pfSense is an open-source firewall product built on top of FreeBSD and the OpenBSD pf firewall. It provides a graphical (web-based) interface for configuring and managing firewall rules, as well as viewing traffic and firewall decisions (accept/reject). pfsense is available as a pre-built ...
3
votes
1answer
63 views
pfSense setup recommendations
I want to setup a WAN, DMZ and private LAN.
I want to do a Deny ALL and just open the 4-5 ports that I need to DMZ and a Deny all on the private LAN
on the DMZ are a web web servers, all have public ...
0
votes
2answers
104 views
Alternative to pfSense for a production-ready firewall solution hosted in ESXi
I'm looking for an alternative to pfSense (2) that can be virtualized in VMWare ESXi. I've experienced several problems with pfSense to date and I feel like it is not a totally finished or polished ...
1
vote
2answers
62 views
Is it possible to assign a VLAN to an alias of network interface in pfsense?
My goal is to build a redundant pfSense cluster (as described in this article : http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP)
The problem is that i only have 2 ...
1
vote
0answers
41 views
How to configure BIND to allow RFC2136-style updates for 1 host for Dynamic DNS?
I am using Debian on a VPS with static IP and my home network behind PPP with dynamic IP. My pfSense router/firewall shall update my host home.mydomain.tld via RFC2136 style updates.
After lots of ...
1
vote
1answer
31 views
pfSEnse-pfSense IPSec Tunnel, cannot open documents on Sharepoint WebDAV share
I set up an IPSec tunnel between my home network and work. We have a Sharepoint server in the office that I used to be able to access just fine remotely. Now that requests to the server are routed ...
1
vote
2answers
81 views
bandwidth monitoring issue on PfSense router
I have a PfSense router installed , where it has 4 interfaces.
one of them is WAN and rest 3 are LAN networks, which have different subnets and IP address ranges.
wan interface name = em0
lan ...
0
votes
2answers
91 views
nagios nrpe plugin output not complete
I have written a small script to check the states of PfSense, and using this script to get the output in nagios, through NRPE...
Here is the script
used=`pfctl -s state | wc -l | bc | cut -c1-5 | ...
1
vote
1answer
126 views
Enable ping to pass through pfSense
I have a pfSense v1.2.3 running and want to allow ping from the WAN through to my LAN and allow the response to get through. Web traffic goes through just fine, but not pings. As suggested elsewhere I ...
1
vote
1answer
80 views
Howto route VPN client traffic over a VPN tunnel with pfSense?
My pfSense box is running as an OpenVPN client and OpenVPN server.
The client tunnel connects our network (192.168.1.1/24) to a remote network (10.10.10.10/24) and works just fine.
The server allows ...
0
votes
0answers
44 views
Kernel Panic, Fatal Trap 18, Pfsense WUSB54GC AP crash
I have an old system that I am converting to a pfsense router. I am trying to use a linksys/cisco WUSB54GC as the wireless device for the AP I can get it broadcasting(it uses the rum(4) drivers) but ...
2
votes
1answer
128 views
openvpn: auth-user-pass or (and?) passphrase?
I'm setting up OpenVPN on PfSense 2.0, and now i wonder if should use the "auth-user-pass" option, set an passphrase on the openssl keys or both.
Both require an extra password beside of the valid ...
2
votes
1answer
109 views
How can I disable NTP in pfsense?
I am running my pfSense gateway in a ESXi server. right now the server gets its time from the NTP server specified in the general settings section of the WebGUI.
I want to disable this so pfSense ...
0
votes
1answer
69 views
pfSense 2.0RC Webservers LoadBalancing
Hy,
I Recently installed pfSense 2.0RC and i tried to Set an Loadbalancing,
I Added the IP Pools:
192.168.1.10:80 -> webserver 1
192.168.1.100:80 -> webserver 2
And Added an Virtual Server IP:
...
5
votes
3answers
210 views
Is there danger to virtualizing a router?
I had read on a few forums about pfSense that said it was dangerous to virtualize pfSense. The reason that was stated was an attacker could use pfsense as a spring board for an attack on the ...
1
vote
3answers
98 views
What are the advantages to DHCP server running on Windows Server 2003 R2 vs pfsense router?
I am taking over responsibility for the network at a small medical practice. I understand how the network is configured, but I want to know more about the why.
The network currently is Cisco modem ...
2
votes
1answer
136 views
Pfsense mbuf full, what to do?
I noticed today that the MBUF usage has hit its limit.
Apparently the site I'm running under pfsense is having some troubles too, I'd like to know if it would be safe to just
sysctl ...
