pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

4
votes
2answers
9k views

Routing between two routers with static routes

I have a Draytek 3200 router and a pfsense rackmount router that I am trying to get to route to each other. I have a subnet on each router and a subnet for the link between, as shown here: As it ...
1
vote
1answer
663 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
0
votes
1answer
156 views

Creating a separate PPTP VPN VLan in network with tagging possible?

I have a gateway to gateway PPTP VPN that I would like to connect to my network and have it on a VLAN where it is shared to a VLAN tagged wireless router. This way I can have two wireless AP's where ...
1
vote
1answer
78 views

How to pass all requests to some site via specific WAN interface in pfSense?

I have multi-WAN configuration on pfSense. I suspect, that some secured web sites (like hosting control panels) dislike that requests are coming from different IPs and hence asking various ...
1
vote
1answer
86 views

pfsense with 4 WAN IP and outgoing NAT

I have a pfsense with a single wan ip, i want to assign multiple wan ip's. The pfsense machine is located on a vm machine with the other servers i wish to NAT forward. I want to give each server a wan ...
0
votes
1answer
2k views

pfSense Routing a packet out the same interface it arrived on

I have pfSense with one LAN interface which is connected to a switch. All ports on this switch are part of the LAN (VLAN 10). I have access points which are also part of the LAN, they have a static ...
8
votes
4answers
2k views

OpenBSD/FreeBSD Firewall w/ GUI that is compatible with Intel 82574L Gigabit LAN NICs

I recently purchased a server to run m0n0wall or pfSense but I've learned since then that both of these firewall products are based on versions of FreeBSD which weren't yet compatible with the NICs in ...
0
votes
1answer
102 views

FreeBSD pfsense root CA fails

I have some problem with root CA of my pfsense installation. My test script is this: openssl s_client -showcerts -connect fbstatic-a.akamaihd.net:443 And the answer is: Verify return code: 20 (...
0
votes
1answer
4k views

pfSense OpenVPN Routing to Sever LAN

I'm trying to get my OpenVPN server to route traffic from clients to the server's LAN. My setup is as follows: pfSense box at 10.1.1.1 Other servers on the LAN at 10.1.10.0/24 (with DNS server at ...
1
vote
1answer
84 views

Putting remote Linux server in local VPN

I have a VPS running Fedora 21, that I'd like to automatically log in to my local network via VPN. My local router is running a pfSense firewall, so my options are IPsec, L2TP, OpenVPN, and PPTP. ...
1
vote
1answer
104 views

VoIP calls dropping

Currently I have a proxy server running pfSense connected to a 40mb fibre lease line. This lease line has 60 external IP addresses (assigned to each room by a virtual IP in pfSense). On the LAN side ...
0
votes
1answer
287 views

pfsense: connection between two internal lans dropped after 20 seconds

I have the following config: LAN 01: 192.168.16.0/24 (LAN for internal servers) LAN 02: 192.168.67.0/24 (LAN for workstations) WAN: X.X.X.X And then: PFSENSE LAN IP: 192.168.16.1 PFSENSE LAN IP: ...
0
votes
2answers
980 views

pfSense: How to add a second WAN subnet for dummies

Can anyone point me to info on what to change on a pfSense device for a 2nd subnet on a single interface? My colo provider has allocated a /29 subnet to me of which I can use 3 IP addresses (for some ...
0
votes
1answer
248 views

PPPoE link has IP address, but 100% loss

I couldn't figure out what's the problem with the PPPoE link. Here is the log entries I have found on pfSense. The interface is up and IP address has been requested, but all packets are said to be ...
1
vote
1answer
3k views

pfsense live cd and boot options

I donwloaded pfsense live cd 2.1.3 and now I want to run pfsense from an usb cdrom drive. It loads a while and than crahses with "unable to mount ..." I know I have to choose boot option 3 in order ...
1
vote
2answers
6k views

pfsense PPTP VPN can access LAN but not internet

I am running pfsense at home and I want to set up a PPTP vpn (yes I know its not secure, lets ignore that) My current pfsense setup: LAN: 192.168.1.1 (/24) WAN PPPoE (real world IP lets say 123.123....
2
votes
3answers
12k views

