pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

0
votes
2answers
24 views

PFSense IPSEC VPN VLAN

We are integrating with a third party and they require the use of a L2L IPSec VPN for communication. I have successfully configured the IPSEC vpn and the tunel is up but now I cannot seem to have ...
0
votes
0answers
13 views

Optimizing Pfsense IPSec VPN for a high latency environment

I have two PFsense routers connecting two networks with high latency between them. What can I adjust to improve file transfers between these two networks?
3
votes
0answers
28 views

IPSec bandwidth between two Pfsense hosts has predictable, variable bandwidth

I have a IPSec tunnel between two Pfsense machines. Both machines are connected to a 100mbps symmetrical connection. The latency between the two routers is ~70ms. I'm using AES-GCM-128 and SHA1, both ...
0
votes
0answers
6 views

IPV6 at home: my ISP delegates me a static IPV6 /56 subnet, how can I set up an IP scheme & DHCP6 for my network? [migrated]

My network looks like this: (Cable Modem/Router) <-> (PfSense Router) <-> (Internal Hosts) The IP (changed for security) of my cable modem is: IPv6 Address ...
1
vote
0answers
14 views

Blocking pfsense management access in high-availability setup

I have a pfsense setup in a high-availability configuration. There are about 5 separate networks forwhich I would like to block management access to pfsense. There is a destination rule builtin for ...
0
votes
0answers
13 views

Unmask a IP with Pfsense

Is there possible to unmask a IP with Pfsense? My scenario is actually this: pc->proxy->firewall->router>>> my proxy mask pc ips to 192.168.2.#, but I want to send the real ip ...
0
votes
0answers
28 views

Dell R220 and OpenBSD/pfsense

Just wondering if anyone has any experience running OpenBSD or pfsense on a Dell R220 (with either a PERC S110 or H310? I know I can do software based RAID in pfsense, however I've seen a few posts ...
0
votes
0answers
17 views

Squid3 Reverse Proxy - Force Cache and Suppress Version

I have been using pfSense for about 2 years now and I love it. One of my favorite features has come to be Squid2 and Squid3. Right now I am using Squid3 to run both proxy and reverse proxy. There are ...
-1
votes
1answer
104 views

Setting up pfsense on a small business network for firewall use

I have approximately 20 machines that will all be on the same subnet with a pfsense firewall. I have no experience with pfsense, so I am just starting out. I have the following configuration: The ...
0
votes
1answer
30 views

Using a pfSense guest to firewall/route traffic for other guests

I was curious if this falls into the "why..." category or not. I have a dedicated, hardware UTM (Untangle) that's serving as an edge device with two hosts and a dozen guests behind it. Right now, I ...
0
votes
1answer
43 views

How to open the web configuration of Pfsense [closed]

I installed Pfsense on VMWare Player and I set IP adresses for wan interface and Lan interface. When I write the adress https://192.168.40.1 on the address bar of my browser I got a time out and ...
-1
votes
2answers
49 views

Open VPN copying files very slow

This is my first experience with setting up a VPN. I have Open VPN running at my work network on a firewall/router that uses the PFsense admin software. I connected to the VPN from my home network ...
0
votes
0answers
837 views

ntopng: Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec]

I am exploring ntopng reports on my router and seeing, that one computer on my LAN is a flooder. ntopng says Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec] How to explore these ...
0
votes
0answers
28 views

How to ensure multi-wan load-balancing is working on pfSense?

I have multi-WAN configuration on my pfSense. Two WANs configured into one gateway group and should work in round-robin manner. Unfortunately, I see only one address when I visiting any of ...
0
votes
0answers
9 views

pfsense router dhcp “periodic error: no ip”

A simple /20 subnet with aprox 300 users. All DHCP. One LAN only Sometimes some of the users report that they get no IP. After minutter or as long as an hour they regain access. Unfortunately ...
1
vote
1answer
135 views

Netbalancer vs pfsense lan graph traffic? Which one is correct?

I am researching on wan bandwith/speed checking tools/graphs. Normally we are using pfsence as a firewall/gateway/router. and also we were used to use "Traffic Graph" lan interface. Recently we have ...
0
votes
0answers
22 views

multiple OUs in LDAPSearch

When working with Group ACL in PFSENSE+SquidGuard: In the Client-Source parameter, can I place OU and how? This is because I'm having multiple OUs with users to be added in the rule. Would the ...
0
votes
0answers
57 views

How Do I get unbound to only use DNSSEC?

I have a pfsense box, that I am in the process of configuring for the first time I would like to use DNSSEC. I used this site to check my DNSSEC status. When I go to this site I am told that my ...
1
vote
0answers
89 views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
2
votes
2answers
119 views

PFsense https connections unusably slow

I have a very strange issue with PFsense as router running in KVM with CentOS 7. https connections are incredibly slow (10KB/s or less), and uploads over https simply don't work; for example using ...
1
vote
1answer
52 views

Configuring Pfsense via ssh

I want to know how i can completely configure and add add tables to pfsense via ssh. my goal is to have a web installer that configured multiple system and based on the output it will configure the ...
1
vote
0answers
87 views

pfSense Outbound NAT not working

I have a VMware vSphere Hypervisor with several Hadoop VMs running. Since our support activated Port Security on our router, only two MACs are allowed to be connected to one port of the router. This ...
-1
votes
1answer
83 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
0
votes
0answers
79 views

