pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

-1
votes
0answers
7 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
0
votes
0answers
16 views

Access pfSense reverse proxy sites from LAN

I've configured multiple webservers inside the reverse proxy package to redirect to a single servers, but on different ports. app1.mysite.com -> app.mysite.local:8000 app2.mysite.com -> ...
3
votes
0answers
111 views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
0
votes
0answers
3 views

Internal network issues between pfSense and Windows in VirtualBox [migrated]

I have three virtual machines running on Virtual Box. First one is Linux (pfsense) that's acting as a router with two network adapters one bridged and one set to the internal network. The other two ...
0
votes
0answers
55 views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
1
vote
0answers
40 views

How to make the virtual IP on LAN interface become Master on the only pfSense node with a working/connected WAN interface?

I'm trying to build a multi Wan configuration with High Availability (CARP) functionality. Currently the setup is on virtual machines (before it's released to production). It is on vmware Fusion with ...
0
votes
1answer
25 views

routing for iax-protocol does not work on pfsense

I have problems with a pfsense-box routing iax-traffic (UDP port 4569). Our company has a central office and eight branch-offices. At the branch-offices we use pfsense as firewall and VPN endpoints ...
0
votes
1answer
41 views

pfSense: How to add a second WAN subnet for dummies

Can anyone point me to info on what to change on a pfSense device for a 2nd subnet on a single interface? My colo provider has allocated a /29 subnet to me of which I can use 3 IP addresses (for some ...
0
votes
0answers
75 views

pfSense: Captive Portal is extremely slow

I migrated my pfSense firewall (2.0.2) from an old computer to a more powerful server. I set up the newest pfSense version 2.1 and migrated via export and import my complete settings. Now I encounter ...
1
vote
0answers
32 views

Pfsense Openpvn and Vmware issue

Here is my network: Client --- WAN --- PfSense(VMWare) --- LAN --- vSwitch (Promiscuous) \--- ESXi Management (192.168.2.1) ...
0
votes
3answers
173 views

PFsense IPSec VPN failing phase 2

I am very new to VPNs and I am getting errors. I have posted the following lines that I think are the most relevant: Dec 2 08:41:03 racoon: DEBUG: IV freed Dec 2 08:41:03 racoon: [EUA]: ...
0
votes
1answer
118 views

How to use pfSense as a firewall in order to assign url whitelists to IP groups

In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...
0
votes
1answer
187 views

1 Public IP 1 NIC ESXi to multipule VMs (with external access)

So I have purchased a Server from https://www.kimsufi.com/fr/index.xml, KS-5A to be exact. Kimsufi only give you 1 Public IP address and 1 NIC to work with, and you cannot purchase more. I have ...
0
votes
1answer
81 views

pfsense with three WAN IP and outgoing NAT

similar situation as this one: How to setup pfSense with multiple public IP's i have a pfsense with multiple wlan ip's. I'm using a Hetzner Server with vmware so i have a virtual machine with ...
0
votes
0answers
85 views

PfSense IPSec VPN client

I am new in PfSense I have configured site to site VPN and it works fine, "Site A" ( PfSense) and "Site B" ( SonicWall) both can access each other LAN network. Now i have also configured IPSec Mobile ...
0
votes
0answers
160 views

pfSense OpenVPN Routing to Sever LAN

I'm trying to get my OpenVPN server to route traffic from clients to the server's LAN. My setup is as follows: pfSense box at 10.1.1.1 Other servers on the LAN at 10.1.10.0/24 (with DNS server at ...
0
votes
0answers
178 views

pfsense access openvpn client´s lan

I want to cover the following case: pfsense server´s LAN: 10.1.0.0/24 openvpn client network: 10.2.0.0/24 Local network of one openvpn client: 192.168.2.0/24 Working: Access the network ...
0
votes
0answers
174 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
1
vote
0answers
203 views

pfSense: Captive portal auth via Active Directory (2003)

I'm trying to set up a new firewall server. We chose pfSense and it's working nicely so far. We managed to our Windows Server 2003 Active Directory as a user Authentication Server (System -> User ...
0
votes
0answers
771 views

pfsense reverse proxy + HTTPS/SSL interception

I have pfSense 2.1.5 and squid3-dev 3.3.10 configured as reverse proxy for internal http web server and server proxy (port 3128).It works. Activating HTTPS/SSL interception (Enable SSL filtering) on ...
2
votes
0answers
311 views

Troubleshooting Packet Loss on pfSense + Ubiquiti UniFi (Wireshark maybe?)

