pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

2
votes
4answers
1k views

x86 Router Benchmarks?

I have grow to prefer x86 based router OS's like Vyatta and pfSense over their competitors Cisco and Juniper (I never really used Juniper, but still.). However, they feel "fake" to me, like ...
0
votes
1answer
335 views

pfSense command to delete stale SAD

I'm experiencing an issue with pfSense where duplicate SAD's are getting created after rekeying, forcing me to manually go ahead and delete the old SAD's. It's not a huge issue but it does get to be a ...
0
votes
1answer
2k views

how to detect/Block duplicate/Static IP address on network

i have setup my network using pfsense, having 8 subnets, each one having their own DHCP server range. i have enabled STATIC ARP on the server and static MAC entries, so that no un-known machine can ...
0
votes
2answers
1k views

Slow upload speeds with pfsense virtual appliance

I have a pfSense virtual appliance set up in front of a Windows server. The pfSense appliance has been configured with two L2L IPSec VPN sites and not too much else. The appliance has two vNics which ...
-3
votes
3answers
677 views

How do I learn IPSec VPN implementation on FreeBSD from pfSense

I've been trying to figure out a complete working solution for IPSec VPN implementation on FreeBSD but with no luck till now. pfSense seems did a fantastic job on supporting IPSec and even for mobile ...
0
votes
1answer
710 views

Transparently proxying HTTP to a SOCKS server that is provided by SSH on an Ubuntu box in pfSense

I'm trying to transparently proxy HTTP requests in a LAN that is served by a pfSense router over SSH. So far, I've tried setting up an Ubuntu box outside that network and forwarding everything going ...
0
votes
1answer
845 views

PFsense not working with second subnet

192.168.1.5 PC can go online 192.168.2.5 PC can not go online but can ping 192.168.1.1 When PF Sense is rebooted 192.168.2.5 can ping an internet address briefly but then stops once PF Sense is fully ...
3
votes
1answer
3k views

Setup 1:1 NAT using pfSense

pfSense box: Public IPs 208.43.30.118-.117 Private IP : 192.168.1.1 I need to provide 1:1 NAT mapping to a VM in the private network 192.168.1.5 I am unable to get 1:1 NAT working though it ...
0
votes
2answers
234 views

Setting up new gateway to split 1 internet feed to 3 networks

I am looking for some words of wisdom from the members of this forum. I do consulting work for three related non-profits in the same building. The three have decided to share the same internet pipe ...
1
vote
1answer
1k views

How can I setup a Wilcard DNS Entry on pfSense?

How can I set up Wildcard DNS on a pfSense embedded device running pfSense 2.0? Details: pfSense uses dnsmasq as a DNS forwarder Running the current pfSense release, 2.0 Running on a Netgate ...
1
vote
1answer
660 views

FreeBSD (pfSense) Routing - Can't find the default route

I have been banging my head against the wall on this for a couple of days now - thought I had tried everything, but obviously not... I have the following networking scenario... ISPs Router Edge ...
1
vote
1answer
1k views

PFSense router introducing loss into network on LAN interface

experiencing some weird issues when trying to setup a new set of routers. We have single wan coming into two pfsense boxes, with CARP between them on its own interface, and shared Public IP along ...
1
vote
0answers
539 views

Nginx+Pfsense+IIS+NLB: upstream timed out (110: Connection timed out)

We have an Nginx Reverse Proxy (RP) bound to one IP, that load-balances/fails-over to two IPs that are located roughly 140ms away, by network time. Each of these upstream IPs are on different ISPs, ...
6
votes
2answers
4k views

Pass through public IP addresses to pfSense

I have a server in my datacenter that has multiple publicly routed IP addresses, and I'm now running ESXi to manage it. Before, I had some VMs running under the host that created a network: inet ...
0
votes
0answers
184 views

Unable to start webCobfigurator for pfSense 1.2.3

I have installed pfsense 1.2.3 embedded version to 8 Gig CF card. I have booted the box, connected to terminal, accessed the menu, set up interfaces, and set up the IP addresses (192.168.1.1 on LAN). ...
0
votes
1answer
628 views

pfSense NAT failing - TCP connection built, no traffic

I have a pfSense VM configured with two vNIC's that are both connected to the same VLAN. The pfSense has been configured to a static IP. I have a VM with one vNIC that is configured to use a manually ...
2
votes
2answers
901 views

Installing embedded pfsense, stuck at boot loader

I am trying to install pfSense embedded image 1.2.3 RC1 onto a CF card. The box looks like it is ready to boot, but gets stuck at "Loading /boot/defaults/loader.conf" followed by "/". Can anyone ...
13
votes
1answer
1k views

What would cause SIP traffic to be seen going into a switch but not coming out?

