pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

0
votes
0answers
407 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
0answers
171 views

Cant ping openvpn server from pfsense lan

I have a PF sense set up as a Openvpn client. The server is a Windows server running openvpn. Behind the pfsense is a lan. Strange enough I can't ping the server at 10.8.0.1 using the clients in the ...
0
votes
0answers
40 views

Windows 7 behavior on network link between SonicWALL and pfSense

I have two networks behind two different firewall at the same site. I have linked them together by using a spare interface on each device. Network 1 - pfSense 10.0.10.0/24 Network 2 - SonicWALL ...
0
votes
2answers
391 views

pfSense: Cannot filter flood of multicast packets being blocked by default

There are multiple devices under a different subnet on our LAN sending a flood of multicast packets. I've tried to allow this type of traffic, but it does not seem to work.
3
votes
0answers
528 views

Redirect network traffic to Proxy with Pfsense

I have a network with 9 clients: 192.168.1.0/24 I need to redirect all traffic from 192.168.1.208 and 192.168.1.209 to an outside proxy server. --------------- |192.168.1.201|--------| ...
0
votes
1answer
221 views

On a pfsense router how would I redirect one IP to another?

I have a poorly made piece of software at work that only asks for a IP when connecting and cant use URL and I cant get a static IP for the database its connecting to (Amazon RDS). I was wondering if ...
2
votes
2answers
215 views

Is this my network being flooded?

I noticed this strange pattern on the bandwidth graph of the pfsense firewall on my work network: If I'm reading it righ, there is a constant stream of 6 Mbps data going from the local network into ...
1
vote
1answer
804 views

Use Framed-IP-Address RADIUS attribute for IP allocation with DHCP on Windows Server 2012R2

I have configured a DHCP server on Windows Server with an NPS Policy, connected to a FreeRADIUS2 server running on pfSense. Authentication is based on MAC address. If MAC address is not present in ...
1
vote
1answer
131 views

How to combine multiple route hops using one (pfSense) router?

I am trying to come up with a way to consolidate two routers into one. I have the following network configuration: LAN <-- a/24 --> NAT Firewall <-- x/29 --> Router <-- y/30 --> ...
0
votes
1answer
152 views

Creating a separate PPTP VPN VLan in network with tagging possible?

I have a gateway to gateway PPTP VPN that I would like to connect to my network and have it on a VLAN where it is shared to a VLAN tagged wireless router. This way I can have two wireless AP's where ...
0
votes
1answer
75 views

How to pass all requests to some site via specific WAN interface in pfSense?

I have multi-WAN configuration on pfSense. I suspect, that some secured web sites (like hosting control panels) dislike that requests are coming from different IPs and hence asking various ...
1
vote
1answer
85 views

pfsense with 4 WAN IP and outgoing NAT

I have a pfsense with a single wan ip, i want to assign multiple wan ip's. The pfsense machine is located on a vm machine with the other servers i wish to NAT forward. I want to give each server a wan ...
0
votes
1answer
275 views

pfsense: connection between two internal lans dropped after 20 seconds

I have the following config: LAN 01: 192.168.16.0/24 (LAN for internal servers) LAN 02: 192.168.67.0/24 (LAN for workstations) WAN: X.X.X.X And then: PFSENSE LAN IP: 192.168.16.1 PFSENSE LAN IP: ...
1
vote
1answer
100 views

VoIP calls dropping

Currently I have a proxy server running pfSense connected to a 40mb fibre lease line. This lease line has 60 external IP addresses (assigned to each room by a virtual IP in pfSense). On the LAN side ...
1
vote
1answer
84 views

Putting remote Linux server in local VPN

I have a VPS running Fedora 21, that I'd like to automatically log in to my local network via VPN. My local router is running a pfSense firewall, so my options are IPsec, L2TP, OpenVPN, and PPTP. ...
0
votes
0answers
769 views

How to load balance traffic from local Squid in pfsense when using Multi-WAN?

