that it is falsely triggering in your network due to the VPN traffic (a false positive), so just disable it. Click the red X under the GID:SID column in the ALERTS tab.
F

Errors installing HAProxy and not showing up on services tab

• • frntmn

Votes

Posts

Views

F

Good idea, I still have the equipment that I migrated from, so I will go back to that one and pull the config and see if I can find the differences in the config, thank you
L

New Router. Backup Restored. No Snort Alerts now

snort alerts not working • • LeiShen

Votes

Posts

Views

L

@bmeeks :
Ok. So I disabled and unassigned the WAN Sort interface. Then copied it back to the newly unused WAN interface, enabled and started it and...... IT WORKED!!! I'm getting Alerts and its generating blocks as before the upgrade!

Same name as before, but apparently an internal interface mapping in Snort was still looking for the old WAN interface id.

Thanks!!!
K

isc-bind package upgrade

• • kraduk

Votes

Posts

Views

No one has replied
H

Question about cron package

• • hspindel

Votes

Posts

Views

H

@hspindel said in Question about cron package:

@Gertjan Thank you for the reply.

pfSense is already setup to send notifications.

So what do I do have the simple command "vmstat -m" run from cron and send an email?

Never mind. Figured it out. Thank you.

1 / 458