Pfsense as caching DNS server

Is there any way to use pfsense as caching DNS server. It will resolve domains starting from root servers and will cache them for consequent hits. I tried DNS servers package on pfsense 1.2.2, which ...
0
votes
0answers
159 views

Network configuration for Virtual machine based firewall

I have this physical configuration: And I'm planning to install IPFire (or similar firewall : pfSense or Sophos UTM) on a virtual machine on the Active Directory Server to control traffic between ...
1
vote
1answer
1k views

Proxmox: 1 NIC, 1 Public IP, unable to get WAN interface working in VMs

I have a computer running Proxmox, and it has 1 single NIC that is directly connected to internet and has a single public IP. Then, I have different VMs (KVM) running and one of them is pfSense. What ...
0
votes
1answer
58 views

Seperation of network traffic\routes

In a lab environment I have 4 VLANs: VLAN10 -> Management (192.168.10.0/24) VLAN20 -> Service (192.168.20.0/24) VLAN30 -> Administration (192.168.30.0/24) VLAN50 -> Public (192.168.50.0/24) ...
0
votes
1answer
5k views

pfSense/strongSwan “deleting half open IKE_SA after timeout” - IPSec connection Android 4.4 to pfSense 2.2.1 fails

pfSense in version 2.2 switched from Racoon to strongSwan. Since that change, users can no longer connect to the VPN from Android clients (Type IPSec Xauth PSK). The current configuration on ...
0
votes
0answers
97 views

Route 2 external IP ranges using pfSense

I have pfSense running on some hardware routing my /27 block of IP addresses assigned by my ISP. I asked for and got another /26 block that I want to send all of the block to a single server (it will ...
0
votes
1answer
4k views

how to detect/Block duplicate/Static IP address on network

i have setup my network using pfsense, having 8 subnets, each one having their own DHCP server range. i have enabled STATIC ARP on the server and static MAC entries, so that no un-known machine can ...
0
votes
1answer
692 views

pfSense 2.0RC Webservers LoadBalancing

Hy, I Recently installed pfSense 2.0RC and i tried to Set an Loadbalancing, I Added the IP Pools: 192.168.1.10:80 -> webserver 1 192.168.1.100:80 -> webserver 2 And Added an Virtual Server IP: 192....
1
vote
0answers
458 views

pfSense 2.2: HAProxy for HTTP + CARP + MultiWAN with VIPs issue (Outbound NAT?)

I have two pfSense firewalls with CARP setup, 2 WANs and HAProxy that points to HTTP servers in my LAN. Scheme: **pfSense server #1** ISP#1 - Public IP1.1 - pfSense#1 with HAProxy - HTTP ISP#2 - ...
3
votes
2answers
4k views

How can I disable NTP in pfsense?

I am running my pfSense gateway in a ESXi server. right now the server gets its time from the NTP server specified in the general settings section of the WebGUI. I want to disable this so pfSense ...
1
vote
1answer
396 views

Access RDS internally with same domain name as externally

I have a network setup with a 2008 R2 AD domain called internal.domain.org. Our externally hosted website uses www.domain.org and domain.org. I'd like users to be able to access our RDS server--...
-1
votes
1answer
62 views

URL on SSL certificate is not the website I am on [closed]

When I go to https://www.virgintrainseastcoast.com/ I get repeatedly get asked by Chrome to "Select a certificate". The certificate in the popup is usually either an Apple or Facebook URL. Any ideas ...
0
votes
2answers
355 views

PFSense IPSEC VPN VLAN

We are integrating with a third party and they require the use of a L2L IPSec VPN for communication. I have successfully configured the IPSEC vpn and the tunel is up but now I cannot seem to have ...
2
votes
0answers
91 views

Blocking pfsense management access in high-availability setup

I have a pfsense setup in a high-availability configuration. There are about 5 separate networks forwhich I would like to block management access to pfsense. There is a destination rule builtin for ...
-1
votes
1answer
428 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
-1
votes
1answer
279 views

