pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

2
votes
1answer
5k views

pfsense peer-to-peer OpenVPN not connecting

I'm trying to setup a peer-to-peer OpenVPN between two pfsense servers running 2.0.1-RELEASE, but the client keeps getting the connection dropped, with a status of "reconnecting; ping-restart" and ...
2
votes
1answer
886 views

How to choose an open source, Asterisk friendly firewall?

I'm in pain. We are moving to a SIP based VOIP system and for whatever reason, we could not get our hosted Asterisk solution to work with our Sonicwall. Our VOIP provider gave up and is recommending ...
1
vote
0answers
1k views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
3
votes
2answers
4k views

Traffic shaping HTTP downloads with l7-filter

Given the following: A small, remote office has only a few users and a 1.5 Mbps DSL connection via a ZyXEL 660R. Users experience unacceptable latency and packet loss when even one large file is ...
0
votes
1answer
953 views

Can I use my pfSense WAN IP as public IP for 1:1 NAT? What about port forwarding?

I have a dual pfSense configuration with CARP. Both WAN interfaces are assigned consecutive WAN IP .150, .151. I think it is silly that pfSense would require them both to have these dedicated IP so I ...
0
votes
1answer
479 views

cisco vpn client randomly disconnects with pfSense

My network has two gateways, one is a pfSense box that everyone uses. The other one is a TP-Link firewall essentially for tests. Some machines inside my network need to access a VPN through the Cisco ...
-1
votes
2answers
2k views

Using Windows Server 2008 R2 and PfSense [closed]

Hey I want to setup my personal home network so that R2 is dishing out DHCP and currently my PfSense box is doing this for me. my setup is motorola surfboard to PfSense to switch. How do I configure ...
0
votes
1answer
701 views

Order of application of NAT rules in pfSense 2

In pfSense 2.0, I have a bunch of WAN CARP Virtual IPs and a bunch of 1:1 NAT rules defined associating these IPs to LAN subnet hosts. If I set up Port Forwarding rules that forward from CARP IPs ...
0
votes
1answer
779 views

PFSENSE Bridge on of the Network Interfaces

I have a PFSENSE installation, which I have just added a new physical interface to for a new requirement 'DIGI'. A third party has installed a DrayTek router on our network which has their equipment ...
0
votes
1answer
117 views

Is there a way to set ddns local to not forward to admin interface

I am running pfsense and would like to configure my site to work locally. I have a ddns setup working externally with no-ip. The problem is I'm trying to get my local setup to work. Locally I enter ...
0
votes
1answer
324 views

PFSense new network, NAT and Firewalling

We have a PFSENSE installation with a few physical interfaces defined: 192.168.1.0/24 - LAN 192.168.2.0/24 - WIFI 192.168.3.0/24 - SERVERS 10.61.88.0/23 - New Requirement..... read on The new ...
4
votes
2answers
2k views

public ip resolves externally but not internally

I have a one to one NAT on pfsense that assigns a public IP to an internal IP (running a web server). When I open the public IP from an internal machine, it will not resolve to the internal IP, ...
0
votes
1answer
773 views

pfsense long ping to google

I have a pfsense box set up. What happens is I set a rule so I can't hit the admin interface 192.168.3.1 from the box. With the rule enabled --- www.l.google.com ping statistics --- 2 packets ...
2
votes
1answer
5k views

Local domain DNS resolution not working using OpenVPN on a pfSense box

I am currently trying to setup an OpenVPN server with the intention of linking several servers together in order to run the backup jobs over the VPN. For this example, this is what I have: A ...
3
votes
3answers
367 views

Sizing requirements for 100 simultaneous VPN connections

I've been tasked with building out a firewall / VPN device that needs to support up to 100 simultaneous VPN connections as well as light routing (mostly custom NAT mappings). This will be fronting a ...
3
votes
1answer
894 views

pfSense setup recommendations

I want to setup a WAN, DMZ and private LAN. I want to do a Deny ALL and just open the 4-5 ports that I need to DMZ and a Deny all on the private LAN on the DMZ are a web web servers, all have public ...
0
votes
2answers
6k views

Alternative to pfSense for a production-ready firewall solution hosted in ESXi

I'm looking for an alternative to pfSense (2) that can be virtualized in VMWare ESXi. I've experienced several problems with pfSense to date and I feel like it is not a totally finished or polished ...
1
vote
2answers
882 views

Is it possible to assign a VLAN to an alias of network interface in pfsense?

