pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

1
vote
1answer
244 views

NAT and ISP Subnet when load balancing on pfsense?

I have a pfsense box that I'm trying to plan the configuration for. I am going to be load balancing two ISP's, each with their own /29 static IP subnet. The question I have is in relation to the way ...
1
vote
1answer
224 views

Simplest DNS solution for remote offices

I look after a bunch of remote offices that connect via VPN - a Cisco ASA 5505 in each office acts as Firewall and VPN end point. Beyond that we keep things as simple as possible in the offices to ...
7
votes
0answers
901 views

Virtualized pfSense 2.0.1 affecting Hyper-V host connectivity? arp?

The Setup I have setup pfSense 2.0.1 (64bit-amd image) as a host in Hyper-V. As described in other blogs I had to do the “ifconfig down deX”, “ifconfig up deX” to get the network up and running. The ...
2
votes
2answers
711 views

Bridge NICs with automatic pass-through

I am looking at using a computer with a dual-NIC card (one with two NIC ports) as an in-line traffic shaper / URL filter / traffic analyzer, etc. (probably using pfSense), but I am concerned that if ...
1
vote
1answer
3k views

Trouble with site-to-site OpenVPN & pfSense not passing traffic

I'm trying to get an OpenVPN tunnel going on pfSense 1.2.3-RELEASE running on embedded routers. I have a local LAN 10.34.43.0/254. The remote LAN is 10.200.1.0/24. The local pfSense is configured as ...
1
vote
1answer
2k views

pfSense + DDoS Protection [duplicate]

I run a gaming community on a colo with a 100Mbps port. I want to buy a very cheap 35 dollar server with the same 100Mbps port, and run pfSense to use as a hardware firewall. I'm dealing with a bunch ...
1
vote
0answers
5k views

pfSense IPsec VPN setup (Log error: racoon: INFO: unsupported PF_KEY message REGISTER)

Good morning, I'm trying to setup an IPSec Tunnel on a pfSense firewall. I have 2 interfaces configured: WAN (public firewall IP: .../31) LAN (internal static IPs: 192.168.104.0/29) I set up the ...
2
votes
3answers
5k views

PFsense VPN all types failing?

I am trying to configure a new PFsense router (64 bit) and am trying to to get the VPN functions working. I have enabled PPTP, L2TP and IPSec. I've added allow all rules to all LAN's, WAN's and each ...
0
votes
2answers
879 views

How to Zone Forward to a List of Alternative Name Servers in pfSense 2.0.1

I'm not sure if dnsmasq is involved in this process on pfSense or not. Before pfsense, we'd do this in BIND thusly: zone "firstpartner.com" { type forward; forwarders { 1.2.3.4; 5.6.7.8; ...
1
vote
2answers
240 views

Setup a LAN-wide proxy

I am trying to setup squid as a caching server for my local network. I am looking for a solution to make the whole network use the proxy automatically. In other words, I want every client on the ...
1
vote
1answer
2k views

Safely adding SSH users to pfSense

I would like to add a user for myself to login via SSH to a pfSense box. I don't want to just blindly go through the adduser command and inadvertently break something / open a vulnerability somewhere ...
4
votes
2answers
219 views

Internal DNS server provide response to external requests?

I have a pfSense firewall and a Windows 2008 R2 DNS server. I'd really like my DNS server to respond to external queries for my subdomains. Right now, I'm using a 3rd party service for that. Is ...
1
vote
1answer
1k views

Configuring dnsmasq to handle mx records on pfsense 2.0.1

I know from dnsmasq's man page that it is capable of handling mx records, but I can't seem to find anything in pfsense's web GUI or anywhere online that talks about how to include mx records. I'm ...
1
vote
1answer
896 views

What are the security risks in running pfsense on a box with a wireless radio?

In my network pfsense is the firewall and router for my entire network. It is the only machine with direct WAN access. All other machines are behind it (and connected through a switch). I am trying to ...
-1
votes
1answer
2k views

Pfsense Virtual IP NATing

Am setting up Pfsense 2.0 but am stuck when it comes to port forwarding/Natting. I've done it before but not using Virtual IPs. Say I have WAN on 11.11.11.1 and LAN on 192.168.5.5, I have added a ...
3
votes
3answers
2k views

What are the security risks of using pfsense in a virtualised environment?

I am thinking of using pfsense on my ubuntu server box. I'd virtualise pfsense with virtualbox, and have it route and firewall all traffic both on and destined to my server as well as the the rest of ...
2
votes
1answer
709 views

How to configure DNSMasq to allow wildcards for dns entries from DHCP?

