pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.
1
vote
1answer
20 views
Routing Asterisk traffic evading a VPN
I have two offices set in two distant locations, connected through a IPSec VPN (using pfSense). On one office, I have an Asterisk PBX where all the extensions connect, and the Asterisk PBX is ...
0
votes
1answer
18 views
pfense needs to be rebooted to effect a change in existing NAT
Using PFSense ver:2.0-RC1 (i386)
When changing an existing NAT rule in pfsense I find that the rule doesn't work when:
1. the rule existed but with a change to its port number or destination LAN ip ...
0
votes
2answers
30 views
Pfsense 2.03 slow upload rate for file transfers
We are using an 8 Mbps connection(Wan) with an upload rate of 6 Mbps.With pfsense 2.03, the upload rate is really slow like 30 Kbps.Is there a configuration in pfsense to increase the upload speed?
...
0
votes
1answer
40 views
How to add a new range of IPs to a server on a private VLAN & one NIC?
I'd like to add some more IPs to my single ESXi server that I have through a hosting provider. When the server was set it up, I was given a /29 and was left with five IPs to use. But, there's ...
1
vote
1answer
127 views
Using PFSense to make streaming videos suck
Is it possible with PFSense and Traffic shaping to make watching movies really not worth it. We had a problem a while back (our inbound pipe was full) and it got people off youtube and back on to ...
0
votes
1answer
49 views
Virtual pfSense Appliance on VMWare Host
I am having some issues setting up the WAN side of pfSense.
I have ordered a dedicated box through a hosting service with ESXi loaded on it. Along with that I have 3 public IP addresses that will ...
0
votes
0answers
16 views
pfsense developer shell open outgoing ports for MAC
How can i configure pfsense from developer shell to let only ONE internal IP (or MAC) connect to external VPN server (PPTP and L2TP)?
Thanks
0
votes
1answer
38 views
Strange issue accessing a single site behind pfsense firewalls
One of our users is having trouble accessing a single website from behind our pfSense firewall. The site is SSL-only and when she attempts to connect, she gets a CONNECTION_REFUSED in Chrome. We have ...
1
vote
2answers
86 views
pfSense and Snort: unexpected portscan traffic on interface
I have a pfSense box acting as my public facing router and stateful firewall.
There is 1 WAN interface and several LAN interfaces using private IPs behind NAT.
I EXPECT to see portscans or all kinds ...
0
votes
1answer
52 views
Getting DNS replies for non-existing hostnames (DNSMasq)
I noticed some 'weird' DNSMasq behavior when I set up my LAN for dual stack IPv4 & IPv6 networking. It seems that my DNS server (DNSMasq) which acts as a forwarder and also has all the host names ...
0
votes
1answer
113 views
Pfsense 2.02 unstable ipsec vpn.Tunnels will come up upon restarting raccon [duplicate]
Pfsense 2.02 Ispec VPN tunnels drops randomly,but when the raccon service is restarted all tunnels are back up.Here is my ipsec vpn configuration.Any fix on this issue?
I have tried enabling and ...
0
votes
1answer
192 views
Pfsense 2.02 ipsec vpn tunnel goes down randomly
Ipsec vpn tunnels got disconnected randomly but when we restart raccon all tunnel will come up again with out any issue.I would like to know a permanent fix for this.
These are the logs:
racoon: ...
5
votes
1answer
198 views
How can I get FreeNAS and pfSense to report more using SNMP?
I have two servers which run variants of FreeBSD: One is a pfSense router and one is a FreeNAS 8 server. Both these servers run SNMP, and I am collecting and graphing their information using a third ...
0
votes
0answers
106 views
IPsec site-to-site tunnel config
I'm completely lost as to how to why this doesn't work. I can't ping, much less reach resources on the other side. Here's my configuration:
Site 1
Public IP: A.A.A.A
Private network: 10.8.6.0/24
...
0
votes
1answer
73 views
pfSense and ASA 5505
I've got an ASA-5505 (v8.4) in production that handles VPN connections and some public web servers. I wanted to offload user HTTP traffic onto a second Internet connection so I put together a pfSense ...
1
vote
0answers
79 views
Multiple network routing
I am after some advice on how to achieve multiple independent LANs, that can restrictively talk to each other (at minimal cost).
I have 3 LANS
LAN A - Admin Lan - Multiple servers and workstations, ...
0
votes
0answers
41 views
Route Metrics and Redundant OpenVPN Ring with FreeBSD
So BSD doesn't seem to support route metrics which has been a bit of an issue with something I'm setting up.
I've created an OpenVPN ring between 2 Linux servers and a pfSense box - with the ...
