Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

Filter by
Sorted by
Tagged with
1 vote
0 answers
172 views

in pfsense, its possible to secure the conf.cf (primary configuration file)

I want to give someone a solution based on embedded pfSense. That solution has modifications in pfSense, which I don't want anyone to steal and use it for their own business. its proprietary solution ...
Farhan's user avatar
  • 4,309
2 votes
1 answer
9k views

pfSense - NAT not working

I have a pfSense on Proxmox VM. I have two IP addreses configured: WAN: xx.xx.88.24 -> public IP accesible from internet LAN: 192.168.1.100 -> corporate intranet I want to access an internal ...
xavi.dive.kite's user avatar
0 votes
1 answer
1k views

Connect VM Behind pfsense interface to host on physical home router

I have a Hyper-V server (192.168.1.251) on my home network. My home router is 192.168.1.1. I have a PFSense VM with a bridged network adapter (192.168.1.177) I have a couple of interfaces connected ...
Paul Hill's user avatar
0 votes
0 answers
993 views

PfSense(on ESXi) on hetzner, IP Subnet not working

i have one primary IP of Hetzner DS(with ESXi on it, and pfsense). i got a subnet of /29 from hetzner. they say that the subnet IPs must route through Primary IP address of server, like if server IP ...
Farhan's user avatar
  • 4,309
0 votes
1 answer
876 views

Not able to forward Pfsense 2.4.4 Squid log to elk

I have tried a couple of options so far but not able to forward logs to my elk server. Can someone please help me on this and guide me what configuration changes I have to make in order to achieve ...
Chandan Singh's user avatar
0 votes
2 answers
19k views

pfSense allow ping only from 1 IP address

We are a dutch company with an office in the USA. This office has an pfSense firewall device with the 182.12.12.12 IP address . In the Netherlands' office we have an IP address like this: 100.12.10....
klaashansen123's user avatar
0 votes
1 answer
1k views

scp to pfsense not working

When ever I try to scp a file from pfsense I get back what appears to be the help for pfsense's scp: scp admin@fw:/tmp/test /tmp/ usage: scp [-12346BCpqrv] [-c cipher] [-F ssh_config] [-i ...
ndemou's user avatar
  • 1,365
1 vote
1 answer
969 views

can pfSense captive portal grant internet access to IP which is assigned by Windows DHCP server only?

In our organization we have a wifi access point and IP addresses are assigned by a Windows DHCP server. We have MAC filtering enabled for internet access in the DHCP server but the issue is that if ...
Zia's user avatar
  • 11
-2 votes
1 answer
647 views

Windows server VM can't access internet through pfSense

System overview: 1.Ubuntu 18.4 running virtualbox. 2.Two VM machines, pfSense firewall and windows server 2016. I'am trying to configure the windows server to go through the pfSense, so i chosed a ...
Mohamed Kanzi's user avatar
1 vote
0 answers
568 views

IPV6 Small Business Implementation - Windows DHCP/DNS, PFSense, IPV6

I have some confusion about IPV6 on a Small Business Network. I'm sure one part or the other is covered extensively, but I can't seem to find answers. (Background info) I have a home network that ...
cshenderson's user avatar
1 vote
0 answers
123 views

sudden lost of access to esxi vSphere network

Our lab setup consists of a vSphere Esxi server hosting some VMs. In front of VMs exists a pfSense router VM. All VMs are getting connectivity from router and additionally a openVPN server is set in ...
Sieg_'s user avatar
  • 11
2 votes
0 answers
50 views

Changing VMware Network Configuration [closed]

I am in an apartment that PavlovMedia provides DHCP; however, I'm trying to configure my own private network with a pfSense virtual machine as a gateway. Mainly, I just want to use DHCP from my ...
Joe's user avatar
  • 41
0 votes
2 answers
3k views

pfSense: Allow VLAN Access to all but WAN

I have machines in a VLAN and I need to have them access all but not get out to the internet. I have tried this (and lots of others options) but nothing is working. I simply need to block internet ...
dross's user avatar
  • 395
0 votes
1 answer
2k views

