Questions tagged [pfsense]
pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.
845
questions
1
vote
0
answers
172
views
in pfsense, its possible to secure the conf.cf (primary configuration file)
I want to give someone a solution based on embedded pfSense. That solution has modifications in pfSense, which I don't want anyone to steal and use it for their own business. its proprietary solution ...
2
votes
1
answer
9k
views
pfSense - NAT not working
I have a pfSense on Proxmox VM. I have two IP addreses configured:
WAN: xx.xx.88.24 -> public IP accesible from internet
LAN: 192.168.1.100 -> corporate intranet
I want to access an internal ...
0
votes
1
answer
1k
views
Connect VM Behind pfsense interface to host on physical home router
I have a Hyper-V server (192.168.1.251) on my home network. My home router is 192.168.1.1. I have a PFSense VM with a bridged network adapter (192.168.1.177)
I have a couple of interfaces connected ...
0
votes
0
answers
993
views
PfSense(on ESXi) on hetzner, IP Subnet not working
i have one primary IP of Hetzner DS(with ESXi on it, and pfsense). i got a subnet of /29 from hetzner. they say that the subnet IPs must route through Primary IP address of server, like if server IP ...
0
votes
1
answer
876
views
Not able to forward Pfsense 2.4.4 Squid log to elk
I have tried a couple of options so far but not able to forward logs to my elk server.
Can someone please help me on this and guide me what configuration changes I have to make in order to achieve ...
0
votes
2
answers
19k
views
pfSense allow ping only from 1 IP address
We are a dutch company with an office in the USA.
This office has an pfSense firewall device with the 182.12.12.12 IP address .
In the Netherlands' office we have an IP address like this: 100.12.10....
0
votes
1
answer
1k
views
scp to pfsense not working
When ever I try to scp a file from pfsense I get back what appears to be the help for pfsense's scp:
scp admin@fw:/tmp/test /tmp/
usage: scp [-12346BCpqrv] [-c cipher] [-F ssh_config] [-i ...
1
vote
1
answer
969
views
can pfSense captive portal grant internet access to IP which is assigned by Windows DHCP server only?
In our organization we have a wifi access point and IP addresses are assigned by a Windows DHCP server. We have MAC filtering enabled for internet access in the DHCP server but the issue is that if ...
-2
votes
1
answer
647
views
Windows server VM can't access internet through pfSense
System overview:
1.Ubuntu 18.4 running virtualbox.
2.Two VM machines, pfSense firewall and windows server 2016.
I'am trying to configure the windows server to go through the pfSense, so i chosed a ...
1
vote
0
answers
568
views
IPV6 Small Business Implementation - Windows DHCP/DNS, PFSense, IPV6
I have some confusion about IPV6 on a Small Business Network. I'm sure one part or the other is covered extensively, but I can't seem to find answers.
(Background info) I have a home network that ...
1
vote
0
answers
123
views
sudden lost of access to esxi vSphere network
Our lab setup consists of a vSphere Esxi server hosting some VMs. In front of VMs exists a pfSense router VM. All VMs are getting connectivity from router and additionally a openVPN server is set in ...
2
votes
0
answers
50
views
Changing VMware Network Configuration [closed]
I am in an apartment that PavlovMedia provides DHCP; however, I'm trying to configure my own private network with a pfSense virtual machine as a gateway. Mainly, I just want to use DHCP from my ...
0
votes
2
answers
3k
views
pfSense: Allow VLAN Access to all but WAN
I have machines in a VLAN and I need to have them access all but not get out to the internet.
I have tried this (and lots of others options) but nothing is working.
I simply need to block internet ...
0
votes
1
answer
2k
views
Share AWS DirectConnect between multiple accounts
AWS allows you to share your DirectConnect connection amongst multiple AWS accounts via a hosted virtual interface (instructions here). I have a pfSense device on the local side of an MPLS line for ...
1
vote
0
answers
3k
views
OpenVPN client connection gets stuck at "Pre-connection initialization successful" after reboot in Linux Ubuntu 18
My OpenVPN client version 2.4.4 connection is getting stuck after reboot. It started stucking after I configured the OpenVPN Server to pass a list of DNS servers for the OpenVPN clients.
I have ...
1
vote
0
answers
1k
views
How do I make Arpwatch only send new activity/new station emails?
I had set up Arpwatch on my office's pfSense 2.4.3 gateway. Ever since I had done that, I started getting a whole lot of emails - most of them very useful, while some are less useful.
I wonder if ...
0
votes
2
answers
2k
views
pfSense: add multiple static IP/MAC bindings?
