pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

3
votes
1answer
6k views

How can I detect a DDoS attack using pfSense so I can tell my ISP who to block? [duplicate]

Last week my network was hit by a DDoS attack which completely saturated our 100 MBps link to the internet and pretty much shut down all the sites and services we host. I understand (from this ...
2
votes
1answer
875 views

Physical network setup for pfsense w/ CARP for redundant firewalls

So I'm looking at this diagram: http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP) Does this assume that the "DSL Router" at the top of the drawing has two physical RJ45 ...
1
vote
3answers
4k views

block Torrent through pfsense-firewall

is there a way to block users on pfsense-firewall level from using torrents? Thnaks in advance
0
votes
1answer
181 views

PHP crashing when loading “RRD Graphs” page on pfSense

When attempting to visit the Status > RRD Graphs page of pfSense, I am greeted with a blank page... Most likely due to PHP being unable to complete the request... I am unsure how to repair this. On ...
2
votes
1answer
725 views

Allowing Traffic Across the Interface Members of a pfSense Bridge

I have the following setup on pfSense 2.0.1 32 bit: WAN_IF (Physical Interface Connected to ISP)-----\ /-----DMZ (Physical Interface of External Servers) ...
3
votes
1answer
376 views

Hosting multiple private VPNs on PFSense

We are running PFSense 2.0.1-RELEASE and need to make the following scenario work: 1..n remote offices for company A need to connect to a private VPN (VPN server hosted in our datacenter). All the ...
3
votes
2answers
2k views

pfsense 2.0.1 Firewall SMB Share not showing up under network

I have a freenas NAS with a SMB share running at 192.168.2.2 of a 192.168.2.0/28 network. Gateway is 192.168.2.1. Originally this was running on a switch with my LAN, but now having upgraded to new ...
3
votes
2answers
3k views

Create a rule using shell in fresh pfSense installation to open up WAN access to WebConfigurator

I am in a situation where I require WAN access to be opened up to the WebConfigurator through pfSense because I do not have another node connected to the same network to access WebConfigurator from ...
0
votes
1answer
1k views

pfSense router gives DNS rebinding warning when accessing subdomains

I have just set up a router running pfSense on our network and forwarded the appropriate ports. I have a small web server running in my network, and a domain name pointing to our (WAN) IP. When ...
3
votes
1answer
874 views

pfsense single MAC is listed with several IP's in ARP table

I have this problem: arp table filling up But I am quite sure that I cannot blame Kaspersky. Scenarie: a user plugs his computer in. He waits and waits but are getting no IP by DHCP. Then he is ...
3
votes
3answers
477 views

Suggestions for transitioning to new GW/private network

I am replacing a private T1 link with a new firewall device with an ipsec tunnel for a branch office. I am trying to figure out the right way to transition folks at the new site over to the new ...
1
vote
1answer
403 views

dd-wrt switch for PfSense

I currently have eth2 on my pfsense set up, and configured as 192.168.1.1, it has dhcp setup with allocation being 192.168.1.10 - 192.168.1.245. On my dd-wrt box, i disabled the WAN, and set it to ...
0
votes
0answers
448 views

How to use Public IP in case of two ISP when two differs from each other

Please bare with my long explanation but this is important to explain the actual problem. Please also pardon my knowledge with PFsense as i am new to this. I have single PFSense box with 3 Ethernet ...
2
votes
2answers
4k views

pfSense with two WANs, routing Skype traffic over a specific WAN

I have a pfSense setup with two WANs (WAN1 and WAN2) and one LAN network. The two WANs are setup for failover. However, QoS has recently been an issue for Skype calls in our office (about 30 people) ...
1
vote
0answers
43 views

pfSense minimum requirements for 100 users [duplicate]

Possible Duplicate: Can you help me with my capacity planning? For a lan party we are considering running pfSense on a separate desktop pc to serve as our router. We expect around a total ...
0
votes
1answer
706 views

pfSense to ASA L2L VPN - infrequent, short-lasting, but consistent disconnections

Has anyone here been able to specify a stable configuration for the L2L VPN between an ASA device and pfSense 2.0.1? I am using the most accomodating settings on the ASA side (DefaultL2LGroup with ...
1
vote
1answer
586 views

Cannot use I/O in console for Xen HVM running FreeBSD/pfSense

I've been having a really hard time trying to get a Xen HVM using pfSense 2 (based on FreeBSD 8.1) working. I can make the machine run, and boot from an ISO image, but I cannot get I/O to work in the ...
2
votes
3answers
408 views

Developers are experiencing very poor performance with Windows explorer, particularly adding/deleting files, over VPN to Win2k3 share

We have the following arrangement: Dev Site <--vpn--> Prod Site. The Prod Site firewall, running pfSense 2, accepts VPN TCP/UDP traffic on SMB ports 135-139 and 445. Our developers can connect to ...
3
votes
2answers
3k views

reason not use pfsense as transparent firewall?