0
votes
2answers
64 views
Virtualizing NTP server [closed]
Possible Duplicate:
What are the limits of running NTP servers in virtual machines?
I was wondering if virtualizing NTP is okay. I have a VMware ESXi 5.0 box, and I want to virtualize my ...
2
votes
3answers
204 views
x86 Router Benchmarks?
I have grow to prefer x86 based router OS's like Vyatta and pfSense over their competitors Cisco and Juniper (I never really used Juniper, but still.). However, they feel "fake" to me, like ...
0
votes
1answer
59 views
pfSense command to delete stale SAD
I'm experiencing an issue with pfSense where duplicate SAD's are getting created after rekeying, forcing me to manually go ahead and delete the old SAD's. It's not a huge issue but it does get to be a ...
0
votes
1answer
126 views
how to detect/Block duplicate/Static IP address on network
i have setup my network using pfsense, having 8 subnets, each one having their own DHCP server range. i have enabled STATIC ARP on the server and static MAC entries, so that no un-known machine can ...
0
votes
2answers
177 views
Slow upload speeds with pfsense virtual appliance
I have a pfSense virtual appliance set up in front of a Windows server. The pfSense appliance has been configured with two L2L IPSec VPN sites and not too much else. The appliance has two vNics which ...
-2
votes
3answers
119 views
How do I learn IPSec VPN implementation on FreeBSD from pfSense
I've been trying to figure out a complete working solution for IPSec VPN implementation on FreeBSD but with no luck till now. pfSense seems did a fantastic job on supporting IPSec and even for mobile ...
0
votes
1answer
108 views
Transparently proxying HTTP to a SOCKS server that is provided by SSH on an Ubuntu box in pfSense
I'm trying to transparently proxy HTTP requests in a LAN that is served by a pfSense router over SSH.
So far, I've tried setting up an Ubuntu box outside that network and forwarding everything going ...
0
votes
1answer
67 views
PFsense not working with second subnet
192.168.1.5 PC can go online
192.168.2.5 PC can not go online but can ping 192.168.1.1
When PF Sense is rebooted 192.168.2.5 can ping an internet address briefly but then stops once PF Sense is fully ...
2
votes
1answer
353 views
Setup 1:1 NAT using pfSense
pfSense box:
Public IPs 208.43.30.118-.117
Private IP : 192.168.1.1
I need to provide 1:1 NAT mapping to a VM in the private network 192.168.1.5
I am unable to get 1:1 NAT working though it ...
0
votes
2answers
90 views
Setting up new gateway to split 1 internet feed to 3 networks
I am looking for some words of wisdom from the members of this forum.
I do consulting work for three related non-profits in the same building. The three have decided to share the same internet pipe ...
1
vote
1answer
162 views
How can I setup a Wilcard DNS Entry on pfSense?
How can I set up Wildcard DNS on a pfSense embedded device running pfSense 2.0?
Details:
pfSense uses dnsmasq as a DNS forwarder
Running the current pfSense release, 2.0
Running on a Netgate
...
1
vote
1answer
86 views
FreeBSD (pfSense) Routing - Can't find the default route
I have been banging my head against the wall on this for a couple of days now - thought I had tried everything, but obviously not...
I have the following networking scenario...
ISPs Router Edge ...
0
votes
0answers
74 views
Can't access external addresses when connected through PPTP VPN on pfsense
I'm wondering if anyone has any suggestions as to where to look to determine why I can't access external addresses when connected to my PPTP VPN through VPN. I want to route all my traffic through the ...
1
vote
1answer
165 views
PFSense router introducing loss into network on LAN interface
experiencing some weird issues when trying to setup a new set of routers.
We have single wan coming into two pfsense boxes, with CARP between them on its own interface, and shared Public IP along ...
1
vote
0answers
144 views
Nginx+Pfsense+IIS+NLB: upstream timed out (110: Connection timed out)
We have an Nginx Reverse Proxy (RP) bound to one IP, that load-balances/fails-over to two IPs that are located roughly 140ms away, by network time. Each of these upstream IPs are on different ISPs, ...
4
votes
2answers
351 views
Pass through public IP addresses to pfSense
I have a server in my datacenter that has multiple publicly routed IP addresses, and I'm now running ESXi to manage it.
Before, I had some VMs running under the host that created a network:
inet
...
0
votes
0answers
43 views
Unable to start webCobfigurator for pfSense 1.2.3
I have installed pfsense 1.2.3 embedded version to 8 Gig CF card. I have booted the box, connected to terminal, accessed the menu, set up interfaces, and set up the IP addresses (192.168.1.1 on LAN). ...
