pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

3
votes
4answers
4k views

pfsense 2.0.2 racoon(ipsec vpn) unreliable

I'm having issues with racoon (ipsec VPN) on pFSense 2.0.2 (and 2.0.1). According to racoon all my tunnels are up (I have about 130 of them), but over time more and more of them won't pass traffic ...
0
votes
1answer
314 views

block http forwarded traffic using pfsense

I have an external varnish server which is passing requests to a backend server which sits behind a pfsense 2.0.3 firewall. Does pfSense do any kind of packet inspection that could block traffic from ...
3
votes
1answer
832 views

IPSec L2L Failover between two pfSense devices

Is it possible to achieve IPSec L2L failover (ie, from one WAN interface to another) between two pfSense devices using Gateway Groups, or really anything other than defining multiple IPSec connections ...
0
votes
2answers
6k views

Hypercom Optimum T4220 POS Credit Card Terminal Fails ISP Test With Successful DHCP lease from a pfsense Netgate Appliance with static IP DSL WAN

This has been an ongoing issue for a couple of weeks. The credit card terminal will lose the ability to connect to the processor server over SSL. The IP config looks correct, the DHCP lease looks ...
0
votes
2answers
652 views

Reviews of pfSense [closed]

Does anyone know of any professionally made reviews of pfSense (cnet, zdnet, etc...)? I need to find one for a project of mine...
1
vote
1answer
2k views

How to restart openvpn in pfsense?

The OpenVPN Status page on the pfSense shows the following error: [error] Management Daemon Unreachable Disabling then enabling the configured VPN does not resolve this. How do you restart the ...
0
votes
1answer
936 views

pfsense multi-site VPN VOIP deployment

have main office pfsense firewall configured like this: local networks WAN -> internet LAN -> local network VOIP -> IP phones need to connect remote offices (multi-users) and single remote users ...
-1
votes
2answers
3k views

Pfsense 1.2.3 transparent proxy not blocking https

I have configure squid in pfsense 1.2.3, and was able to block http sites using a black list, but I was not able to block https sites. Any solutions ?
0
votes
1answer
828 views

Single Public IP for Multiple VPN Users?

I'd like to ask if I'm looking in the right direction. We have: 1 x VPN server (Windows SBS 2003) 5 x VPN users (One Public IP) Currently, from our remote office, only one user at a time is able ...
1
vote
2answers
549 views

How do I set WINS server for OpenVPN running on pfSense?

I have a OpenVPN Server running on pfSense 2.0.3. I can't find an option to add WINS address for VPN connections. I tried going to VPN > OpenVPN > Server > Edit server > Client Settings > NetBIOS ...
0
votes
0answers
572 views

pfSense cannot access some web sites

Been using pfSense as my office gateway for a week now. It's works great, but only one wierd thing. Somehow I cannot access some web sites. At first I though it's was a web site itself, so I connect ...
2
votes
2answers
277 views

Use a dedicated subnet to connect all routers/firewalls?

I have a couple router/firewall boxes (pfSense, TMG 2010, ISA 2006) on my network that are stateful. Right now they all have an interface on the same subnet as most end user devices and servers. I ...
10
votes
1answer
3k views

How can I get FreeNAS and pfSense to report more using SNMP?

I have two servers which run variants of FreeBSD: One is a pfSense router and one is a FreeNAS 8 server. Both these servers run SNMP, and I am collecting and graphing their information using a third ...
4
votes
1answer
4k views

Where are pfsense log files?

Where can the pfsense log files be located and viewed? I have searched the documentation and it doesn't indicate the log files location for the various components of pfsense.
0
votes
1answer
2k views

Troubleshooting PFSense WebGui?

I am running pfsense 2.0.3 nanobsd 4g i386 on virtualbox. VM configured with 4gb ram, there's 8 gb total on host system, with two net interfaces configured as host only. This will go on an SSD mini ...
0
votes
1answer
5k views

Routing traffic through IPSec with NAT and IP Alias in pfSense

I have a pfSense firewall and I need to connect to a remote site (form my client). I'm running into several issues, and don't see traffic flowing in any way. Here's my setup: LAN is 192.168.0.0/16 ...
4
votes
1answer
400 views

Running pfSense server after load balancer, dhcp?

I got the following situation: Two wan, load balanced by a hardware load balancing router Wifi network (can be up to twenty AP's) And I need the following: Need a captive portal where clients ...
5
votes
1answer
9k views

How do I assign a public IP to a machine behind a pfSense box using 1:1 NAT?

