pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

1
vote
1answer
4k views

PFSense Different Gateway for different Hosts

I have a firewall software currently in use, however I am looking at replacing this with PfSense. I am looking to effectively replicate some of the settings on the current firewall we have in place. ...
0
votes
1answer
2k views

pfsense live cd and boot options

I donwloaded pfsense live cd 2.1.3 and now I want to run pfsense from an usb cdrom drive. It loads a while and than crahses with "unable to mount ..." I know I have to choose boot option 3 in order ...
1
vote
1answer
1k views

pfSense - Site to Site OpenVPN

I have two pfSense 2.1 servers running with LANs of 192.168.0.0/24 and 192.168.10.0/24. The pfSense servers are 192.168.0.1 and 192.168.10.1 I just configured an OpenVPN site to site tunnel, that ...
0
votes
1answer
57 views

find static defined device on network

I have a 'simple share nas' that I am unable to discover on my network. It will not show up on the client list of my router, but I believe it is statically set to an adress for the auto discover ...
1
vote
1answer
608 views

Security implications of running SquidProxy on the main pfSense Firewall

I want to start a discussion about the pros and cons of running a SquidProxy server on the same pfSense box as the main firewall. Today I have one pfSense doing all the firewall things, like routing ...
0
votes
2answers
623 views

Active Directory: pfSense failing?

I have set up PfSense as a router and I have linked two Windows Servers to it. I can ping from SERVER01 to SERVER02 and PfSense can also ping to them. The problem is, on SERVER01 I have set up the ...
1
vote
0answers
1k views

pfsense Captive Portal redirect to <ip>:8000/$PORTAL_ACTION$

Something is wrong when I try to replace the portal login page with a customized one. After the sign in button is clicked, I was redirected to: (server IP):8000/$PORTAL_ACTION$. What is this ...
0
votes
1answer
204 views

How to import users (openvpn) into PFsense

I have a OpenVPN setup from an barebone server with ~60 users, and searching for a way to import those users with certificates into a new PFsense setup. They don't have passwords, because we use ldap ...
0
votes
2answers
220 views

Firewall high availability

Context: My company is on the verge of a major network improvement, we will expand our network to remote offices via radio bridges. The firewall will be handling: 3 mission critical networks 3 non ...
0
votes
1answer
120 views

Vlan between Pfsense and Proxim hotspots

We want to plugin some hotspots to an existing network. Because we will account the hotspot traffic, it is important to route all traffic from the hotspots to the hotspot router. I tried to do the ...
1
vote
1answer
10k views

pfSense routing between subnets behind OPT1 and LAN

pfSense short config summary: WAN interface is on a registered Internet block of addresses connected to ISP via fibre LAN interface has IP address 10.200.1.3/24 OPT1 interface has IP address ...
2
votes
1answer
289 views

pfSense memory reporting

I have a box onto which I just installed pfSense 2.1. The box has 16GB of RAM and is a quad-core processor (yeah, we're planning on doing some serious traffic and using a proxy filter with a lot of ...
0
votes
2answers
805 views

How can I configure access to pfSense on Xen

I have a new Xen installation on which I want to run virtual machines. My hoster provided me two separate IPs in different subnets, say x.x.x.x and y.y.y.y. I want to set up pfSense on Xen and ...
3
votes
1answer
5k views

How do I configure pfsense as an outbound VPN client?

We use pfsense as a router/firewall. Because we're based in China, it is useful for us to have VPN access for all our internal clients. Instead of each individual client connecting to a VPN server ...
0
votes
1answer
669 views

pfSense on failover won't route with GW on a completely different subnet

I'm trying to install a pfSense with an IP failover (requirement from online.net) but I can't get the server to route the requests. Last time I got it working with the following commands: route ...
-2
votes
1answer
1k views

Installing pfSense on amazon ec2 instance [closed]