My goal is to build a redundant pfSense cluster (as described in this article : http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP) The problem is that i only have 2 ...
2
votes
1answer
2k views

How to configure BIND to allow RFC2136-style updates for 1 host for Dynamic DNS?

I am using Debian on a VPS with static IP and my home network behind PPP with dynamic IP. My pfSense router/firewall shall update my host home.mydomain.tld via RFC2136 style updates. After lots of ...
1
vote
1answer
535 views

pfSEnse-pfSense IPSec Tunnel, cannot open documents on Sharepoint WebDAV share

I set up an IPSec tunnel between my home network and work. We have a Sharepoint server in the office that I used to be able to access just fine remotely. Now that requests to the server are routed ...
1
vote
2answers
2k views

bandwidth monitoring issue on PfSense router

I have a PfSense router installed , where it has 4 interfaces. one of them is WAN and rest 3 are LAN networks, which have different subnets and IP address ranges. wan interface name = em0 lan ...
0
votes
2answers
564 views

nagios nrpe plugin output not complete

I have written a small script to check the states of PfSense, and using this script to get the output in nagios, through NRPE... Here is the script used=`pfctl -s state | wc -l | bc | cut -c1-5 | ...
1
vote
1answer
9k views

Enable ping to pass through pfSense

I have a pfSense v1.2.3 running and want to allow ping from the WAN through to my LAN and allow the response to get through. Web traffic goes through just fine, but not pings. As suggested elsewhere I ...
2
votes
1answer
802 views

Howto route VPN client traffic over a VPN tunnel with pfSense?

My pfSense box is running as an OpenVPN client and OpenVPN server. The client tunnel connects our network (192.168.1.1/24) to a remote network (10.10.10.10/24) and works just fine. The server allows ...
2
votes
1answer
1k views

openvpn: auth-user-pass or (and?) passphrase?

I'm setting up OpenVPN on PfSense 2.0, and now i wonder if should use the "auth-user-pass" option, set an passphrase on the openssl keys or both. Both require an extra password beside of the valid ...
3
votes
1answer
3k views

How can I disable NTP in pfsense?

I am running my pfSense gateway in a ESXi server. right now the server gets its time from the NTP server specified in the general settings section of the WebGUI. I want to disable this so pfSense ...
0
votes
1answer
463 views

pfSense 2.0RC Webservers LoadBalancing

Hy, I Recently installed pfSense 2.0RC and i tried to Set an Loadbalancing, I Added the IP Pools: 192.168.1.10:80 -> webserver 1 192.168.1.100:80 -> webserver 2 And Added an Virtual Server IP: ...
9
votes
3answers
4k views

Is there danger to virtualizing a router?

I had read on a few forums about pfSense that said it was dangerous to virtualize pfSense. The reason that was stated was an attacker could use pfsense as a spring board for an attack on the ...
1
vote
3answers
785 views

What are the advantages to DHCP server running on Windows Server 2003 R2 vs pfsense router?

I am taking over responsibility for the network at a small medical practice. I understand how the network is configured, but I want to know more about the why. The network currently is Cisco modem ...
3
votes
1answer
4k views

Pfsense mbuf full, what to do?

I noticed today that the MBUF usage has hit its limit. Apparently the site I'm running under pfsense is having some troubles too, I'd like to know if it would be safe to just sysctl ...
0
votes
2answers
279 views

Virtualizing NTP server [duplicate]

Possible Duplicate: What are the limits of running NTP servers in virtual machines? I was wondering if virtualizing NTP is okay. I have a VMware ESXi 5.0 box, and I want to virtualize my ...
2
votes
4answers
1k views

x86 Router Benchmarks?

I have grow to prefer x86 based router OS's like Vyatta and pfSense over their competitors Cisco and Juniper (I never really used Juniper, but still.). However, they feel "fake" to me, like ...
0
votes
1answer
397 views

pfSense command to delete stale SAD

I'm experiencing an issue with pfSense where duplicate SAD's are getting created after rekeying, forcing me to manually go ahead and delete the old SAD's. It's not a huge issue but it does get to be a ...
0
votes
1answer
2k views

how to detect/Block duplicate/Static IP address on network

i have setup my network using pfsense, having 8 subnets, each one having their own DHCP server range. i have enabled STATIC ARP on the server and static MAC entries, so that no un-known machine can ...
0
votes
2answers
2k views