Access pfSense reverse proxy sites from LAN

I've configured multiple webservers inside the reverse proxy package to redirect to a single servers, but on different ports. app1.mysite.com -> app.mysite.local:8000 app2.mysite.com -> ...
3
votes
0answers
390 views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
0
votes
0answers
125 views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
0
votes
1answer
39 views

routing for iax-protocol does not work on pfsense

I have problems with a pfsense-box routing iax-traffic (UDP port 4569). Our company has a central office and eight branch-offices. At the branch-offices we use pfsense as firewall and VPN endpoints ...
0
votes
1answer
74 views

pfSense: How to add a second WAN subnet for dummies

Can anyone point me to info on what to change on a pfSense device for a 2nd subnet on a single interface? My colo provider has allocated a /29 subnet to me of which I can use 3 IP addresses (for some ...
0
votes
0answers
165 views

pfSense: Captive Portal is extremely slow

I migrated my pfSense firewall (2.0.2) from an old computer to a more powerful server. I set up the newest pfSense version 2.1 and migrated via export and import my complete settings. Now I encounter ...
1
vote
0answers
62 views

Pfsense Openpvn and Vmware issue

Here is my network: Client --- WAN --- PfSense(VMWare) --- LAN --- vSwitch (Promiscuous) \--- ESXi Management (192.168.2.1) ...
0
votes
3answers
561 views

PFsense IPSec VPN failing phase 2

I am very new to VPNs and I am getting errors. I have posted the following lines that I think are the most relevant: Dec 2 08:41:03 racoon: DEBUG: IV freed Dec 2 08:41:03 racoon: [EUA]: ...
0
votes
2answers
268 views

How to use pfSense as a firewall in order to assign url whitelists to IP groups

In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...
1
vote
1answer
502 views

1 Public IP 1 NIC ESXi to multipule VMs (with external access)

So I have purchased a Server from https://www.kimsufi.com/fr/index.xml, KS-5A to be exact. Kimsufi only give you 1 Public IP address and 1 NIC to work with, and you cannot purchase more. I have ...
0
votes
1answer
185 views

pfsense with three WAN IP and outgoing NAT

similar situation as this one: How to setup pfSense with multiple public IP's i have a pfsense with multiple wlan ip's. I'm using a Hetzner Server with vmware so i have a virtual machine with ...
1
vote
0answers
163 views

PfSense IPSec VPN client

I am new in PfSense I have configured site to site VPN and it works fine, "Site A" ( PfSense) and "Site B" ( SonicWall) both can access each other LAN network. Now i have also configured IPSec Mobile ...
0
votes
1answer
453 views

pfSense OpenVPN Routing to Sever LAN

I'm trying to get my OpenVPN server to route traffic from clients to the server's LAN. My setup is as follows: pfSense box at 10.1.1.1 Other servers on the LAN at 10.1.10.0/24 (with DNS server at ...
0
votes
0answers
227 views

pfsense access openvpn client´s lan

I want to cover the following case: pfsense server´s LAN: 10.1.0.0/24 openvpn client network: 10.2.0.0/24 Local network of one openvpn client: 192.168.2.0/24 Working: Access the network ...
0
votes
0answers
195 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
1
vote
0answers
234 views

pfSense: Captive portal auth via Active Directory (2003)

I'm trying to set up a new firewall server. We chose pfSense and it's working nicely so far. We managed to our Windows Server 2003 Active Directory as a user Authentication Server (System -> User ...
0
votes
0answers
1k views

pfsense reverse proxy + HTTPS/SSL interception

I have pfSense 2.1.5 and squid3-dev 3.3.10 configured as reverse proxy for internal http web server and server proxy (port 3128).It works. Activating HTTPS/SSL interception (Enable SSL filtering) on ...
2
votes
0answers
412 views

Troubleshooting Packet Loss on pfSense + Ubiquiti UniFi (Wireshark maybe?)

I'm dealing with an annoying situation in a small network in my church, which I'm the primary volunteer IT caretaker, of about 20 PCs, give-or-take. We're in Chattanooga, home of Gigabit internet, so ...
0
votes
0answers
89 views

pfsense: break gmirror raid 1 before upgrading

I have a pfsense firewall in an appliance. The disk is using gmirror with RAID 1 setup. Before this, whenever I want to do OS upgrade, I will shut down the appliance, remove it from server rack, open ...
0
votes
1answer
433 views

pfSense Routing a packet out the same interface it arrived on

I have pfSense with one LAN interface which is connected to a switch. All ports on this switch are part of the LAN (VLAN 10). I have access points which are also part of the LAN, they have a static ...
0
votes
1answer
645 views

Implement HTTPS in with pfSense, Varnish and Tomcat

Situation I have an ESXi Server hosting multiple VMs, including one for each pfSense, Varnish and Tomcat. They are configured like the following: pfSenseVM (Firewall, IP=10.0.0.1) NAT Rules from ...
1
vote
1answer
127 views

Changing Network Subnet Limited User Access

Our network was originally running a 192.168.3.1 /24 network with 192.168.3.1 being the gateway on a pfSense box. We decided to increase our IP range by changing the network to a 192.168.3.1 /23 ...
0
votes
1answer
197 views

Do all captive portal solutions work the same way? (cookie, vs MAC address, vs other?)

While traveling and having to interact with a number of broken captive portal implementations I've overheard other passengers having usability issues with iPads, Phones, computers depending on the ...
0
votes
2answers
846 views

How to change the webgui password in pfsense from a console?

is there any way to change the password of the webgui administrator user in pfsense from my console? Just to mention i didn't locked my self out from the webgui. Regards, ankso
1
vote
1answer
860 views

QoS settings for Wi-Fi calling on pfSense firewall/gateway?

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as the primary Internet gateway for ...
1
vote
1answer
296 views

Why is my pfSense WAN to Comcast going via 100.99.197.221 which appears to be in Belarus?

We are having internet problems today. We use a Comcast business connection. We have a /29 network from Comcast. We have these IP address: 50.x.x.249, 50.x.x.250, 50.x.x.251, 50.x.x.252, 50.x.x.253 ...
0
votes
0answers
452 views

site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops

I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode. I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at ...