pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

5
votes
1answer
77 views

pfSense - IKEv2 with EAP-RADIUS: Any fallback option if the RADIUS server is down?

I'm deploying an IKEv2 VPN authenticating against a RADIUS service within a pfSense 2.3-RELEASE box. But I'm afraid of the complications of this approach when the RADIUS server is down. Since the ...
5
votes
1answer
921 views

pfsense 2.0 traffic priority - set full priority for single host

I have a network with several computers all on the same network and since I have very limited bandwidth I would like to prioritize traffic almost like a CPU scheduler prioritize processes. Example: ...
1
vote
1answer
19 views

pfSense Shell : apply config modification without reboot

I'm currently trying to edit the configuration of a running pfSense in production with the pfSsh.php shell. By using the pfSsh.php shell I'm able to modify the configuration but once I write it, it ...
1
vote
1answer
25 views

Can't connect to PFSense webconfig (virtual machine)

I've setup a new PFSense VM (version 2.2.2) in virtualbox, it's connected to three network interfaces, vboxnet6 and vboxnet7 (both host-only adapters) and eth0 (bridged). In this case vboxnet6 is ...
1
vote
1answer
163 views

Can't connect to Ubuntu server on LAN from pfSense VPN

Quick summary pfSense server is connected to the WAN and LAN. This box also has an OpenVPN server running. The LAN clients use 192.168.20.0/24 OpenVPN clients use 192.168.30.0/24 On the LAN I ...
1
vote
1answer
100 views

pfsense Multiple WAN DNS issue : when primary fails , the DNS systems stops

I am using pfsense 2.2.6-RELEASE. My configuration is as follows: Two static WAN, One LAN Using google and opendns Configured WAN-Load balancing and WAN-Fail-over Using aliases in firewall rules ...
1
vote
1answer
337 views

pfsense NAT router - “live with” double nat (airport express)

I have a setup that have worked for years with a fiber to a NAT router to clients. Clients are typically cheap NAT routers of any kind. Setup like this Fiber from ISP | Router, pfsense -WAN - x.x.x....
1
vote
1answer
974 views

Use Framed-IP-Address RADIUS attribute for IP allocation with DHCP on Windows Server 2012R2

I have configured a DHCP server on Windows Server with an NPS Policy, connected to a FreeRADIUS2 server running on pfSense. Authentication is based on MAC address. If MAC address is not present in ...
1
vote
1answer
2k views

pfSense Outbound NAT not working

I have a VMware vSphere Hypervisor with several Hadoop VMs running. Since our support activated Port Security on our router, only two MACs are allowed to be connected to one port of the router. This ...
1
vote
1answer
447 views

Changing Network Subnet Limited User Access

Our network was originally running a 192.168.3.1 /24 network with 192.168.3.1 being the gateway on a pfSense box. We decided to increase our IP range by changing the network to a 192.168.3.1 /23 ...
1
vote
1answer
2k views

Pfsense OpenVPN Site to Site Routing issues

I know this question has been asked a plethora of times before and I have looked over probably 100 different answers and still can't seem to get this to work. I'm trying to create a very simple site ...
1
vote
1answer
1k views

pfSense - Site to Site OpenVPN

I have two pfSense 2.1 servers running with LANs of 192.168.0.0/24 and 192.168.10.0/24. The pfSense servers are 192.168.0.1 and 192.168.10.1 I just configured an OpenVPN site to site tunnel, that ...
1
vote
1answer
2k views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
1
vote
1answer
313 views

What is the cause of duplicate SA's and SPD's in IPSec L2L VPN?

Although I've been using pfSense now for some time and like it very much, I haven't been able to shake duplicate SA's. I've checked all the obvious stuff - making sure configurations match on both ...
1
vote
1answer
592 views

pfsense firewall filter rules behind nat?

i am new in pfsense i have vmware which pfsense and windows xp are installed on them pfsense in using ip 192.168.44.1 for LAN and 192.168.121.129 for wan (which is NAT) my win xp ip is 192.168.44.2 ...
1
vote
1answer
322 views

NAT and ISP Subnet when load balancing on pfsense?