0
votes
1answer
97 views
pfSense NAT failing - TCP connection built, no traffic
I have a pfSense VM configured with two vNIC's that are both connected to the same VLAN. The pfSense has been configured to a static IP. I have a VM with one vNIC that is configured to use a manually ...
2
votes
1answer
162 views
Installing embedded pfsense, stuck at boot loader
I am trying to install pfSense embedded image 1.2.3 RC1 onto a CF card. The box looks like it is ready to boot, but gets stuck at "Loading /boot/defaults/loader.conf" followed by "/". Can anyone ...
12
votes
1answer
394 views
What would cause SIP traffic to be seen going into a switch but not coming out?
Background
I have been struggling to get my SIP phones to register behind a brand new router and switch in our brand new office. Our PBX is hosted offsite. I have worked with our provider to attempt ...
0
votes
1answer
110 views
Installing embedded pfsense to 8 gig CF, stuck at boot loader
I am trying to install pfSense embedded image 1.2.3 RC1 onto a CF card. The box looks like it is ready to boot, but gets stuck at "Loading /boot/defaults/loader.conf" followed by "/". Can anyone ...
5
votes
4answers
2k views
How can I use HAproxy with SSL and get X-Forwarded-For headers AND tell PHP that SSL is in use?
I have the following setup:
(internet) ---> [ pfSense Box ] /-> [ Apache / PHP server ]
[running HAproxy] --+--> [ Apache / PHP server ]
...
1
vote
4answers
198 views
NTFS or FAT32:Formatting Disk for PFSense
Im a network guy, and know very little about system administration. I would like to install PFSense and Monowall to 2 CF Cards, but not sure how they should be formatted (NTFS or FAT32) and volume ...
1
vote
1answer
362 views
How do I route between interfaces in PFsense?
I have a PFsense router which divides a single WAN connection into three NAT networks on three interfaces: LAN, OPT1 and OPT2. This allows me to segregate my network so that computers on the OPT1 and ...
0
votes
1answer
203 views
Radius authentication for OpenVPN in pfSense
I have a pfSense Firewall with OpenVPN against RADIUS Server configured in a Windows Server 2008 R2.
The RADIUS server is configured in pfSense, but when I try the Authentication (Diagnostics -> ...
4
votes
2answers
603 views
PFSense 2.0 RC 3 - Routing problem with PPTP VPN
I have configured a PPTP VPN on my PFSense 2.0 RC3 router. The internet traffic comes to my modem (10.0.0.0/24) and then through my router (192.168.100.0/24).
My PPTP subnet is 192.168.101.0/24. ...
0
votes
2answers
238 views
pfsense, active directory, local domain
First things first, I have no idea what I'm doing. Certainly not afraid to admit that.. but here is my network setup. I have 2 servers, one of them in a domain controller. Both are running windows ...
1
vote
2answers
232 views
pfSense Captive Portal on Bridge
Is it possible to configure pfSense in such a way that it acts as a bridge between two Ethernet interfaces, and has captive portal functionality? I want to use the captive portal package, but don't ...
1
vote
1answer
147 views
Correct use of a transparent bridge
I've asked a similar question previously but I am just now sure I am understanding what I need to do. My current set-up is as follows:
...
0
votes
1answer
135 views
M0n0wall won't pass traffic on different LAN subnets unless “Bypass firewall rules” is checked
I have a working configuration, but a question is bugging me.
The question centers around having multiple subnets on a single
interface.
LAN: 10.10.10.1/24
OpenVPN Server LAN IP: 10.10.10.250
...
5
votes
3answers
323 views
OpenBSD/FreeBSD Firewall w/ GUI that is compatible with Intel 82574L Gigabit LAN NICs
I recently purchased a server to run m0n0wall or pfSense but I've learned since then that both of these firewall products are based on versions of FreeBSD which weren't yet compatible with the NICs in ...
2
votes
2answers
120 views
Router in front of Untangle UTM
I want to put a pfSense router in front of my Untangle UTM. There is only one thing I am not too sure about.
If the Untangle box will sit behind another router and run OpenVPN, all I need to do to ...
0
votes
2answers
236 views
Problems directing traffic over our site-to-site VPN
We have two offices connected via Gateway-Gateway VPN
DC1[192.168.0.101]---RV082(A)[192.168.0.1]---[VPN]---RV082(B)[192.168.3.1]---pfSense[192.168.3.100]---DC2[192.168.1.2]
DC2 is able to connect ...
1
vote
2answers
393 views
Why does my domain controller refuse to talk to a client on a different subnet?
I have an office subnet (say 192.168.10.x) and a guest subnet (192.168.99.x) which both use a pfSense box as their gateway/router. The office subnet is "controlled" by Active Directory using Windows ...
