pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

0
votes
1answer
2k views

Configuring UPnP on pfSense

I need a little help configuring UPnP on pfSense. I have installed pfSense between ADSL connection and connecting internal router. There are two video servers behind the router that need port 80, ...
3
votes
1answer
571 views

IPSec L2L Failover between two pfSense devices

Is it possible to achieve IPSec L2L failover (ie, from one WAN interface to another) between two pfSense devices using Gateway Groups, or really anything other than defining multiple IPSec connections ...
0
votes
1answer
547 views

How to install a component on pfSense read-only file system?

I need to install a component to pfSense. But I can't create any files/folders as I get the message "Read-Only file system". Normally they are not supposed to be read-only, I'm running on a FreeBSD ...
3
votes
2answers
1k views

Does two pfsense + CARP necessarily require two WAN IP?

I am looking to setup CARP following this guide across two pfSense firewalls. I have setup CARP before on a WAN link with a big IP space, so allocating a distinct WAN IP per each device (as shown in ...
2
votes
1answer
2k views

Routing between two routers with static routes

I have a Draytek 3200 router and a pfsense rackmount router that I am trying to get to route to each other. I have a subnet on each router and a subnet for the link between, as shown here: As it ...
2
votes
0answers
1k views

How to share bandwidth equitably between 16 users on a pfsense multi-WAN router

I have 16 users connected to my pfSense single-LAN, 3-WAN router. The 3 WAN ports connect to ADSL lines giving about 4Mb/s down, 800kb/s up each. I would like to prevent any one user hogging the ...
0
votes
2answers
235 views

Routing from one router to another?

I'm trying to route from one basic router to a pfsense box. It's basically so that I can have VPN users on both router aswell as VPN tunnels to test which router performs best. I am also trying to ...
-4
votes
1answer
1k views

Pfsense over Ubuntu 12.04

Is it required to install virtual box in order to install pfsense? I mean I would like to directy install pfsense over ubuntu 12.04 operating system without needing any virtualbox like software? Does ...
2
votes
1answer
2k views

OpenVPN Site2Site using PFSense

i'm currently building a s2s VPN using 2 pfsense appliances (2.0.2). the tunnel gets build but i'm unable to route traffic from one side to the other, check my testlab: Okay, i build a fresh ...
2
votes
1answer
329 views

Building a router / NAT and need to compare performance of FreeBSD 8 v RHEL 6 [closed]

I am going to be setting up a router and NAT device but I am unable to choose between pfSense 2.x (FreeBSD 8) and RHEL 6. The device will need to forward a medium (2k hosts) sized network where ...
2
votes
1answer
1k views

How to make short (not fully qualified) hostnames work with Mountain Lion, Tunnelblick, pfSense, OpenVPN

I use Tunnelblick 3.3beta21b on Mac OS X 10.8.2 (Mountain Lion) to connect to a pfSense/OpenVPN virtual private network. When connected to the VPN, I can access machines in our datacenter. This is ...
0
votes
1answer
545 views

SSH session through an IPSec VPN tunnel freezes when command outputs longer text

I connect to a QNap NAS (Ubuntu 4.1.2) in the office through an IPSec tunnel established between two pfSense firewalls. This has worked fine for months. I recently replaced the NAS with a newer model ...
1
vote
0answers
546 views

PFSense VLAN's - clients cant access devices on a defined VLAN

I'm having an issue setting up pfSense with VLAN's, basically, the pfSense boxes can ping the devices on the tagged vlan, but clients routing through pfSense cannot. There are two Cisco SG500 ...
1
vote
0answers
952 views

How to enable source-based policy routing with pfsense

I'm trying to setup pfsense to use WAN1 for all LAN traffic except when a computer has been added to an alias I labeled "PRIORITY". Those computers use WAN2. On the firewall rules, I set a LAN rule ...
0
votes
1answer
90 views

Mara systems border firewall with pfSense

I just bought a used Mara systems Border firewall with pfSense installed on it. I want to reset it or reinstall pfSense because I cant reach the WebGUI or anything. Does anyone know how to go about ...
0
votes
1answer
112 views

PFSense: Internal server don't see the real ip, only the ip of the gateway pfsense

I'm trying to use a pfsense as a substitute of our hosting centers cisco gateway on my testbed for testing our new firewall The setup is: [Internet]->[Wan: ?? -Hosting Center Router- Lan: ...
3
votes
4answers
3k views

pfsense 2.0.2 racoon(ipsec vpn) unreliable

I'm having issues with racoon (ipsec VPN) on pFSense 2.0.2 (and 2.0.1). According to racoon all my tunnels are up (I have about 130 of them), but over time more and more of them won't pass traffic ...
0
votes
1answer
314 views

No Internet access after successful failover?

