pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

1
vote
4answers
273 views

How to subnet hosted VMs

I have a network of VMs each having a LAN IP address and a public IP address. They each have a 1:1 NAT map for public access via the public IP for HTTP, SSH etc. I'm trying to figure out a way to ...
-3
votes
3answers
734 views

How do I learn IPSec VPN implementation on FreeBSD from pfSense

I've been trying to figure out a complete working solution for IPSec VPN implementation on FreeBSD but with no luck till now. pfSense seems did a fantastic job on supporting IPSec and even for mobile ...
1
vote
2answers
2k views

Pfsense: Inbound Load Balancing https with sticky connection

first of all I'm very sorry for my English... This is my scenario: Internet Firewall+LB: pfsense_1(Active) + pfsense_2(Passive) in CARP Pool servers: 3 x nginx(PHP5+HTTP+HTTPS) Pfsense 1 and 2 ...
0
votes
2answers
247 views

Setting up new gateway to split 1 internet feed to 3 networks

I am looking for some words of wisdom from the members of this forum. I do consulting work for three related non-profits in the same building. The three have decided to share the same internet pipe ...
0
votes
2answers
679 views

Reverse Proxy multi-subnets

I'm having some problems that I think I should not be ordinarily facing. But after being beating senseless by this, I'm calling out uncle. I have previously posted something along these lines here: ...
-1
votes
2answers
3k views

Pfsense 1.2.3 transparent proxy not blocking https

I have configure squid in pfsense 1.2.3, and was able to block http sites using a black list, but I was not able to block https sites. Any solutions ?
0
votes
1answer
911 views

What “traffic flow” would be right in a transparent “squid + dansguardian” pfsense setup?

my thought (i'm not sure if its right): lan interface traffic comes into port 80 destination port is redirected to 8080 (dans guardian) dansguardian outputs traffic to port 3128 (squid) squid ...
0
votes
1answer
649 views

pfsense live cd and boot options

I donwloaded pfsense live cd 2.1.3 and now I want to run pfsense from an usb cdrom drive. It loads a while and than crahses with "unable to mount ..." I know I have to choose boot option 3 in order ...
0
votes
1answer
441 views

site to site vpn between sonicwall and pfsense

The problem i am facing is establishment of a site to site VPN in between pfSense( version 2.0.1) and SonicWall Pro2040 Enhanced ( Firmware Version: SonicOS Enhanced 4.2.1.4-7e) . All of the ...
0
votes
1answer
229 views

pf not execute udp port specific block rule

The traffic I want to block can be sniffed as below with tcpdump: 19:16:22.391164 IP 95.95.95.95.2036 > 10.10.10.10.443: UDP, length 8192 So I wanted to write a rule block any udp destination ...
0
votes
1answer
575 views

Pfsense OpenVPN tunnel goes down

I have a pfSense openVPN tunnel problem. I have 10 sites, but sometimes some of the sites automatically go down, so I need to restart the openVPN service on the client side. What can I do to fix it? ...
0
votes
1answer
408 views

pfSense and ASA 5505

I've got an ASA-5505 (v8.4) in production that handles VPN connections and some public web servers. I wanted to offload user HTTP traffic onto a second Internet connection so I put together a pfSense ...
0
votes
1answer
638 views

SSH session through an IPSec VPN tunnel freezes when command outputs longer text

I connect to a QNap NAS (Ubuntu 4.1.2) in the office through an IPSec tunnel established between two pfSense firewalls. This has worked fine for months. I recently replaced the NAS with a newer model ...
0
votes
1answer
346 views

No Internet access after successful failover?

I am using pfSense 2.0.2 and want to set up a failover between my normal WAN connection (GW_WAN) and a 3G surfstick (GW_OPT8). I put both in a gateway group called WAN_FAILOVER: GW_WAN Tier1 ...
0
votes
1answer
415 views

cisco vpn client randomly disconnects with pfSense

My network has two gateways, one is a pfSense box that everyone uses. The other one is a TP-Link firewall essentially for tests. Some machines inside my network need to access a VPN through the Cisco ...
0
votes
1answer
320 views

PFSense new network, NAT and Firewalling

We have a PFSENSE installation with a few physical interfaces defined: 192.168.1.0/24 - LAN 192.168.2.0/24 - WIFI 192.168.3.0/24 - SERVERS 10.61.88.0/23 - New Requirement..... read on The new ...
0
votes
1answer
679 views

M0n0wall won't pass traffic on different LAN subnets unless “Bypass firewall rules” is checked

I have a working configuration, but a question is bugging me. The question centers around having multiple subnets on a single interface. LAN: 10.10.10.1/24 OpenVPN Server LAN IP: 10.10.10.250 ...
-1
votes
1answer
1k views

Pfsense Virtual IP NATing

Am setting up Pfsense 2.0 but am stuck when it comes to port forwarding/Natting. I've done it before but not using Virtual IPs. Say I have WAN on 11.11.11.1 and LAN on 192.168.5.5, I have added a ...