I have a pfsense box that I'm trying to plan the configuration for. I am going to be load balancing two ISP's, each with their own /29 static IP subnet. The question I have is in relation to the way ...
1
vote
1answer
575 views

Network Gateway Options for Small Office: Cisco 800 series router vs. Linux/*BSD (e.g. pfSense) on a white box vs. reflashed DD-WRT/Tomato/OpenWRT

Our existing network gateway's hardware has just failed (it was a repurposed desktop machine running Debian + Shorewall that we threw together), and we're looking to replace it. For now, we've fallen ...
1
vote
1answer
395 views

Running software router in VM, MAC Address issue

Hey everyone. I am trying to setup a slew of VM's for testing out a bunch of routing software packages like m0n0wall, pfsense, endian, vyetta, and more. I have a beefy vm server with 2 onboard NIC's ...
1
vote
1answer
1k views

PFSense VPN Routing

We use PFSense firewalls at three installations with the following LAN networks: 1.) Datacenter #1: 10.0.0.0/16 2.) Datacenter #2: 10.1.0.0/16 3.) HQ: 10.2.0.0/16 All of these locations are ...
0
votes
1answer
92 views

pfsense(2.3.1_5) Squid transparent proxy redirects internally hosted sites from http to https

I'm having an issue with Squid's transparent proxy on my pfSense firewall. My company hosts an internal git server at the following address (for example purposes) http://git.gitserver.com/. From our ...
0
votes
1answer
32 views

VMWare ESXi 6 with pfsense as router on one nic for 3x windows server

I just ordered dedicated server i7 4790 with 16GB ram and 1xHDD 7200rpp, with one Nic (2 available, 1 is unplugged), 5 Ips. Is it possible to run 3x VMs (Windows server) and 1x VMs for pfsense on ...
0
votes
1answer
44 views

PfSense box not passing traffic between WAN and LAN

I just tried to insert a PfSense box into my network and I seem to have broken something in the process. Need some outside help to point out any errors I might have missed. The setup was working ...
0
votes
1answer
31 views

Nat or Static Route in pfsense

I installed PFsense on VMware with two interfaces. 1.WAN -> 192.168.1.110 ->Bridge Getaway->192.168.1.1=>Modem IP 2.LAN -> 10.1.1.1 ->LAN Segment how config Nat and ...
0
votes
1answer
203 views

pfsense bridge of vlan interfaces

Hardware Setup AMD E1-2100 Mini-ITX Motherboard with Onboard Gigabit (re0) Intel PCI Express (x4) 4-port Gigabit Adapter (igb[0123]) Software Setup pfSense v2.3 I'm trying to replicate my ...
0
votes
1answer
142 views

pfsense ipsec vpn to amazon aws not connecting

I'm trying to set up an ipsec vpn from our DC networks to our amazon vpc, so a site2site aka network to network connection. For this I've set up pfsense 2.2.6 and gave it a public IP on a WAN ...
0
votes
1answer
150 views

Install and run pfsense on the same USB stick?

I'd like to run a pfSense box from just a thumb drive (possibly because I don't know why I need a hard drive?). I have tested pfSense booting and running from the embedded USB image, and got it ...
0
votes
0answers
169 views

Routing host traffic through Linux KVM (pfSense) router

I have a pfSense virtual machine running on a CentOS 7 host. The host has 2 network adapters, enp1s0 and enp3s0. enp3s0 is connected to a bridge br1. My pfSense virtual machine is also connected to ...
0
votes
0answers
106 views

pfSense Load Balancing sticky connection timeout

In pfSense 2 under Settings > Advanced > Miscellaneous there is an option to enable sticky connections for the Load Balancing. If you enable the use of sticky connections you can define the source ...
0
votes
0answers
1k views

pfsense WAN Gateway Offline or pending Status

I have a strange issue as my WAN is either offline or in pending state. I have checked on my Laptop and its working fine. I have tried to swap ISP on network card and again the network card works ...
0
votes
0answers
45 views

mod_rewrite index.php behind varnish server

I have on my pfSense router a Varnish server currently with 4 backends. 3 of the backends go to the same server on my network and the 4th goes to my development server I'm using to get some webapps ...
0
votes
0answers
31 views

Not able to block site on pfsense firewall with squid+squidgaurd

Currently running pfsense latest version and set the transparent proxy using squid with squidgaurd for filter but https is not enable because this feature not work well. So that I want to block sites ...
0
votes
0answers
69 views

