pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

-1
votes
0answers
10 views

OpenVPN multiple LAN Routing

This is My network topology. Edi and Ted can ping one another Ted and Maria can ping one another Edi and Maria CANT ping one another USA is my VPN server for 19 VPN clients. This is first time ...
0
votes
0answers
9 views

How to configure different pfSense OpenVPN routes for different users?

I recently purchased the SG-4860 pfSense Security Gateway Appliance and I'm trying to migrate all of our settings off of our SonicWall. Everything for the most part has been great in my lab ...
1
vote
1answer
31 views

Port forwarding in pfSense not working

I recently set up a pfSense router and can't get any port forwarding to work from outside my own LAN. I have the following forwarding rule to a local server located at 10.0.1.2: Note that if I ...
0
votes
0answers
20 views

Routing multiple LAN-s in OpenVPN

I have the following network scenario: PC0 in network 172.16.0.0 that is connected to RouterA RouterA as a Server is connected to RouterB as a Client via OpenVPN (I have 19 Clients that are ...
1
vote
0answers
26 views

OpenVPN on pfSense: CRL verify fails with PKI depth 2

I've create a site-to-site OpenVPN structure on pfsense 2.2 using the built in certificate manager and the following: There is a root CA and an intermediate CA from which the server and client certs ...
0
votes
0answers
20 views

pfSense Killing Uploads to Any Wordpress Site

I am running a pfSense firewall on version 2.2.6. As far as I remember I have had working rules and have not had any issues uploading to my wordpress sites until this last upgrade. If I try to upload ...
0
votes
0answers
18 views

SNMP OID mappings

I am trying to get ifDescr and ifHCInOctets OID from my pfsense firewall. When I issue a Get from snmpwalk: snmpwalk -v 2c -c xxxxx 10.1.0.41 .1.3.6.1.2.1.2.2.1.2 I receive the following output: ...
0
votes
1answer
30 views

Install openLDAP server on pfsense

I have a pfsense router with 25 clients ( linux and windows ). I want to filter the internet traffic for some of the clients using squid guard. I have researched the options and I would like to use ...
0
votes
0answers
35 views

Pfsense multi site-to-site wan with policy based routing

We want to create a Hybrid multi WAN site to site connection between two (and more?) remote offices. The office has two WAN connections to the HQ. One MPLS and one ordinary Internet connection. In ...
0
votes
0answers
43 views

Routing host traffic through Linux KVM (pfSense) router

I have a pfSense virtual machine running on a CentOS 7 host. The host has 2 network adapters, enp1s0 and enp3s0. enp3s0 is connected to a bridge br1. My pfSense virtual machine is also connected to ...
2
votes
0answers
25 views

SquidGuard holding navigation

This is my first question within ServerFault. So I beg you pardon if the question here is a little out of context or too long. I haven't found anything on the internet so I'm recurring to you. I'm ...
0
votes
0answers
37 views

pfSense Load Balancing sticky connection timeout

In pfSense 2 under Settings > Advanced > Miscellaneous there is an option to enable sticky connections for the Load Balancing. If you enable the use of sticky connections you can define the source ...
0
votes
0answers
71 views

pfsense WAN Gateway Offline or pending Status

I have a strange issue as my WAN is either offline or in pending state. I have checked on my Laptop and its working fine. I have tried to swap ISP on network card and again the network card works ...
1
vote
2answers
62 views

pfSense NAT not passing traffic

I have a pfSense 2.2.6 firewall setup. Public IP: xx.xx.174.162/28 Virtual IP: xx.xx.174.170/32 I created a NAT rule setup: WAN TCP * * xx.xx.174.170 80 (HTTP) 10.0.1.60 80 ...
-3
votes
1answer
63 views

sftp not working, but ssh is working [closed]

I have a nat rule in my firewall to allow port 22 traffic through pfsense. I am able to SSH into my server but sftp through filezilla is getting timed out and not connecting. I tried with the local ...
0
votes
1answer
99 views

How to set 1Mb speed per host in pfsense

Currently we are using pfsense latest version and I want to assign download speed upto 1Mbps per host and also setup squid proxy and working on bridgh mode in pfsense box.
1
vote
1answer
61 views

Unable to access IP addresses within my own country. pfSense showing packets hit WAN

I have a pfSense firewall that has a WAN with multiple public IP addresses. I use NAT to port forward certain external IPs to internal IPs. I can connect from anywhere except same country. When ...
3
votes
1answer
28 views

