pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

0
votes
0answers
166 views

Routing host traffic through Linux KVM (pfSense) router

I have a pfSense virtual machine running on a CentOS 7 host. The host has 2 network adapters, enp1s0 and enp3s0. enp3s0 is connected to a bridge br1. My pfSense virtual machine is also connected to ...
2
votes
0answers
50 views

SquidGuard holding navigation

This is my first question within ServerFault. So I beg you pardon if the question here is a little out of context or too long. I haven't found anything on the internet so I'm recurring to you. I'm ...
0
votes
0answers
106 views

pfSense Load Balancing sticky connection timeout

In pfSense 2 under Settings > Advanced > Miscellaneous there is an option to enable sticky connections for the Load Balancing. If you enable the use of sticky connections you can define the source ...
0
votes
0answers
1k views

pfsense WAN Gateway Offline or pending Status

I have a strange issue as my WAN is either offline or in pending state. I have checked on my Laptop and its working fine. I have tried to swap ISP on network card and again the network card works ...
1
vote
2answers
589 views

pfSense NAT not passing traffic

I have a pfSense 2.2.6 firewall setup. Public IP: xx.xx.174.162/28 Virtual IP: xx.xx.174.170/32 I created a NAT rule setup: WAN TCP * * xx.xx.174.170 80 (HTTP) 10.0.1.60 80 (...
-3
votes
1answer
304 views

sftp not working, but ssh is working [closed]

I have a nat rule in my firewall to allow port 22 traffic through pfsense. I am able to SSH into my server but sftp through filezilla is getting timed out and not connecting. I tried with the local ...
0
votes
1answer
229 views

How to set 1Mb speed per host in pfsense

Currently we are using pfsense latest version and I want to assign download speed upto 1Mbps per host and also setup squid proxy and working on bridgh mode in pfsense box.
1
vote
1answer
94 views

Unable to access IP addresses within my own country. pfSense showing packets hit WAN

I have a pfSense firewall that has a WAN with multiple public IP addresses. I use NAT to port forward certain external IPs to internal IPs. I can connect from anywhere except same country. When ...
3
votes
1answer
30 views

Is it possible for a router misconfiguration to cause a telephone line fault/issue? [closed]

I apologise if this is posted in the wrong stackexchange but I am currently in the process of building and testing a router running pfSense. Having recently had a line fault, the BT Openreach ...
0
votes
0answers
45 views

mod_rewrite index.php behind varnish server

I have on my pfSense router a Varnish server currently with 4 backends. 3 of the backends go to the same server on my network and the 4th goes to my development server I'm using to get some webapps ...
6
votes
1answer
675 views

pfSense not forwarding DNS to concerned VPS

We are running Xenserver hyper-visor and I created 5 VM and 1VM for pfSense so all VMs are in 172.16.0.0/24 range attached to pfSenese LAN interface. pfSense has two interfaces: LAN (172.16.0.100 as a ...
0
votes
0answers
31 views

Not able to block site on pfsense firewall with squid+squidgaurd

Currently running pfsense latest version and set the transparent proxy using squid with squidgaurd for filter but https is not enable because this feature not work well. So that I want to block sites ...
0
votes
0answers
68 views

Connection timed out when using ssh to connect to a machine on a pfSense subnet (using port forwarding)

I get a connection time out when I try to ssh into a machine inside a pfSense firewall network. The computer I am connecting from is on the same subnet as the pfSense firewall. That is my computer's ...
0
votes
0answers
29 views

Super confused about possible NAT kerfuffle

I have a PFSense running on a ZBox at the moment - there are 4 Interfaces: LAN 1(192.168.2.0/24) WAN 1(192.168.2.0/24) (I know, same address, but this IF only connects to a modem, everything ...
0
votes
1answer
79 views

SSL certificate issue with git on pfsense

i have installed pfsense latest version and user are working on phpstorm and netbeans editors with git (https) and on gateway i have installed pfsense and configure transparent proxy using squid+...
1
vote
1answer
77 views

pfSense security: is the host of a virtual pfSense firewall accessible via ssh when the network interface has been assigned to pfSense?