I am using pfSense 2.0.2 and want to set up a failover between my normal WAN connection (GW_WAN) and a 3G surfstick (GW_OPT8). I put both in a gateway group called WAN_FAILOVER: GW_WAN Tier1 ...
-1
votes
2answers
2k views

Pfsense 1.2.3 transparent proxy not blocking https

I have configure squid in pfsense 1.2.3, and was able to block http sites using a black list, but I was not able to block https sites. Any solutions ?
0
votes
1answer
352 views

Outbound VPN issue with Mac OSX Viscosity Client for OpenVPN and pfSense

I'm having an issue using the Viscosity OpenVPN client on a network behind a pfSense firewall. I'm unable to connect to my office vpn from this particular network, however the connection works just ...
1
vote
1answer
727 views

Setup DMZ in Pfsense with virtual servers, physical Pfsense server

I am looking for some networking tips on how to set up a DMZ in Pfsense and place some virtual servers in that DMZ. Right now my network looks like: Uverse (Static IPs) -> Pfsense -> WAN -> (Virtual ...
1
vote
1answer
435 views

pfsense firewall filter rules behind nat?

i am new in pfsense i have vmware which pfsense and windows xp are installed on them pfsense in using ip 192.168.44.1 for LAN and 192.168.121.129 for wan (which is NAT) my win xp ip is 192.168.44.2 ...
3
votes
4answers
2k views

How to grant su access without password to one user only in wheel group (FreeBSD)?

I know how to enable su without a password for all wheel group users by adding the appropriate configuration line in /etc/pam.d/su. I do not want to enable this for all wheel users but only one ...
1
vote
1answer
239 views

How do I decide what type of hardware to use for a firewall? [duplicate]

Possible Duplicate: Can you help me with my capacity planning? What are the hardware performance requirements to set up a PFsense firewall on my gigabit Ethernet network? Is ...
1
vote
1answer
3k views

monitor pfSense with nagios

I have pFsense machine and one nagios(NagiosXI) installed machine. On pfSense machine DHCP server is running. i want to monitor pfSense i.e DHCP status, interface through nagios using SNMP. I have ...
1
vote
1answer
227 views

NAT and ISP Subnet when load balancing on pfsense?

I have a pfsense box that I'm trying to plan the configuration for. I am going to be load balancing two ISP's, each with their own /29 static IP subnet. The question I have is in relation to the way ...
1
vote
1answer
201 views

Simplest DNS solution for remote offices

I look after a bunch of remote offices that connect via VPN - a Cisco ASA 5505 in each office acts as Firewall and VPN end point. Beyond that we keep things as simple as possible in the offices to ...
5
votes
0answers
797 views

Virtualized pfSense 2.0.1 affecting Hyper-V host connectivity? arp?

The Setup I have setup pfSense 2.0.1 (64bit-amd image) as a host in Hyper-V. As described in other blogs I had to do the “ifconfig down deX”, “ifconfig up deX” to get the network up and running. The ...
2
votes
2answers
577 views

Bridge NICs with automatic pass-through

I am looking at using a computer with a dual-NIC card (one with two NIC ports) as an in-line traffic shaper / URL filter / traffic analyzer, etc. (probably using pfSense), but I am concerned that if ...
1
vote
1answer
3k views

Trouble with site-to-site OpenVPN & pfSense not passing traffic

I'm trying to get an OpenVPN tunnel going on pfSense 1.2.3-RELEASE running on embedded routers. I have a local LAN 10.34.43.0/254. The remote LAN is 10.200.1.0/24. The local pfSense is configured as ...
1
vote
1answer
2k views

pfSense + DDoS Protection [duplicate]

I run a gaming community on a colo with a 100Mbps port. I want to buy a very cheap 35 dollar server with the same 100Mbps port, and run pfSense to use as a hardware firewall. I'm dealing with a bunch ...
1
vote
0answers
4k views

pfSense IPsec VPN setup (Log error: racoon: INFO: unsupported PF_KEY message REGISTER)

Good morning, I'm trying to setup an IPSec Tunnel on a pfSense firewall. I have 2 interfaces configured: WAN (public firewall IP: .../31) LAN (internal static IPs: 192.168.104.0/29) I set up the ...
2
votes
3answers
4k views

PFsense VPN all types failing?