I'm using PFSenses 2.0 in our development environment. I'm depending on the DNS Forwarder to add DNS entries for new DHCP leases. This is working well, though I need to add support for wildcards to ...
3
votes
1answer
2k views

Install pfSense using serial console

I want to install pfSense with the ISO installer but only have a serial console available. How do I tell the installer to use the serial console instead of VGA?
0
votes
2answers
112 views

Migrate from Linux network configuration

I need to migrate a linux machine to some kind of router distribution, I've chosen pfSense for this. The problem is that the WAN configuration used on the linux machine is really crappy, however this ...
1
vote
1answer
1k views

pfSense routing between two routers with shared network

I have a network set-up using two pfSense routers arranged like this:- DMZ1 WAN1 WAN2 DMZ2 | | | | | | | | \___ PF1 PF2___/ | ...
3
votes
1answer
2k views

pfSense router on a LAN with two gateways

I have a LAN with an ADSL modem/router on it. We have just gained an alternative high-speed internet connection at our location, and I want to connect the LAN to it, eventually dropping the ADSL. ...
1
vote
0answers
509 views

pfsense + haproxy + stunnel as reverse proxy with load balancing and ssl terminaltion

i have this topology as title says with a pfsense with installed haproxy and stunnel. Because i saw that haproxy can't do ssl termination i thought about stunnel. But i don't know how to set up it. My ...
2
votes
2answers
433 views

pfSense 1.2.3 can't talk ARP beyond a switch two hops away

I have the following devices on vlan93 on my network: pfsense (192.168.93.1) core-sw1 (192.168.93.2) edge-sw1 (192.168.93.3) pf-switch (192.168.93.100) devices (192.168.93.120) Physical ...
5
votes
1answer
4k views

Why is pfSense blocking multicast traffic when it is explicitly enabled?

I have a pair of pfSense firewall/routers set up in CARP/XML Config cluster. On the LAN side, the switch also has a pair of servers running corosync/pacemaker/drbd. These are on a different ip ...
3
votes
1answer
7k views

How can I detect a DDoS attack using pfSense so I can tell my ISP who to block? [duplicate]

Last week my network was hit by a DDoS attack which completely saturated our 100 MBps link to the internet and pretty much shut down all the sites and services we host. I understand (from this ...
2
votes
1answer
1k views

Physical network setup for pfsense w/ CARP for redundant firewalls

So I'm looking at this diagram: http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP) Does this assume that the "DSL Router" at the top of the drawing has two physical RJ45 ...
1
vote
3answers
6k views

block Torrent through pfsense-firewall

is there a way to block users on pfsense-firewall level from using torrents? Thnaks in advance
0
votes
1answer
222 views

PHP crashing when loading “RRD Graphs” page on pfSense

When attempting to visit the Status > RRD Graphs page of pfSense, I am greeted with a blank page... Most likely due to PHP being unable to complete the request... I am unsure how to repair this. On ...
2
votes
1answer
874 views

Allowing Traffic Across the Interface Members of a pfSense Bridge

I have the following setup on pfSense 2.0.1 32 bit: WAN_IF (Physical Interface Connected to ISP)-----\ /-----DMZ (Physical Interface of External Servers) ...
3
votes
1answer
419 views

Hosting multiple private VPNs on PFSense

We are running PFSense 2.0.1-RELEASE and need to make the following scenario work: 1..n remote offices for company A need to connect to a private VPN (VPN server hosted in our datacenter). All the ...
3
votes
2answers
2k views

pfsense 2.0.1 Firewall SMB Share not showing up under network

I have a freenas NAS with a SMB share running at 192.168.2.2 of a 192.168.2.0/28 network. Gateway is 192.168.2.1. Originally this was running on a switch with my LAN, but now having upgraded to new ...
3
votes
2answers
4k views

Create a rule using shell in fresh pfSense installation to open up WAN access to WebConfigurator

I am in a situation where I require WAN access to be opened up to the WebConfigurator through pfSense because I do not have another node connected to the same network to access WebConfigurator from ...
0
votes
1answer
2k views

pfSense router gives DNS rebinding warning when accessing subdomains

I have just set up a router running pfSense on our network and forwarded the appropriate ports. I have a small web server running in my network, and a domain name pointing to our (WAN) IP. When ...
3
votes
1answer
1k views

pfsense single MAC is listed with several IP's in ARP table

I have this problem: arp table filling up But I am quite sure that I cannot blame Kaspersky. Scenarie: a user plugs his computer in. He waits and waits but are getting no IP by DHCP. Then he is ...
3
votes
3answers
517 views

