pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

0
votes
0answers
56 views

Connection timed out when using ssh to connect to a machine on a pfSense subnet (using port forwarding)

I get a connection time out when I try to ssh into a machine inside a pfSense firewall network. The computer I am connecting from is on the same subnet as the pfSense firewall. That is my computer's ...
0
votes
0answers
27 views

Super confused about possible NAT kerfuffle

I have a PFSense running on a ZBox at the moment - there are 4 Interfaces: LAN 1(192.168.2.0/24) WAN 1(192.168.2.0/24) (I know, same address, but this IF only connects to a modem, everything ...
0
votes
1answer
68 views

SSL certificate issue with git on pfsense

i have installed pfsense latest version and user are working on phpstorm and netbeans editors with git (https) and on gateway i have installed pfsense and configure transparent proxy using ...
1
vote
1answer
56 views

pfSense security: is the host of a virtual pfSense firewall accessible via ssh when the network interface has been assigned to pfSense?

Can the host of a virtual pfSense machine be accessed (via ssh) when the WAN interface is assigned to pfSense? Would the drivers need to be installed on the host, guest or both? Would it respond to ...
0
votes
1answer
80 views

Assign WAN IP on internal NAT network

I have a static WAN IP address (in the example 77.88.99.166) that is provided by a DSL modem that also has a static IP address (77.88.99.165). The modem interfaces with a firewall/NAT router (green) ...
0
votes
1answer
35 views

Confused about virtual network interfaces needed for network

I am relatively new to networking and have researched a lot about the topic however I am still confused as to what kind of virtual set-up I need. I have linked a diagram of the network over here: ...
0
votes
1answer
88 views

Would it make sense to have Squid running behind a high latency WAN?

We have a satellite uplink connected to a PFsense router. Our connection has a latency of +- 750ms. Would it make sense to configure squid to cache much data to improve loading times of websites? I ...
0
votes
0answers
34 views

squid+squidgaurd not working in bridge mode in pfsense

I have installed pfsense on bridge mode and without squid it's working but if i enable to squid and squidgaurd then internet is not working. i have setup as below. internet--netgear-------WAN ...
0
votes
1answer
204 views

Pfsense Access LAN through WAN (ping, shared folders etc)

My network setup is like this {Internet} <-> (Goverment Router) <-> (pfSense with http and https interception)<->(LAN Switch) <-> Many pcs on the LAN On the goverment router there are ...
1
vote
1answer
66 views

Configure STP in WAN Bridge

Hardware: 2 pFsense Box 1 Switch Dlink DGS-3324SR I need to configure a STP into my network because i'm trying to set a wan redundant bridge for a web server. (Take a look to my Network Diagram) So ...
1
vote
0answers
315 views

certificate issue in squid3 on pfsense

I am using pfsense latest version and installed squid3 with Transparent HTTP Proxy and HTTPS/SSL interception with squidguard but many site are not open and getting below errors. (54) Connection ...
1
vote
0answers
140 views

Routing public IP addresses to customers in a WISP setup

We have a fibre leaseline with a /29 range for our pfSense WAN port 61.179.145.40/29 So the WAN of our pfSense box is 61.179.145.42 with a gateway of 61.179.145.41. Our ISP has also routed ...
3
votes
0answers
181 views

pfSense Internal Traffic Policy Based Routing

What is the current and correct way to apply policy based routing to pfSense internal traffic (originating from the firewall itself)? Creating a floating rule with the WAN interfaces selected, ...
1
vote
0answers
446 views

PFSENSE - Squid - Transparent Mode not working correctly

I am having this weird problem with squid (both squid and squid 3). After installing, i forwarded all my traffic from mikrotik in port 3128 but the requests seemed to fail. After researching I noticed ...
1
vote
0answers
48 views

Connect pfsense and VPC in AWS by ipsec tunnel

I'm trying to connect my pfsense box with AWS VPC by ipsec tunnel. I read couple of tutorials and all looks good. But ... Yes, always there is some but. When only one person is working then all is ...
2
votes
1answer
127 views

How to do parallel queries to the upstream DNS using Unbound?

