pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.
6
votes
3answers
1k views
Hurricane Electric Tunnel with Pfsense?
How would I setup a HE net Tunnel to route through PFsense so I can have v6 addresses on my servers? I already have the tunnel setup on their end, but there is no instructions for PFsense.
0
votes
1answer
301 views
PFSense CSR Generation
I'm trying to figure out how to generate a CSR so I can generate and install a SSL cert.
Here's a link to what I've what tried. Granted that post was for m0n0wall, but I figured openssl is openssl.
...
5
votes
3answers
3k views
How to collect figures of traffic used per-host, broken up by time and destination?
We have a relatively small network, all PSs in one subnet. One PC with two NICs and pfSense installed works as a firewall/router. There is an OpenVPN tunnel to a remote location, created as a ...
0
votes
2answers
119 views
What package is dirname located in for freebsd
I am trying to install some software on pfsense 1.2.3 but the scripts are complaining about not finding the dirname binary. I have done a find on the system but cannot find it, and google is not ...
0
votes
1answer
648 views
pfsense multi-site VPN VOIP deployment
have main office pfsense firewall configured like this:
local networks
WAN -> internet
LAN -> local network
VOIP -> IP phones
need to connect remote offices (multi-users) and single remote users ...
1
vote
1answer
817 views
PFSense VPN Routing
We use PFSense firewalls at three installations with the following LAN networks:
1.) Datacenter #1: 10.0.0.0/16
2.) Datacenter #2: 10.1.0.0/16
3.) HQ: 10.2.0.0/16
All of these locations are ...
3
votes
4answers
3k views
Forefront TMG vs pfSense
We currently run pfSense with no problems, however we are looking at TMG as it is included in our partner subscription to MS and allows Windows 7 DirectConnect features to our domain for off-site ...
1
vote
2answers
4k views
Install pfSense from USB Stick
Is it possible to install pfSense from a USB stick, or will I need an external CD drive?
0
votes
1answer
506 views
Reviews of pfSense
Does anyone know of any professionally made reviews of pfSense (cnet, zdnet, etc...)?
I need to find one for a project of mine...
2
votes
1answer
1k views
Good, inexpensive 1U pfSense Server Config for 100 Mbps throughput, some IPSec, few VPN
I had asked in another thread about a good 1U firewall.
pfSense in combination with a SuperMicro Atom SuperServer was suggested & upvoted a bunch of times. The Atom D525 build with 4 GB RAM runs ...
4
votes
3answers
538 views
*nix CARP or VMWare Fault Tolerance?
We're experimenting with what VMWare called a "Fully Collapsed DMZ" on blade centre. Basically our DMZ goes straight into a vSwitch and all the security appliances are virtualised.
I've spent days ...
4
votes
1answer
3k views
Connect to multiple AP with one Wifi adapter under Linux/FreeBSD?
How can I connect to more than one Wifi access point simultaneously using a single wireless adapter?
I'm currently using pfSense as my home router and I want it to connect to multiple APs wirelessly. ...
0
votes
1answer
431 views
Data grapsh for local IP addresses in pfSense
I am using pfSense as router with LightSquid transparent proxy.
Reports that LightSquid offers me are great, I can see amount of data transfered trought router, grouped by hours,months,weeks, Also I ...
3
votes
2answers
1k views
Can I use pfsense as a DNS server?
If I have a pfsense based firewall in front of my servers, can I use this also for DNS?
Thanks
0
votes
3answers
1k views
Routing specific traffic through vpn
I have a router-router IPSEC VPN and am struggling to get a specific ip to go through the vpn instead of out to the internet. How does my router know whether to send traffic via the internet ...
0
votes
3answers
3k views
Block non DHCP clients from pfsense
I am running pfsense (v 1.2.3) embedded as my primary router. I would like to block all traffic from unknown hosts. I have the DHCP server set to give out leases only to certain pre-defined (based on ...
0
votes
1answer
1k views
Using PFSense to securely connect two networks
At our local office we have a WAN connection which we break off into two VLANs using a Cisco RVS4000 Router: Our main gigabit ethernet wired network 10.1.0.0/24 and a wireless network 172.16.1.0/24.
...
0
votes
4answers
701 views
Setting up proper routes with an OpenVPN server
First and foremost I am not a strong networking person but we do not have a network tech here in the office so I got charged with getting this setup and running. Here is the network topology:
...
