pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

0
votes
1answer
9 views

pfsense: connection between two internal lans dropped after 20 seconds

I have the following config: LAN 01: 192.168.16.0/24 (LAN for internal servers) LAN 02: 192.168.67.0/24 (LAN for workstations) WAN: X.X.X.X And then: PFSENSE LAN IP: 192.168.16.1 PFSENSE LAN IP: ...
1
vote
1answer
16 views

VoIP calls dropping

Currently I have a proxy server running pfSense connected to a 40mb fibre lease line. This lease line has 60 external IP addresses (assigned to each room by a virtual IP in pfSense). On the LAN side ...
1
vote
1answer
36 views

Putting remote Linux server in local VPN

I have a VPS running Fedora 21, that I'd like to automatically log in to my local network via VPN. My local router is running a pfSense firewall, so my options are IPsec, L2TP, OpenVPN, and PPTP. ...
0
votes
0answers
57 views

How to load balance traffic from local Squid in pfsense when using Multi-WAN?

I have a multi-wan PFSense setup with Squid for HTTP(S) navigation. However one of the links (the default WAN gateways) is always used at 100% while the other link is rarely used. Reading the ...
0
votes
0answers
14 views

OpenVPN between a pfSense and a Windows client, with tap

I'm trying to implement the simplest possible OpenVPN between a pfSense and a Windows 7 client. I would like to use tap configuration, because my pfSense is not the gateway of the remote network. So ...
0
votes
1answer
16 views

FreeBSD pfsense root CA fails

I have some problem with root CA of my pfsense installation. My test script is this: openssl s_client -showcerts -connect fbstatic-a.akamaihd.net:443 And the answer is: Verify return code: 20 ...
0
votes
0answers
31 views

Can not ping from Ubuntu VM but can to

I've got an XenServer with an pfsense Router Running on it. There are the following Networks: Lan: 10.0.0.0/24 DMZ: 10.0.1.0/24 Secure: 10.0.2.0/24 WAN: xxx I got 2 Windows VMs inside LAN: ...
0
votes
0answers
29 views

pfsense routing with dmz wan and sonic wall

Pfsense setup: 2 physical NIC's (1 input from modem/ISP, 1 LAN with a lot of vlans and DMZ) Network setup: WAN block from ISP xxx.xxx.xxx.225/28 Modem -> pfsense -> vlan 40 (192.168.40.0/24) ...
0
votes
1answer
31 views

PPPoE link has IP address, but 100% loss

I couldn't figure out what's the problem with the PPPoE link. Here is the log entries I have found on pfSense. The interface is up and IP address has been requested, but all packets are said to be ...
0
votes
0answers
33 views

Network configuration for Virtual machine based firewall

I have this physical configuration: And I'm planning to install IPFire (or similar firewall : pfSense or Sophos UTM) on a virtual machine on the Active Directory Server to control traffic between ...
1
vote
1answer
76 views

Proxmox: 1 NIC, 1 Public IP, unable to get WAN interface working in VMs

I have a computer running Proxmox, and it has 1 single NIC that is directly connected to internet and has a single public IP. Then, I have different VMs (KVM) running and one of them is pfSense. What ...
0
votes
1answer
34 views

Seperation of network traffic\routes

In a lab environment I have 4 VLANs: VLAN10 -> Management (192.168.10.0/24) VLAN20 -> Service (192.168.20.0/24) VLAN30 -> Administration (192.168.30.0/24) VLAN50 -> Public (192.168.50.0/24) ...
0
votes
0answers
26 views

Route 2 external IP ranges using pfSense

I have pfSense running on some hardware routing my /27 block of IP addresses assigned by my ISP. I asked for and got another /26 block that I want to send all of the block to a single server (it will ...
0
votes
0answers
31 views

pfSense WAN load balancing across two IPs (has single gateway)

My virtual setup has two IPs, but they rely on the same gateway. I had this configured: interface - type - IP address - Gateway em0 - WAN1 - 172.16.155.131 - 172.16.155.2 em1 - LAN ...
0
votes
0answers
109 views

pfSense 2.2: HAProxy for HTTP + CARP + MultiWAN with VIPs issue (Outbound NAT?)