Can I configure Unbound as forwarder but that it alway send a query to ALL upstream DNS servers that I configure and take as valid reply the first in arrive? Such feature exist in nsmasq pfSense: ...
1
vote
1answer
591 views

Forward pfsenselogs to graylog

I was wondering if it is possible to forward pfsense logs (including snort) to a graylog2 server? And how can this be acomplished?
0
votes
1answer
51 views

Changes does not take effect without reboot

I am using Pfsense : 2.2.4-RELEASE (i386) I moved the pfsense configuration from one machine to another by full backup export-import afterwards. And the last move was on a fresh pfsense ...
0
votes
0answers
57 views

How would a CARP virtual IP defined with the wrong subnet mask manifest itself?

I have a VMware cluster that hosts two pfSense virtual appliances in a CARP configuration: +-----------+------------------+------------------+--------------+ | Interface | pf0 | ...
1
vote
1answer
120 views

Obtaining pfSense graphs on another server

I'm trying to be able to get the traffic and system graphs from a pfSense router, which is only available on a specific management IP, onto my monitoring server in some way. So far I've thought of: ...
0
votes
2answers
289 views

openvpn ubuntu client to pfsense server. Timed out

Trying to get openvpn to work so that I may connect from my Ubuntu 14.10 workstation to a pfsense 2.0.3 server using OpenVPN. I just installed the network-manager plugin and created a new vpn ...
0
votes
0answers
308 views

One Way IPSEC VPN Traffic (Centos/Ubuntu to pfSense)

I have servers sitting at Digital Ocean and I need one of them to be able to get into my internal network and pull information via SNMP. The particulars: (server)--DO Private Net--(vpn-2 ...
0
votes
0answers
112 views

pfSense + OpenVPN: Can not Ping Remote LAN

Problem: I can ping pfSense OpenVPN server from the OpenVPN client, but can not ping devices on the remote pfSense/OpenVPN LAN. Situation description: Below diagram displays my small test network ...
0
votes
0answers
130 views

Why does Pfsense not allow me to see clients connected to local network or other VPN clients?

Hi so essentially I want to be able to remote desktop into a client on another network via the web through OpenVPN. However I can not see any of the client that are on the local LAN network. even ...
0
votes
0answers
245 views

Email transmission delays between Gmail and our server

A few days ago I started setting up a mail server for our company: OS: Debian MTA: Postfix DNS: bind9 Firewall: pfSense Port forwarding for ports 25 and 53 through pfSense for passing on DNS and ...
0
votes
0answers
106 views

Pfsense DHCPv6 cannot configure to work properly

I have an IPv6 network. Local network with no connection to other networks (for testing). So I have configured an IPv6 LAN interface of pfsense with 64bit mask. And enabled DHCPv6 Server on LAN. The ...
0
votes
1answer
124 views

VLANs and Access Point

I have all my network (wired and WiFi) in the same VLAN. I just bought a new Access Point, and am trying to set WiFi Clients to be in VLAN 2. On the AP, I set it to assign VLAN 2 to the clients, and ...
2
votes
1answer
257 views

pfSense can't access https website

I have just installed pfSense on a PC Engines APU1D4 to evaluate as an alternative to a Soekris 5501 + OpenBSD based setup, I have a PPPoE WAN configuration. The pf rules, NAT and PPPoE ...
0
votes
2answers
56 views

Host command tries several servers

I have a DNS server (pfSense) for my LAN, working perfectly, but some timeouts occur that I can't explain. Especially the "host" command gives the correct answer immediately, but then tries 2 times ...
3
votes
4answers
2k views

pfSense not forwarding back packets

I have a pfSense box setup where my WAN interface (em0) is set up in my local network (192.168.1.100) and my LAN interface (em1) is a private network of its own (10.0.0.1). The end goal is to have the ...
1
vote
0answers
155 views

Disabling bypass mode on Intel NICs

I'm trying to install PFSense on some decommissioned firewall gear. I've installed PFSense just fine, except for the two NICs are stuck in bypass mode. I don't see any options in the BIOS to edit ...
0
votes
1answer
362 views

PFsense postfix troubleshooting - SMTP headers [closed]