Setting up pfsense on a small business network for firewall use

I have approximately 20 machines that will all be on the same subnet with a pfsense firewall. I have no experience with pfsense, so I am just starting out. I have the following configuration: The ...
0
votes
1answer
206 views

Using a pfSense guest to firewall/route traffic for other guests

I was curious if this falls into the "why..." category or not. I have a dedicated, hardware UTM (Untangle) that's serving as an edge device with two hosts and a dozen guests behind it. Right now, I ...
2
votes
4answers
3k views

Issues with sustained traffic with PFSense

Last week we had to replace our PFSense firewall because it had a catastrophic hardware failure. All but one of the NICs were taken out of the old server and put into the new one. The one NIC that was ...
-1
votes
2answers
400 views

Open VPN copying files very slow

This is my first experience with setting up a VPN. I have Open VPN running at my work network on a firewall/router that uses the PFsense admin software. I connected to the VPN from my home network ...
0
votes
1answer
4k views

How to open the web configuration of Pfsense [closed]

I installed Pfsense on VMWare Player and I set IP adresses for wan interface and Lan interface. When I write the adress https://192.168.40.1 on the address bar of my browser I got a time out and ...
1
vote
0answers
4k views

ntopng: Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec]

I am exploring ntopng reports on my router and seeing, that one computer on my LAN is a flooder. ntopng says Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec] How to explore these ...
0
votes
1answer
2k views

Pfsense OpenVPN tunnel goes down

I have a pfSense openVPN tunnel problem. I have 10 sites, but sometimes some of the sites automatically go down, so I need to restart the openVPN service on the client side. What can I do to fix it? ...
1
vote
1answer
466 views

Netbalancer vs pfsense lan graph traffic? Which one is correct?

I am researching on wan bandwith/speed checking tools/graphs. Normally we are using pfsence as a firewall/gateway/router. and also we were used to use "Traffic Graph" lan interface. Recently we have ...
10
votes
1answer
11k views

Connect to multiple AP with one Wifi adapter under Linux/FreeBSD?

How can I connect to more than one Wifi access point simultaneously using a single wireless adapter? I'm currently using pfSense as my home router and I want it to connect to multiple APs wirelessly. ...
0
votes
1answer
481 views

How to import users (openvpn) into PFsense

I have a OpenVPN setup from an barebone server with ~60 users, and searching for a way to import those users with certificates into a new PFsense setup. They don't have passwords, because we use ldap ...
1
vote
0answers
343 views

How Do I get unbound to only use DNSSEC?

I have a pfsense box, that I am in the process of configuring for the first time I would like to use DNSSEC. I used this site to check my DNSSEC status. When I go to this site I am told that my "...
1
vote
0answers
2k views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
0
votes
0answers
1k views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
3
votes
1answer
1k views

Configuring Pfsense via ssh

I want to know how i can completely configure and add add tables to pfsense via ssh. my goal is to have a web installer that configured multiple system and based on the output it will configure the ...
5
votes
0answers
2k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
0
votes
3answers
4k views

PFsense IPSec VPN failing phase 2

I am very new to VPNs and I am getting errors. I have posted the following lines that I think are the most relevant: Dec 2 08:41:03 racoon: DEBUG: IV freed Dec 2 08:41:03 racoon: [EUA]: [79.121.213....
1
vote
1answer
323 views

pfSense OpenVPN from specific IPs and Anywhere

I have 4 Openvpn users, but i would like to restrict the 3 of them to allow connect through the VPN only from specific IPs and the 4th from anywhere. Anyone knows how can i do that? I thought about a ...
0
votes
1answer
683 views

pfsense with three WAN IP and outgoing NAT

similar situation as this one: How to setup pfSense with multiple public IP's i have a pfsense with multiple wlan ip's. I'm using a Hetzner Server with vmware so i have a virtual machine with ...
0
votes
2answers
6k views

How to setup pfSense with multiple public IP's

Having trouble with multiple public IP's getting routed correctly. I'd like to setup the following network: public_ip1(assigned WAN IF) -> pfSense -> server 1,2,3 - 192.168.0.11, .12, .13 ...