Background I have been struggling to get my SIP phones to register behind a brand new router and switch in our brand new office. Our PBX is hosted offsite. I have worked with our provider to attempt ...
0
votes
0answers
229 views

Installing embedded pfsense to 8 gig CF, stuck at boot loader [duplicate]

Possible Duplicate: Installing embedded pfsense, stuck at boot loader I am trying to install pfSense embedded image 1.2.3 RC1 onto a CF card. The box looks like it is ready to boot, but ...
16
votes
7answers
24k views

How can I use HAproxy with SSL and get X-Forwarded-For headers AND tell PHP that SSL is in use?

I have the following setup: (internet) ---> [ pfSense Box ] /-> [ Apache / PHP server ] [running HAproxy] --+--> [ Apache / PHP server ] ...
1
vote
4answers
1k views

NTFS or FAT32:Formatting Disk for PFSense

Im a network guy, and know very little about system administration. I would like to install PFSense and Monowall to 2 CF Cards, but not sure how they should be formatted (NTFS or FAT32) and volume ...
3
votes
1answer
14k views

How do I route between interfaces in PFsense?

I have a PFsense router which divides a single WAN connection into three NAT networks on three interfaces: LAN, OPT1 and OPT2. This allows me to segregate my network so that computers on the OPT1 and ...
0
votes
1answer
861 views

Radius authentication for OpenVPN in pfSense

I have a pfSense Firewall with OpenVPN against RADIUS Server configured in a Windows Server 2008 R2. The RADIUS server is configured in pfSense, but when I try the Authentication (Diagnostics -> ...
4
votes
2answers
3k views

PFSense 2.0 RC 3 - Routing problem with PPTP VPN

I have configured a PPTP VPN on my PFSense 2.0 RC3 router. The internet traffic comes to my modem (10.0.0.0/24) and then through my router (192.168.100.0/24). My PPTP subnet is 192.168.101.0/24. ...
1
vote
2answers
1k views

pfSense Captive Portal on Bridge

Is it possible to configure pfSense in such a way that it acts as a bridge between two Ethernet interfaces, and has captive portal functionality? I want to use the captive portal package, but don't ...
1
vote
1answer
377 views

Correct use of a transparent bridge

I've asked a similar question previously but I am just now sure I am understanding what I need to do. My current set-up is as follows: ...
0
votes
1answer
625 views

M0n0wall won't pass traffic on different LAN subnets unless “Bypass firewall rules” is checked

I have a working configuration, but a question is bugging me. The question centers around having multiple subnets on a single interface. LAN: 10.10.10.1/24 OpenVPN Server LAN IP: 10.10.10.250 ...
7
votes
3answers
1k views

OpenBSD/FreeBSD Firewall w/ GUI that is compatible with Intel 82574L Gigabit LAN NICs

I recently purchased a server to run m0n0wall or pfSense but I've learned since then that both of these firewall products are based on versions of FreeBSD which weren't yet compatible with the NICs in ...
2
votes
3answers
493 views

Router in front of Untangle UTM

I want to put a pfSense router in front of my Untangle UTM. There is only one thing I am not too sure about. If the Untangle box will sit behind another router and run OpenVPN, all I need to do to ...
0
votes
1answer
1k views

Problems directing traffic over our site-to-site VPN

We have two offices connected via Gateway-Gateway VPN DC1[192.168.0.101]---RV082(A)[192.168.0.1]---[VPN]---RV082(B)[192.168.3.1]---pfSense[192.168.3.100]---DC2[192.168.1.2] DC2 is able to connect ...
1
vote
2answers
2k views

Why does my domain controller refuse to talk to a client on a different subnet?

I have an office subnet (say 192.168.10.x) and a guest subnet (192.168.99.x) which both use a pfSense box as their gateway/router. The office subnet is "controlled" by Active Directory using Windows ...
1
vote
3answers
1k views

Unable to access internal network through PfSense WAN port

Our branch office is unable to connect to our internal network for some reason. However we can connect to the branch office domain controller from behind PfSense. The following is our setup: ...
3
votes
3answers
712 views

Forward UNIX syslog to Windows Event viewer

I'm running a pfSense firewall which runs syslog and can forward it's logs to a remote syslog server. I'd like to be able to view these on my SBS 2011 server's event viewer, via a subscription. I ...
1
vote
2answers
689 views

Can I use pfsense or m0n0wall to simulate packet loss and jitter?