I'm dealing with an annoying situation in a small network in my church, which I'm the primary volunteer IT caretaker, of about 20 PCs, give-or-take. We're in Chattanooga, home of Gigabit internet, so ...
0
votes
0answers
54 views

pfsense: break gmirror raid 1 before upgrading

I have a pfsense firewall in an appliance. The disk is using gmirror with RAID 1 setup. Before this, whenever I want to do OS upgrade, I will shut down the appliance, remove it from server rack, open ...
0
votes
1answer
228 views

pfSense Routing a packet out the same interface it arrived on

I have pfSense with one LAN interface which is connected to a switch. All ports on this switch are part of the LAN (VLAN 10). I have access points which are also part of the LAN, they have a static ...
0
votes
1answer
463 views

Implement HTTPS in with pfSense, Varnish and Tomcat

Situation I have an ESXi Server hosting multiple VMs, including one for each pfSense, Varnish and Tomcat. They are configured like the following: pfSenseVM (Firewall, IP=10.0.0.1) NAT Rules from ...
1
vote
1answer
90 views

Changing Network Subnet Limited User Access

Our network was originally running a 192.168.3.1 /24 network with 192.168.3.1 being the gateway on a pfSense box. We decided to increase our IP range by changing the network to a 192.168.3.1 /23 ...
0
votes
1answer
148 views

Do all captive portal solutions work the same way? (cookie, vs MAC address, vs other?)

While traveling and having to interact with a number of broken captive portal implementations I've overheard other passengers having usability issues with iPads, Phones, computers depending on the ...
0
votes
2answers
613 views

How to change the webgui password in pfsense from a console?

is there any way to change the password of the webgui administrator user in pfsense from my console? Just to mention i didn't locked my self out from the webgui. Regards, ankso
1
vote
1answer
601 views

QoS settings for Wi-Fi calling on pfSense firewall/gateway?

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as the primary Internet gateway for ...
1
vote
1answer
254 views

Why is my pfSense WAN to Comcast going via 100.99.197.221 which appears to be in Belarus?

We are having internet problems today. We use a Comcast business connection. We have a /29 network from Comcast. We have these IP address: 50.x.x.249, 50.x.x.250, 50.x.x.251, 50.x.x.252, 50.x.x.253 ...
0
votes
0answers
371 views

site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops

I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode. I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at ...
0
votes
1answer
256 views

pfSense monitor wan bandwidth by lan ip

I think pfSense is great and has a lot of helpful features. I use it for a lot of things but I cannot find one feature that I really need. My Current setup is several Vlans and 1 Wan. We currently ...
0
votes
1answer
537 views

using pf for packet filtering and ipfw's dummynet for bandwidth limiting at the same time

I would like to ask if it's fine to use pf for all packet filtering (including using altq for traffic shaping) and ipfw's dummynet for bandwidth limiting certain IPs or subnets at the same time. I am ...
-1
votes
1answer
68 views

What is it that makes BSD a popular choice for firewalls? [closed]

What is it that makes BSD a popular choice for firewalls? Is the kernel generally more secure?
0
votes
1answer
134 views

Configure clients to navigate through specific wan. Pfsense

I have a machine with a pfsense running. It is configured with three ethernet cards. LAN 192.168.2.1/21 WAN1 200.41.X.2/24 WAN2 200.41.X.3/24 ISP Gateway 200.41.X.1 This is a connection with 5 ...
1
vote
2answers
79 views

