pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

-1
votes
0answers
16 views

Pfsense + Apache (DirectAdmin) = error Apache is functioning normally. Pfsense + IIS = Good?

I have 3 virtual Server run 3 OS Pfsense 2.2 / WAN IP 118.70.233.38, LAN IP 192.168.1.1 Window Server + install IIS / IP 192.168.1.2 Centos 6.6 + install Directadmin (php + apache + mysql) / IP ...
0
votes
1answer
20 views

No Internet on router with pfSense

Sorry in advance if a similar question has already been posted. I am with Sky for broadband and have a router providing DSL connectivity. I have a cheap 64 bit desktop PC running pFsense as a ...
1
vote
1answer
24 views

Routing between pfSense Subnets and IPSec VPN

I have a pfSense Router, which is the endpoint of a site-to-site IPSec VPN. In the pfSense the main LAN Interface is 10.0.2.1/24 and it has a virtual IP 10.0.125.1/24 The IPSec Phase 2 connects the ...
0
votes
0answers
8 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
1
vote
0answers
5 views

Summary Error Configuring HAProxy via pfSense

I configured a frontend record that is refering to a backend server pool with one record. The referred HAProxy Backend server pool contains a single record with the Max con value set to 2000. In the ...
0
votes
0answers
38 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
0answers
21 views

Cant ping openvpn server from pfsense lan

I have a PF sense set up as a Openvpn client. The server is a Windows server running openvpn. Behind the pfsense is a lan. Strange enough I can't ping the server at 10.8.0.1 using the clients in the ...
0
votes
0answers
15 views

Windows 7 behavior on network link between SonicWALL and pfSense

I have two networks behind two different firewall at the same site. I have linked them together by using a spare interface on each device. Network 1 - pfSense 10.0.10.0/24 Network 2 - SonicWALL ...
0
votes
1answer
25 views

Routing different subnets from multiple sources

I have a unique situation involving a lot of weird nonsense contracts which leaves me with two firewalls. I have my primary router/firewall as a pfSense machine and a secondary router/firewall as a ...
0
votes
2answers
17 views

pfSense: Cannot filter flood of multicast packets being blocked by default

There are multiple devices under a different subnet on our LAN sending a flood of multicast packets. I've tried to allow this type of traffic, but it does not seem to work.
2
votes
0answers
40 views

Redirect network traffic to Proxy with Pfsense

I have a network with 9 clients: 192.168.1.0/24 I need to redirect all traffic from 192.168.1.208 and 192.168.1.209 to an outside proxy server. --------------- |192.168.1.201|--------| ...
0
votes
1answer
22 views

On a pfsense router how would I redirect one IP to another?

I have a poorly made piece of software at work that only asks for a IP when connecting and cant use URL and I cant get a static IP for the database its connecting to (Amazon RDS). I was wondering if ...
2
votes
2answers
114 views

Is this my network being flooded?

I noticed this strange pattern on the bandwidth graph of the pfsense firewall on my work network: If I'm reading it righ, there is a constant stream of 6 Mbps data going from the local network into ...
1
vote
0answers
89 views

Use Framed-IP-Address RADIUS attribute for IP allocation with DHCP on Windows Server 2012R2

I have configured a DHCP server on Windows Server with an NPS Policy, connected to a FreeRADIUS2 server running on pfSense. Authentication is based on MAC address. If MAC address is not present in ...
1
vote
0answers
46 views

How to combine multiple route hops using one (pfSense) router?

I am trying to come up with a way to consolidate two routers into one. I have the following network configuration: LAN <-- a/24 --> NAT Firewall <-- x/29 --> Router <-- y/30 --> ...
0
votes
1answer
42 views

Creating a separate PPTP VPN VLan in network with tagging possible?

I have a gateway to gateway PPTP VPN that I would like to connect to my network and have it on a VLAN where it is shared to a VLAN tagged wireless router. This way I can have two wireless AP's where ...
0
votes
1answer
27 views

How to pass all requests to some site via specific WAN interface in pfSense?