This should be dead simple but for the life of me, I can't get it working. I must be doing something stupid. I have a PFsense server with a public IP address. Behind it is three LAN segments: [ ...
1
vote
1answer
153 views

What is the cause of duplicate SA's and SPD's in IPSec L2L VPN?

Although I've been using pfSense now for some time and like it very much, I haven't been able to shake duplicate SA's. I've checked all the obvious stuff - making sure configurations match on both ...
0
votes
1answer
2k views

Cannot Make a Cisco IPSec VPN Connection Through a PFSense Firewall

We are building an onsite network here and we are using PFSense 2.0 as our firewall. We have no trouble connecting to various services and other VPNs but for some reason we cannot connect using ...
0
votes
1answer
396 views

What does a packet capture in pfsense do?

I have some issues with a third party to establish a VPN connection. To debug it, I made a packet capture on the device that represents our synchronous DSL line. The solution I'm using is an old ...
1
vote
1answer
366 views

Routing Asterisk traffic evading a VPN

I have two offices set in two distant locations, connected through a IPSec VPN (using pfSense). On one office, I have an Asterisk PBX where all the extensions connect, and the Asterisk PBX is ...
0
votes
1answer
2k views

pfense needs to be rebooted to effect a change in existing NAT

Using PFSense ver:2.0-RC1 (i386) When changing an existing NAT rule in pfsense I find that the rule doesn't work when: 1. the rule existed but with a change to its port number or destination LAN ip ...
0
votes
2answers
951 views

Pfsense 2.03 slow upload rate for file transfers

We are using an 8 Mbps connection(Wan) with an upload rate of 6 Mbps.With pfsense 2.03, the upload rate is really slow like 30 Kbps.Is there a configuration in pfsense to increase the upload speed? ...
0
votes
1answer
326 views

Strange issue accessing a single site behind pfsense firewalls

One of our users is having trouble accessing a single website from behind our pfSense firewall. The site is SSL-only and when she attempts to connect, she gets a CONNECTION_REFUSED in Chrome. We have ...
0
votes
1answer
274 views

How to add a new range of IPs to a server on a private VLAN & one NIC?

I'd like to add some more IPs to my single ESXi server that I have through a hosting provider. When the server was set it up, I was given a /29 and was left with five IPs to use. But, there's ...
0
votes
1answer
525 views

Virtual pfSense Appliance on VMWare Host

I am having some issues setting up the WAN side of pfSense. I have ordered a dedicated box through a hosting service with ESXi loaded on it. Along with that I have 3 public IP addresses that will ...
0
votes
1answer
278 views

Getting DNS replies for non-existing hostnames (DNSMasq)

I noticed some 'weird' DNSMasq behavior when I set up my LAN for dual stack IPv4 & IPv6 networking. It seems that my DNS server (DNSMasq) which acts as a forwarder and also has all the host names ...
1
vote
2answers
903 views

pfSense and Snort: unexpected portscan traffic on interface

I have a pfSense box acting as my public facing router and stateful firewall. There is 1 WAN interface and several LAN interfaces using private IPs behind NAT. I EXPECT to see portscans or all kinds ...
0
votes
1answer
2k views

Pfsense 2.02 unstable ipsec vpn.Tunnels will come up upon restarting raccon [duplicate]

Pfsense 2.02 Ispec VPN tunnels drops randomly,but when the raccon service is restarted all tunnels are back up.Here is my ipsec vpn configuration.Any fix on this issue? I have tried enabling and ...
0
votes
1answer
558 views

pfSense and ASA 5505

I've got an ASA-5505 (v8.4) in production that handles VPN connections and some public web servers. I wanted to offload user HTTP traffic onto a second Internet connection so I put together a pfSense ...
1
vote
0answers
252 views

Multiple network routing

I am after some advice on how to achieve multiple independent LANs, that can restrictively talk to each other (at minimal cost). I have 3 LANS LAN A - Admin Lan - Multiple servers and workstations, ...
1
vote
1answer
3k views

pfsense: all interfaces up, but all non default gateways down

I am seeing some strange behavior in pfSense 2.0.3 in which all of my WAN interfaces are up according to the Interfaces screen, yet all but the default gateway are shown as "Offline" in gateway ...
0
votes
1answer
3k views

Configuring UPnP on pfSense

I need a little help configuring UPnP on pfSense. I have installed pfSense between ADSL connection and connecting internal router. There are two video servers behind the router that need port 80, ...
3
votes
2answers
2k views

Does two pfsense + CARP necessarily require two WAN IP?

