pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

0
votes
1answer
16 views

VLANs and Access Point

I have all my network (wired and WiFi) in the same VLAN. I just bought a new Access Point, and am trying to set WiFi Clients to be in VLAN 2. On the AP, I set it to assign VLAN 2 to the clients, and ...
2
votes
1answer
38 views

pfSense can't access https website

I have just installed pfSense on a PC Engines APU1D4 to evaluate as an alternative to a Soekris 5501 + OpenBSD based setup, I have a PPPoE WAN configuration. The pf rules, NAT and PPPoE ...
0
votes
0answers
36 views

Setup vNetwork Distributed Switch VLAN + pfSense on ESXi Single Host with 3 NICs [on hold]

I`m stuck trying setup VLAN on the combo vCenter using Distributed Switch + pfSense, my setup: Single Host ESXi with 3 NICs (LAN + WAN + DMZ - last one is only an isolated subnet for servers) ...
0
votes
2answers
41 views

Host command tries several servers

I have a DNS server (pfSense) for my LAN, working perfectly, but some timeouts occur that I can't explain. Especially the "host" command gives the correct answer immediately, but then tries 2 times ...
3
votes
3answers
54 views
+50

pfSense not forwarding back packets

I have a pfSense box setup where my WAN interface (em0) is set up in my local network (192.168.1.100) and my LAN interface (em1) is a private network of its own (10.0.0.1). The end goal is to have the ...
1
vote
0answers
29 views

Disabling bypass mode on Intel NICs

I'm trying to install PFSense on some decommissioned firewall gear. I've installed PFSense just fine, except for the two NICs are stuck in bypass mode. I don't see any options in the BIOS to edit ...
0
votes
1answer
37 views

PFsense postfix troubleshooting - SMTP headers [on hold]

I am trying to setup google as mail relay but running into some troubles. I get an error that 550-5.1.1 The email account that you tried to reach does not exist My custom main in pfsense looks ...
0
votes
1answer
31 views

PFSense / Snort / OpenVPN - one WAN interface

I have a pfsense box running both Snort and OpenVPN. The VPN worked great before installing Snort, now intermittently I cannot connect. Should I whitelist the port that the VPN uses on the WAN ...
1
vote
1answer
39 views

pfsense NAT router - “live with” double nat (airport express)

I have a setup that have worked for years with a fiber to a NAT router to clients. Clients are typically cheap NAT routers of any kind. Setup like this Fiber from ISP | Router, pfsense -WAN - ...
0
votes
1answer
38 views

Route Public Subnet AND create NAT internal subnet

my ISP just gave me a subnet of public IP addresses and a single public IP in their network so that I can route those. I'm trying to use pfsense to do this. Basically I want to expose the public IPs ...
0
votes
1answer
39 views

Use multiple WAN IP addresses on a single VLAN

Our ISP has given us a /25 range of IP addresses on our lease line. We want to be able to create several VLAN's and direcly assign each VLAN with any number of these WAN IP addresses. For example - ...
0
votes
0answers
19 views

CentOS Server can't exit pfSense Network

Not sure if this is a routing issue or a firewall issue, or maybe a problem with the ifcfg-file of the CentOS machine. Here is the situation. I just got a 600Mb fiber connection from my ISP into the ...
0
votes
0answers
48 views

Strongswan ipsec linux not passing traffic after established

I currently have two PFsense routers that connect over the WAN using a similar configuration and traffic is passed with no issue. I'm trying to set up a 2nd path over 4G WWAN and have to use linux ...
2
votes
2answers
41 views

How to configure pfsense to allow vpn clients to appear as if they are coming from the PFSense WAN?

I have a specific host I need to get to via ssh (call it 'work'). I have a static IP at my client location (call it 'client') to enable access to this remote 'work' box. The people at 'work' then ...
1
vote
0answers
31 views

PFSense NATing to a load balanced server

I apologize for not being able to post the network diagram here but as this is my first time asking a question here I am not allowed. So here is the scenario: We have a site that is build with a ...
0
votes
1answer
26 views

External IP becomes unreachable sporadically

I have a very strange problem - We have a lease line with 50 odd external IP addresses on it. We do a 1:1 assignment and Outgoing IP assignment to interfaces on a pfsense proxy server. For each ...
1
vote
0answers
47 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it ...
0
votes
1answer
58 views