Our office is using a multi-wan router as dhcp/router/firewall. but now I want to put a pc with pfsense between that router and switch, so I can do more advanced firewall task like traffic monitor and ...
3
votes
2answers
521 views

Blocking a network device from communicating with another device on the LAN

I have been working with the firewall/router distribution Pfsense for a while now and I have been trying to figure out how to "isolate" a server on my LAN from other computers on my LAN by using ...
1
vote
1answer
2k views

Pfsense IPsec VPN not listening on port 500?

I am trying to setup a home VPN with IPsec as I have read about PPTP having some security problems and being outdated. I found an article on the web that shows you how to setup an IPsec VPN here which ...
0
votes
1answer
1k views

VLAN trunk port not working with ESXi 5

I just purchased my first VLAN-capable switch (SLM2008T-NA), and I tried to configure my first vlan on it. However, I am not able to make my trunk port work with ESXi 5. Here is my current setup: ...
1
vote
1answer
366 views

Network Gateway Options for Small Office: Cisco 800 series router vs. Linux/*BSD (e.g. pfSense) on a white box vs. reflashed DD-WRT/Tomato/OpenWRT

Our existing network gateway's hardware has just failed (it was a repurposed desktop machine running Debian + Shorewall that we threw together), and we're looking to replace it. For now, we've fallen ...
1
vote
2answers
2k views

Pfsense: Inbound Load Balancing https with sticky connection

first of all I'm very sorry for my English... This is my scenario: Internet Firewall+LB: pfsense_1(Active) + pfsense_2(Passive) in CARP Pool servers: 3 x nginx(PHP5+HTTP+HTTPS) Pfsense 1 and 2 ...
1
vote
1answer
1k views

pfSense - OpenVPN - tap - client connection: Default Gateway Error

We have setup a OpenVPN Server on a pfSense v2.0.1 Router with the "OpenVPN tap Bridging Fix package" to build a bridged VPN network. We followed this HOWTO: link Nearly everything workes fine expect ...
7
votes
2answers
4k views

Virtualized firewall under Hyper-V?

We are currently considering installing an instance of pfSense on our Hyper-V R2 based server to act as a content filter, captive portal and general firewall. Although it is usually bad practice to ...
1
vote
1answer
2k views

PFSense with client certificates, SSL cert hosting

I'm running a PFSense firewall that is doing load balancing to a number of IIS servers. I'd like to host the SSL Certificate on the pfsense firewall instead of the individual IIS servers. I'd also ...
2
votes
1answer
2k views

How to configure pfsense to use LAN ports as local switched ports?

I have a pfsense box with 6 LAN ports. I'd like to use one as the WAN port, and 5 as local LAN ports, just like a home gateway/router. How to setup the LAN ports so that they are all in the same ...
3
votes
2answers
3k views

How can I track down what part of pfsense is blocking website access?

I've got a PFSense firewall/gateway on our network. Everything works great except for the fact that I cannot access one specific website. Pfsense is running the following packages Country Block ...
1
vote
0answers
431 views

need help to setup internet load-balancing for a small ISP

I need some help about the following problems: I want to do load-balancing for two Internet dsl connection from same isp and same speed I need to manage fail over also I want to manage up to 50 user ...
2
votes
1answer
4k views

pfsense peer-to-peer OpenVPN not connecting

I'm trying to setup a peer-to-peer OpenVPN between two pfsense servers running 2.0.1-RELEASE, but the client keeps getting the connection dropped, with a status of "reconnecting; ping-restart" and ...
2
votes
1answer
786 views

How to choose an open source, Asterisk friendly firewall?