Suggestions for transitioning to new GW/private network

I am replacing a private T1 link with a new firewall device with an ipsec tunnel for a branch office. I am trying to figure out the right way to transition folks at the new site over to the new ...
1
vote
1answer
490 views

dd-wrt switch for PfSense

I currently have eth2 on my pfsense set up, and configured as 192.168.1.1, it has dhcp setup with allocation being 192.168.1.10 - 192.168.1.245. On my dd-wrt box, i disabled the WAN, and set it to ...
2
votes
2answers
4k views

pfSense with two WANs, routing Skype traffic over a specific WAN

I have a pfSense setup with two WANs (WAN1 and WAN2) and one LAN network. The two WANs are setup for failover. However, QoS has recently been an issue for Skype calls in our office (about 30 people) ...
0
votes
0answers
47 views

pfSense minimum requirements for 100 users [duplicate]

Possible Duplicate: Can you help me with my capacity planning? For a lan party we are considering running pfSense on a separate desktop pc to serve as our router. We expect around a total ...
0
votes
1answer
879 views

pfSense to ASA L2L VPN - infrequent, short-lasting, but consistent disconnections

Has anyone here been able to specify a stable configuration for the L2L VPN between an ASA device and pfSense 2.0.1? I am using the most accomodating settings on the ASA side (DefaultL2LGroup with ...
1
vote
1answer
703 views

Cannot use I/O in console for Xen HVM running FreeBSD/pfSense

I've been having a really hard time trying to get a Xen HVM using pfSense 2 (based on FreeBSD 8.1) working. I can make the machine run, and boot from an ISO image, but I cannot get I/O to work in the ...
2
votes
3answers
432 views

Developers are experiencing very poor performance with Windows explorer, particularly adding/deleting files, over VPN to Win2k3 share

We have the following arrangement: Dev Site <--vpn--> Prod Site. The Prod Site firewall, running pfSense 2, accepts VPN TCP/UDP traffic on SMB ports 135-139 and 445. Our developers can connect to ...
3
votes
2answers
3k views

reason not use pfsense as transparent firewall?

Our office is using a multi-wan router as dhcp/router/firewall. but now I want to put a pc with pfsense between that router and switch, so I can do more advanced firewall task like traffic monitor and ...
3
votes
2answers
689 views

Blocking a network device from communicating with another device on the LAN

I have been working with the firewall/router distribution Pfsense for a while now and I have been trying to figure out how to "isolate" a server on my LAN from other computers on my LAN by using ...
1
vote
1answer
2k views

Pfsense IPsec VPN not listening on port 500?

I am trying to setup a home VPN with IPsec as I have read about PPTP having some security problems and being outdated. I found an article on the web that shows you how to setup an IPsec VPN here which ...
0
votes
1answer
1k views

VLAN trunk port not working with ESXi 5

I just purchased my first VLAN-capable switch (SLM2008T-NA), and I tried to configure my first vlan on it. However, I am not able to make my trunk port work with ESXi 5. Here is my current setup: ...
1
vote
1answer
394 views

Network Gateway Options for Small Office: Cisco 800 series router vs. Linux/*BSD (e.g. pfSense) on a white box vs. reflashed DD-WRT/Tomato/OpenWRT

Our existing network gateway's hardware has just failed (it was a repurposed desktop machine running Debian + Shorewall that we threw together), and we're looking to replace it. For now, we've fallen ...
1
vote
2answers
2k views

Pfsense: Inbound Load Balancing https with sticky connection

first of all I'm very sorry for my English... This is my scenario: Internet Firewall+LB: pfsense_1(Active) + pfsense_2(Passive) in CARP Pool servers: 3 x nginx(PHP5+HTTP+HTTPS) Pfsense 1 and 2 ...
1
vote
1answer
2k views

pfSense - OpenVPN - tap - client connection: Default Gateway Error

We have setup a OpenVPN Server on a pfSense v2.0.1 Router with the "OpenVPN tap Bridging Fix package" to build a bridged VPN network. We followed this HOWTO: link Nearly everything workes fine expect ...
7
votes
2answers
4k views

Virtualized firewall under Hyper-V?

We are currently considering installing an instance of pfSense on our Hyper-V R2 based server to act as a content filter, captive portal and general firewall. Although it is usually bad practice to ...
1
vote
1answer
2k views

PFSense with client certificates, SSL cert hosting

I'm running a PFSense firewall that is doing load balancing to a number of IIS servers. I'd like to host the SSL Certificate on the pfsense firewall instead of the individual IIS servers. I'd also ...