pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

5
votes
1answer
899 views

pfsense 2.0 traffic priority - set full priority for single host

I have a network with several computers all on the same network and since I have very limited bandwidth I would like to prioritize traffic almost like a CPU scheduler prioritize processes. Example: ...
1
vote
1answer
42 views

Can't connect to Ubuntu server on LAN from pfSense VPN

Quick summary pfSense server is connected to the WAN and LAN. This box also has an OpenVPN server running. The LAN clients use 192.168.20.0/24 OpenVPN clients use 192.168.30.0/24 On the LAN I ...
1
vote
1answer
52 views

pfsense Multiple WAN DNS issue : when primary fails , the DNS systems stops

I am using pfsense 2.2.6-RELEASE. My configuration is as follows: Two static WAN, One LAN Using google and opendns Configured WAN-Load balancing and WAN-Fail-over Using aliases in firewall rules ...
1
vote
1answer
299 views

pfsense NAT router - “live with” double nat (airport express)

I have a setup that have worked for years with a fiber to a NAT router to clients. Clients are typically cheap NAT routers of any kind. Setup like this Fiber from ISP | Router, pfsense -WAN - ...
1
vote
1answer
718 views

Use Framed-IP-Address RADIUS attribute for IP allocation with DHCP on Windows Server 2012R2

I have configured a DHCP server on Windows Server with an NPS Policy, connected to a FreeRADIUS2 server running on pfSense. Authentication is based on MAC address. If MAC address is not present in ...
1
vote
1answer
2k views

pfSense Outbound NAT not working

I have a VMware vSphere Hypervisor with several Hadoop VMs running. Since our support activated Port Security on our router, only two MACs are allowed to be connected to one port of the router. This ...
1
vote
1answer
409 views

Changing Network Subnet Limited User Access

Our network was originally running a 192.168.3.1 /24 network with 192.168.3.1 being the gateway on a pfSense box. We decided to increase our IP range by changing the network to a 192.168.3.1 /23 ...
1
vote
1answer
2k views

Pfsense OpenVPN Site to Site Routing issues

I know this question has been asked a plethora of times before and I have looked over probably 100 different answers and still can't seem to get this to work. I'm trying to create a very simple site ...
1
vote
1answer
1k views

pfSense - Site to Site OpenVPN

I have two pfSense 2.1 servers running with LANs of 192.168.0.0/24 and 192.168.10.0/24. The pfSense servers are 192.168.0.1 and 192.168.10.1 I just configured an OpenVPN site to site tunnel, that ...
1
vote
1answer
2k views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
1
vote
1answer
289 views

What is the cause of duplicate SA's and SPD's in IPSec L2L VPN?

Although I've been using pfSense now for some time and like it very much, I haven't been able to shake duplicate SA's. I've checked all the obvious stuff - making sure configurations match on both ...
1
vote
1answer
580 views

pfsense firewall filter rules behind nat?

i am new in pfsense i have vmware which pfsense and windows xp are installed on them pfsense in using ip 192.168.44.1 for LAN and 192.168.121.129 for wan (which is NAT) my win xp ip is 192.168.44.2 ...
1
vote
1answer
318 views

NAT and ISP Subnet when load balancing on pfsense?

I have a pfsense box that I'm trying to plan the configuration for. I am going to be load balancing two ISP's, each with their own /29 static IP subnet. The question I have is in relation to the way ...
1
vote
1answer
560 views

Network Gateway Options for Small Office: Cisco 800 series router vs. Linux/*BSD (e.g. pfSense) on a white box vs. reflashed DD-WRT/Tomato/OpenWRT

Our existing network gateway's hardware has just failed (it was a repurposed desktop machine running Debian + Shorewall that we threw together), and we're looking to replace it. For now, we've fallen ...
1
vote
1answer
395 views

Running software router in VM, MAC Address issue

Hey everyone. I am trying to setup a slew of VM's for testing out a bunch of routing software packages like m0n0wall, pfsense, endian, vyetta, and more. I have a beefy vm server with 2 onboard NIC's ...
1
vote
1answer
1k views