Set default gateway based on protocol using pfSense

I have a pfSense configured with two Internet links for broadband load balancing. One of these links block outgoing traffic on 25 port (WAN1). I have a mail server (IP 10.6.9.2) that should use the ...
0
votes
0answers
324 views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
0answers
147 views

Windows 2008 / 2003 DC can not ping gateway or internet

Im doing some tests trying to setup a domain and i found a very weird behavior. Same thing on windows 2008 r2 and windows 2003 x64 r2. I am running on KVM over proxmox virtualized with virtio. After ...
0
votes
2answers
2k views

pfsense PPTP VPN can access LAN but not internet

I am running pfsense at home and I want to set up a PPTP vpn (yes I know its not secure, lets ignore that) My current pfsense setup: LAN: 192.168.1.1 (/24) WAN PPPoE (real world IP lets say ...
0
votes
2answers
1k views

How to setup pfSense with multiple public IP's

Having trouble with multiple public IP's getting routed correctly. I'd like to setup the following network: public_ip1(assigned WAN IF) -> pfSense -> server 1,2,3 - 192.168.0.11, .12, .13 ...
2
votes
1answer
194 views

pfSense Cluster not working with Manual NAT

I have two pfSense clusters, one is 2.1.4 and one is 2.1.3. The directions suggest that Manual Outbound NAT is required, but the 2.1.3 cluster is working just fine using Automatic NAT, servers and ...
1
vote
1answer
625 views

pfSense failover and OpenVPN site-to-site

I have two pfSense Clusters, and am trying to connect them with an OpenVPN site-to-site VPN. Initially, the client was a single pfSense system, and all was well. Now that one system is a cluster, and ...
0
votes
2answers
2k views

Unusual OpenVPN server log entries every minute - Connection reset, restarting [0]

OpenVPN is running on pfSense 2.0-release. Until recently, these messages had not occurred. In the OpenVPN server logs, the follwing set of messages repeats every minute openvpn[34562]: ...
0
votes
1answer
233 views

pfSense dropping gateway interface randomly

The basic topology of the office is ISP-Router <-> pfSense <-> Switch <-> Servers and APs. It has been newly deployed Once a while our internet goes out and one of us has to manually get ...
0
votes
1answer
367 views

How can I disable routing between interfaces by default on pfSense?

By default, pfSense routes traffic between WAN, LAN, OPT1, OPT2, ... Currently I am explicitly blocking certain combinations via firewall rules. How can I configure pfSense to use a whitelisting ...
0
votes
1answer
24 views

VPN Connection pooling?

I'm having a problem on PFSense https://forum.pfsense.org/index.php?topic=23914.0 where I can only connect one client with a PPTP VPN to a VPN Server outside out network. PFsense is our firewall and ...
1
vote
1answer
596 views

Use pfSense for outgoing mail?

How/Can/Should I use my pfSense router as an outgoing mail server? I have several webservers and devices on my internal network that need to send mail out to the Internet. However, I don't need a ...
1
vote
1answer
352 views

pfsense: Prohibit all outbound connectivity from inside going out, except for one system's traffic

I've got a lab environment here for some testing of software which should only run on this "lab environment" network. To that end, the "lab environment" has a pfsense firewall sitting on the ...
0
votes
2answers
2k views

pfSense OpenVPN DNS Resolution

It seems that my problem is a common issue, and I've read several answers on Server Fault, but I can't seem to get my issue figured out. One of my clients is running pfSense 2.1.4, at an internal IP ...
0
votes
0answers
226 views

pfSense LAN network unable to communicate with remote network on OpenVPN TAP connection

I set up pfSense to connect to a remote network (192.168.122.0/24) that only accepts tap connections. The connection is being initiated successfully. pfSense (192.168.1.1/24) itself can connect to ...
2
votes
1answer
778 views

PFSense with multi WAN failover

I have two Linux box running PFsense, one of them is a master and the other one is a backup. The master is having IP 192.168.1.2 and backup is having IP 192.168.1.3. I have created a VIP 192.168.1.1 ...