I was searching for AMI's with pfsense but seems like they are all vanished somehow :S How cuold I install pfsense on a FreeBSD ec2 instance besides creating a local image -> converting into raw than ...
0
votes
1answer
804 views

site to site vpn between sonicwall and pfsense

The problem i am facing is establishment of a site to site VPN in between pfSense( version 2.0.1) and SonicWall Pro2040 Enhanced ( Firmware Version: SonicOS Enhanced 4.2.1.4-7e) . All of the ...
1
vote
0answers
853 views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
2
votes
1answer
1k views

site to site VPN

The problem i am facing is establishment of a site to site VPN in between pfSense( version 2.0.1) and SonicWall Pro2040 Enhanced ( Firmware Version: SonicOS Enhanced 4.2.1.4-7e) . All of the ...
1
vote
1answer
843 views

pfsense nat between two internal ip

TL;DR What technology should I use to translate an internal address (192.168.1.10) to another internal address (192.168.1.11)? So that when I access the first I get redirected to the other? Long ...
1
vote
2answers
3k views

OpenVPN Bridge on pfsense: once LAN pings clients, connectivity breaks

So I'm using a pfsense openvpn to bridge my LAN segment so VPN users can access the servers. The problem I'm having now is that I can establish a connection, I can ping the LAN server from the VPN, ...
3
votes
1answer
879 views

pfSense - DHCP Relay

I have 3 pfSense boxes acting as routers on a single subnet (172.22.12.0/26). Router A - 172.22.12.1 Router B - 172.22.12.17 Router C - 172.22.12.33 I want Router A to be the only DHCP server. ...
3
votes
1answer
5k views

Pfsense 2.1 OpenVPN can't reach servers on the LAN

I have a small network set up like this: I have a Pfsense for connecting my servers to the WAN, they are using NAT from the LAN -> WAN. I have an OpenVPN server using TAP to allow remote workers ...
0
votes
1answer
324 views

pf not execute udp port specific block rule

The traffic I want to block can be sniffed as below with tcpdump: 19:16:22.391164 IP 95.95.95.95.2036 > 10.10.10.10.443: UDP, length 8192 So I wanted to write a rule block any udp destination ...
0
votes
4answers
4k views

Having two subdomains on one public IP addres behind pFsense router

I have one public static IP address. I have my main domain register at local Internet provider and their DNS. My main router is pfSense and behind it i have my local network. My WEB server is in ...
2
votes
1answer
1k views

WLAN card as LAN interface?

I have a system with 2 network adapters: a wifi card (atheros) and an ethernet card. Both network adapters are recognized by pfsense 2.1 without problems, but I don't know how to configure it: I ...
1
vote
2answers
3k views

pfSense multi site-to-site vpn with openvpn

I've a strange behavior of the pfSense system when establishing a multiple site-to-site connection. All sites use the same version of pfSense (2.1). I've three sites which are all in different ...
5
votes
1answer
745 views

Designing segmented LAN with fairly shared hi-speed internet access on a tight budget

With another member of the owners' association, I've been tasked with designing and setting up shared, hi-speed, internet access, for our apartment building. We have very little budget and hope to be ...
-2
votes
2answers
176 views

Pfsense installation on Desktop Machine [closed]

I am able to install pfsense 2.1 into VirtualBox and Alix device properly. I want to know if it is possible to install pfsense on my desktop mahine directly. I mean desktop machine does not have OS, ...
1
vote
1answer
236 views

pfSense OpenVPN from specific IPs and Anywhere

I have 4 Openvpn users, but i would like to restrict the 3 of them to allow connect through the VPN only from specific IPs and the 4th from anywhere. Anyone knows how can i do that? I thought about a ...
0
votes
1answer
350 views

block http forwarded traffic using pfsense

I have an external varnish server which is passing requests to a backend server which sits behind a pfsense 2.0.3 firewall. Does pfSense do any kind of packet inspection that could block traffic from ...
0
votes
1answer
835 views

How to NAT behind public IP on pFsense before IPSEC to Cisco ASA?

I have two networks: Local 192.168.1.0/24 and Remote 10.8.8.8/24. On the local network I have installed pFsense as gateway. On the remote network there is a Cisco ASA that I don't have control over. ...
1
vote
1answer
2k views

How to restart openvpn in pfsense?

The OpenVPN Status page on the pfSense shows the following error: [error] Management Daemon Unreachable Disabling then enabling the configured VPN does not resolve this. How do you restart the ...
0
votes
1answer
1k views

Pfsense OpenVPN tunnel goes down

I have a pfSense openVPN tunnel problem. I have 10 sites, but sometimes some of the sites automatically go down, so I need to restart the openVPN service on the client side. What can I do to fix it? ...
0
votes
1answer
1k views

Single Public IP for Multiple VPN Users?