Can I use pfsense or m0n0wall to simulate WAN-like packet loss, jitter, duplication, and reordering? I see questions looking for dedicated solutions like: What tool(s) can I use to simulate a WAN for ...
4
votes
2answers
2k views

NAT Reflection, or Split DNS?

I'm working on a network restructure that has three geographical locations, but will share some services. Two of the locations have workstations, and one has only servers (in a CoLo facility). We will ...
1
vote
2answers
3k views

pfsense setting up as transparent firewall - dhcp issue

I followed the directions to set up pfsense in bridged / transparent mode per the instructions at http://doc.pfsense.org/index.php/Configuring_pfSense However I can not get a dhcp address from my ...
3
votes
0answers
773 views

pfsense 2.0 traffic priority - set full priority for single host

I have a network with several computers all on the same network and since I have very limited bandwidth I would like to prioritize traffic almost like a CPU scheduler prioritize processes. Example: ...
0
votes
2answers
135 views

Both DC's able to connect to branch office, Branch DC can only connect to one local DC

I am stumped on this one, I appreciate any help with this scenario because this just seems odd. We have 3 domain controllers: DC1 - 192.168.1.2 - main office (LAN port of PFSense) DC2 - 192.168.1.4 ...
1
vote
3answers
2k views

Can't ping host in OpenVPN Site-to-Site VPN

My logs say that a connection has been established but I cant ping the host. Here are my logs. Firewall 1 Logs: May 24 10:42:57 openvpn[9163]: /etc/rc.filter_configure tun0 1500 1544 10.0.8.1 ...
0
votes
1answer
5k views

pfSense Squid Transparent: HTTPS works not on clients using Virtual IP?

Here's my config pfSense LAN's Real Interface IP: 192.168.1.1/22 Virtual IP1: 10.1.1.1/24 Client PC 1 LAN IP: 10.1.1.2/24 Client PC 2 LAN IP: 192.168.1.2/22 Client PC 1 cannot access HTTPS ...
4
votes
3answers
4k views

pfsense log file retention

We have a pfSense firewall in our datacentre. By default, pfSense is only storing 500K of firewall filter logs, which is only a few hours for us. How can I increase this? pfSense uses clog rather ...
5
votes
3answers
1k views

IPv6 LAN to IPv4 with PFsense

Is it possible to setup PFsense to do IPv6 to IPv4? I am setting up an IPv6 LAN for "testing" and also to mess around with and I can't get an IPv6 address from my ISP so I need a way to change IPv6 ...
5
votes
1answer
6k views

How do I assign a public IP to a machine behind a pfSense box using 1:1 NAT?

This should be dead simple but for the life of me, I can't get it working. I must be doing something stupid. I have a PFsense server with a public IP address. Behind it is three LAN segments: [ ...
0
votes
0answers
3k views

pfSense - simple DHCP relay configuration - how?

I am trying to figure out how I can have a machine on the "LAN" nic of pfSense get a DHCP address from a DHCP server on the "WAN" nic of pfSense (happens to be a Windows Server 2003 machine if that ...
1
vote
2answers
2k views

Snort [PFSense] is configured but not blocking or generating alerts!

I've got PFSense V 2.0-RC1 (i386) and I've got the latest version of Snort installed I've loaded up a bunch of rules from Oinkmaster, I've enabled all of the preprocessors, and I've ensured the ...
0
votes
2answers
253 views

using “include” like statement in pf.conf to include some parts from other files

I want to be able to include some parts of my pf.conf from other set of files. For example I will include "set timeout" vs like statements in another file. Using anchors and "load anchor from ...
2
votes
1answer
972 views

Best practice for load balancing and virtualisation

I made some searches here and didn't find anything relevant enough for me. I'll try to be as brief as I can. I currently have OSX servers, three of them. I am moving to a virtualisation enviroment ...
1
vote
2answers
1k views

“Content Injection” using my Squid Proxy (pfSense). Is this possible?

In my pfsense box, I'm using Captive Portal (connected to RADIUS MS AD) and Squid setup as Transparent Proxy. I would like to know if it is possible for me to maybe "inject" a small HTML DIV on the ...
3
votes
1answer
96 views

blocking packets larger then specific size with pf

Is there a way with pf to block specific type of packets larger than specific size?
1
vote
2answers
529 views

Ping from subnet over IPSec

I have set up a distributed network as in the figure below. The subnet x.15.x is a remote subnet, connected to the internal LAN via IPsec VPN. The Firewall has 3 interfaces, one connected to the net, ...