0
votes
0answers
2k views
Configure IPSec for Mobile Clients on pfSense
What I want to do, for the time being, is get pfSense setup so that a few of my employees can connect from their residences. I have poured over this doc for quite awhile: ...
1
vote
2answers
1k views
pfSense: Possible to traffic capture the actual WAN port?
The pfSense router seems to have having problems connecting to the internet. My modem, and my ISP, confirm that i have sync, but at the same time pfSense sometimes just will not connect (using PPPoE).
...
1
vote
1answer
3k views
pfSense with a bridge as a LAN interface : traffic blocked between interfaces
I have a pfSense 2.0-BETA3 box as a home router. The box has 3 wired ETH ports and a wireless interface. It is configured as follow :
WAN : vr0
LAN : BRIDGE0
OPT1 : vr1
OPT2 : vr2
OPT3 : ath0 ...
0
votes
2answers
470 views
Reverse Proxy multi-subnets
I'm having some problems that I think I should not be ordinarily facing. But after being beating senseless by this, I'm calling out uncle.
I have previously posted something along these lines here: ...
2
votes
2answers
3k views
reverse proxy on PFsense, squid or otherwise
I've been trying to get this to work for days now and its not working. After bashing my head against the desk enough times, I've decided to man up and ask.
I'm desperately trying to set up a reverse ...
1
vote
2answers
2k views
pfSense gateway rules by IP ranges
I have pfSense (1.2.3) with a WAN (gateway 10.10.20.1/24) and an OPT1 (gateway 10.10.21.1/24). I also have a LAN (static 10.10.12.1/24, DHCP 10.10.12.128-199/24).
I want to create rules so that ...
2
votes
2answers
1k views
Best way to split LAN computers on two WANs (not load balancing)
What is the best way to split the computers of a LAN (about 50 computers) to go on two WANs, depending on the computers' IP address or computers' configuration (gateway). I'm not looking for ...
1
vote
4answers
263 views
How to subnet hosted VMs
I have a network of VMs each having a LAN IP address and a public IP address. They each have a 1:1 NAT map for public access via the public IP for HTTP, SSH etc. I'm trying to figure out a way to ...
3
votes
0answers
585 views
Trying to get a new user up on pfSense IPSec VPN; Config file import failed, now getting gateway errors
Caveat: I am not a sysadmin, so please forgive the n00bness of the query. We have a new user and I'm trying to get them up on VPN. We use pfsense as an IPSEC endpoint. This person is using Shrewsoft ...
1
vote
3answers
818 views
Barebones network appliance, 4+ GbE NICs, Intel chipset [closed]
Looking for a stepped-up ALIX or Soekris embedded network appliance to load pfSense and/or handle other FOSS-based network roles.
Main criteria is a GbE NICs (will be used for core ...
2
votes
2answers
1k views
Get source and destination of outbound traffic in pfSense
I'm looking at the traffic graph in pfSense (Version 1.2.2), which we're using as a router / NAT / ect on our network. Recently, I'm seeing a sudden, constant spike of 15 - 30kbps traffic outbound, ...
2
votes
3answers
1k views
Issues with sustained traffic with PFSense
Last week we had to replace our PFSense firewall because it had a catastrophic hardware failure. All but one of the NICs were taken out of the old server and put into the new one. The one NIC that was ...
6
votes
2answers
2k views
pfSense Firewall or Linksys/Cisco router for small offices
I'm about to start switching some networks around for multiple small offices. Each office has about 10 to 15 users and 10 to 15 computers. Each office has a spread of generic routers and access ...
1
vote
1answer
1k views
Ierrs on Network Interface - Pfsense/Freebsd
We're using PfSense as an internal router/firewall (no connection to WAN). Using the Web-GUI, under Status ---> Interfaces, there's one particular interface where I have some errors:
In/out errors ...
7
votes
4answers
727 views
Wireless AAA for a small, bandwidth-limited hotel
We (the tech I work with and myself) live in a remote northern town where Internet access is somewhat of a luxury, and bandwidth is quite limited. Here, overage charges ranging from few hundreds, to ...
1
vote
2answers
2k views
Route specific HTTP requests through pfSense OpenVPN
to start, I have very little knowledge on routes, iptables, etc. That said, here's what I'm trying to accomplish and where I think I'm stumped:
Problem: We have an external website which we recently ...