Can the host of a virtual pfSense machine be accessed (via ssh) when the WAN interface is assigned to pfSense? Would the drivers need to be installed on the host, guest or both? Would it respond to ...
0
votes
1answer
97 views

Assign WAN IP on internal NAT network

I have a static WAN IP address (in the example 77.88.99.166) that is provided by a DSL modem that also has a static IP address (77.88.99.165). The modem interfaces with a firewall/NAT router (green) ...
0
votes
1answer
36 views

Confused about virtual network interfaces needed for network

I am relatively new to networking and have researched a lot about the topic however I am still confused as to what kind of virtual set-up I need. I have linked a diagram of the network over here: ...
0
votes
1answer
103 views

Would it make sense to have Squid running behind a high latency WAN?

We have a satellite uplink connected to a PFsense router. Our connection has a latency of +- 750ms. Would it make sense to configure squid to cache much data to improve loading times of websites? I ...
0
votes
0answers
34 views

squid+squidgaurd not working in bridge mode in pfsense

I have installed pfsense on bridge mode and without squid it's working but if i enable to squid and squidgaurd then internet is not working. i have setup as below. internet--netgear-------WAN ...
0
votes
1answer
254 views

Pfsense Access LAN through WAN (ping, shared folders etc)

My network setup is like this {Internet} <-> (Goverment Router) <-> (pfSense with http and https interception)<->(LAN Switch) <-> Many pcs on the LAN On the goverment router there are ...
1
vote
1answer
81 views

Configure STP in WAN Bridge

Hardware: 2 pFsense Box 1 Switch Dlink DGS-3324SR I need to configure a STP into my network because i'm trying to set a wan redundant bridge for a web server. (Take a look to my Network Diagram) So ...
1
vote
0answers
369 views

certificate issue in squid3 on pfsense

I am using pfsense latest version and installed squid3 with Transparent HTTP Proxy and HTTPS/SSL interception with squidguard but many site are not open and getting below errors. (54) Connection ...
1
vote
0answers
170 views

Routing public IP addresses to customers in a WISP setup

We have a fibre leaseline with a /29 range for our pfSense WAN port 61.179.145.40/29 So the WAN of our pfSense box is 61.179.145.42 with a gateway of 61.179.145.41. Our ISP has also routed 61.179....
3
votes
0answers
208 views

pfSense Internal Traffic Policy Based Routing

What is the current and correct way to apply policy based routing to pfSense internal traffic (originating from the firewall itself)? Creating a floating rule with the WAN interfaces selected, ...
1
vote
0answers
550 views

PFSENSE - Squid - Transparent Mode not working correctly

I am having this weird problem with squid (both squid and squid 3). After installing, i forwarded all my traffic from mikrotik in port 3128 but the requests seemed to fail. After researching I noticed ...
1
vote
0answers
53 views

Connect pfsense and VPC in AWS by ipsec tunnel

I'm trying to connect my pfsense box with AWS VPC by ipsec tunnel. I read couple of tutorials and all looks good. But ... Yes, always there is some but. When only one person is working then all is ...
2
votes
1answer
174 views

How to do parallel queries to the upstream DNS using Unbound?

Can I configure Unbound as forwarder but that it alway send a query to ALL upstream DNS servers that I configure and take as valid reply the first in arrive? Such feature exist in nsmasq pfSense: ...
1
vote
1answer
762 views

Forward pfsenselogs to graylog

I was wondering if it is possible to forward pfsense logs (including snort) to a graylog2 server? And how can this be acomplished?
0
votes
1answer
51 views

Changes does not take effect without reboot

I am using Pfsense : 2.2.4-RELEASE (i386) I moved the pfsense configuration from one machine to another by full backup export-import afterwards. And the last move was on a fresh pfsense ...
0
votes
0answers
74 views

How would a CARP virtual IP defined with the wrong subnet mask manifest itself?

I have a VMware cluster that hosts two pfSense virtual appliances in a CARP configuration: +-----------+------------------+------------------+--------------+ | Interface | pf0 | ...
1
vote
1answer
131 views

Obtaining pfSense graphs on another server

I'm trying to be able to get the traffic and system graphs from a pfSense router, which is only available on a specific management IP, onto my monitoring server in some way. So far I've thought of: ...
0
votes
2answers
338 views

openvpn ubuntu client to pfsense server. Timed out

Trying to get openvpn to work so that I may connect from my Ubuntu 14.10 workstation to a pfsense 2.0.3 server using OpenVPN. I just installed the network-manager plugin and created a new vpn ...
0
votes
0answers
346 views

One Way IPSEC VPN Traffic (Centos/Ubuntu to pfSense)

I have servers sitting at Digital Ocean and I need one of them to be able to get into my internal network and pull information via SNMP. The particulars: (server)--DO Private Net--(vpn-2 server)--...
0
votes
0answers
116 views

pfSense + OpenVPN: Can not Ping Remote LAN

Problem: I can ping pfSense OpenVPN server from the OpenVPN client, but can not ping devices on the remote pfSense/OpenVPN LAN. Situation description: Below diagram displays my small test network ...
0
votes
0answers
145 views

Why does Pfsense not allow me to see clients connected to local network or other VPN clients?