I have a pfSense router that handles some labs. It is configured such that DHCP only hands out IP addresses for machines listed in the static IP/MAC bindings list.
Whenever we upgrade a lab with new ...
-1
votes
1
answer
240
views
Graylog CSV Export is slow after upgrade
After I upgraded from graylog version 2.2.1 to 2.4.3, the csv export became quite slow compared to the previous download rate. I have to say that I did many changes
putting it behind pfsense
using ...
0
votes
1
answer
331
views
NFS w/Kerberos - Network change broke auth?
So, I've recently changed my network setup a bit, and for reasons I'm still trying to suss out replacing the old router with a new PFSense box appears to have broken the authentication within the ...
0
votes
1
answer
5k
views
Split DNS and internal port forwarding
I have a pfSense firewall running in a pretty standard configuration, 1 WAN, 1 LAN. On both sides of the pfsense I'd like to make available a service via DNS name, lets say "service.domain.com".
For ...
1
vote
1
answer
247
views
Suddenly lost access to pfSense
I've just installed pfSense in VMware and play around with the settings.
Suddenly, I lost access to Web GUI.
I ran tcpdump on it and was able to see the packet from my notebook reached to it.
What ...
1
vote
2
answers
2k
views
Location of pfSense menu (startup script)?
When pfSense is boot, the following menu is displayed on the screen.
When we select option number 8 (shell), how do we get back to the menu?
What is the filename for this menu?
-1
votes
1
answer
3k
views
pfsense dns doesn't work anymore for a specific domain
I had a local webserver that was working fine and on which I had a website on domain example.com. I was also using a static public IP for the WAN with ISP #1. Now I decided to move the website to a ...
-1
votes
2
answers
4k
views
How to set up pfSense/OPNSense on virtual host?
I'm a little confused as how to to host a *Sense box as a VM and have it provide routing for the host.
Internet -> Modem/Router (bridge mode) -> en1 on Dell r710 -> OPNSense in a VM
Then ...
0
votes
2
answers
608
views
VPN Connection to Windows Network behind Firewall
We have a Windows network with a single Windows Server 2012 server which works domain server as well as a file server, which is protected by pfSense firewall.
We want to allow a specific user (with ...
1
vote
1
answer
2k
views
Unifi AP-PRO with pfSense running FreeRADIUS, with MySQL database externally
I'm in the process of moving from a set of Aerohive AP's to Unifi AP-PRO to increase the range of our wifi. Adding more Aerohives could be a solution, but they're way more expensive and I already have ...
1
vote
1
answer
4k
views
Configure LAN for IPv6 with SLAAC on WAN
My ISP assigns me an IPv4 address via DHCP and an IPv6 subnet through SLAAC.
I set up my pfSense box to use NAT and DHCPv4 for my LAN network which works fine. However, on the IPv6 side, my LAN ...
0
votes
1
answer
9k
views
pfSense unable to LDAP bind to Active Directory Server
I've been instructed to setup an OpenVPN Server on our local pfSense VM. I've combed over tutorials and guides, netgate, openvpn documentation and I feel I must be missing something.
I've tested the ...
0
votes
0
answers
1k
views
PfSense double nat and opening ports with ISP modem
At the office we I have a router/modem from my ISP which cannot be used in bridge mode, unfortunately. So I'll have to work with double NAT.
Setup:
(82.xx.xx.xx "wan" - ISP modem/router - 192.168.2....
0
votes
1
answer
14k
views
Setting up pfSense to bridge LAN NICs and connect WAN
I have a machine with four NICs (physical ethernet ports) and I'd like to set up a fully updated pfSense on it. So far it looks like this:
A few things I've done so far:
I've set up the bridge ("...
1
vote
1
answer
3k
views
Very high tcp retransmit rate to Internet on devices inside LAN
I work with Linux systems a lot as a developer and have a moderate level of networking knowledge, but the following situation is a real baffling mystery:
I'm running pfSense 2.4.3 (that's current) on ...
0
votes
1
answer
1k
views
Connecting to vpn through double nat
I have a pfsense gateway that connects to the ISP and gets a publix address. It takes care of servers and clients without a problem. To that gateway I connected another pfsense to play around and just ...
2
votes
0
answers
2k
views
Reverse proxy on pfSense 2.1.5 with Squid
I installed Squid on my pfSense and I am trying to reach 192.168.1.41 when the request is for sub1.dom.it, and I am trying to reach 192.168.1.42 when the request is for sub2.dom.it.
I used to have ...
1
vote
0
answers
847
views
pfSense : How to do 1:1 NAT to server hosted at remote location linked through IPSec tunnel
We have 2 data centers at 2 different locations and are moving our services from location A to B without interruption. Both location have a PFSense Firewall configured with IPSec tunnel between each ...