I have multi-WAN configuration on pfSense. I suspect, that some secured web sites (like hosting control panels) dislike that requests are coming from different IPs and hence asking various ...
1
vote
1answer
25 views

pfsense with 4 WAN IP and outgoing NAT

I have a pfsense with a single wan ip, i want to assign multiple wan ip's. The pfsense machine is located on a vm machine with the other servers i wish to NAT forward. I want to give each server a wan ...
0
votes
1answer
41 views

pfsense: connection between two internal lans dropped after 20 seconds

I have the following config: LAN 01: 192.168.16.0/24 (LAN for internal servers) LAN 02: 192.168.67.0/24 (LAN for workstations) WAN: X.X.X.X And then: PFSENSE LAN IP: 192.168.16.1 PFSENSE LAN IP: ...
1
vote
1answer
41 views

VoIP calls dropping

Currently I have a proxy server running pfSense connected to a 40mb fibre lease line. This lease line has 60 external IP addresses (assigned to each room by a virtual IP in pfSense). On the LAN side ...
1
vote
1answer
55 views

Putting remote Linux server in local VPN

I have a VPS running Fedora 21, that I'd like to automatically log in to my local network via VPN. My local router is running a pfSense firewall, so my options are IPsec, L2TP, OpenVPN, and PPTP. ...
0
votes
0answers
201 views

How to load balance traffic from local Squid in pfsense when using Multi-WAN?

I have a multi-wan PFSense setup with Squid for HTTP(S) navigation. However one of the links (the default WAN gateways) is always used at 100% while the other link is rarely used. Reading the ...
0
votes
0answers
54 views

OpenVPN between a pfSense and a Windows client, with tap

I'm trying to implement the simplest possible OpenVPN between a pfSense and a Windows 7 client. I would like to use tap configuration, because my pfSense is not the gateway of the remote network. So ...
0
votes
1answer
44 views

FreeBSD pfsense root CA fails

I have some problem with root CA of my pfsense installation. My test script is this: openssl s_client -showcerts -connect fbstatic-a.akamaihd.net:443 And the answer is: Verify return code: 20 ...
0
votes
0answers
56 views

Can not ping from Ubuntu VM but can to

I've got an XenServer with an pfsense Router Running on it. There are the following Networks: Lan: 10.0.0.0/24 DMZ: 10.0.1.0/24 Secure: 10.0.2.0/24 WAN: xxx I got 2 Windows VMs inside LAN: ...
0
votes
0answers
93 views

pfsense routing with dmz wan and sonic wall

Pfsense setup: 2 physical NIC's (1 input from modem/ISP, 1 LAN with a lot of vlans and DMZ) Network setup: WAN block from ISP xxx.xxx.xxx.225/28 Modem -> pfsense -> vlan 40 (192.168.40.0/24) ...
0
votes
1answer
60 views

PPPoE link has IP address, but 100% loss

I couldn't figure out what's the problem with the PPPoE link. Here is the log entries I have found on pfSense. The interface is up and IP address has been requested, but all packets are said to be ...
0
votes
0answers
56 views

Network configuration for Virtual machine based firewall

I have this physical configuration: And I'm planning to install IPFire (or similar firewall : pfSense or Sophos UTM) on a virtual machine on the Active Directory Server to control traffic between ...
1
vote
1answer
241 views

Proxmox: 1 NIC, 1 Public IP, unable to get WAN interface working in VMs

I have a computer running Proxmox, and it has 1 single NIC that is directly connected to internet and has a single public IP. Then, I have different VMs (KVM) running and one of them is pfSense. What ...
0
votes
1answer
41 views

Seperation of network traffic\routes

In a lab environment I have 4 VLANs: VLAN10 -> Management (192.168.10.0/24) VLAN20 -> Service (192.168.20.0/24) VLAN30 -> Administration (192.168.30.0/24) VLAN50 -> Public (192.168.50.0/24) ...
0
votes
0answers
47 views

Route 2 external IP ranges using pfSense

I have pfSense running on some hardware routing my /27 block of IP addresses assigned by my ISP. I asked for and got another /26 block that I want to send all of the block to a single server (it will ...
0
votes
0answers
61 views

pfSense WAN load balancing across two IPs (has single gateway)

My virtual setup has two IPs, but they rely on the same gateway. I had this configured: interface - type - IP address - Gateway em0 - WAN1 - 172.16.155.131 - 172.16.155.2 em1 - LAN ...
0
votes
0answers
175 views

pfSense 2.2: HAProxy for HTTP + CARP + MultiWAN with VIPs issue (Outbound NAT?)

