Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to use a pfsense as a substitute of our hosting centers cisco gateway on my testbed for testing our new firewall

The setup is: [Internet]->[Wan: ?? -Hosting Center Router- Lan:] -> [Wan: -Our firewall- DMZ:] -> [Network of machines with 85.10.100.x adresses]

We do not have access or very much knowledge of this cisco gateway other than it's used as gateway for all our machines who all have ip adresses defined in the mentioned 85 range

The pfsense is sat as substituting the cisco gateway, with a couple of clients on the WAN side of the pfsense with random ip's

I have disabled NAT, and made a allow any, any rule in the firewall part (else nothing works) and my clients can ping the machines on the inside network.

But the problem is when a client is accessing ex. a webserver on port 80 on one of the 85 machines, if you look in the access_log - the request is coming from the pfsense lan ip (, and not the actual ip.

What do i miss?

(the 85 network definition is made up, but it resembles the actual ip's)

share|improve this question

Either you have a proxy running on the box, or you haven't really disabled NAT.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.