pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

-3
votes
0answers
23 views

On a small business network using pfsense, how can I force the first browser based http/s request to 1 particular webpage once per day?

What I wish to achieve is this: Whenever an employee accesses the web using any browser on the corporate network for the first time on any given day, I would like for the employee to be forced to ...
0
votes
0answers
7 views

PFSense / Snort / OpenVPN - one WAN interface

I have a pfsense box running both Snort and OpenVPN. The VPN worked great before installing Snort, now intermittently I cannot connect. Should I whitelist the port that the VPN uses on the WAN ...
1
vote
1answer
16 views

pfsense NAT router - “live with” double nat (airport express)

I have a setup that have worked for years with a fiber to a NAT router to clients. Clients are typically cheap NAT routers of any kind. Setup like this Fiber from ISP | Router, pfsense -WAN - ...
0
votes
1answer
10 views

Route Public Subnet AND create NAT internal subnet

my ISP just gave me a subnet of public IP addresses and a single public IP in their network so that I can route those. I'm trying to use pfsense to do this. Basically I want to expose the public IPs ...
0
votes
1answer
28 views

Use multiple WAN IP addresses on a single VLAN

Our ISP has given us a /25 range of IP addresses on our lease line. We want to be able to create several VLAN's and direcly assign each VLAN with any number of these WAN IP addresses. For example - ...
0
votes
0answers
16 views

CentOS Server can't exit pfSense Network

Not sure if this is a routing issue or a firewall issue, or maybe a problem with the ifcfg-file of the CentOS machine. Here is the situation. I just got a 600Mb fiber connection from my ISP into the ...
0
votes
0answers
27 views

Strongswan ipsec linux not passing traffic after established

I currently have two PFsense routers that connect over the WAN using a similar configuration and traffic is passed with no issue. I'm trying to set up a 2nd path over 4G WWAN and have to use linux ...
2
votes
2answers
25 views

How to configure pfsense to allow vpn clients to appear as if they are coming from the PFSense WAN?

I have a specific host I need to get to via ssh (call it 'work'). I have a static IP at my client location (call it 'client') to enable access to this remote 'work' box. The people at 'work' then ...
1
vote
0answers
27 views

PFSense NATing to a load balanced server

I apologize for not being able to post the network diagram here but as this is my first time asking a question here I am not allowed. So here is the scenario: We have a site that is build with a ...
0
votes
1answer
20 views

External IP becomes unreachable sporadically

I have a very strange problem - We have a lease line with 50 odd external IP addresses on it. We do a 1:1 assignment and Outgoing IP assignment to interfaces on a pfsense proxy server. For each ...
1
vote
0answers
34 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it ...
0
votes
1answer
34 views

Openvpn: no response from server in tcp handshake

I am attempting to connect to an openVPN server that I created on pfSense 2.2.3 by using tunnelblick on my Macbook. Whenever I attempt to connect using either OpenVPN version 2.3.6 or 2.3.7 (all that ...
0
votes
0answers
25 views

What could cause files > 50kb to timeout? (PFSense Router)

I've got a PF Sense box acting as a gateway work the LAN at my work, with packet filtering enabled (for QOS purposes) files > 50kb cannot be attached to email, uploaded to web pages etc... even ...
-1
votes
1answer
40 views

No Internet on router with pfSense [closed]

Sorry in advance if a similar question has already been posted. I am with Sky for broadband and have a router providing DSL connectivity. I have a cheap 64 bit desktop PC running pFsense as a ...
1
vote
1answer
61 views

Routing between pfSense Subnets and IPSec VPN

I have a pfSense Router, which is the endpoint of a site-to-site IPSec VPN. In the pfSense the main LAN Interface is 10.0.2.1/24 and it has a virtual IP 10.0.125.1/24 The IPSec Phase 2 connects the ...
0
votes
0answers
15 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
1
vote
0answers
8 views

Summary Error Configuring HAProxy via pfSense

I configured a frontend record that is refering to a backend server pool with one record. The referred HAProxy Backend server pool contains a single record with the Max con value set to 2000. In the ...
0
votes
0answers
93 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
0answers
28 views

Cant ping openvpn server from pfsense lan

I have a PF sense set up as a Openvpn client. The server is a Windows server running openvpn. Behind the pfsense is a lan. Strange enough I can't ping the server at 10.8.0.1 using the clients in the ...
0
votes
0answers
22 views