Is it possible for a router misconfiguration to cause a telephone line fault/issue? [closed]

I apologise if this is posted in the wrong stackexchange but I am currently in the process of building and testing a router running pfSense. Having recently had a line fault, the BT Openreach ...
0
votes
0answers
19 views

mod_rewrite index.php behind varnish server

I have on my pfSense router a Varnish server currently with 4 backends. 3 of the backends go to the same server on my network and the 4th goes to my development server I'm using to get some webapps ...
6
votes
1answer
212 views

pfSense not forwarding DNS to concerned VPS

We are running Xenserver hyper-visor and I created 5 VM and 1VM for pfSense so all VMs are in 172.16.0.0/24 range attached to pfSenese LAN interface. pfSense has two interfaces: LAN (172.16.0.100 as a ...
0
votes
0answers
14 views

Not able to block site on pfsense firewall with squid+squidgaurd

Currently running pfsense latest version and set the transparent proxy using squid with squidgaurd for filter but https is not enable because this feature not work well. So that I want to block sites ...
0
votes
0answers
25 views

Connection timed out when using ssh to connect to a machine on a pfSense subnet (using port forwarding)

I get a connection time out when I try to ssh into a machine inside a pfSense firewall network. The computer I am connecting from is on the same subnet as the pfSense firewall. That is my computer's ...
0
votes
0answers
23 views

Super confused about possible NAT kerfuffle

I have a PFSense running on a ZBox at the moment - there are 4 Interfaces: LAN 1(192.168.2.0/24) WAN 1(192.168.2.0/24) (I know, same address, but this IF only connects to a modem, everything ...
0
votes
1answer
38 views

SSL certificate issue with git on pfsense

i have installed pfsense latest version and user are working on phpstorm and netbeans editors with git (https) and on gateway i have installed pfsense and configure transparent proxy using ...
1
vote
1answer
26 views

pfSense security: is the host of a virtual pfSense firewall accessible via ssh when the network interface has been assigned to pfSense?

Can the host of a virtual pfSense machine be accessed (via ssh) when the WAN interface is assigned to pfSense? Would the drivers need to be installed on the host, guest or both? Would it respond to ...
0
votes
1answer
32 views

Assign WAN IP on internal NAT network

I have a static WAN IP address (in the example 77.88.99.166) that is provided by a DSL modem that also has a static IP address (77.88.99.165). The modem interfaces with a firewall/NAT router (green) ...
0
votes
1answer
33 views

Confused about virtual network interfaces needed for network

I am relatively new to networking and have researched a lot about the topic however I am still confused as to what kind of virtual set-up I need. I have linked a diagram of the network over here: ...
0
votes
1answer
59 views

Would it make sense to have Squid running behind a high latency WAN?

We have a satellite uplink connected to a PFsense router. Our connection has a latency of +- 750ms. Would it make sense to configure squid to cache much data to improve loading times of websites? I ...
0
votes
0answers
17 views

squid+squidgaurd not working in bridge mode in pfsense

I have installed pfsense on bridge mode and without squid it's working but if i enable to squid and squidgaurd then internet is not working. i have setup as below. internet--netgear-------WAN ...
0
votes
1answer
96 views

Pfsense Access LAN through WAN (ping, shared folders etc)

My network setup is like this {Internet} <-> (Goverment Router) <-> (pfSense with http and https interception)<->(LAN Switch) <-> Many pcs on the LAN On the goverment router there are ...
1
vote
1answer
39 views

Configure STP in WAN Bridge

Hardware: 2 pFsense Box 1 Switch Dlink DGS-3324SR I need to configure a STP into my network because i'm trying to set a wan redundant bridge for a web server. (Take a look to my Network Diagram) So ...
1
vote
0answers
189 views

certificate issue in squid3 on pfsense

I am using pfsense latest version and installed squid3 with Transparent HTTP Proxy and HTTPS/SSL interception with squidguard but many site are not open and getting below errors. (54) Connection ...
1
vote
0answers
72 views

Routing public IP addresses to customers in a WISP setup

We have a fibre leaseline with a /29 range for our pfSense WAN port 61.179.145.40/29 So the WAN of our pfSense box is 61.179.145.42 with a gateway of 61.179.145.41. Our ISP has also routed ...
3
votes
0answers
123 views

pfSense Internal Traffic Policy Based Routing

What is the current and correct way to apply policy based routing to pfSense internal traffic (originating from the firewall itself)? Creating a floating rule with the WAN interfaces selected, ...
1
vote
0answers
168 views