Hi so essentially I want to be able to remote desktop into a client on another network via the web through OpenVPN. However I can not see any of the client that are on the local LAN network. even ...
0
votes
0answers
284 views

Email transmission delays between Gmail and our server

A few days ago I started setting up a mail server for our company: OS: Debian MTA: Postfix DNS: bind9 Firewall: pfSense Port forwarding for ports 25 and 53 through pfSense for passing on DNS and ...
0
votes
0answers
118 views

Pfsense DHCPv6 cannot configure to work properly

I have an IPv6 network. Local network with no connection to other networks (for testing). So I have configured an IPv6 LAN interface of pfsense with 64bit mask. And enabled DHCPv6 Server on LAN. The ...
0
votes
1answer
129 views

VLANs and Access Point

I have all my network (wired and WiFi) in the same VLAN. I just bought a new Access Point, and am trying to set WiFi Clients to be in VLAN 2. On the AP, I set it to assign VLAN 2 to the clients, and ...
2
votes
1answer
305 views

pfSense can't access https website

I have just installed pfSense on a PC Engines APU1D4 to evaluate as an alternative to a Soekris 5501 + OpenBSD based setup, I have a PPPoE WAN configuration. The pf rules, NAT and PPPoE ...
0
votes
2answers
57 views

Host command tries several servers

I have a DNS server (pfSense) for my LAN, working perfectly, but some timeouts occur that I can't explain. Especially the "host" command gives the correct answer immediately, but then tries 2 times ...
3
votes
4answers
2k views

pfSense not forwarding back packets

I have a pfSense box setup where my WAN interface (em0) is set up in my local network (192.168.1.100) and my LAN interface (em1) is a private network of its own (10.0.0.1). The end goal is to have the ...
1
vote
0answers
174 views

Disabling bypass mode on Intel NICs

I'm trying to install PFSense on some decommissioned firewall gear. I've installed PFSense just fine, except for the two NICs are stuck in bypass mode. I don't see any options in the BIOS to edit ...
0
votes
1answer
396 views

PFsense postfix troubleshooting - SMTP headers [closed]

I am trying to setup google as mail relay but running into some troubles. I get an error that 550-5.1.1 The email account that you tried to reach does not exist My custom main in pfsense looks ...
0
votes
1answer
234 views

PFSense / Snort / OpenVPN - one WAN interface

I have a pfsense box running both Snort and OpenVPN. The VPN worked great before installing Snort, now intermittently I cannot connect. Should I whitelist the port that the VPN uses on the WAN ...
1
vote
1answer
334 views

pfsense NAT router - “live with” double nat (airport express)

I have a setup that have worked for years with a fiber to a NAT router to clients. Clients are typically cheap NAT routers of any kind. Setup like this Fiber from ISP | Router, pfsense -WAN - x.x.x....
0
votes
1answer
236 views

Route Public Subnet AND create NAT internal subnet

my ISP just gave me a subnet of public IP addresses and a single public IP in their network so that I can route those. I'm trying to use pfsense to do this. Basically I want to expose the public IPs ...
0
votes
1answer
128 views

Use multiple WAN IP addresses on a single VLAN

Our ISP has given us a /25 range of IP addresses on our lease line. We want to be able to create several VLAN's and direcly assign each VLAN with any number of these WAN IP addresses. For example - ...
2
votes
2answers
164 views

How to configure pfsense to allow vpn clients to appear as if they are coming from the PFSense WAN?

I have a specific host I need to get to via ssh (call it 'work'). I have a static IP at my client location (call it 'client') to enable access to this remote 'work' box. The people at 'work' then ...
1
vote
0answers
116 views

PFSense NATing to a load balanced server

I apologize for not being able to post the network diagram here but as this is my first time asking a question here I am not allowed. So here is the scenario: We have a site that is build with a ...