Windows 7 behavior on network link between SonicWALL and pfSense

I have two networks behind two different firewall at the same site. I have linked them together by using a spare interface on each device. Network 1 - pfSense 10.0.10.0/24 Network 2 - SonicWALL ...
0
votes
2answers
39 views

pfSense: Cannot filter flood of multicast packets being blocked by default

There are multiple devices under a different subnet on our LAN sending a flood of multicast packets. I've tried to allow this type of traffic, but it does not seem to work.
2
votes
0answers
68 views

Redirect network traffic to Proxy with Pfsense

I have a network with 9 clients: 192.168.1.0/24 I need to redirect all traffic from 192.168.1.208 and 192.168.1.209 to an outside proxy server. --------------- |192.168.1.201|--------| ...
0
votes
1answer
25 views

On a pfsense router how would I redirect one IP to another?

I have a poorly made piece of software at work that only asks for a IP when connecting and cant use URL and I cant get a static IP for the database its connecting to (Amazon RDS). I was wondering if ...
2
votes
2answers
115 views

Is this my network being flooded?

I noticed this strange pattern on the bandwidth graph of the pfsense firewall on my work network: If I'm reading it righ, there is a constant stream of 6 Mbps data going from the local network into ...
1
vote
0answers
146 views

Use Framed-IP-Address RADIUS attribute for IP allocation with DHCP on Windows Server 2012R2

I have configured a DHCP server on Windows Server with an NPS Policy, connected to a FreeRADIUS2 server running on pfSense. Authentication is based on MAC address. If MAC address is not present in ...
1
vote
1answer
59 views

How to combine multiple route hops using one (pfSense) router?

I am trying to come up with a way to consolidate two routers into one. I have the following network configuration: LAN <-- a/24 --> NAT Firewall <-- x/29 --> Router <-- y/30 --> ...
0
votes
1answer
57 views

Creating a separate PPTP VPN VLan in network with tagging possible?

I have a gateway to gateway PPTP VPN that I would like to connect to my network and have it on a VLAN where it is shared to a VLAN tagged wireless router. This way I can have two wireless AP's where ...
0
votes
1answer
34 views

How to pass all requests to some site via specific WAN interface in pfSense?

I have multi-WAN configuration on pfSense. I suspect, that some secured web sites (like hosting control panels) dislike that requests are coming from different IPs and hence asking various ...
1
vote
1answer
31 views

pfsense with 4 WAN IP and outgoing NAT

I have a pfsense with a single wan ip, i want to assign multiple wan ip's. The pfsense machine is located on a vm machine with the other servers i wish to NAT forward. I want to give each server a wan ...
0
votes
1answer
53 views

pfsense: connection between two internal lans dropped after 20 seconds

I have the following config: LAN 01: 192.168.16.0/24 (LAN for internal servers) LAN 02: 192.168.67.0/24 (LAN for workstations) WAN: X.X.X.X And then: PFSENSE LAN IP: 192.168.16.1 PFSENSE LAN IP: ...
1
vote
1answer
55 views

VoIP calls dropping

Currently I have a proxy server running pfSense connected to a 40mb fibre lease line. This lease line has 60 external IP addresses (assigned to each room by a virtual IP in pfSense). On the LAN side ...
1
vote
1answer
59 views

Putting remote Linux server in local VPN

I have a VPS running Fedora 21, that I'd like to automatically log in to my local network via VPN. My local router is running a pfSense firewall, so my options are IPsec, L2TP, OpenVPN, and PPTP. ...
0
votes
0answers
244 views

How to load balance traffic from local Squid in pfsense when using Multi-WAN?

I have a multi-wan PFSense setup with Squid for HTTP(S) navigation. However one of the links (the default WAN gateways) is always used at 100% while the other link is rarely used. Reading the ...
0
votes
0answers
65 views

OpenVPN between a pfSense and a Windows client, with tap

I'm trying to implement the simplest possible OpenVPN between a pfSense and a Windows 7 client. I would like to use tap configuration, because my pfSense is not the gateway of the remote network. So ...
0
votes
1answer
51 views

FreeBSD pfsense root CA fails

I have some problem with root CA of my pfsense installation. My test script is this: openssl s_client -showcerts -connect fbstatic-a.akamaihd.net:443 And the answer is: Verify return code: 20 ...
0
votes
0answers
64 views