I have two pfSense firewalls with CARP setup, 2 WANs and HAProxy that points to HTTP servers in my LAN. Scheme: **pfSense server #1** ISP#1 - Public IP1.1 - pfSense#1 with HAProxy - HTTP ISP#2 - ...
0
votes
0answers
31 views

How to setup failover and load balance when two WAN links are available each one with a single public IP

I have read the question in here but I feel it's not exactly my setup. I have two physical ADSL modems (not a single one like as in the picture of ...
1
vote
1answer
97 views

Access RDS internally with same domain name as externally

I have a network setup with a 2008 R2 AD domain called internal.domain.org. Our externally hosted website uses www.domain.org and domain.org. I'd like users to be able to access our RDS ...
0
votes
1answer
556 views

pfSense/strongSwan “deleting half open IKE_SA after timeout” - IPSec connection Android 4.4 to pfSense 2.2.1 fails

pfSense in version 2.2 switched from Racoon to strongSwan. Since that change, users can no longer connect to the VPN from Android clients (Type IPSec Xauth PSK). The current configuration on ...
-1
votes
1answer
38 views

URL on SSL certificate is not the website I am on [closed]

When I go to https://www.virgintrainseastcoast.com/ I get repeatedly get asked by Chrome to "Select a certificate". The certificate in the popup is usually either an Apple or Facebook URL. Any ideas ...
0
votes
2answers
95 views

PFSense IPSEC VPN VLAN

We are integrating with a third party and they require the use of a L2L IPSec VPN for communication. I have successfully configured the IPSEC vpn and the tunel is up but now I cannot seem to have ...
0
votes
0answers
44 views

Optimizing Pfsense IPSec VPN for a high latency environment

I have two PFsense routers connecting two networks with high latency between them. What can I adjust to improve file transfers between these two networks?
3
votes
0answers
45 views

IPSec bandwidth between two Pfsense hosts has predictable, variable bandwidth

I have a IPSec tunnel between two Pfsense machines. Both machines are connected to a 100mbps symmetrical connection. The latency between the two routers is ~70ms. I'm using AES-GCM-128 and SHA1, both ...
1
vote
0answers
24 views

Blocking pfsense management access in high-availability setup

I have a pfsense setup in a high-availability configuration. There are about 5 separate networks forwhich I would like to block management access to pfsense. There is a destination rule builtin for ...
0
votes
0answers
18 views

Unmask a IP with Pfsense

Is there possible to unmask a IP with Pfsense? My scenario is actually this: pc->proxy->firewall->router>>> my proxy mask pc ips to 192.168.2.#, but I want to send the real ip ...
0
votes
0answers
65 views

Dell R220 and OpenBSD/pfsense

Just wondering if anyone has any experience running OpenBSD or pfsense on a Dell R220 (with either a PERC S110 or H310? I know I can do software based RAID in pfsense, however I've seen a few posts ...
0
votes
0answers
82 views

Squid3 Reverse Proxy - Force Cache and Suppress Version

I have been using pfSense for about 2 years now and I love it. One of my favorite features has come to be Squid2 and Squid3. Right now I am using Squid3 to run both proxy and reverse proxy. There are ...
-1
votes
1answer
142 views

Setting up pfsense on a small business network for firewall use

I have approximately 20 machines that will all be on the same subnet with a pfsense firewall. I have no experience with pfsense, so I am just starting out. I have the following configuration: The ...
0
votes
1answer
55 views

Using a pfSense guest to firewall/route traffic for other guests

I was curious if this falls into the "why..." category or not. I have a dedicated, hardware UTM (Untangle) that's serving as an edge device with two hosts and a dozen guests behind it. Right now, I ...
0
votes
1answer
125 views

How to open the web configuration of Pfsense [closed]

I installed Pfsense on VMWare Player and I set IP adresses for wan interface and Lan interface. When I write the adress https://192.168.40.1 on the address bar of my browser I got a time out and ...
-1
votes
2answers
87 views

Open VPN copying files very slow

This is my first experience with setting up a VPN. I have Open VPN running at my work network on a firewall/router that uses the PFsense admin software. I connected to the VPN from my home network ...
1
vote
0answers
3k views

ntopng: Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec]

I am exploring ntopng reports on my router and seeing, that one computer on my LAN is a flooder. ntopng says Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec] How to explore these ...
0
votes
0answers
42 views

How to ensure multi-wan load-balancing is working on pfSense?