I have two pfSense firewalls with CARP setup, 2 WANs and HAProxy that points to HTTP servers in my LAN. Scheme: **pfSense server #1** ISP#1 - Public IP1.1 - pfSense#1 with HAProxy - HTTP ISP#2 - ...
0
votes
0answers
75 views

How to setup failover and load balance when two WAN links are available each one with a single public IP

I have read the question in here but I feel it's not exactly my setup. I have two physical ADSL modems (not a single one like as in the picture of ...
1
vote
1answer
184 views

Access RDS internally with same domain name as externally

I have a network setup with a 2008 R2 AD domain called internal.domain.org. Our externally hosted website uses www.domain.org and domain.org. I'd like users to be able to access our RDS ...
0
votes
1answer
1k views

pfSense/strongSwan “deleting half open IKE_SA after timeout” - IPSec connection Android 4.4 to pfSense 2.2.1 fails

pfSense in version 2.2 switched from Racoon to strongSwan. Since that change, users can no longer connect to the VPN from Android clients (Type IPSec Xauth PSK). The current configuration on ...
-1
votes
1answer
47 views

URL on SSL certificate is not the website I am on [closed]

When I go to https://www.virgintrainseastcoast.com/ I get repeatedly get asked by Chrome to "Select a certificate". The certificate in the popup is usually either an Apple or Facebook URL. Any ideas ...
0
votes
2answers
153 views

PFSense IPSEC VPN VLAN

We are integrating with a third party and they require the use of a L2L IPSec VPN for communication. I have successfully configured the IPSEC vpn and the tunel is up but now I cannot seem to have ...
0
votes
0answers
90 views

Optimizing Pfsense IPSec VPN for a high latency environment

I have two PFsense routers connecting two networks with high latency between them. What can I adjust to improve file transfers between these two networks?
4
votes
0answers
69 views

IPSec bandwidth between two Pfsense hosts has predictable, variable bandwidth

I have a IPSec tunnel between two Pfsense machines. Both machines are connected to a 100mbps symmetrical connection. The latency between the two routers is ~70ms. I'm using AES-GCM-128 and SHA1, both ...
1
vote
0answers
41 views

Blocking pfsense management access in high-availability setup

I have a pfsense setup in a high-availability configuration. There are about 5 separate networks forwhich I would like to block management access to pfsense. There is a destination rule builtin for ...
0
votes
0answers
25 views

Unmask a IP with Pfsense

Is there possible to unmask a IP with Pfsense? My scenario is actually this: pc->proxy->firewall->router>>> my proxy mask pc ips to 192.168.2.#, but I want to send the real ip ...
0
votes
0answers
87 views

Dell R220 and OpenBSD/pfsense

Just wondering if anyone has any experience running OpenBSD or pfsense on a Dell R220 (with either a PERC S110 or H310? I know I can do software based RAID in pfsense, however I've seen a few posts ...
0
votes
0answers
132 views

Squid3 Reverse Proxy - Force Cache and Suppress Version

I have been using pfSense for about 2 years now and I love it. One of my favorite features has come to be Squid2 and Squid3. Right now I am using Squid3 to run both proxy and reverse proxy. There are ...
-1
votes
1answer
181 views

Setting up pfsense on a small business network for firewall use

I have approximately 20 machines that will all be on the same subnet with a pfsense firewall. I have no experience with pfsense, so I am just starting out. I have the following configuration: The ...
0
votes
1answer
78 views

Using a pfSense guest to firewall/route traffic for other guests

I was curious if this falls into the "why..." category or not. I have a dedicated, hardware UTM (Untangle) that's serving as an edge device with two hosts and a dozen guests behind it. Right now, I ...
0
votes
1answer
393 views

How to open the web configuration of Pfsense [closed]

I installed Pfsense on VMWare Player and I set IP adresses for wan interface and Lan interface. When I write the adress https://192.168.40.1 on the address bar of my browser I got a time out and ...
-1
votes
2answers
147 views

Open VPN copying files very slow

This is my first experience with setting up a VPN. I have Open VPN running at my work network on a firewall/router that uses the PFsense admin software. I connected to the VPN from my home network ...
1
vote
0answers
3k views

ntopng: Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec]

I am exploring ntopng reports on my router and seeing, that one computer on my LAN is a flooder. ntopng says Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec] How to explore these ...
0
votes
0answers
60 views

How to ensure multi-wan load-balancing is working on pfSense?

I have multi-WAN configuration on my pfSense. Two WANs configured into one gateway group and should work in round-robin manner. Unfortunately, I see only one address when I visiting any of ...