Openvpn: no response from server in tcp handshake

I am attempting to connect to an openVPN server that I created on pfSense 2.2.3 by using tunnelblick on my Macbook. Whenever I attempt to connect using either OpenVPN version 2.3.6 or 2.3.7 (all that ...
0
votes
0answers
31 views

What could cause files > 50kb to timeout? (PFSense Router)

I've got a PF Sense box acting as a gateway work the LAN at my work, with packet filtering enabled (for QOS purposes) files > 50kb cannot be attached to email, uploaded to web pages etc... even ...
-1
votes
1answer
63 views

No Internet on router with pfSense [closed]

Sorry in advance if a similar question has already been posted. I am with Sky for broadband and have a router providing DSL connectivity. I have a cheap 64 bit desktop PC running pFsense as a ...
1
vote
1answer
87 views

Routing between pfSense Subnets and IPSec VPN

I have a pfSense Router, which is the endpoint of a site-to-site IPSec VPN. In the pfSense the main LAN Interface is 10.0.2.1/24 and it has a virtual IP 10.0.125.1/24 The IPSec Phase 2 connects the ...
0
votes
0answers
18 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
1
vote
0answers
11 views

Summary Error Configuring HAProxy via pfSense

I configured a frontend record that is refering to a backend server pool with one record. The referred HAProxy Backend server pool contains a single record with the Max con value set to 2000. In the ...
0
votes
0answers
128 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
0answers
41 views

Cant ping openvpn server from pfsense lan

I have a PF sense set up as a Openvpn client. The server is a Windows server running openvpn. Behind the pfsense is a lan. Strange enough I can't ping the server at 10.8.0.1 using the clients in the ...
0
votes
0answers
24 views

Windows 7 behavior on network link between SonicWALL and pfSense

I have two networks behind two different firewall at the same site. I have linked them together by using a spare interface on each device. Network 1 - pfSense 10.0.10.0/24 Network 2 - SonicWALL ...
0
votes
2answers
62 views

pfSense: Cannot filter flood of multicast packets being blocked by default

There are multiple devices under a different subnet on our LAN sending a flood of multicast packets. I've tried to allow this type of traffic, but it does not seem to work.
3
votes
0answers
122 views

Redirect network traffic to Proxy with Pfsense

I have a network with 9 clients: 192.168.1.0/24 I need to redirect all traffic from 192.168.1.208 and 192.168.1.209 to an outside proxy server. --------------- |192.168.1.201|--------| ...
0
votes
1answer
33 views

On a pfsense router how would I redirect one IP to another?

I have a poorly made piece of software at work that only asks for a IP when connecting and cant use URL and I cant get a static IP for the database its connecting to (Amazon RDS). I was wondering if ...
2
votes
2answers
125 views

Is this my network being flooded?

I noticed this strange pattern on the bandwidth graph of the pfsense firewall on my work network: If I'm reading it righ, there is a constant stream of 6 Mbps data going from the local network into ...
1
vote
0answers
189 views

Use Framed-IP-Address RADIUS attribute for IP allocation with DHCP on Windows Server 2012R2

I have configured a DHCP server on Windows Server with an NPS Policy, connected to a FreeRADIUS2 server running on pfSense. Authentication is based on MAC address. If MAC address is not present in ...
1
vote
1answer
69 views

How to combine multiple route hops using one (pfSense) router?

I am trying to come up with a way to consolidate two routers into one. I have the following network configuration: LAN <-- a/24 --> NAT Firewall <-- x/29 --> Router <-- y/30 --> ...
0
votes
1answer
72 views

Creating a separate PPTP VPN VLan in network with tagging possible?

I have a gateway to gateway PPTP VPN that I would like to connect to my network and have it on a VLAN where it is shared to a VLAN tagged wireless router. This way I can have two wireless AP's where ...
0
votes
1answer
37 views

How to pass all requests to some site via specific WAN interface in pfSense?