PFSENSE - Squid - Transparent Mode not working correctly

I am having this weird problem with squid (both squid and squid 3). After installing, i forwarded all my traffic from mikrotik in port 3128 but the requests seemed to fail. After researching I noticed ...
1
vote
0answers
30 views

Connect pfsense and VPC in AWS by ipsec tunnel

I'm trying to connect my pfsense box with AWS VPC by ipsec tunnel. I read couple of tutorials and all looks good. But ... Yes, always there is some but. When only one person is working then all is ...
1
vote
1answer
70 views

How to do parallel queries to the upstream DNS using Unbound?

Can I configure Unbound as forwarder but that it alway send a query to ALL upstream DNS servers that I configure and take as valid reply the first in arrive? Such feature exist in nsmasq pfSense: ...
1
vote
1answer
222 views

Forward pfsenselogs to graylog

I was wondering if it is possible to forward pfsense logs (including snort) to a graylog2 server? And how can this be acomplished?
0
votes
1answer
39 views

Changes does not take effect without reboot

I am using Pfsense : 2.2.4-RELEASE (i386) I moved the pfsense configuration from one machine to another by full backup export-import afterwards. And the last move was on a fresh pfsense ...
0
votes
0answers
35 views

How would a CARP virtual IP defined with the wrong subnet mask manifest itself?

I have a VMware cluster that hosts two pfSense virtual appliances in a CARP configuration: +-----------+------------------+------------------+--------------+ | Interface | pf0 | ...
1
vote
1answer
68 views

Obtaining pfSense graphs on another server

I'm trying to be able to get the traffic and system graphs from a pfSense router, which is only available on a specific management IP, onto my monitoring server in some way. So far I've thought of: ...
0
votes
2answers
170 views

openvpn ubuntu client to pfsense server. Timed out

Trying to get openvpn to work so that I may connect from my Ubuntu 14.10 workstation to a pfsense 2.0.3 server using OpenVPN. I just installed the network-manager plugin and created a new vpn ...
0
votes
0answers
204 views

One Way IPSEC VPN Traffic (Centos/Ubuntu to pfSense)

I have servers sitting at Digital Ocean and I need one of them to be able to get into my internal network and pull information via SNMP. The particulars: (server)--DO Private Net--(vpn-2 ...
0
votes
0answers
93 views

pfSense + OpenVPN: Can not Ping Remote LAN

Problem: I can ping pfSense OpenVPN server from the OpenVPN client, but can not ping devices on the remote pfSense/OpenVPN LAN. Situation description: Below diagram displays my small test network ...
0
votes
0answers
101 views

Why does Pfsense not allow me to see clients connected to local network or other VPN clients?

Hi so essentially I want to be able to remote desktop into a client on another network via the web through OpenVPN. However I can not see any of the client that are on the local LAN network. even ...
0
votes
0answers
149 views

Email transmission delays between Gmail and our server

A few days ago I started setting up a mail server for our company: OS: Debian MTA: Postfix DNS: bind9 Firewall: pfSense Port forwarding for ports 25 and 53 through pfSense for passing on DNS and ...
0
votes
0answers
63 views

Pfsense DHCPv6 cannot configure to work properly

I have an IPv6 network. Local network with no connection to other networks (for testing). So I have configured an IPv6 LAN interface of pfsense with 64bit mask. And enabled DHCPv6 Server on LAN. The ...
0
votes
1answer
156 views

Layer 2 OpenVPN Bridge Headaches

I have a "working" layer 2 home->cloud (Vultr) bridge over OpenVPN. On both ends is an OPNSense firewall (since pfSense doesn't plan to switch to libreSSL due to "rude forking" by the libreSSL devs). ...
0
votes
1answer
104 views

VLANs and Access Point

I have all my network (wired and WiFi) in the same VLAN. I just bought a new Access Point, and am trying to set WiFi Clients to be in VLAN 2. On the AP, I set it to assign VLAN 2 to the clients, and ...
2
votes
1answer
182 views

pfSense can't access https website

I have just installed pfSense on a PC Engines APU1D4 to evaluate as an alternative to a Soekris 5501 + OpenBSD based setup, I have a PPPoE WAN configuration. The pf rules, NAT and PPPoE ...