pfSense is an open-source firewall product built on top of FreeBSD and the OpenBSD pf firewall. It provides a graphical (web-based) interface for configuring and managing firewall rules, as well as viewing traffic and firewall decisions (accept/reject). pfsense is available as a pre-built ...
0
votes
0answers
12 views
pfSense VPN DR testing
I have a production network 192.168.0.0/24 and an offiste DR network 10.0.1.0/24
In my production network I have two virtual servers running in proxmox ve.
In my DR network, I have another proxmox ve ...
1
vote
0answers
26 views
Cannot use I/O in console for Xen HVM running FreeBSD/pfSense
I've been having a really hard time trying to get a Xen HVM using pfSense 2 (based on FreeBSD 8.1) working.
I can make the machine run, and boot from an ISO image, but I cannot get I/O to work in the ...
2
votes
3answers
66 views
Developers are experiencing very poor performance with Windows explorer, particularly adding/deleting files, over VPN to Win2k3 share
We have the following arrangement: Dev Site <--vpn--> Prod Site. The Prod Site firewall, running pfSense 2, accepts VPN TCP/UDP traffic on SMB ports 135-139 and 445. Our developers can connect to ...
3
votes
2answers
149 views
reason not use pfsense as transparent firewall?
Our office is using a multi-wan router as dhcp/router/firewall.
but now I want to put a pc with pfsense between that router and switch, so I can do more advanced firewall task like traffic monitor and ...
3
votes
2answers
83 views
Blocking a network device from communicating with another device on the LAN
I have been working with the firewall/router distribution Pfsense for a while now and I have been trying to figure out how to "isolate" a server on my LAN from other computers on my LAN by using ...
0
votes
1answer
109 views
Pfsense IPsec VPN not listening on port 500?
I am trying to setup a home VPN with IPsec as I have read about PPTP having some security problems and being outdated. I found an article on the web that shows you how to setup an IPsec VPN here which ...
0
votes
1answer
141 views
VLAN trunk port not working with ESXi 5
I just purchased my first VLAN-capable switch (SLM2008T-NA), and I tried to configure my first vlan on it. However, I am not able to make my trunk port work with ESXi 5.
Here is my current setup:
...
1
vote
1answer
94 views
Network Gateway Options for Small Office: Cisco 800 series router vs. Linux/*BSD (e.g. pfSense) on a white box vs. reflashed DD-WRT/Tomato/OpenWRT
Our existing network gateway's hardware has just failed (it was a repurposed desktop machine running Debian + Shorewall that we threw together), and we're looking to replace it. For now, we've fallen ...
1
vote
2answers
174 views
Pfsense: Inbound Load Balancing https with sticky connection
first of all I'm very sorry for my English...
This is my scenario:
Internet
Firewall+LB: pfsense_1(Active) + pfsense_2(Passive) in CARP
Pool servers: 3 x nginx(PHP5+HTTP+HTTPS)
Pfsense 1 and 2 ...
0
votes
0answers
268 views
pfSense - OpenVPN - tap - client connection: Default Gateway Error
We have setup a OpenVPN Server on a pfSense v2.0.1 Router with the "OpenVPN tap Bridging Fix package" to build a bridged VPN network. We followed this HOWTO: link
Nearly everything workes fine expect ...
5
votes
2answers
175 views
Virtualized firewall under Hyper-V?
We are currently considering installing an instance of pfSense on our Hyper-V R2 based server to act as a content filter, captive portal and general firewall.
Although it is usually bad practice to ...
1
vote
1answer
88 views
PFSense with client certificates, SSL cert hosting
I'm running a PFSense firewall that is doing load balancing to a number of IIS servers. I'd like to host the SSL Certificate on the pfsense firewall instead of the individual IIS servers. I'd also ...
1
vote
0answers
53 views
How to configure pfsense to use LAN ports as local switched ports?
I have a pfsense box with 6 LAN ports. I'd like to use one as the WAN port, and 5 as local LAN ports, just like a home gateway/router. How to setup the LAN ports so that they are all in the same ...
3
votes
2answers
144 views
How can I track down what part of pfsense is blocking website access?
I've got a PFSense firewall/gateway on our network. Everything works great except for the fact that I cannot access one specific website.
Pfsense is running the following packages
Country Block
...
1
vote
0answers
102 views
need help to setup internet load-balancing for a small ISP
I need some help about the following problems:
I want to do load-balancing for two Internet dsl connection from same isp and same speed
I need to manage fail over also
I want to manage up to 50 user ...
1
vote
1answer
268 views
pfsense peer-to-peer OpenVPN not connecting
I'm trying to setup a peer-to-peer OpenVPN between two pfsense servers running 2.0.1-RELEASE, but the client keeps getting the connection dropped, with a status of "reconnecting; ping-restart" and ...
