0
votes
1answer
47 views

using pf for packet filtering and ipfw's dummynet for bandwidth limiting at the same time

I would like to ask if it's fine to use pf for all packet filtering (including using altq for traffic shaping) and ipfw's dummynet for bandwidth limiting certain IPs or subnets at the same time. I am ...
-2
votes
1answer
383 views

Installing pfSense on amazon ec2 instance [closed]

I was searching for AMI's with pfsense but seems like they are all vanished somehow :S How cuold I install pfsense on a FreeBSD ec2 instance besides creating a local image -> converting into raw than ...
0
votes
1answer
172 views

pf not execute udp port specific block rule

The traffic I want to block can be sniffed as below with tcpdump: 19:16:22.391164 IP 95.95.95.95.2036 > 10.10.10.10.443: UDP, length 8192 So I wanted to write a rule block any udp destination ...
0
votes
1answer
1k views

Pfsense 2.02 ipsec vpn tunnel goes down randomly

Ipsec vpn tunnels got disconnected randomly but when we restart raccon all tunnel will come up again with out any issue.I would like to know a permanent fix for this. These are the logs: racoon: ...
10
votes
1answer
2k views

How can I get FreeNAS and pfSense to report more using SNMP?

I have two servers which run variants of FreeBSD: One is a pfSense router and one is a FreeNAS 8 server. Both these servers run SNMP, and I am collecting and graphing their information using a third ...
2
votes
1answer
337 views

Building a router / NAT and need to compare performance of FreeBSD 8 v RHEL 6 [closed]

I am going to be setting up a router and NAT device but I am unable to choose between pfSense 2.x (FreeBSD 8) and RHEL 6. The device will need to forward a medium (2k hosts) sized network where ...
3
votes
4answers
2k views

How to grant su access without password to one user only in wheel group (FreeBSD)?

I know how to enable su without a password for all wheel group users by adding the appropriate configuration line in /etc/pam.d/su. I do not want to enable this for all wheel users but only one ...
3
votes
1answer
376 views

Hosting multiple private VPNs on PFSense

We are running PFSense 2.0.1-RELEASE and need to make the following scenario work: 1..n remote offices for company A need to connect to a private VPN (VPN server hosted in our datacenter). All the ...
3
votes
2answers
3k views

Create a rule using shell in fresh pfSense installation to open up WAN access to WebConfigurator

I am in a situation where I require WAN access to be opened up to the WebConfigurator through pfSense because I do not have another node connected to the same network to access WebConfigurator from ...
1
vote
2answers
2k views

bandwidth monitoring issue on PfSense router

I have a PfSense router installed , where it has 4 interfaces. one of them is WAN and rest 3 are LAN networks, which have different subnets and IP address ranges. wan interface name = em0 lan ...
0
votes
2answers
501 views

nagios nrpe plugin output not complete

I have written a small script to check the states of PfSense, and using this script to get the output in nagios, through NRPE... Here is the script used=`pfctl -s state | wc -l | bc | cut -c1-5 | ...
3
votes
1answer
2k views

How can I disable NTP in pfsense?

I am running my pfSense gateway in a ESXi server. right now the server gets its time from the NTP server specified in the general settings section of the WebGUI. I want to disable this so pfSense ...
3
votes
1answer
3k views

Pfsense mbuf full, what to do?

I noticed today that the MBUF usage has hit its limit. Apparently the site I'm running under pfsense is having some troubles too, I'd like to know if it would be safe to just sysctl ...
-3
votes
3answers
702 views

How do I learn IPSec VPN implementation on FreeBSD from pfSense

I've been trying to figure out a complete working solution for IPSec VPN implementation on FreeBSD but with no luck till now. pfSense seems did a fantastic job on supporting IPSec and even for mobile ...
1
vote
1answer
676 views