Share AWS DirectConnect between multiple accounts

AWS allows you to share your DirectConnect connection amongst multiple AWS accounts via a hosted virtual interface (instructions here). I have a pfSense device on the local side of an MPLS line for ...
TPCoMatt's user avatar
1 vote
0 answers
3k views

OpenVPN client connection gets stuck at "Pre-connection initialization successful" after reboot in Linux Ubuntu 18

My OpenVPN client version 2.4.4 connection is getting stuck after reboot. It started stucking after I configured the OpenVPN Server to pass a list of DNS servers for the OpenVPN clients. I have ...
Tiago Stapenhorst's user avatar
1 vote
0 answers
1k views

How do I make Arpwatch only send new activity/new station emails?

I had set up Arpwatch on my office's pfSense 2.4.3 gateway. Ever since I had done that, I started getting a whole lot of emails - most of them very useful, while some are less useful. I wonder if ...
Oleg's user avatar
  • 413
0 votes
2 answers
2k views

pfSense: add multiple static IP/MAC bindings?

I have a pfSense router that handles some labs. It is configured such that DHCP only hands out IP addresses for machines listed in the static IP/MAC bindings list. Whenever we upgrade a lab with new ...
b_laoshi's user avatar
  • 103
-1 votes
1 answer
240 views

Graylog CSV Export is slow after upgrade

After I upgraded from graylog version 2.2.1 to 2.4.3, the csv export became quite slow compared to the previous download rate. I have to say that I did many changes putting it behind pfsense using ...
AHT's user avatar
  • 166
0 votes
1 answer
331 views

NFS w/Kerberos - Network change broke auth?

So, I've recently changed my network setup a bit, and for reasons I'm still trying to suss out replacing the old router with a new PFSense box appears to have broken the authentication within the ...
Adam Luchjenbroers's user avatar
0 votes
1 answer
5k views

Split DNS and internal port forwarding

I have a pfSense firewall running in a pretty standard configuration, 1 WAN, 1 LAN. On both sides of the pfsense I'd like to make available a service via DNS name, lets say "service.domain.com". For ...
HannesS's user avatar
  • 322
1 vote
1 answer
247 views

Suddenly lost access to pfSense

I've just installed pfSense in VMware and play around with the settings. Suddenly, I lost access to Web GUI. I ran tcpdump on it and was able to see the packet from my notebook reached to it. What ...
Sabrina's user avatar
  • 190
1 vote
2 answers
2k views

Location of pfSense menu (startup script)?

When pfSense is boot, the following menu is displayed on the screen. When we select option number 8 (shell), how do we get back to the menu? What is the filename for this menu?
Sabrina's user avatar
  • 190
-1 votes
1 answer
3k views

pfsense dns doesn't work anymore for a specific domain

I had a local webserver that was working fine and on which I had a website on domain example.com. I was also using a static public IP for the WAN with ISP #1. Now I decided to move the website to a ...
M.Parent's user avatar
-1 votes
2 answers
4k views

How to set up pfSense/OPNSense on virtual host?

I'm a little confused as how to to host a *Sense box as a VM and have it provide routing for the host. Internet -> Modem/Router (bridge mode) -> en1 on Dell r710 -> OPNSense in a VM Then ...
cclloyd's user avatar
  • 613
0 votes
2 answers
608 views

VPN Connection to Windows Network behind Firewall

We have a Windows network with a single Windows Server 2012 server which works domain server as well as a file server, which is protected by pfSense firewall. We want to allow a specific user (with ...
D Navi's user avatar
  • 1
1 vote
1 answer
2k views