1
vote
1answer
148 views
pfsense: all interfaces up, but all non default gateways down
I am seeing some strange behavior in pfSense 2.0.3 in which all of my WAN interfaces are up according to the Interfaces screen, yet all but the default gateway are shown as "Offline" in gateway ...
0
votes
1answer
113 views
Configuring UPnP on pfSense
I need a little help configuring UPnP on pfSense. I have installed pfSense between ADSL connection and connecting internal router.
There are two video servers behind the router that need port 80, ...
1
vote
1answer
82 views
IPSec L2L Failover between two pfSense devices
Is it possible to achieve IPSec L2L failover (ie, from one WAN interface to another) between two pfSense devices using Gateway Groups, or really anything other than defining multiple IPSec connections ...
0
votes
1answer
82 views
pfSense Ready Only Filesystem
I need to install a component to pfSense. But I can't create any files/folders as I get the message "Read-Only file system". Normally they are not supposed to be read-only, I'm running on a FreeBSD ...
1
vote
2answers
225 views
Does two pfsense + CARP necessarily require two WAN IP?
I am looking to setup CARP following this guide across two pfSense firewalls.
I have setup CARP before on a WAN link with a big IP space, so allocating a distinct WAN IP per each device (as shown in ...
1
vote
1answer
204 views
Routing between two routers with static routes
I have a Draytek 3200 router and a pfsense rackmount router that I am trying to get to route to each other.
I have a subnet on each router and a subnet for the link between, as shown here:
As it ...
0
votes
0answers
152 views
pfSense 2.0.1 dnsmasq DNS resolution for VPN clients over 1:1 NAT
I'm running pfsense 2.0.1, with dnsmasq as a DNS Forwarder for internal host name resolution on the LAN. I have OpenVPN (tun) also configured to provide remote user VPN access. Because of internal ...
1
vote
0answers
66 views
pfSense VPN one-side LAN traffic failed to pass
I have a site to site VPN between 2 pfSense firewalls.
Firewall 1 - 10.0/16 with static IP
Firewall 2 - 10.1/16 with dynamic IP with 192.168.0/23 hiding behind it. And there is a router between ...
2
votes
0answers
244 views
How to share bandwidth equitably between 16 users on a pfsense multi-WAN router
I have 16 users connected to my pfSense single-LAN, 3-WAN router.
The 3 WAN ports connect to ADSL lines giving about 4Mb/s down, 800kb/s up each.
I would like to prevent any one user hogging the ...
0
votes
2answers
76 views
Routing from one router to another?
I'm trying to route from one basic router to a pfsense box. It's basically so that I can have VPN users on both router aswell as VPN tunnels to test which router performs best. I am also trying to ...
-5
votes
1answer
228 views
Pfsense over Ubuntu 12.04
Is it required to install virtual box in order to install pfsense?
I mean I would like to directy install pfsense over ubuntu 12.04 operating system without needing any virtualbox like software?
Does ...
0
votes
1answer
422 views
OpenVPN Site2Site using PFSense
i'm currently building a s2s VPN using 2 pfsense appliances (2.0.2). the tunnel gets build but i'm unable to route traffic from one side to the other, check my testlab:
Okay, i build a fresh ...
0
votes
0answers
226 views
About Squid reverse proxy (+ pfsense?) and bottlenecks (max number of connections, etc.)
We are having problems with our Squid servers during traffic peaks. We had problems in the past and we got different error such as "Your cache is running out of filedescriptors", syncookies errors, ...
2
votes
1answer
154 views
Building a router / NAT and need to compare performance of FreeBSD 8 v RHEL 6 [closed]
I am going to be setting up a router and NAT device but I am unable to choose between pfSense 2.x (FreeBSD 8) and RHEL 6.
The device will need to forward a medium (2k hosts) sized network where ...
0
votes
0answers
113 views
manage more pfsense instalation in same time [closed]
Is there any tool that can easily manage more pfsense instalation at once.
I have network with around 30 pfSense instlations.
All of them are caling OpenVPN to oone central pfSense vpncontrator.
I ...
2
votes
1answer
309 views
How to make short (not fully qualified) hostnames work with Mountain Lion, Tunnelblick, pfSense, OpenVPN
I use Tunnelblick 3.3beta21b on Mac OS X 10.8.2 (Mountain Lion) to connect to a pfSense/OpenVPN virtual private network. When connected to the VPN, I can access machines in our datacenter. This is ...
0
votes
0answers
255 views
pfsense squid kerberos authentication
Here it is:
pfsense squid 2.7 proxy server: 192.168.1.1
DC win2012srvstd: 192.168.1.2
client win7.
