pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

0
votes
0answers
3 views

Internal network issues between pfSense and Windows in VirtualBox [migrated]

I have three virtual machines running on Virtual Box. First one is Linux (pfsense) that's acting as a router with two network adapters one bridged and one set to the internal network. The other two ...
0
votes
0answers
25 views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
0
votes
0answers
12 views

Dual WAN - PfSense - 2 Cables modems with same Internal IP address [on hold]

I have a dual WAN setup. When I got the second line, I had liked the cable modem I had been using, so I got a second one. They are both Motorola Surfboard SB6121. When I want to check on them, they ...
1
vote
0answers
3 views

How to make the virtual IP on LAN interface become Master on the only pfSense node with a working/connected WAN interface?

I'm trying to build a multi Wan configuration with High Availability (CARP) functionality. Currently the setup is on virtual machines (before it's released to production). It is on vmware Fusion with ...
0
votes
1answer
17 views

routing for iax-protocol does not work on pfsense

I have problems with a pfsense-box routing iax-traffic (UDP port 4569). Our company has a central office and eight branch-offices. At the branch-offices we use pfsense as firewall and VPN endpoints ...
0
votes
1answer
23 views

pfSense: How to add a second WAN subnet for dummies

Can anyone point me to info on what to change on a pfSense device for a 2nd subnet on a single interface? My colo provider has allocated a /29 subnet to me of which I can use 3 IP addresses (for some ...
0
votes
0answers
29 views

pfSense: Captive Portal is extremely slow

I migrated my pfSense firewall (2.0.2) from an old computer to a more powerful server. I set up the newest pfSense version 2.1 and migrated via export and import my complete settings. Now I encounter ...
1
vote
0answers
20 views

Pfsense Openpvn and Vmware issue

Here is my network: Client --- WAN --- PfSense(VMWare) --- LAN --- vSwitch (Promiscuous) \--- ESXi Management (192.168.2.1) ...
0
votes
3answers
46 views

PFsense IPSec VPN failing phase 2

I am very new to VPNs and I am getting errors. I have posted the following lines that I think are the most relevant: Dec 2 08:41:03 racoon: DEBUG: IV freed Dec 2 08:41:03 racoon: [EUA]: ...
0
votes
1answer
58 views

How to use pfSense as a firewall in order to assign url whitelists to IP groups

In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...
0
votes
1answer
83 views

1 Public IP 1 NIC ESXi to multipule VMs (with external access)

So I have purchased a Server from https://www.kimsufi.com/fr/index.xml, KS-5A to be exact. Kimsufi only give you 1 Public IP address and 1 NIC to work with, and you cannot purchase more. I have ...
0
votes
2answers
46 views

pfsense with three WAN IP and outgoing NAT

similar situation as this one: How to setup pfSense with multiple public IP's i have a pfsense with multiple wlan ip's. I'm using a Hetzner Server with vmware so i have a virtual machine with ...
0
votes
0answers
51 views

PfSense IPSec VPN client

I am new in PfSense I have configured site to site VPN and it works fine, "Site A" ( PfSense) and "Site B" ( SonicWall) both can access each other LAN network. Now i have also configured IPSec Mobile ...
0
votes
0answers
66 views

pfSense OpenVPN Routing to Sever LAN

I'm trying to get my OpenVPN server to route traffic from clients to the server's LAN. My setup is as follows: pfSense box at 10.1.1.1 Other servers on the LAN at 10.1.10.0/24 (with DNS server at ...
0
votes
0answers
95 views

pfsense access openvpn client´s lan

I want to cover the following case: pfsense server´s LAN: 10.1.0.0/24 openvpn client network: 10.2.0.0/24 Local network of one openvpn client: 192.168.2.0/24 Working: Access the network ...
0
votes
0answers
130 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
1
vote
0answers
184 views

pfSense: Captive portal auth via Active Directory (2003)

I'm trying to set up a new firewall server. We chose pfSense and it's working nicely so far. We managed to our Windows Server 2003 Active Directory as a user Authentication Server (System -> User ...
0
votes
0answers
480 views

pfsense reverse proxy + HTTPS/SSL interception

I have pfSense 2.1.5 and squid3-dev 3.3.10 configured as reverse proxy for internal http web server and server proxy (port 3128).It works. Activating HTTPS/SSL interception (Enable SSL filtering) on ...
2
votes
0answers
200 views

Troubleshooting Packet Loss on pfSense + Ubiquiti UniFi (Wireshark maybe?)