I have a multi-wan PFSense setup with Squid for HTTP(S) navigation. However one of the links (the default WAN gateways) is always used at 100% while the other link is rarely used. Reading the ...
0
votes
1answer
100 views

FreeBSD pfsense root CA fails

I have some problem with root CA of my pfsense installation. My test script is this: openssl s_client -showcerts -connect fbstatic-a.akamaihd.net:443 And the answer is: Verify return code: 20 ...
0
votes
1answer
233 views

PPPoE link has IP address, but 100% loss

I couldn't figure out what's the problem with the PPPoE link. Here is the log entries I have found on pfSense. The interface is up and IP address has been requested, but all packets are said to be ...
0
votes
0answers
154 views

Network configuration for Virtual machine based firewall

I have this physical configuration: And I'm planning to install IPFire (or similar firewall : pfSense or Sophos UTM) on a virtual machine on the Active Directory Server to control traffic between ...
1
vote
1answer
1k views

Proxmox: 1 NIC, 1 Public IP, unable to get WAN interface working in VMs

I have a computer running Proxmox, and it has 1 single NIC that is directly connected to internet and has a single public IP. Then, I have different VMs (KVM) running and one of them is pfSense. What ...
0
votes
1answer
58 views

Seperation of network traffic\routes

In a lab environment I have 4 VLANs: VLAN10 -> Management (192.168.10.0/24) VLAN20 -> Service (192.168.20.0/24) VLAN30 -> Administration (192.168.30.0/24) VLAN50 -> Public (192.168.50.0/24) ...
0
votes
0answers
96 views

Route 2 external IP ranges using pfSense

I have pfSense running on some hardware routing my /27 block of IP addresses assigned by my ISP. I asked for and got another /26 block that I want to send all of the block to a single server (it will ...
1
vote
0answers
442 views

pfSense 2.2: HAProxy for HTTP + CARP + MultiWAN with VIPs issue (Outbound NAT?)

I have two pfSense firewalls with CARP setup, 2 WANs and HAProxy that points to HTTP servers in my LAN. Scheme: **pfSense server #1** ISP#1 - Public IP1.1 - pfSense#1 with HAProxy - HTTP ISP#2 - ...
1
vote
1answer
388 views

Access RDS internally with same domain name as externally

I have a network setup with a 2008 R2 AD domain called internal.domain.org. Our externally hosted website uses www.domain.org and domain.org. I'd like users to be able to access our RDS ...
0
votes
1answer
4k views

pfSense/strongSwan “deleting half open IKE_SA after timeout” - IPSec connection Android 4.4 to pfSense 2.2.1 fails

pfSense in version 2.2 switched from Racoon to strongSwan. Since that change, users can no longer connect to the VPN from Android clients (Type IPSec Xauth PSK). The current configuration on ...
-1
votes
1answer
61 views

URL on SSL certificate is not the website I am on [closed]

When I go to https://www.virgintrainseastcoast.com/ I get repeatedly get asked by Chrome to "Select a certificate". The certificate in the popup is usually either an Apple or Facebook URL. Any ideas ...
0
votes
2answers
345 views

PFSense IPSEC VPN VLAN

We are integrating with a third party and they require the use of a L2L IPSec VPN for communication. I have successfully configured the IPSEC vpn and the tunel is up but now I cannot seem to have ...
4
votes
0answers
222 views

IPSec bandwidth between two Pfsense hosts has predictable, variable bandwidth

I have a IPSec tunnel between two Pfsense machines. Both machines are connected to a 100mbps symmetrical connection. The latency between the two routers is ~70ms. I'm using AES-GCM-128 and SHA1, both ...
2
votes
0answers
88 views

Blocking pfsense management access in high-availability setup

I have a pfsense setup in a high-availability configuration. There are about 5 separate networks forwhich I would like to block management access to pfsense. There is a destination rule builtin for ...
-1
votes
1answer
270 views

Setting up pfsense on a small business network for firewall use

I have approximately 20 machines that will all be on the same subnet with a pfsense firewall. I have no experience with pfsense, so I am just starting out. I have the following configuration: The ...
0
votes
1answer
199 views