FreeBSD (pfSense) Routing - Can't find the default route

I have been banging my head against the wall on this for a couple of days now - thought I had tried everything, but obviously not... I have the following networking scenario... ISPs Router Edge ...
0
votes
0answers
185 views

Unable to start webCobfigurator for pfSense 1.2.3

I have installed pfsense 1.2.3 embedded version to 8 Gig CF card. I have booted the box, connected to terminal, accessed the menu, set up interfaces, and set up the IP addresses (192.168.1.1 on LAN). ...
2
votes
2answers
962 views

Installing embedded pfsense, stuck at boot loader

I am trying to install pfSense embedded image 1.2.3 RC1 onto a CF card. The box looks like it is ready to boot, but gets stuck at "Loading /boot/defaults/loader.conf" followed by "/". Can anyone ...
0
votes
0answers
230 views

Installing embedded pfsense to 8 gig CF, stuck at boot loader [duplicate]

Possible Duplicate: Installing embedded pfsense, stuck at boot loader I am trying to install pfSense embedded image 1.2.3 RC1 onto a CF card. The box looks like it is ready to boot, but ...
0
votes
1answer
648 views

M0n0wall won't pass traffic on different LAN subnets unless “Bypass firewall rules” is checked

I have a working configuration, but a question is bugging me. The question centers around having multiple subnets on a single interface. LAN: 10.10.10.1/24 OpenVPN Server LAN IP: 10.10.10.250 ...
7
votes
3answers
1k views

OpenBSD/FreeBSD Firewall w/ GUI that is compatible with Intel 82574L Gigabit LAN NICs

I recently purchased a server to run m0n0wall or pfSense but I've learned since then that both of these firewall products are based on versions of FreeBSD which weren't yet compatible with the NICs in ...
0
votes
2answers
135 views

Both DC's able to connect to branch office, Branch DC can only connect to one local DC

I am stumped on this one, I appreciate any help with this scenario because this just seems odd. We have 3 domain controllers: DC1 - 192.168.1.2 - main office (LAN port of PFSense) DC2 - 192.168.1.4 ...
0
votes
2answers
276 views

using “include” like statement in pf.conf to include some parts from other files

I want to be able to include some parts of my pf.conf from other set of files. For example I will include "set timeout" vs like statements in another file. Using anchors and "load anchor from ...
3
votes
1answer
98 views

blocking packets larger then specific size with pf

Is there a way with pf to block specific type of packets larger than specific size?
3
votes
5answers
2k views

Apache DDoS Protection in router (pFsense) [duplicate]

I'm soon going to change my infrastructure when I buy a new server. I'm going to replace my D-Link DIR-655 router with an pFsense router (and probably use the 655 as an AP) using my old server ...
1
vote
2answers
785 views

Does pfSense support AMD64?

Specifically I'm looking at running it on a node on this hardware: http://www.supermicro.com/Aplus/system/2U/2022/AS-2022TG-HTRF.cfm Any gotchas lurking out there? I'm assuming the AMD soft raid ...
0
votes
2answers
124 views

What package is dirname located in for freebsd

I am trying to install some software on pfsense 1.2.3 but the scripts are complaining about not finding the dirname binary. I have done a find on the system but cannot find it, and google is not ...
0
votes
1answer
526 views

Data grapsh for local IP addresses in pfSense

I am using pfSense as router with LightSquid transparent proxy. Reports that LightSquid offers me are great, I can see amount of data transfered trought router, grouped by hours,months,weeks, Also I ...
1
vote
1answer
2k views

Ierrs on Network Interface - Pfsense/Freebsd

We're using PfSense as an internal router/firewall (no connection to WAN). Using the Web-GUI, under Status ---> Interfaces, there's one particular interface where I have some errors: In/out errors ...
2
votes
1answer
140 views

How can I verify the type of memory that my freebsd box supports?

I have an old pfsense router and want to see what type of memory it supports (e.g. DDR2 240 pin... PC100... DDR... etc). Is there a command that will show me this? I know I could just open the box ...