Slow upload speeds with pfsense virtual appliance

I have a pfSense virtual appliance set up in front of a Windows server. The pfSense appliance has been configured with two L2L IPSec VPN sites and not too much else. The appliance has two vNics which ...
-3
votes
3answers
776 views

How do I learn IPSec VPN implementation on FreeBSD from pfSense

I've been trying to figure out a complete working solution for IPSec VPN implementation on FreeBSD but with no luck till now. pfSense seems did a fantastic job on supporting IPSec and even for mobile ...
0
votes
1answer
851 views

Transparently proxying HTTP to a SOCKS server that is provided by SSH on an Ubuntu box in pfSense

I'm trying to transparently proxy HTTP requests in a LAN that is served by a pfSense router over SSH. So far, I've tried setting up an Ubuntu box outside that network and forwarding everything going ...
0
votes
1answer
967 views

PFsense not working with second subnet

192.168.1.5 PC can go online 192.168.2.5 PC can not go online but can ping 192.168.1.1 When PF Sense is rebooted 192.168.2.5 can ping an internet address briefly but then stops once PF Sense is fully ...
3
votes
1answer
4k views

Setup 1:1 NAT using pfSense

pfSense box: Public IPs 208.43.30.118-.117 Private IP : 192.168.1.1 I need to provide 1:1 NAT mapping to a VM in the private network 192.168.1.5 I am unable to get 1:1 NAT working though it ...
0
votes
2answers
255 views

Setting up new gateway to split 1 internet feed to 3 networks

I am looking for some words of wisdom from the members of this forum. I do consulting work for three related non-profits in the same building. The three have decided to share the same internet pipe ...
1
vote
1answer
1k views

How can I setup a Wilcard DNS Entry on pfSense?

How can I set up Wildcard DNS on a pfSense embedded device running pfSense 2.0? Details: pfSense uses dnsmasq as a DNS forwarder Running the current pfSense release, 2.0 Running on a Netgate ...
1
vote
1answer
714 views

FreeBSD (pfSense) Routing - Can't find the default route

I have been banging my head against the wall on this for a couple of days now - thought I had tried everything, but obviously not... I have the following networking scenario... ISPs Router Edge ...
1
vote
1answer
2k views

PFSense router introducing loss into network on LAN interface

experiencing some weird issues when trying to setup a new set of routers. We have single wan coming into two pfsense boxes, with CARP between them on its own interface, and shared Public IP along ...
1
vote
0answers
614 views

Nginx+Pfsense+IIS+NLB: upstream timed out (110: Connection timed out)

We have an Nginx Reverse Proxy (RP) bound to one IP, that load-balances/fails-over to two IPs that are located roughly 140ms away, by network time. Each of these upstream IPs are on different ISPs, ...
6
votes
2answers
5k views

Pass through public IP addresses to pfSense

I have a server in my datacenter that has multiple publicly routed IP addresses, and I'm now running ESXi to manage it. Before, I had some VMs running under the host that created a network: inet ...
0
votes
1answer
792 views

pfSense NAT failing - TCP connection built, no traffic

I have a pfSense VM configured with two vNIC's that are both connected to the same VLAN. The pfSense has been configured to a static IP. I have a VM with one vNIC that is configured to use a manually ...
2
votes
2answers
1k views

Installing embedded pfsense, stuck at boot loader

I am trying to install pfSense embedded image 1.2.3 RC1 onto a CF card. The box looks like it is ready to boot, but gets stuck at "Loading /boot/defaults/loader.conf" followed by "/". Can anyone ...
13
votes
1answer
2k views

What would cause SIP traffic to be seen going into a switch but not coming out?

Background I have been struggling to get my SIP phones to register behind a brand new router and switch in our brand new office. Our PBX is hosted offsite. I have worked with our provider to attempt ...
15
votes
7answers
27k views

How can I use HAproxy with SSL and get X-Forwarded-For headers AND tell PHP that SSL is in use?

I have the following setup: (internet) ---> [ pfSense Box ] /-> [ Apache / PHP server ] [running HAproxy] --+--> [ Apache / PHP server ] ...
1
vote
4answers
2k views

NTFS or FAT32:Formatting Disk for PFSense

Im a network guy, and know very little about system administration. I would like to install PFSense and Monowall to 2 CF Cards, but not sure how they should be formatted (NTFS or FAT32) and volume ...