I have multi-WAN configuration on pfSense. I suspect, that some secured web sites (like hosting control panels) dislike that requests are coming from different IPs and hence asking various ...
1
vote
1answer
35 views

pfsense with 4 WAN IP and outgoing NAT

I have a pfsense with a single wan ip, i want to assign multiple wan ip's. The pfsense machine is located on a vm machine with the other servers i wish to NAT forward. I want to give each server a wan ...
0
votes
1answer
77 views

pfsense: connection between two internal lans dropped after 20 seconds

I have the following config: LAN 01: 192.168.16.0/24 (LAN for internal servers) LAN 02: 192.168.67.0/24 (LAN for workstations) WAN: X.X.X.X And then: PFSENSE LAN IP: 192.168.16.1 PFSENSE LAN IP: ...
1
vote
1answer
59 views

VoIP calls dropping

Currently I have a proxy server running pfSense connected to a 40mb fibre lease line. This lease line has 60 external IP addresses (assigned to each room by a virtual IP in pfSense). On the LAN side ...
1
vote
1answer
65 views

Putting remote Linux server in local VPN

I have a VPS running Fedora 21, that I'd like to automatically log in to my local network via VPN. My local router is running a pfSense firewall, so my options are IPsec, L2TP, OpenVPN, and PPTP. ...
0
votes
0answers
281 views

How to load balance traffic from local Squid in pfsense when using Multi-WAN?

I have a multi-wan PFSense setup with Squid for HTTP(S) navigation. However one of the links (the default WAN gateways) is always used at 100% while the other link is rarely used. Reading the ...
0
votes
0answers
77 views

OpenVPN between a pfSense and a Windows client, with tap

I'm trying to implement the simplest possible OpenVPN between a pfSense and a Windows 7 client. I would like to use tap configuration, because my pfSense is not the gateway of the remote network. So ...
0
votes
1answer
58 views

FreeBSD pfsense root CA fails

I have some problem with root CA of my pfsense installation. My test script is this: openssl s_client -showcerts -connect fbstatic-a.akamaihd.net:443 And the answer is: Verify return code: 20 ...
0
votes
0answers
71 views

Can not ping from Ubuntu VM but can to

I've got an XenServer with an pfsense Router Running on it. There are the following Networks: Lan: 10.0.0.0/24 DMZ: 10.0.1.0/24 Secure: 10.0.2.0/24 WAN: xxx I got 2 Windows VMs inside LAN: ...
0
votes
0answers
123 views

pfsense routing with dmz wan and sonic wall

Pfsense setup: 2 physical NIC's (1 input from modem/ISP, 1 LAN with a lot of vlans and DMZ) Network setup: WAN block from ISP xxx.xxx.xxx.225/28 Modem -> pfsense -> vlan 40 (192.168.40.0/24) ...
0
votes
1answer
95 views

PPPoE link has IP address, but 100% loss

I couldn't figure out what's the problem with the PPPoE link. Here is the log entries I have found on pfSense. The interface is up and IP address has been requested, but all packets are said to be ...
0
votes
0answers
83 views

Network configuration for Virtual machine based firewall

I have this physical configuration: And I'm planning to install IPFire (or similar firewall : pfSense or Sophos UTM) on a virtual machine on the Active Directory Server to control traffic between ...
1
vote
1answer
361 views

Proxmox: 1 NIC, 1 Public IP, unable to get WAN interface working in VMs

I have a computer running Proxmox, and it has 1 single NIC that is directly connected to internet and has a single public IP. Then, I have different VMs (KVM) running and one of them is pfSense. What ...
0
votes
1answer
47 views

Seperation of network traffic\routes

In a lab environment I have 4 VLANs: VLAN10 -> Management (192.168.10.0/24) VLAN20 -> Service (192.168.20.0/24) VLAN30 -> Administration (192.168.30.0/24) VLAN50 -> Public (192.168.50.0/24) ...
0
votes
0answers
73 views

Route 2 external IP ranges using pfSense

I have pfSense running on some hardware routing my /27 block of IP addresses assigned by my ISP. I asked for and got another /26 block that I want to send all of the block to a single server (it will ...
0
votes
0answers
79 views

pfSense WAN load balancing across two IPs (has single gateway)

My virtual setup has two IPs, but they rely on the same gateway. I had this configured: interface - type - IP address - Gateway em0 - WAN1 - 172.16.155.131 - 172.16.155.2 em1 - LAN ...
0
votes
0answers
220 views

pfSense 2.2: HAProxy for HTTP + CARP + MultiWAN with VIPs issue (Outbound NAT?)

I have two pfSense firewalls with CARP setup, 2 WANs and HAProxy that points to HTTP servers in my LAN. Scheme: **pfSense server #1** ISP#1 - Public IP1.1 - pfSense#1 with HAProxy - HTTP ISP#2 - ...