Can not ping from Ubuntu VM but can to

I've got an XenServer with an pfsense Router Running on it. There are the following Networks: Lan: 10.0.0.0/24 DMZ: 10.0.1.0/24 Secure: 10.0.2.0/24 WAN: xxx I got 2 Windows VMs inside LAN: ...
0
votes
0answers
112 views

pfsense routing with dmz wan and sonic wall

Pfsense setup: 2 physical NIC's (1 input from modem/ISP, 1 LAN with a lot of vlans and DMZ) Network setup: WAN block from ISP xxx.xxx.xxx.225/28 Modem -> pfsense -> vlan 40 (192.168.40.0/24) ...
0
votes
1answer
82 views

PPPoE link has IP address, but 100% loss

I couldn't figure out what's the problem with the PPPoE link. Here is the log entries I have found on pfSense. The interface is up and IP address has been requested, but all packets are said to be ...
0
votes
0answers
71 views

Network configuration for Virtual machine based firewall

I have this physical configuration: And I'm planning to install IPFire (or similar firewall : pfSense or Sophos UTM) on a virtual machine on the Active Directory Server to control traffic between ...
1
vote
1answer
300 views

Proxmox: 1 NIC, 1 Public IP, unable to get WAN interface working in VMs

I have a computer running Proxmox, and it has 1 single NIC that is directly connected to internet and has a single public IP. Then, I have different VMs (KVM) running and one of them is pfSense. What ...
0
votes
1answer
42 views

Seperation of network traffic\routes

In a lab environment I have 4 VLANs: VLAN10 -> Management (192.168.10.0/24) VLAN20 -> Service (192.168.20.0/24) VLAN30 -> Administration (192.168.30.0/24) VLAN50 -> Public (192.168.50.0/24) ...
0
votes
0answers
61 views

Route 2 external IP ranges using pfSense

I have pfSense running on some hardware routing my /27 block of IP addresses assigned by my ISP. I asked for and got another /26 block that I want to send all of the block to a single server (it will ...
0
votes
0answers
71 views

pfSense WAN load balancing across two IPs (has single gateway)

My virtual setup has two IPs, but they rely on the same gateway. I had this configured: interface - type - IP address - Gateway em0 - WAN1 - 172.16.155.131 - 172.16.155.2 em1 - LAN ...
0
votes
0answers
196 views

pfSense 2.2: HAProxy for HTTP + CARP + MultiWAN with VIPs issue (Outbound NAT?)

I have two pfSense firewalls with CARP setup, 2 WANs and HAProxy that points to HTTP servers in my LAN. Scheme: **pfSense server #1** ISP#1 - Public IP1.1 - pfSense#1 with HAProxy - HTTP ISP#2 - ...
0
votes
0answers
87 views

How to setup failover and load balance when two WAN links are available each one with a single public IP

I have read the question in here but I feel it's not exactly my setup. I have two physical ADSL modems (not a single one like as in the picture of ...
1
vote
1answer
218 views

Access RDS internally with same domain name as externally

I have a network setup with a 2008 R2 AD domain called internal.domain.org. Our externally hosted website uses www.domain.org and domain.org. I'd like users to be able to access our RDS ...
0
votes
1answer
1k views

pfSense/strongSwan “deleting half open IKE_SA after timeout” - IPSec connection Android 4.4 to pfSense 2.2.1 fails

pfSense in version 2.2 switched from Racoon to strongSwan. Since that change, users can no longer connect to the VPN from Android clients (Type IPSec Xauth PSK). The current configuration on ...
-1
votes
1answer
48 views

URL on SSL certificate is not the website I am on [closed]

When I go to https://www.virgintrainseastcoast.com/ I get repeatedly get asked by Chrome to "Select a certificate". The certificate in the popup is usually either an Apple or Facebook URL. Any ideas ...
0
votes
2answers
173 views

PFSense IPSEC VPN VLAN

We are integrating with a third party and they require the use of a L2L IPSec VPN for communication. I have successfully configured the IPSEC vpn and the tunel is up but now I cannot seem to have ...
0
votes
0answers
95 views

Optimizing Pfsense IPSec VPN for a high latency environment

I have two PFsense routers connecting two networks with high latency between them. What can I adjust to improve file transfers between these two networks?