I have multi-WAN configuration on my pfSense. Two WANs configured into one gateway group and should work in round-robin manner. Unfortunately, I see only one address when I visiting any of ...
0
votes
0answers
17 views

pfsense router dhcp “periodic error: no ip”

A simple /20 subnet with aprox 300 users. All DHCP. One LAN only Sometimes some of the users report that they get no IP. After minutter or as long as an hour they regain access. Unfortunately ...
1
vote
1answer
184 views

Netbalancer vs pfsense lan graph traffic? Which one is correct?

I am researching on wan bandwith/speed checking tools/graphs. Normally we are using pfsence as a firewall/gateway/router. and also we were used to use "Traffic Graph" lan interface. Recently we have ...
0
votes
0answers
34 views

multiple OUs in LDAPSearch

When working with Group ACL in PFSENSE+SquidGuard: In the Client-Source parameter, can I place OU and how? This is because I'm having multiple OUs with users to be added in the rule. Would the ...
1
vote
0answers
106 views

How Do I get unbound to only use DNSSEC?

I have a pfsense box, that I am in the process of configuring for the first time I would like to use DNSSEC. I used this site to check my DNSSEC status. When I go to this site I am told that my ...
1
vote
0answers
406 views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
2
votes
2answers
251 views

PFsense https connections unusably slow

I have a very strange issue with PFsense as router running in KVM with CentOS 7. https connections are incredibly slow (10KB/s or less), and uploads over https simply don't work; for example using ...
1
vote
1answer
157 views

Configuring Pfsense via ssh

I want to know how i can completely configure and add add tables to pfsense via ssh. my goal is to have a web installer that configured multiple system and based on the output it will configure the ...
1
vote
0answers
336 views

pfSense Outbound NAT not working

I have a VMware vSphere Hypervisor with several Hadoop VMs running. Since our support activated Port Security on our router, only two MACs are allowed to be connected to one port of the router. This ...
-1
votes
1answer
183 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
0
votes
0answers
200 views

Access pfSense reverse proxy sites from LAN

I've configured multiple webservers inside the reverse proxy package to redirect to a single servers, but on different ports. app1.mysite.com -> app.mysite.local:8000 app2.mysite.com -> ...
3
votes
0answers
881 views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
0
votes
0answers
313 views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
0
votes
2answers
69 views

routing for iax-protocol does not work on pfsense

I have problems with a pfsense-box routing iax-traffic (UDP port 4569). Our company has a central office and eight branch-offices. At the branch-offices we use pfsense as firewall and VPN endpoints ...
0
votes
2answers
143 views

pfSense: How to add a second WAN subnet for dummies

Can anyone point me to info on what to change on a pfSense device for a 2nd subnet on a single interface? My colo provider has allocated a /29 subnet to me of which I can use 3 IP addresses (for some ...
0
votes
0answers
249 views

pfSense: Captive Portal is extremely slow

I migrated my pfSense firewall (2.0.2) from an old computer to a more powerful server. I set up the newest pfSense version 2.1 and migrated via export and import my complete settings. Now I encounter ...
1
vote
0answers
94 views

Pfsense Openpvn and Vmware issue

Here is my network: Client --- WAN --- PfSense(VMWare) --- LAN --- vSwitch (Promiscuous) \--- ESXi Management (192.168.2.1) ...
0
votes
3answers
1k views

PFsense IPSec VPN failing phase 2

I am very new to VPNs and I am getting errors. I have posted the following lines that I think are the most relevant: Dec 2 08:41:03 racoon: DEBUG: IV freed Dec 2 08:41:03 racoon: [EUA]: ...
0
votes
2answers
513 views

How to use pfSense as a firewall in order to assign url whitelists to IP groups

In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...