How do I configure Kerberos authentication in squid, so that when a user logs in the domain, he ...
0
votes
1answer
158 views
SSH session through an IPSec VPN tunnel freezes when command outputs longer text
I connect to a QNap NAS (Ubuntu 4.1.2) in the office through an IPSec tunnel established between two pfSense firewalls. This has worked fine for months. I recently replaced the NAS with a newer model ...
1
vote
0answers
292 views
PFSense VLAN's - clients cant access devices on a defined VLAN
I'm having an issue setting up pfSense with VLAN's, basically, the pfSense boxes can ping the devices on the tagged vlan, but clients routing through pfSense cannot.
There are two Cisco SG500 ...
1
vote
0answers
215 views
How to enable source-based policy routing with pfsense
I'm trying to setup pfsense to use WAN1 for all LAN traffic except when a computer has been added to an alias I labeled "PRIORITY". Those computers use WAN2.
On the firewall rules, I set a LAN rule ...
0
votes
1answer
61 views
Mara systems border firewall with pfSense
I just bought a used Mara systems Border firewall with pfSense installed on it. I want to reset it or reinstall pfSense because I cant reach the WebGUI or anything. Does anyone know how to go about ...
0
votes
0answers
103 views
Troubleshoot routes and connectivity in Pfsense Open vpn site to site vpn setup
Site to site openvpn connected as in status in openvpn in both client and server (bytes sent and received in MBs)
Pfsense is used in both server and client using shared key
Problem:
But lan clients ...
0
votes
1answer
69 views
PFSense: Internal server don't see the real ip, only the ip of the gateway pfsense
I'm trying to use a pfsense as a substitute of our hosting centers cisco gateway on my testbed for testing our new firewall
The setup is:
[Internet]->[Wan: ?? -Hosting Center Router- Lan: ...
2
votes
3answers
870 views
pfsense 2.0.2 racoon(ipsec vpn) unreliable
I'm having issues with racoon (ipsec VPN) on pFSense 2.0.2 (and 2.0.1).
According to racoon all my tunnels are up (I have about 130 of them), but over time more and more of them won't pass traffic ...
0
votes
1answer
110 views
No Internet access after successful failover?
I am using pfSense 2.0.2 and want to set up a failover between my normal WAN connection (GW_WAN) and a 3G surfstick (GW_OPT8).
I put both in a gateway group called WAN_FAILOVER:
GW_WAN Tier1 ...
0
votes
2answers
386 views
Pfsense 1.2.3 transparent proxy not blocking https
I have configure squid in pfsense 1.2.3, and was able to block http sites using a black list, but I was not able to block https sites.
Any solutions ?
0
votes
1answer
156 views
Outbound VPN issue with Mac OSX Viscosity Client for OpenVPN and pfSense
I'm having an issue using the Viscosity OpenVPN client on a network behind a pfSense firewall. I'm unable to connect to my office vpn from this particular network, however the connection works just ...
0
votes
0answers
357 views
Setup DMZ in Pfsense with virtual servers, physical Pfsense server
I am looking for some networking tips on how to set up a DMZ in Pfsense and place some virtual servers in that DMZ. Right now my network looks like:
Uverse (Static IPs) -> Pfsense -> WAN -> (Virtual ...
1
vote
1answer
266 views
pfsense firewall filter rules behind nat?
i am new in pfsense
i have vmware which pfsense and windows xp are installed on them
pfsense in using ip 192.168.44.1 for LAN and 192.168.121.129 for wan (which is NAT)
my win xp ip is 192.168.44.2 ...
3
votes
4answers
340 views
How to grant su access without password to one user only in wheel group (FreeBSD)?
I know how to enable su without a password for all wheel group users by adding the appropriate configuration line in /etc/pam.d/su.
I do not want to enable this for all wheel users but only one ...
1
vote
1answer
134 views
How do I decide what type of hardware to use for a firewall? [duplicate]
Possible Duplicate:
Can you help me with my capacity planning?
What are the hardware performance requirements to set up a PFsense firewall on my gigabit Ethernet network? Is ...
1
vote
1answer
601 views
monitor pfSense with nagios
I have pFsense machine and one nagios(NagiosXI) installed machine. On pfSense machine DHCP server is running.
i want to monitor pfSense i.e DHCP status, interface through nagios using SNMP.
I have ...
1
vote
1answer
150 views
NAT and ISP Subnet when load balancing on pfsense?
I have a pfsense box that I'm trying to plan the configuration for. I am going to be load balancing two ISP's, each with their own /29 static IP subnet. The question I have is in relation to the way ...