Using a pfSense guest to firewall/route traffic for other guests

I was curious if this falls into the "why..." category or not. I have a dedicated, hardware UTM (Untangle) that's serving as an edge device with two hosts and a dozen guests behind it. Right now, I ...
0
votes
1answer
4k views

How to open the web configuration of Pfsense [closed]

I installed Pfsense on VMWare Player and I set IP adresses for wan interface and Lan interface. When I write the adress https://192.168.40.1 on the address bar of my browser I got a time out and ...
-1
votes
2answers
389 views

Open VPN copying files very slow

This is my first experience with setting up a VPN. I have Open VPN running at my work network on a firewall/router that uses the PFsense admin software. I connected to the VPN from my home network ...
1
vote
0answers
4k views

ntopng: Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec]

I am exploring ntopng reports on my router and seeing, that one computer on my LAN is a flooder. ntopng says Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec] How to explore these ...
1
vote
1answer
440 views

Netbalancer vs pfsense lan graph traffic? Which one is correct?

I am researching on wan bandwith/speed checking tools/graphs. Normally we are using pfsence as a firewall/gateway/router. and also we were used to use "Traffic Graph" lan interface. Recently we have ...
1
vote
0answers
335 views

How Do I get unbound to only use DNSSEC?

I have a pfsense box, that I am in the process of configuring for the first time I would like to use DNSSEC. I used this site to check my DNSSEC status. When I go to this site I am told that my ...
1
vote
0answers
2k views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
2
votes
4answers
2k views

PFsense https connections unusably slow

I have a very strange issue with PFsense as router running in KVM with CentOS 7. https connections are incredibly slow (10KB/s or less), and uploads over https simply don't work; for example using ...
3
votes
1answer
1k views

Configuring Pfsense via ssh

I want to know how i can completely configure and add add tables to pfsense via ssh. my goal is to have a web installer that configured multiple system and based on the output it will configure the ...
1
vote
1answer
2k views

pfSense Outbound NAT not working

I have a VMware vSphere Hypervisor with several Hadoop VMs running. Since our support activated Port Security on our router, only two MACs are allowed to be connected to one port of the router. This ...
-1
votes
1answer
407 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
5
votes
0answers
2k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
0
votes
0answers
954 views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
0
votes
2answers
234 views

routing for iax-protocol does not work on pfsense

I have problems with a pfsense-box routing iax-traffic (UDP port 4569). Our company has a central office and eight branch-offices. At the branch-offices we use pfsense as firewall and VPN endpoints ...
0
votes
2answers
955 views

pfSense: How to add a second WAN subnet for dummies

Can anyone point me to info on what to change on a pfSense device for a 2nd subnet on a single interface? My colo provider has allocated a /29 subnet to me of which I can use 3 IP addresses (for some ...
0
votes
1answer
233 views

How do I configure pfSense in a virtual machine as a firewall?

Here is my network: Client -- WAN -- PfSense(VMWare) -- LAN -- vSwitch (Promiscuous) \-- ESXi Management (192.168.2.1) ...
0
votes
3answers
4k views

PFsense IPSec VPN failing phase 2

I am very new to VPNs and I am getting errors. I have posted the following lines that I think are the most relevant: Dec 2 08:41:03 racoon: DEBUG: IV freed Dec 2 08:41:03 racoon: [EUA]: ...
0
votes
2answers
2k views

How to use pfSense as a firewall in order to assign url whitelists to IP groups

In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...
1
vote
1answer
3k views

1 Public IP 1 NIC ESXi to multipule VMs (with external access)

So I have purchased a Server from https://www.kimsufi.com/fr/index.xml, KS-5A to be exact. Kimsufi only give you 1 Public IP address and 1 NIC to work with, and you cannot purchase more. I have ...
0
votes
1answer
680 views

pfsense with three WAN IP and outgoing NAT

similar situation as this one: How to setup pfSense with multiple public IP's i have a pfsense with multiple wlan ip's. I'm using a Hetzner Server with vmware so i have a virtual machine with ...