I'd like to ask if I'm looking in the right direction. We have: 1 x VPN server (Windows SBS 2003) 5 x VPN users (One Public IP) Currently, from our remote office, only one user at a time is able ...
1
vote
1answer
3k views

pfSense OpenVPN clients routing

We've setup OpenVPN using pfSense 2.0.2. Local subnet is 192.168.1.0/24, VPN clients are 10.0.1.0/24 We also have another subnet 192.168.0.0/24 which is connected through pfSense IPSec as a ...
0
votes
0answers
653 views

pfSense cannot access some web sites

Been using pfSense as my office gateway for a week now. It's works great, but only one wierd thing. Somehow I cannot access some web sites. At first I though it's was a web site itself, so I connect ...
1
vote
2answers
637 views

How do I set WINS server for OpenVPN running on pfSense?

I have a OpenVPN Server running on pfSense 2.0.3. I can't find an option to add WINS address for VPN connections. I tried going to VPN > OpenVPN > Server > Edit server > Client Settings > NetBIOS ...
2
votes
2answers
284 views

Use a dedicated subnet to connect all routers/firewalls?

I have a couple router/firewall boxes (pfSense, TMG 2010, ISA 2006) on my network that are stateful. Right now they all have an interface on the same subnet as most end user devices and servers. I ...
4
votes
1answer
4k views

Where are pfsense log files?

Where can the pfsense log files be located and viewed? I have searched the documentation and it doesn't indicate the log files location for the various components of pfsense.
0
votes
1answer
3k views

Troubleshooting PFSense WebGui?

I am running pfsense 2.0.3 nanobsd 4g i386 on virtualbox. VM configured with 4gb ram, there's 8 gb total on host system, with two net interfaces configured as host only. This will go on an SSD mini ...
0
votes
1answer
6k views

Routing traffic through IPSec with NAT and IP Alias in pfSense

I have a pfSense firewall and I need to connect to a remote site (form my client). I'm running into several issues, and don't see traffic flowing in any way. Here's my setup: LAN is 192.168.0.0/16 ...
4
votes
1answer
440 views

Running pfSense server after load balancer, dhcp?

I got the following situation: Two wan, load balanced by a hardware load balancing router Wifi network (can be up to twenty AP's) And I need the following: Need a captive portal where clients ...
1
vote
1answer
180 views

What is the cause of duplicate SA's and SPD's in IPSec L2L VPN?

Although I've been using pfSense now for some time and like it very much, I haven't been able to shake duplicate SA's. I've checked all the obvious stuff - making sure configurations match on both ...
0
votes
1answer
440 views

What does a packet capture in pfsense do?

I have some issues with a third party to establish a VPN connection. To debug it, I made a packet capture on the device that represents our synchronous DSL line. The solution I'm using is an old ...
0
votes
2answers
3k views

Cannot Make a Cisco IPSec VPN Connection Through a PFSense Firewall

We are building an onsite network here and we are using PFSense 2.0 as our firewall. We have no trouble connecting to various services and other VPNs but for some reason we cannot connect using ...
1
vote
1answer
397 views

Routing Asterisk traffic evading a VPN

I have two offices set in two distant locations, connected through a IPSec VPN (using pfSense). On one office, I have an Asterisk PBX where all the extensions connect, and the Asterisk PBX is ...
0
votes
1answer
2k views

pfense needs to be rebooted to effect a change in existing NAT

Using PFSense ver:2.0-RC1 (i386) When changing an existing NAT rule in pfsense I find that the rule doesn't work when: 1. the rule existed but with a change to its port number or destination LAN ip ...
0
votes
2answers
1k views

Pfsense 2.03 slow upload rate for file transfers

We are using an 8 Mbps connection(Wan) with an upload rate of 6 Mbps.With pfsense 2.03, the upload rate is really slow like 30 Kbps.Is there a configuration in pfsense to increase the upload speed? ...
0
votes
1answer
310 views

How to add a new range of IPs to a server on a private VLAN & one NIC?

I'd like to add some more IPs to my single ESXi server that I have through a hosting provider. When the server was set it up, I was given a /29 and was left with five IPs to use. But, there's ...