2
votes
1answer
1k views
PFSense issue with Intel 82576 dual link network cards
We are building some firewalls that run PFSense. The systems use the SuperMicro Super X8DTN+ motherboard, which includes a dual link intel gigabit network card (Intel 82576 controller)
I have tried ...
2
votes
1answer
3k views
Routing traffic between home machines and remote machines over pfSense PPTP VPN…?
I'm having a bit of trouble routing my traffic through my VPN server. Basically I have a pfSense setup that works amazingly well for everything it's currently doing. However, now, I have need to set ...
4
votes
2answers
7k views
Setting up authorative DNS nameserver with PfSense?
I am trying to run point a domain at my pfsense server and have it run a DNS server which is authorative. So I installed TinyDNS.
Ok, so I setup a rule in pf. The rule is TCP/UDP. Source interface is ...
0
votes
1answer
528 views
Per client DNS server assignment using Pfsense
I have a network where pfsense is the gateway. There are two sets of clients that I want. One where there will be some restrictions to the network (example, IM being blocked) and one network where ...
1
vote
1answer
989 views
Is there a complete tutorial on setting up a Squid on pfSense as a remotely accessible proxy?
I have a pfSense box that I'd like to add squid to to use as a proxy that I can use remotely. I have installed squid, but I can't figure out what firewall or other settings I need to change to get it ...
1
vote
2answers
504 views
What type of Firewall appliance for website co-location?
We are moving a high traffic site (20Mb/s - 80Mb/s) to a co-location instead a dedicated server at a hosting company. As part of the infrastructure build-out we are deciding between buying a FortiGate ...
0
votes
1answer
759 views
Changing Router configuration to give same IP subnet as on its WAN [pfsense]
My currrent configuration is
Modem-->Pfsense[WAN(10.1.1.4) + LAN(192.168.1.1)] -->[WAN]Router[LANs]--->PC1
Now the problem was that the router gave its own IP to computer like
...
2
votes
1answer
2k views
Is it possible to give static IP to clients in pfsense
I am using pfsense and it provides an IP address to all clients.
Is there any option in there so that I can define the client IP address based upon their MAC address, so that I can measure how much ...
0
votes
2answers
1k views
How to make computer use internet only with proxy SQUID PFSENSE
My computer still access the internet although squid is inatalled.
IF i manually put proxy setting then internet also works.
How can stop internet if proxy is not entered
0
votes
1answer
719 views
IE block file download but Firefox allows even if setting does not allow in Squid/pfsense
I have enabled the setting in squid (in pfsesnse) where any file which is greater than 50MB should not be downloaded.
I tried downloading in IE and it comes with error that security setting does not ...
0
votes
1answer
1k views
How to divide internet after installing PFsense in VM
I have installed PFsense inside VM and used two ethernet cards as descrivbed in their manual.
My WAN IP = 10.0.11.113
My LAN IP = 192.1768.2.1
Now after installing I am getting only DOS type ...
0
votes
2answers
577 views
carp versus proxy arp
Currently I have a redundant pfSense firewall system set up for our corporate server farm. The main router IPs are sharing an IP address through Carp. Our two public /27 networks are assigned as ...
2
votes
1answer
106 views
How can I verify the type of memory that my freebsd box supports?
I have an old pfsense router and want to see what type of memory it supports (e.g. DDR2 240 pin... PC100... DDR... etc). Is there a command that will show me this?
I know I could just open the box ...
1
vote
2answers
846 views
Running a Windows domain from a non-windows DNS
Is that even possible?
I would like to have pfsense triple up as DNS + DHCP + Firewall/router for my windows domain. The question is, is that even possible? I'm a developer not a sys admin so please ...
1
vote
2answers
5k views
Pfsense as caching DNS server
Is there any way to use pfsense as caching DNS server. It will resolve domains starting from root servers and will cache them for consequent hits.
I tried DNS servers package on pfsense 1.2.2, which ...
1
vote
1answer
13k views
How to configure PFSense firewall with external transparent Squid proxy?
I am using PFSense 2.0 and trying to get transparent proxy to work. As the internal Squid won't work with loadbalancing and dual-wan (and it seems Squid doesn't work at all on the latest build), I ...