Connection timed out when using ssh to connect to a machine on a pfSense subnet (using port forwarding)

I get a connection time out when I try to ssh into a machine inside a pfSense firewall network. The computer I am connecting from is on the same subnet as the pfSense firewall. That is my computer's ...
0
votes
0answers
29 views

Super confused about possible NAT kerfuffle

I have a PFSense running on a ZBox at the moment - there are 4 Interfaces: LAN 1(192.168.2.0/24) WAN 1(192.168.2.0/24) (I know, same address, but this IF only connects to a modem, everything ...
0
votes
0answers
34 views

squid+squidgaurd not working in bridge mode in pfsense

I have installed pfsense on bridge mode and without squid it's working but if i enable to squid and squidgaurd then internet is not working. i have setup as below. internet--netgear-------WAN ...
0
votes
0answers
74 views

How would a CARP virtual IP defined with the wrong subnet mask manifest itself?

I have a VMware cluster that hosts two pfSense virtual appliances in a CARP configuration: +-----------+------------------+------------------+--------------+ | Interface | pf0 | ...
0
votes
0answers
349 views

One Way IPSEC VPN Traffic (Centos/Ubuntu to pfSense)

I have servers sitting at Digital Ocean and I need one of them to be able to get into my internal network and pull information via SNMP. The particulars: (server)--DO Private Net--(vpn-2 server)--...
0
votes
0answers
116 views

pfSense + OpenVPN: Can not Ping Remote LAN

Problem: I can ping pfSense OpenVPN server from the OpenVPN client, but can not ping devices on the remote pfSense/OpenVPN LAN. Situation description: Below diagram displays my small test network ...
0
votes
0answers
145 views

Why does Pfsense not allow me to see clients connected to local network or other VPN clients?

Hi so essentially I want to be able to remote desktop into a client on another network via the web through OpenVPN. However I can not see any of the client that are on the local LAN network. even ...
0
votes
0answers
285 views

Email transmission delays between Gmail and our server

A few days ago I started setting up a mail server for our company: OS: Debian MTA: Postfix DNS: bind9 Firewall: pfSense Port forwarding for ports 25 and 53 through pfSense for passing on DNS and ...
0
votes
0answers
119 views

Pfsense DHCPv6 cannot configure to work properly

I have an IPv6 network. Local network with no connection to other networks (for testing). So I have configured an IPv6 LAN interface of pfsense with 64bit mask. And enabled DHCPv6 Server on LAN. The ...
0
votes
0answers
427 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
0answers
818 views

How to load balance traffic from local Squid in pfsense when using Multi-WAN?

I have a multi-wan PFSense setup with Squid for HTTP(S) navigation. However one of the links (the default WAN gateways) is always used at 100% while the other link is rarely used. Reading the ...
0
votes
0answers
162 views

Network configuration for Virtual machine based firewall

I have this physical configuration: And I'm planning to install IPFire (or similar firewall : pfSense or Sophos UTM) on a virtual machine on the Active Directory Server to control traffic between ...
0
votes
0answers
99 views

Route 2 external IP ranges using pfSense

I have pfSense running on some hardware routing my /27 block of IP addresses assigned by my ISP. I asked for and got another /26 block that I want to send all of the block to a single server (it will ...
0
votes
0answers
1k views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
0
votes
0answers
3k views

pfsense reverse proxy + HTTPS/SSL interception

I have pfSense 2.1.5 and squid3-dev 3.3.10 configured as reverse proxy for internal http web server and server proxy (port 3128).It works. Activating HTTPS/SSL interception (Enable SSL filtering) on ...
0
votes
0answers
962 views

site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops

I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode. I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at ...
0
votes
0answers
1k views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
0answers
418 views

pfSense LAN network unable to communicate with remote network on OpenVPN TAP connection

I set up pfSense to connect to a remote network (192.168.122.0/24) that only accepts tap connections. The connection is being initiated successfully. pfSense (192.168.1.1/24) itself can connect to ...
0
votes
0answers
1k views

pfSense NAT routing using VLANs

We already have pfSense installed and it is working for our single IP address on 1.1.1.1. We also have a further 3 ip addresses (1.1.1.2, 1.1.1.3, 1.1.1.4) which are set up as VLANs on the WAN ...