I am trying to configure a new PFsense router (64 bit) and am trying to to get the VPN functions working. I have enabled PPTP, L2TP and IPSec. I've added allow all rules to all LAN's, WAN's and each ...
0
votes
2answers
640 views

How to Zone Forward to a List of Alternative Name Servers in pfSense 2.0.1

I'm not sure if dnsmasq is involved in this process on pfSense or not. Before pfsense, we'd do this in BIND thusly: zone "firstpartner.com" { type forward; forwarders { 1.2.3.4; 5.6.7.8; ...
1
vote
2answers
221 views

Setup a LAN-wide proxy

I am trying to setup squid as a caching server for my local network. I am looking for a solution to make the whole network use the proxy automatically. In other words, I want every client on the ...
1
vote
1answer
1k views

Safely adding SSH users to pfSense

I would like to add a user for myself to login via SSH to a pfSense box. I don't want to just blindly go through the adduser command and inadvertently break something / open a vulnerability somewhere ...
4
votes
2answers
210 views

Internal DNS server provide response to external requests?

I have a pfSense firewall and a Windows 2008 R2 DNS server. I'd really like my DNS server to respond to external queries for my subdomains. Right now, I'm using a 3rd party service for that. Is ...
1
vote
1answer
1k views

Configuring dnsmasq to handle mx records on pfsense 2.0.1

I know from dnsmasq's man page that it is capable of handling mx records, but I can't seem to find anything in pfsense's web GUI or anywhere online that talks about how to include mx records. I'm ...
1
vote
1answer
778 views

What are the security risks in running pfsense on a box with a wireless radio?

In my network pfsense is the firewall and router for my entire network. It is the only machine with direct WAN access. All other machines are behind it (and connected through a switch). I am trying to ...
-1
votes
1answer
1k views

Pfsense Virtual IP NATing

Am setting up Pfsense 2.0 but am stuck when it comes to port forwarding/Natting. I've done it before but not using Virtual IPs. Say I have WAN on 11.11.11.1 and LAN on 192.168.5.5, I have added a ...
3
votes
3answers
1k views

What are the security risks of using pfsense in a virtualised environment?

I am thinking of using pfsense on my ubuntu server box. I'd virtualise pfsense with virtualbox, and have it route and firewall all traffic both on and destined to my server as well as the the rest of ...
2
votes
1answer
601 views

How to configure DNSMasq to allow wildcards for dns entries from DHCP?

I'm using PFSenses 2.0 in our development environment. I'm depending on the DNS Forwarder to add DNS entries for new DHCP leases. This is working well, though I need to add support for wildcards to ...
3
votes
1answer
1k views

Install pfSense using serial console

I want to install pfSense with the ISO installer but only have a serial console available. How do I tell the installer to use the serial console instead of VGA?
0
votes
2answers
108 views

Migrate from Linux network configuration

I need to migrate a linux machine to some kind of router distribution, I've chosen pfSense for this. The problem is that the WAN configuration used on the linux machine is really crappy, however this ...
1
vote
1answer
1k views

pfSense routing between two routers with shared network

I have a network set-up using two pfSense routers arranged like this:- DMZ1 WAN1 WAN2 DMZ2 | | | | | | | | \___ PF1 PF2___/ | ...
3
votes
1answer
2k views

pfSense router on a LAN with two gateways

I have a LAN with an ADSL modem/router on it. We have just gained an alternative high-speed internet connection at our location, and I want to connect the LAN to it, eventually dropping the ADSL. ...
1
vote
0answers
443 views

pfsense + haproxy + stunnel as reverse proxy with load balancing and ssl terminaltion

i have this topology as title says with a pfsense with installed haproxy and stunnel. Because i saw that haproxy can't do ssl termination i thought about stunnel. But i don't know how to set up it. My ...
2
votes
2answers
396 views

pfSense 1.2.3 can't talk ARP beyond a switch two hops away

I have the following devices on vlan93 on my network: pfsense (192.168.93.1) core-sw1 (192.168.93.2) edge-sw1 (192.168.93.3) pf-switch (192.168.93.100) devices (192.168.93.120) Physical ...
5
votes
1answer
3k views

Why is pfSense blocking multicast traffic when it is explicitly enabled?

I have a pair of pfSense firewall/routers set up in CARP/XML Config cluster. On the LAN side, the switch also has a pair of servers running corosync/pacemaker/drbd. These are on a different ip ...
3
votes
1answer
6k views

How can I detect a DDoS attack using pfSense so I can tell my ISP who to block? [duplicate]

Last week my network was hit by a DDoS attack which completely saturated our 100 MBps link to the internet and pretty much shut down all the sites and services we host. I understand (from this ...