2
votes
1answer
149 views
How to choose an open source, Asterisk friendly firewall?
I'm in pain.
We are moving to a SIP based VOIP system and for whatever reason, we could not get our hosted Asterisk solution to work with our Sonicwall. Our VOIP provider gave up and is recommending ...
1
vote
0answers
119 views
Redundant Firewalls And Switches HSRP and CARP
I currently have planned
2 x uplinks (HSRP Active/Standby)
2 x pfsense firewalls (Carp Enabled)
2 x layer2 switches
Please criticize or offer help on the correct way to do this.
I have a feeling im ...
0
votes
0answers
104 views
Multiple IP Blocks in pfSense
How can I implement CARP shared IP and WAN access for multiple public IP blocks in a CARP-enabled pfSense cluster? For example, say I have 11.11.11.129/27 and 11.11.12.129/27, which of the following ...
3
votes
2answers
257 views
Traffic shaping HTTP downloads with l7-filter
Given the following:
A small, remote office has only a few users and a 1.5 Mbps DSL connection via a ZyXEL 660R.
Users experience unacceptable latency and packet loss when even one large file is ...
0
votes
1answer
229 views
Can I use my pfSense WAN IP as public IP for 1:1 NAT? What about port forwarding?
I have a dual pfSense configuration with CARP. Both WAN interfaces are assigned consecutive WAN IP .150, .151. I think it is silly that pfSense would require them both to have these dedicated IP so I ...
0
votes
0answers
160 views
load-balancing with pfsense
I am trying to setup a proof of concept based on MySQL galera.
My MySQL servers are all setup and working properly and replicating correctly, and I am now at the load-balancer level. I am using a ...
0
votes
0answers
113 views
cisco vpn client randomly disconnects with pfSense
My network has two gateways, one is a pfSense box that everyone uses. The other one is a TP-Link firewall essentially for tests.
Some machines inside my network need to access a VPN through the Cisco ...
-1
votes
2answers
253 views
Using Windows Server 2008 R2 and PfSense [closed]
Hey I want to setup my personal home network so that R2 is dishing out DHCP and currently my PfSense box is doing this for me. my setup is motorola surfboard to PfSense to switch.
How do I configure ...
0
votes
0answers
155 views
pfSense Load Balancer and Virtual IP
I have two identical web servers on 10.2.1.13 and 10.2.1.113. I would like to set up pfSense load balancer to balance requests to both of these.
I set up pools that included HTTP and HTTPS for both ...
0
votes
1answer
145 views
Order of application of NAT rules in pfSense 2
In pfSense 2.0, I have a bunch of WAN CARP Virtual IPs and a bunch of 1:1 NAT rules defined associating these IPs to LAN subnet hosts.
If I set up Port Forwarding rules that forward from CARP IPs ...
0
votes
1answer
180 views
PFSENSE Bridge on of the Network Interfaces
I have a PFSENSE installation, which I have just added a new physical interface to for a new requirement 'DIGI'. A third party has installed a DrayTek router on our network which has their equipment ...
0
votes
1answer
24 views
Is there a way to set ddns local to not forward to admin interface
I am running pfsense and would like to configure my site to work locally. I have a ddns setup working externally with no-ip. The problem is I'm trying to get my local setup to work.
Locally I enter ...
0
votes
1answer
97 views
PFSense new network, NAT and Firewalling
We have a PFSENSE installation with a few physical interfaces defined:
192.168.1.0/24 - LAN
192.168.2.0/24 - WIFI
192.168.3.0/24 - SERVERS
10.61.88.0/23 - New Requirement..... read on
The new ...
3
votes
2answers
159 views
public ip resolves externally but not internally
I have a one to one NAT on pfsense that assigns a public IP to an internal IP (running a web server).
When I open the public IP from an internal machine, it will not resolve to the internal IP, ...
0
votes
1answer
84 views
pfsense long ping to google
I have a pfsense box set up. What happens is I set a rule so I can't hit the admin interface 192.168.3.1 from the box.
With the rule enabled
--- www.l.google.com ping statistics ---
2 packets ...
2
votes
1answer
290 views
Local domain DNS resolution not working using OpenVPN on a pfSense box
I am currently trying to setup an OpenVPN server with the intention of linking several servers together in order to run the backup jobs over the VPN.
For this example, this is what I have:
A ...
3
votes
3answers
84 views
Sizing requirements for 100 simultaneous VPN connections
I've been tasked with building out a firewall / VPN device that needs to support up to 100 simultaneous VPN connections as well as light routing (mostly custom NAT mappings). This will be fronting a ...