2
votes
0
answers
2k
views
What are the pros and cons of using PfSense DNS Forwarder or Resolver?
I am looking for a clean set of pros and cons for two mutually exclusive DNS configurations for pfsense router: Forwarder and Resolver.
The configuration that I have in mind is a complex home-office ...
0
votes
0
answers
2k
views
UniFi and pfSense IPSec VPN not passing traffic
I have a IPSec VPN running between two sites. Site A is pfSense and site B is a UniFi Security Gateway. I have got the VPN established but I cant ping anything in either direction on the network. Any ...
1
vote
1
answer
98
views
Juniper => D-Link => pfSense - how make WAN for pfSense
Ssory for, maybe, stupid question(and bad english), i'm newbie in system administration, but task it is.
We have this net scheme - simple view:
ISP Gateway
||
Juniper SRX240H(our gateway)
||...
1
vote
0
answers
296
views
PFSENSE Topology w/Cisco L3 Switces
I have the need to configure a router on a stick variant where I have WAN in (not shown on image) and 2 LAN ports that go to each of the switches shown in the image.
The vlan 'subinterfaces' live on ...
1
vote
1
answer
752
views
Dedicated IP for webserver through pfsense and a draytek 2860
We have a leased line which has 8 public IP addresses. This connects to our Draytek 2860 router.
From here we have an internal network which we use for our office computers and another network for ...
2
votes
0
answers
844
views
IKEv2 with EAP-MSCHAPv2 with static IP for each client
I've successfully created an IKEv2 with EAP-MSCHAPv2 VPN for Windows 10 clients using PFSense. This is the link that I followed for doing so: https://doc.pfsense.org/index.php/IKEv2_with_EAP-MSCHAPv2
...
0
votes
0
answers
1k
views
How to have multiple routes to the same remote VPN in pfSense?
We have a pfSense server in two offices. Our main office has a VPN server configured, and our satellite office has a VPN client configured, using the IP 123.156.88.253 (just an example).
We have just ...
1
vote
1
answer
6k
views
pfsense squid SSL_ERROR_RX_RECORD_TOO_LONG
I have pfsense running squid proxy and squid guard. It was working like charm until few days ago, after that all https traffic started to give the below error SSL_ERROR_RX_RECORD_TOO_LONG.
I have ...
5
votes
1
answer
12k
views
pfSense: dynamic DNS does not update automaticaly - it knows it's outdated
I'm using dyndns with pfSense and I have a router connected on the WAN line (DHCP configuration). Every few days my ISP changes my IP but pfsense does not update it automatically.
If I open the WebUI ...
3
votes
3
answers
4k
views
How to prevent clients from getting static IPs (set by Client Specific Overrides) in OpenVPN via PfSense?
I am getting problems with the current setting in an OpenVPN via PfSense. The situation is the following:
I have created a OpenVPN server in the network 192.168.222.0/24;
Created two client ...
4
votes
1
answer
1k
views
How to add custom xinetd Service in pfSense
On a pfSense 2.4, I installed a custom xinetd service. I appended the necessary line to the list in /etc/services and wrote a stanza in /var/etc/xinetd.conf. After reloading xinetd, the service runs ...
0
votes
0
answers
3k
views
Can't connect to openVPN Server (pfsense)
i have some problems connecting to openvpn server with pfsense.
For my tests i got 2 network interfaces both on my pfsense openvpn server and my windows 10 openvpn client.
On my pfsense i have 1 ...
1
vote
1
answer
2k
views
Can't access web server behind pfSense using second public IP
I have a /29 block of static IPs, one of which I have assigned to a web server on the LAN using VIP, NAT, Rules. Firewall logs show data is being passed successfully to the server, I don't see any ...
2
votes
1
answer
2k
views
pfSense and ESXI WAN
I have a dedicated server which came with ESXI 6.5 pre-installed. There is just one IP dedicated to this, the management IP: 62.121.90.xx/27 from where I can log to ESXI. This instance had just one ...
0
votes
0
answers
469
views
Best method --if any-- to proxy web traffic through domain controller
I've (our tiny group) been using the naked domain for Active Directory for quite a while now, at the beginning we knew it wouldn't be available for other uses without heavy setup. At the time it ...
1
vote
0
answers
5k
views
Squid with AD groups + Kerberos authentication in pfsense?
I followed steps found on the link:
https://journeyofthegeek.com/2017/12/30/pfsense-squid-kerberos/
And the kerberos authentication without AD group membership restriction works very well, but I don'...