I am looking to setup CARP following this guide across two pfSense firewalls. I have setup CARP before on a WAN link with a big IP space, so allocating a distinct WAN IP per each device (as shown in ...
2
votes
0answers
2k views

How to share bandwidth equitably between 16 users on a pfsense multi-WAN router

I have 16 users connected to my pfSense single-LAN, 3-WAN router. The 3 WAN ports connect to ADSL lines giving about 4Mb/s down, 800kb/s up each. I would like to prevent any one user hogging the ...
0
votes
2answers
380 views

Routing from one router to another?

I'm trying to route from one basic router to a pfsense box. It's basically so that I can have VPN users on both router aswell as VPN tunnels to test which router performs best. I am also trying to ...
0
votes
1answer
940 views

pfSense to ASA L2L VPN - infrequent, short-lasting, but consistent disconnections

Has anyone here been able to specify a stable configuration for the L2L VPN between an ASA device and pfSense 2.0.1? I am using the most accomodating settings on the ASA side (DefaultL2LGroup with ...
3
votes
1answer
1k views

pfsense single MAC is listed with several IP's in ARP table

I have this problem: arp table filling up But I am quite sure that I cannot blame Kaspersky. Scenarie: a user plugs his computer in. He waits and waits but are getting no IP by DHCP. Then he is ...
2
votes
1answer
502 views

Building a router / NAT and need to compare performance of FreeBSD 8 v RHEL 6 [closed]

I am going to be setting up a router and NAT device but I am unable to choose between pfSense 2.x (FreeBSD 8) and RHEL 6. The device will need to forward a medium (2k hosts) sized network where ...
2
votes
1answer
2k views

How to make short (not fully qualified) hostnames work with Mountain Lion, Tunnelblick, pfSense, OpenVPN

I use Tunnelblick 3.3beta21b on Mac OS X 10.8.2 (Mountain Lion) to connect to a pfSense/OpenVPN virtual private network. When connected to the VPN, I can access machines in our datacenter. This is ...
1
vote
0answers
719 views

PFSense VLAN's - clients cant access devices on a defined VLAN

I'm having an issue setting up pfSense with VLAN's, basically, the pfSense boxes can ping the devices on the tagged vlan, but clients routing through pfSense cannot. There are two Cisco SG500 ...
1
vote
0answers
1k views

How to enable source-based policy routing with pfsense

I'm trying to setup pfsense to use WAN1 for all LAN traffic except when a computer has been added to an alias I labeled "PRIORITY". Those computers use WAN2. On the firewall rules, I set a LAN rule ...
0
votes
1answer
97 views

Mara systems border firewall with pfSense

I just bought a used Mara systems Border firewall with pfSense installed on it. I want to reset it or reinstall pfSense because I cant reach the WebGUI or anything. Does anyone know how to go about ...
0
votes
1answer
125 views

PFSense: Internal server don't see the real ip, only the ip of the gateway pfsense

I'm trying to use a pfsense as a substitute of our hosting centers cisco gateway on my testbed for testing our new firewall The setup is: [Internet]->[Wan: ?? -Hosting Center Router- Lan: ...
0
votes
1answer
456 views

No Internet access after successful failover?

I am using pfSense 2.0.2 and want to set up a failover between my normal WAN connection (GW_WAN) and a 3G surfstick (GW_OPT8). I put both in a gateway group called WAN_FAILOVER: GW_WAN Tier1 ...
6
votes
2answers
5k views

Pass through public IP addresses to pfSense

I have a server in my datacenter that has multiple publicly routed IP addresses, and I'm now running ESXi to manage it. Before, I had some VMs running under the host that created a network: inet ...
0
votes
1answer
471 views

Outbound VPN issue with Mac OSX Viscosity Client for OpenVPN and pfSense

I'm having an issue using the Viscosity OpenVPN client on a network behind a pfSense firewall. I'm unable to connect to my office vpn from this particular network, however the connection works just ...
0
votes
2answers
2k views

Slow upload speeds with pfsense virtual appliance

I have a pfSense virtual appliance set up in front of a Windows server. The pfSense appliance has been configured with two L2L IPSec VPN sites and not too much else. The appliance has two vNics which ...
1
vote
1answer
488 views

pfsense firewall filter rules behind nat?

i am new in pfsense i have vmware which pfsense and windows xp are installed on them pfsense in using ip 192.168.44.1 for LAN and 192.168.121.129 for wan (which is NAT) my win xp ip is 192.168.44.2 ...