3
votes
1answer
206 views
pfSense setup recommendations
I want to setup a WAN, DMZ and private LAN.
I want to do a Deny ALL and just open the 4-5 ports that I need to DMZ and a Deny all on the private LAN
on the DMZ are a web web servers, all have public ...
0
votes
2answers
381 views
Alternative to pfSense for a production-ready firewall solution hosted in ESXi
I'm looking for an alternative to pfSense (2) that can be virtualized in VMWare ESXi. I've experienced several problems with pfSense to date and I feel like it is not a totally finished or polished ...
1
vote
2answers
162 views
Is it possible to assign a VLAN to an alias of network interface in pfsense?
My goal is to build a redundant pfSense cluster (as described in this article : http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP)
The problem is that i only have 2 ...
1
vote
1answer
218 views
How to configure BIND to allow RFC2136-style updates for 1 host for Dynamic DNS?
I am using Debian on a VPS with static IP and my home network behind PPP with dynamic IP. My pfSense router/firewall shall update my host home.mydomain.tld via RFC2136 style updates.
After lots of ...
1
vote
1answer
126 views
pfSEnse-pfSense IPSec Tunnel, cannot open documents on Sharepoint WebDAV share
I set up an IPSec tunnel between my home network and work. We have a Sharepoint server in the office that I used to be able to access just fine remotely. Now that requests to the server are routed ...
1
vote
2answers
274 views
bandwidth monitoring issue on PfSense router
I have a PfSense router installed , where it has 4 interfaces.
one of them is WAN and rest 3 are LAN networks, which have different subnets and IP address ranges.
wan interface name = em0
lan ...
0
votes
2answers
197 views
nagios nrpe plugin output not complete
I have written a small script to check the states of PfSense, and using this script to get the output in nagios, through NRPE...
Here is the script
used=`pfctl -s state | wc -l | bc | cut -c1-5 | ...
1
vote
1answer
476 views
Enable ping to pass through pfSense
I have a pfSense v1.2.3 running and want to allow ping from the WAN through to my LAN and allow the response to get through. Web traffic goes through just fine, but not pings. As suggested elsewhere I ...
1
vote
1answer
199 views
Howto route VPN client traffic over a VPN tunnel with pfSense?
My pfSense box is running as an OpenVPN client and OpenVPN server.
The client tunnel connects our network (192.168.1.1/24) to a remote network (10.10.10.10/24) and works just fine.
The server allows ...
0
votes
0answers
78 views
Kernel Panic, Fatal Trap 18, Pfsense WUSB54GC AP crash
I have an old system that I am converting to a pfsense router. I am trying to use a linksys/cisco WUSB54GC as the wireless device for the AP I can get it broadcasting(it uses the rum(4) drivers) but ...
2
votes
1answer
236 views
openvpn: auth-user-pass or (and?) passphrase?
I'm setting up OpenVPN on PfSense 2.0, and now i wonder if should use the "auth-user-pass" option, set an passphrase on the openssl keys or both.
Both require an extra password beside of the valid ...
2
votes
1answer
201 views
How can I disable NTP in pfsense?
I am running my pfSense gateway in a ESXi server. right now the server gets its time from the NTP server specified in the general settings section of the WebGUI.
I want to disable this so pfSense ...
0
votes
1answer
112 views
pfSense 2.0RC Webservers LoadBalancing
Hy,
I Recently installed pfSense 2.0RC and i tried to Set an Loadbalancing,
I Added the IP Pools:
192.168.1.10:80 -> webserver 1
192.168.1.100:80 -> webserver 2
And Added an Virtual Server IP:
...
5
votes
3answers
371 views
Is there danger to virtualizing a router?
I had read on a few forums about pfSense that said it was dangerous to virtualize pfSense. The reason that was stated was an attacker could use pfsense as a spring board for an attack on the ...
1
vote
3answers
137 views
What are the advantages to DHCP server running on Windows Server 2003 R2 vs pfsense router?
I am taking over responsibility for the network at a small medical practice. I understand how the network is configured, but I want to know more about the why.
The network currently is Cisco modem ...
2
votes
1answer
351 views
Pfsense mbuf full, what to do?
I noticed today that the MBUF usage has hit its limit.
Apparently the site I'm running under pfsense is having some troubles too, I'd like to know if it would be safe to just
sysctl ...
0
votes
2answers
106 views
Virtualizing NTP server [closed]
Possible Duplicate:
What are the limits of running NTP servers in virtual machines?
I was wondering if virtualizing NTP is okay. I have a VMware ESXi 5.0 box, and I want to virtualize my ...