I'm dealing with an annoying situation in a small network in my church, which I'm the primary volunteer IT caretaker, of about 20 PCs, give-or-take. We're in Chattanooga, home of Gigabit internet, so ...
0
votes
0answers
39 views

pfsense: break gmirror raid 1 before upgrading

I have a pfsense firewall in an appliance. The disk is using gmirror with RAID 1 setup. Before this, whenever I want to do OS upgrade, I will shut down the appliance, remove it from server rack, open ...
0
votes
1answer
145 views

pfSense Routing a packet out the same interface it arrived on

I have pfSense with one LAN interface which is connected to a switch. All ports on this switch are part of the LAN (VLAN 10). I have access points which are also part of the LAN, they have a static ...
0
votes
1answer
344 views

Implement HTTPS in with pfSense, Varnish and Tomcat

Situation I have an ESXi Server hosting multiple VMs, including one for each pfSense, Varnish and Tomcat. They are configured like the following: pfSenseVM (Firewall, IP=10.0.0.1) NAT Rules from ...
1
vote
1answer
77 views

Changing Network Subnet Limited User Access

Our network was originally running a 192.168.3.1 /24 network with 192.168.3.1 being the gateway on a pfSense box. We decided to increase our IP range by changing the network to a 192.168.3.1 /23 ...
0
votes
1answer
119 views

Do all captive portal solutions work the same way? (cookie, vs MAC address, vs other?)

While traveling and having to interact with a number of broken captive portal implementations I've overheard other passengers having usability issues with iPads, Phones, computers depending on the ...
0
votes
2answers
444 views

How to change the webgui password in pfsense from a console?

is there any way to change the password of the webgui administrator user in pfsense from my console? Just to mention i didn't locked my self out from the webgui. Regards, ankso
1
vote
1answer
443 views

QoS settings for Wi-Fi calling on pfSense firewall/gateway?

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as the primary Internet gateway for ...
1
vote
1answer
200 views

Why is my pfSense WAN to Comcast going via 100.99.197.221 which appears to be in Belarus?

We are having internet problems today. We use a Comcast business connection. We have a /29 network from Comcast. We have these IP address: 50.x.x.249, 50.x.x.250, 50.x.x.251, 50.x.x.252, 50.x.x.253 ...
0
votes
0answers
320 views

site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops

I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode. I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at ...
0
votes
1answer
194 views

pfSense monitor wan bandwidth by lan ip

I think pfSense is great and has a lot of helpful features. I use it for a lot of things but I cannot find one feature that I really need. My Current setup is several Vlans and 1 Wan. We currently ...
0
votes
1answer
431 views

using pf for packet filtering and ipfw's dummynet for bandwidth limiting at the same time

I would like to ask if it's fine to use pf for all packet filtering (including using altq for traffic shaping) and ipfw's dummynet for bandwidth limiting certain IPs or subnets at the same time. I am ...
-1
votes
1answer
66 views

What is it that makes BSD a popular choice for firewalls? [closed]

What is it that makes BSD a popular choice for firewalls? Is the kernel generally more secure?
0
votes
1answer
103 views

Configure clients to navigate through specific wan. Pfsense

I have a machine with a pfsense running. It is configured with three ethernet cards. LAN 192.168.2.1/21 WAN1 200.41.X.2/24 WAN2 200.41.X.3/24 ISP Gateway 200.41.X.1 This is a connection with 5 ...
1
vote
2answers
71 views

Set default gateway based on protocol using pfSense

I have a pfSense configured with two Internet links for broadband load balancing. One of these links block outgoing traffic on 25 port (WAN1). I have a mail server (IP 10.6.9.2) that should use the ...
0
votes
0answers
279 views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
0answers
125 views