I'm in pain. We are moving to a SIP based VOIP system and for whatever reason, we could not get our hosted Asterisk solution to work with our Sonicwall. Our VOIP provider gave up and is recommending ...
1
vote
0answers
899 views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
3
votes
2answers
3k views

Traffic shaping HTTP downloads with l7-filter

Given the following: A small, remote office has only a few users and a 1.5 Mbps DSL connection via a ZyXEL 660R. Users experience unacceptable latency and packet loss when even one large file is ...
0
votes
1answer
883 views

Can I use my pfSense WAN IP as public IP for 1:1 NAT? What about port forwarding?

I have a dual pfSense configuration with CARP. Both WAN interfaces are assigned consecutive WAN IP .150, .151. I think it is silly that pfSense would require them both to have these dedicated IP so I ...
0
votes
0answers
1k views

load-balancing with pfsense

I am trying to setup a proof of concept based on MySQL galera. My MySQL servers are all setup and working properly and replicating correctly, and I am now at the load-balancer level. I am using a ...
0
votes
1answer
385 views

cisco vpn client randomly disconnects with pfSense

My network has two gateways, one is a pfSense box that everyone uses. The other one is a TP-Link firewall essentially for tests. Some machines inside my network need to access a VPN through the Cisco ...
-1
votes
2answers
1k views

Using Windows Server 2008 R2 and PfSense [closed]

Hey I want to setup my personal home network so that R2 is dishing out DHCP and currently my PfSense box is doing this for me. my setup is motorola surfboard to PfSense to switch. How do I configure ...
0
votes
1answer
636 views

Order of application of NAT rules in pfSense 2

In pfSense 2.0, I have a bunch of WAN CARP Virtual IPs and a bunch of 1:1 NAT rules defined associating these IPs to LAN subnet hosts. If I set up Port Forwarding rules that forward from CARP IPs ...
0
votes
1answer
708 views

PFSENSE Bridge on of the Network Interfaces

I have a PFSENSE installation, which I have just added a new physical interface to for a new requirement 'DIGI'. A third party has installed a DrayTek router on our network which has their equipment ...
0
votes
1answer
101 views

Is there a way to set ddns local to not forward to admin interface

I am running pfsense and would like to configure my site to work locally. I have a ddns setup working externally with no-ip. The problem is I'm trying to get my local setup to work. Locally I enter ...
0
votes
1answer
317 views

PFSense new network, NAT and Firewalling

We have a PFSENSE installation with a few physical interfaces defined: 192.168.1.0/24 - LAN 192.168.2.0/24 - WIFI 192.168.3.0/24 - SERVERS 10.61.88.0/23 - New Requirement..... read on The new ...
4
votes
2answers
2k views

public ip resolves externally but not internally

I have a one to one NAT on pfsense that assigns a public IP to an internal IP (running a web server). When I open the public IP from an internal machine, it will not resolve to the internal IP, ...
0
votes
1answer
687 views

pfsense long ping to google

I have a pfsense box set up. What happens is I set a rule so I can't hit the admin interface 192.168.3.1 from the box. With the rule enabled --- www.l.google.com ping statistics --- 2 packets ...
2
votes
1answer
4k views

Local domain DNS resolution not working using OpenVPN on a pfSense box

I am currently trying to setup an OpenVPN server with the intention of linking several servers together in order to run the backup jobs over the VPN. For this example, this is what I have: A ...
3
votes
3answers
310 views

Sizing requirements for 100 simultaneous VPN connections

I've been tasked with building out a firewall / VPN device that needs to support up to 100 simultaneous VPN connections as well as light routing (mostly custom NAT mappings). This will be fronting a ...
3
votes
1answer
797 views

pfSense setup recommendations

I want to setup a WAN, DMZ and private LAN. I want to do a Deny ALL and just open the 4-5 ports that I need to DMZ and a Deny all on the private LAN on the DMZ are a web web servers, all have public ...
0
votes
2answers
5k views

Alternative to pfSense for a production-ready firewall solution hosted in ESXi

I'm looking for an alternative to pfSense (2) that can be virtualized in VMWare ESXi. I've experienced several problems with pfSense to date and I feel like it is not a totally finished or polished ...
1
vote
2answers
765 views

Is it possible to assign a VLAN to an alias of network interface in pfsense?

My goal is to build a redundant pfSense cluster (as described in this article : http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP) The problem is that i only have 2 ...
2
votes
1answer
2k views

How to configure BIND to allow RFC2136-style updates for 1 host for Dynamic DNS?

I am using Debian on a VPS with static IP and my home network behind PPP with dynamic IP. My pfSense router/firewall shall update my host home.mydomain.tld via RFC2136 style updates. After lots of ...