PFSense VPN Routing

We use PFSense firewalls at three installations with the following LAN networks: 1.) Datacenter #1: 10.0.0.0/16 2.) Datacenter #2: 10.1.0.0/16 3.) HQ: 10.2.0.0/16 All of these locations are ...
0
votes
1answer
54 views

pfsense bridge of vlan interfaces

Hardware Setup AMD E1-2100 Mini-ITX Motherboard with Onboard Gigabit (re0) Intel PCI Express (x4) 4-port Gigabit Adapter (igb[0123]) Software Setup pfSense v2.3 I'm trying to replicate my ...
0
votes
1answer
51 views

pfsense ipsec vpn to amazon aws not connecting

I'm trying to set up an ipsec vpn from our DC networks to our amazon vpc, so a site2site aka network to network connection. For this I've set up pfsense 2.2.6 and gave it a public IP on a WAN ...
0
votes
1answer
34 views

Install and run pfsense on the same USB stick?

I'd like to run a pfSense box from just a thumb drive (possibly because I don't know why I need a hard drive?). I have tested pfSense booting and running from the embedded USB image, and got it ...
0
votes
1answer
81 views

pfSense bridging Wi-Fi and LAN: allow access between Wi-Fi and LAN

EDIT: Why would I want to do such a thing? This is a test, and there is 1 machine behind pfSense that I wish to manage, and Wi-Fi makes that easy. Carrying on: The auto-suggessted topics by Server ...
0
votes
0answers
111 views

Routing host traffic through Linux KVM (pfSense) router

I have a pfSense virtual machine running on a CentOS 7 host. The host has 2 network adapters, enp1s0 and enp3s0. enp3s0 is connected to a bridge br1. My pfSense virtual machine is also connected to ...
0
votes
0answers
69 views

pfSense Load Balancing sticky connection timeout

In pfSense 2 under Settings > Advanced > Miscellaneous there is an option to enable sticky connections for the Load Balancing. If you enable the use of sticky connections you can define the source ...
0
votes
0answers
472 views

pfsense WAN Gateway Offline or pending Status

I have a strange issue as my WAN is either offline or in pending state. I have checked on my Laptop and its working fine. I have tried to swap ISP on network card and again the network card works ...
0
votes
0answers
33 views

mod_rewrite index.php behind varnish server

I have on my pfSense router a Varnish server currently with 4 backends. 3 of the backends go to the same server on my network and the 4th goes to my development server I'm using to get some webapps ...
0
votes
0answers
19 views

Not able to block site on pfsense firewall with squid+squidgaurd

Currently running pfsense latest version and set the transparent proxy using squid with squidgaurd for filter but https is not enable because this feature not work well. So that I want to block sites ...
0
votes
0answers
48 views

Connection timed out when using ssh to connect to a machine on a pfSense subnet (using port forwarding)

I get a connection time out when I try to ssh into a machine inside a pfSense firewall network. The computer I am connecting from is on the same subnet as the pfSense firewall. That is my computer's ...
0
votes
0answers
26 views

Super confused about possible NAT kerfuffle

I have a PFSense running on a ZBox at the moment - there are 4 Interfaces: LAN 1(192.168.2.0/24) WAN 1(192.168.2.0/24) (I know, same address, but this IF only connects to a modem, everything ...
0
votes
0answers
33 views

squid+squidgaurd not working in bridge mode in pfsense

I have installed pfsense on bridge mode and without squid it's working but if i enable to squid and squidgaurd then internet is not working. i have setup as below. internet--netgear-------WAN ...
0
votes
0answers
46 views

How would a CARP virtual IP defined with the wrong subnet mask manifest itself?

I have a VMware cluster that hosts two pfSense virtual appliances in a CARP configuration: +-----------+------------------+------------------+--------------+ | Interface | pf0 | ...
0
votes
0answers
286 views

One Way IPSEC VPN Traffic (Centos/Ubuntu to pfSense)

I have servers sitting at Digital Ocean and I need one of them to be able to get into my internal network and pull information via SNMP. The particulars: (server)--DO Private Net--(vpn-2 ...
0
votes
0answers
109 views

pfSense + OpenVPN: Can not Ping Remote LAN

Problem: I can ping pfSense OpenVPN server from the OpenVPN client, but can not ping devices on the remote pfSense/OpenVPN LAN. Situation description: Below diagram displays my small test network ...
0
votes
0answers
125 views

Why does Pfsense not allow me to see clients connected to local network or other VPN clients?

