Categories

• TNSR

  Discussions about TNSR

  • TNSR Announcements
  • TNSR Feedback
  • Problems Installing or Upgrading TNSR Software
  379 Topics

  1k Posts

  M

  Not sure why but there is no ability to log ACLs or VPFs rules. I cant troubleshoot when i dont know if an ACL rule is blocking or accepting a connection. To say nothing for auditing and having those logs sent to a syslog collector...
• pfSense® Software

  Discussions about pfSense Software, click a category below

  • Messages from the pfSense Team
  • General pfSense Questions
  • Multi-Instance Management
  • Problems Installing or Upgrading pfSense Software
  • Firewalling
  • NAT
  • HA/CARP/VIPs
  • L2/Switching/VLANs
  • Routing and Multi WAN
  • Traffic Shaping
  • DHCP and DNS
  • IPv6
  • IPsec
  • OpenVPN
  • Captive Portal
  • webGUI
  • Wireless
  • SNMP
  • Documentation
  • Development
  • Gaming
  • Virtualization
  • Hardware
  • Bounties
  • Retired
  122k Topics

  783k Posts

  J

  @makeitso well when I get a chance - I might fire this up on my nas as a docker https://github.com/nextcloud/all-in-one#nextcloud-all-in-one Just a docker - having a hard time from a quick look through on why that would be hard with haproxy. Let you know when its running, and what if anything special had to do - or also if I crash and burn. I would just publish http, and let ha proxy offload the ssl with my wildcard cert from acme
• pfSense Packages

  Discussions about pfSense software packages

  • Cache/Proxy
  • IDS/IPS
  • Traffic Monitoring
  • pfBlockerNG
  • UPS Tools
  • ACME
  • FRR
  • Tailscale
  • WireGuard
  21k Topics

  130k Posts

  L

  Hey @JonathanLee I am using my ADCS CA with private key, so it is trusted on the clients and I have the private key installed on the pfsense. When I disable transparent proxy and enter the proxy settings manually, it works without a problem. HTTPS is intercepted and certs are generated correctly. [image: 1785862000761-7126d405-3879-4692-9cfe-42614634d490-image.png] But when I enable transparent proxy, the certs generated by the squid is still with my ADCS CA but common names are all ip addresses so there is something going wrong there. And I want squid to bump tls not tunnel it.
• pfSense International Support

  Discuss pfSense in other languages

  • Chinese
  • Deutsch
  • Español
  • Français
  • Indonesian
  • Italiano
  • Russian
  • Nederlands
  • Norwegian
  • Portuguese
  • Polish
  • Romanian
  • Swedish
  • Turkish
  43k Topics

  268k Posts

  B

  Mir war auch so, deswegen Vorsicht mit: @slu said in Q-Feed IP List "Updating: pfB_qfeeds_v4 pfctl: Invalid argument.": die Action auf "Alias Deny" umzustellen und die Regeln selber einzufügen
• Official Netgate® Hardware

  Information about hardware available from Netgate
  3k Topics

  21k Posts

  S

  Hmm, that's odd. I wouldn't expect anything to be running with it disabled. Perhaps something had failed to stop? Had it been rebooted?
• Netgate Announcements

  Information about hardware available from Netgate
  44 Topics

  211 Posts

  A

  It looks like unified web management could be coming soon. It would be great if it means easier control and management of all web services in one place. Let's see if any companies announce more details about it!
• Off-Topic & Non-Support Discussion

  Feel free to talk about anything and everything here

  • Forum Feedback
  • Community Job Board
  4k Topics

  19k Posts

  S

  You should just set the identifier to something specific but valid. So I'd use FQDN, it doesn't change with actual IP address used. It only needs to match at each end.