Unifi AP-PRO with pfSense running FreeRADIUS, with MySQL database externally

I'm in the process of moving from a set of Aerohive AP's to Unifi AP-PRO to increase the range of our wifi. Adding more Aerohives could be a solution, but they're way more expensive and I already have ...
Jacob F.'s user avatar
1 vote
1 answer
4k views

Configure LAN for IPv6 with SLAAC on WAN

My ISP assigns me an IPv4 address via DHCP and an IPv6 subnet through SLAAC. I set up my pfSense box to use NAT and DHCPv4 for my LAN network which works fine. However, on the IPv6 side, my LAN ...
comfreak's user avatar
  • 1,531
0 votes
1 answer
9k views

pfSense unable to LDAP bind to Active Directory Server

I've been instructed to setup an OpenVPN Server on our local pfSense VM. I've combed over tutorials and guides, netgate, openvpn documentation and I feel I must be missing something. I've tested the ...
nulltron's user avatar
  • 103
0 votes
0 answers
1k views

PfSense double nat and opening ports with ISP modem

At the office we I have a router/modem from my ISP which cannot be used in bridge mode, unfortunately. So I'll have to work with double NAT. Setup: (82.xx.xx.xx "wan" - ISP modem/router - 192.168.2....
Nick D's user avatar
  • 1
0 votes
1 answer
14k views

Setting up pfSense to bridge LAN NICs and connect WAN

I have a machine with four NICs (physical ethernet ports) and I'd like to set up a fully updated pfSense on it. So far it looks like this: A few things I've done so far: I've set up the bridge ("...
hpy's user avatar
  • 855
1 vote
1 answer
3k views

Very high tcp retransmit rate to Internet on devices inside LAN

I work with Linux systems a lot as a developer and have a moderate level of networking knowledge, but the following situation is a real baffling mystery: I'm running pfSense 2.4.3 (that's current) on ...
mbaynton's user avatar
  • 163
0 votes
1 answer
1k views

Connecting to vpn through double nat

I have a pfsense gateway that connects to the ISP and gets a publix address. It takes care of servers and clients without a problem. To that gateway I connected another pfsense to play around and just ...
Carobell's user avatar
  • 341
2 votes
0 answers
2k views

Reverse proxy on pfSense 2.1.5 with Squid

I installed Squid on my pfSense and I am trying to reach 192.168.1.41 when the request is for sub1.dom.it, and I am trying to reach 192.168.1.42 when the request is for sub2.dom.it. I used to have ...
Manu's user avatar
  • 115
1 vote
0 answers
847 views

pfSense : How to do 1:1 NAT to server hosted at remote location linked through IPSec tunnel

We have 2 data centers at 2 different locations and are moving our services from location A to B without interruption. Both location have a PFSense Firewall configured with IPSec tunnel between each ...
Patrice Bechard's user avatar
2 votes
0 answers
2k views

What are the pros and cons of using PfSense DNS Forwarder or Resolver?

I am looking for a clean set of pros and cons for two mutually exclusive DNS configurations for pfsense router: Forwarder and Resolver. The configuration that I have in mind is a complex home-office ...
sorin's user avatar
  • 8,216
0 votes
0 answers
2k views

UniFi and pfSense IPSec VPN not passing traffic

I have a IPSec VPN running between two sites. Site A is pfSense and site B is a UniFi Security Gateway. I have got the VPN established but I cant ping anything in either direction on the network. Any ...
dynmatt's user avatar
  • 21
1 vote
1 answer
98 views

Juniper => D-Link => pfSense - how make WAN for pfSense

Ssory for, maybe, stupid question(and bad english), i'm newbie in system administration, but task it is. We have this net scheme - simple view: ISP Gateway || Juniper SRX240H(our gateway) ||...
Yan's user avatar
  • 11
1 vote
0 answers
296 views

PFSENSE Topology w/Cisco L3 Switces

I have the need to configure a router on a stick variant where I have WAN in (not shown on image) and 2 LAN ports that go to each of the switches shown in the image. The vlan 'subinterfaces' live on ...
user46885's user avatar
1 vote
1 answer
752 views