Windows 2008 / 2003 DC can not ping gateway or internet

Im doing some tests trying to setup a domain and i found a very weird behavior. Same thing on windows 2008 r2 and windows 2003 x64 r2. I am running on KVM over proxmox virtualized with virtio. After ...
0
votes
1answer
2k views

pfsense PPTP VPN can access LAN but not internet

I am running pfsense at home and I want to set up a PPTP vpn (yes I know its not secure, lets ignore that) My current pfsense setup: LAN: 192.168.1.1 (/24) WAN PPPoE (real world IP lets say ...
0
votes
2answers
965 views

How to setup pfSense with multiple public IP's

Having trouble with multiple public IP's getting routed correctly. I'd like to setup the following network: public_ip1(assigned WAN IF) -> pfSense -> server 1,2,3 - 192.168.0.11, .12, .13 ...
2
votes
1answer
169 views

pfSense Cluster not working with Manual NAT

I have two pfSense clusters, one is 2.1.4 and one is 2.1.3. The directions suggest that Manual Outbound NAT is required, but the 2.1.3 cluster is working just fine using Automatic NAT, servers and ...
1
vote
1answer
536 views

pfSense failover and OpenVPN site-to-site

I have two pfSense Clusters, and am trying to connect them with an OpenVPN site-to-site VPN. Initially, the client was a single pfSense system, and all was well. Now that one system is a cluster, and ...
0
votes
2answers
2k views

Unusual OpenVPN server log entries every minute - Connection reset, restarting [0]

OpenVPN is running on pfSense 2.0-release. Until recently, these messages had not occurred. In the OpenVPN server logs, the follwing set of messages repeats every minute openvpn[34562]: ...
0
votes
1answer
199 views

pfSense dropping gateway interface randomly

The basic topology of the office is ISP-Router <-> pfSense <-> Switch <-> Servers and APs. It has been newly deployed Once a while our internet goes out and one of us has to manually get ...
0
votes
1answer
313 views

How can I disable routing between interfaces by default on pfSense?

By default, pfSense routes traffic between WAN, LAN, OPT1, OPT2, ... Currently I am explicitly blocking certain combinations via firewall rules. How can I configure pfSense to use a whitelisting ...
0
votes
1answer
22 views

VPN Connection pooling?

I'm having a problem on PFSense https://forum.pfsense.org/index.php?topic=23914.0 where I can only connect one client with a PPTP VPN to a VPN Server outside out network. PFsense is our firewall and ...
1
vote
1answer
461 views

Use pfSense for outgoing mail?

How/Can/Should I use my pfSense router as an outgoing mail server? I have several webservers and devices on my internal network that need to send mail out to the Internet. However, I don't need a ...
1
vote
1answer
245 views

pfsense: Prohibit all outbound connectivity from inside going out, except for one system's traffic

I've got a lab environment here for some testing of software which should only run on this "lab environment" network. To that end, the "lab environment" has a pfsense firewall sitting on the ...
0
votes
2answers
2k views

pfSense OpenVPN DNS Resolution

It seems that my problem is a common issue, and I've read several answers on Server Fault, but I can't seem to get my issue figured out. One of my clients is running pfSense 2.1.4, at an internal IP ...
0
votes
0answers
212 views

pfSense LAN network unable to communicate with remote network on OpenVPN TAP connection

I set up pfSense to connect to a remote network (192.168.122.0/24) that only accepts tap connections. The connection is being initiated successfully. pfSense (192.168.1.1/24) itself can connect to ...
2
votes
1answer
714 views

PFSense with multi WAN failover

I have two Linux box running PFsense, one of them is a master and the other one is a backup. The master is having IP 192.168.1.2 and backup is having IP 192.168.1.3. I have created a VIP 192.168.1.1 ...
1
vote
0answers
270 views

Pfsense OpenVPN Site to Site Routing issues

I know this question has been asked a plethora of times before and I have looked over probably 100 different answers and still cant seem to get this to work. Im trying to create a very simple site to ...
0
votes
1answer
847 views

pfSense in VMWare Cannot Access Web Control

I'm running VMWare ESXi Free on a rented box. I have 2 physical NICs, 1 connected to the Internet, one connected to the Private Network in our DC. Each NIC is connected to a vSwitch and each vSwitch ...