Hi so essentially I want to be able to remote desktop into a client on another network via the web through OpenVPN. However I can not see any of the client that are on the local LAN network. even ...
0
votes
0answers
231 views

Email transmission delays between Gmail and our server

A few days ago I started setting up a mail server for our company: OS: Debian MTA: Postfix DNS: bind9 Firewall: pfSense Port forwarding for ports 25 and 53 through pfSense for passing on DNS and ...
0
votes
0answers
98 views

Pfsense DHCPv6 cannot configure to work properly

I have an IPv6 network. Local network with no connection to other networks (for testing). So I have configured an IPv6 LAN interface of pfsense with 64bit mask. And enabled DHCPv6 Server on LAN. The ...
0
votes
0answers
37 views

CentOS Server can't exit pfSense Network

Not sure if this is a routing issue or a firewall issue, or maybe a problem with the ifcfg-file of the CentOS machine. Here is the situation. I just got a 600Mb fiber connection from my ISP into the ...
0
votes
0answers
167 views

Strongswan ipsec linux not passing traffic after established

I currently have two PFsense routers that connect over the WAN using a similar configuration and traffic is passed with no issue. I'm trying to set up a 2nd path over 4G WWAN and have to use linux ...
0
votes
0answers
69 views

What could cause files > 50kb to timeout? (PFSense Router)

I've got a PF Sense box acting as a gateway work the LAN at my work, with packet filtering enabled (for QOS purposes) files > 50kb cannot be attached to email, uploaded to web pages etc... even ...
0
votes
0answers
59 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
0
votes
0answers
389 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
0answers
159 views

Cant ping openvpn server from pfsense lan

I have a PF sense set up as a Openvpn client. The server is a Windows server running openvpn. Behind the pfsense is a lan. Strange enough I can't ping the server at 10.8.0.1 using the clients in the ...
0
votes
0answers
39 views

Windows 7 behavior on network link between SonicWALL and pfSense

I have two networks behind two different firewall at the same site. I have linked them together by using a spare interface on each device. Network 1 - pfSense 10.0.10.0/24 Network 2 - SonicWALL ...
0
votes
0answers
741 views

How to load balance traffic from local Squid in pfsense when using Multi-WAN?

I have a multi-wan PFSense setup with Squid for HTTP(S) navigation. However one of the links (the default WAN gateways) is always used at 100% while the other link is rarely used. Reading the ...
0
votes
0answers
152 views

Network configuration for Virtual machine based firewall

I have this physical configuration: And I'm planning to install IPFire (or similar firewall : pfSense or Sophos UTM) on a virtual machine on the Active Directory Server to control traffic between ...
0
votes
0answers
94 views

Route 2 external IP ranges using pfSense

I have pfSense running on some hardware routing my /27 block of IP addresses assigned by my ISP. I asked for and got another /26 block that I want to send all of the block to a single server (it will ...
0
votes
0answers
910 views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
0
votes
0answers
3k views

pfsense reverse proxy + HTTPS/SSL interception

I have pfSense 2.1.5 and squid3-dev 3.3.10 configured as reverse proxy for internal http web server and server proxy (port 3128).It works. Activating HTTPS/SSL interception (Enable SSL filtering) on ...
0
votes
0answers
912 views

site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops

I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode. I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at ...
0
votes
0answers
1k views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
0answers
400 views

pfSense LAN network unable to communicate with remote network on OpenVPN TAP connection

I set up pfSense to connect to a remote network (192.168.122.0/24) that only accepts tap connections. The connection is being initiated successfully. pfSense (192.168.1.1/24) itself can connect to ...
0
votes
0answers
996 views

pfSense NAT routing using VLANs

We already have pfSense installed and it is working for our single IP address on 1.1.1.1. We also have a further 3 ip addresses (1.1.1.2, 1.1.1.3, 1.1.1.4) which are set up as VLANs on the WAN ...