Dedicated IP for webserver through pfsense and a draytek 2860

We have a leased line which has 8 public IP addresses. This connects to our Draytek 2860 router. From here we have an internal network which we use for our office computers and another network for ...
user1711657's user avatar
2 votes
0 answers
844 views

IKEv2 with EAP-MSCHAPv2 with static IP for each client

I've successfully created an IKEv2 with EAP-MSCHAPv2 VPN for Windows 10 clients using PFSense. This is the link that I followed for doing so: https://doc.pfsense.org/index.php/IKEv2_with_EAP-MSCHAPv2 ...
f0rb1dd3n403's user avatar
0 votes
0 answers
1k views

How to have multiple routes to the same remote VPN in pfSense?

We have a pfSense server in two offices. Our main office has a VPN server configured, and our satellite office has a VPN client configured, using the IP 123.156.88.253 (just an example). We have just ...
Danny Beckett's user avatar
1 vote
1 answer
6k views

pfsense squid SSL_ERROR_RX_RECORD_TOO_LONG

I have pfsense running squid proxy and squid guard. It was working like charm until few days ago, after that all https traffic started to give the below error SSL_ERROR_RX_RECORD_TOO_LONG. I have ...
Federico Olivieri's user avatar
5 votes
1 answer
12k views

pfSense: dynamic DNS does not update automaticaly - it knows it's outdated

I'm using dyndns with pfSense and I have a router connected on the WAN line (DHCP configuration). Every few days my ISP changes my IP but pfsense does not update it automatically. If I open the WebUI ...
ndemou's user avatar
  • 1,365
3 votes
3 answers
4k views

How to prevent clients from getting static IPs (set by Client Specific Overrides) in OpenVPN via PfSense?

I am getting problems with the current setting in an OpenVPN via PfSense. The situation is the following: I have created a OpenVPN server in the network 192.168.222.0/24; Created two client ...
Tiago Stapenhorst's user avatar
4 votes
1 answer
1k views

How to add custom xinetd Service in pfSense

On a pfSense 2.4, I installed a custom xinetd service. I appended the necessary line to the list in /etc/services and wrote a stanza in /var/etc/xinetd.conf. After reloading xinetd, the service runs ...
rexkogitans's user avatar
0 votes
0 answers
3k views

Can't connect to openVPN Server (pfsense)

i have some problems connecting to openvpn server with pfsense. For my tests i got 2 network interfaces both on my pfsense openvpn server and my windows 10 openvpn client. On my pfsense i have 1 ...
Maxime.c's user avatar
1 vote
1 answer
2k views

Can't access web server behind pfSense using second public IP

I have a /29 block of static IPs, one of which I have assigned to a web server on the LAN using VIP, NAT, Rules. Firewall logs show data is being passed successfully to the server, I don't see any ...
Malaxes's user avatar
  • 71
2 votes
1 answer
2k views

pfSense and ESXI WAN

I have a dedicated server which came with ESXI 6.5 pre-installed. There is just one IP dedicated to this, the management IP: 62.121.90.xx/27 from where I can log to ESXI. This instance had just one ...
Andy's user avatar
  • 59
0 votes
0 answers
469 views

Best method --if any-- to proxy web traffic through domain controller

I've (our tiny group) been using the naked domain for Active Directory for quite a while now, at the beginning we knew it wouldn't be available for other uses without heavy setup. At the time it ...
Vita's user avatar
  • 133
1 vote
0 answers
5k views

Squid with AD groups + Kerberos authentication in pfsense?

I followed steps found on the link: https://journeyofthegeek.com/2017/12/30/pfsense-squid-kerberos/ And the kerberos authentication without AD group membership restriction works very well, but I don'...
Marko Farkas's user avatar

1
3 4
5
6 7
17