I am trying to setup google as mail relay but running into some troubles. I get an error that 550-5.1.1 The email account that you tried to reach does not exist My custom main in pfsense looks ...
0
votes
1answer
213 views

PFSense / Snort / OpenVPN - one WAN interface

I have a pfsense box running both Snort and OpenVPN. The VPN worked great before installing Snort, now intermittently I cannot connect. Should I whitelist the port that the VPN uses on the WAN ...
1
vote
1answer
311 views

pfsense NAT router - “live with” double nat (airport express)

I have a setup that have worked for years with a fiber to a NAT router to clients. Clients are typically cheap NAT routers of any kind. Setup like this Fiber from ISP | Router, pfsense -WAN - ...
0
votes
1answer
196 views

Route Public Subnet AND create NAT internal subnet

my ISP just gave me a subnet of public IP addresses and a single public IP in their network so that I can route those. I'm trying to use pfsense to do this. Basically I want to expose the public IPs ...
0
votes
1answer
113 views

Use multiple WAN IP addresses on a single VLAN

Our ISP has given us a /25 range of IP addresses on our lease line. We want to be able to create several VLAN's and direcly assign each VLAN with any number of these WAN IP addresses. For example - ...
0
votes
0answers
38 views

CentOS Server can't exit pfSense Network

Not sure if this is a routing issue or a firewall issue, or maybe a problem with the ifcfg-file of the CentOS machine. Here is the situation. I just got a 600Mb fiber connection from my ISP into the ...
0
votes
0answers
177 views

Strongswan ipsec linux not passing traffic after established

I currently have two PFsense routers that connect over the WAN using a similar configuration and traffic is passed with no issue. I'm trying to set up a 2nd path over 4G WWAN and have to use linux ...
2
votes
2answers
142 views

How to configure pfsense to allow vpn clients to appear as if they are coming from the PFSense WAN?

I have a specific host I need to get to via ssh (call it 'work'). I have a static IP at my client location (call it 'client') to enable access to this remote 'work' box. The people at 'work' then ...
1
vote
0answers
101 views

PFSense NATing to a load balanced server

I apologize for not being able to post the network diagram here but as this is my first time asking a question here I am not allowed. So here is the scenario: We have a site that is build with a ...
0
votes
1answer
77 views

External IP becomes unreachable sporadically

I have a very strange problem - We have a lease line with 50 odd external IP addresses on it. We do a 1:1 assignment and Outgoing IP assignment to interfaces on a pfsense proxy server. For each ...
1
vote
0answers
104 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it ...
0
votes
1answer
488 views

Openvpn: no response from server in tcp handshake

I am attempting to connect to an openVPN server that I created on pfSense 2.2.3 by using tunnelblick on my Macbook. Whenever I attempt to connect using either OpenVPN version 2.3.6 or 2.3.7 (all that ...
0
votes
0answers
72 views

What could cause files > 50kb to timeout? (PFSense Router)

I've got a PF Sense box acting as a gateway work the LAN at my work, with packet filtering enabled (for QOS purposes) files > 50kb cannot be attached to email, uploaded to web pages etc... even ...
-1
votes
1answer
465 views

No Internet on router with pfSense [closed]

Sorry in advance if a similar question has already been posted. I am with Sky for broadband and have a router providing DSL connectivity. I have a cheap 64 bit desktop PC running pFsense as a ...
1
vote
1answer
557 views

Routing between pfSense Subnets and IPSec VPN

I have a pfSense Router, which is the endpoint of a site-to-site IPSec VPN. In the pfSense the main LAN Interface is 10.0.2.1/24 and it has a virtual IP 10.0.125.1/24 The IPSec Phase 2 connects the ...
0
votes
0answers
70 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
1
vote
0answers
30 views

Summary Error Configuring HAProxy via pfSense

I configured a frontend record that is refering to a backend server pool with one record. The referred HAProxy Backend server pool contains a single record with the Max con value set to 2000. In the ...
0
votes
0answers
407 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
0answers
171 views

Cant ping openvpn server from pfsense lan

I have a PF sense set up as a Openvpn client. The server is a Windows server running openvpn. Behind the pfsense is a lan. Strange enough I can't ping the server at 10.8.0.1 using the clients in the ...