pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

4
votes
2answers
3k views

PFSense 2.0 RC 3 - Routing problem with PPTP VPN

I have configured a PPTP VPN on my PFSense 2.0 RC3 router. The internet traffic comes to my modem (10.0.0.0/24) and then through my router (192.168.100.0/24). My PPTP subnet is 192.168.101.0/24. ...
1
vote
2answers
1k views

pfSense Captive Portal on Bridge

Is it possible to configure pfSense in such a way that it acts as a bridge between two Ethernet interfaces, and has captive portal functionality? I want to use the captive portal package, but don't ...
1
vote
1answer
349 views

Correct use of a transparent bridge

I've asked a similar question previously but I am just now sure I am understanding what I need to do. My current set-up is as follows: ...
0
votes
1answer
587 views

M0n0wall won't pass traffic on different LAN subnets unless “Bypass firewall rules” is checked

I have a working configuration, but a question is bugging me. The question centers around having multiple subnets on a single interface. LAN: 10.10.10.1/24 OpenVPN Server LAN IP: 10.10.10.250 ...
7
votes
3answers
1k views

OpenBSD/FreeBSD Firewall w/ GUI that is compatible with Intel 82574L Gigabit LAN NICs

I recently purchased a server to run m0n0wall or pfSense but I've learned since then that both of these firewall products are based on versions of FreeBSD which weren't yet compatible with the NICs in ...
2
votes
3answers
453 views

Router in front of Untangle UTM

I want to put a pfSense router in front of my Untangle UTM. There is only one thing I am not too sure about. If the Untangle box will sit behind another router and run OpenVPN, all I need to do to ...
0
votes
1answer
1k views

Problems directing traffic over our site-to-site VPN

We have two offices connected via Gateway-Gateway VPN DC1[192.168.0.101]---RV082(A)[192.168.0.1]---[VPN]---RV082(B)[192.168.3.1]---pfSense[192.168.3.100]---DC2[192.168.1.2] DC2 is able to connect ...
1
vote
2answers
2k views

Why does my domain controller refuse to talk to a client on a different subnet?

I have an office subnet (say 192.168.10.x) and a guest subnet (192.168.99.x) which both use a pfSense box as their gateway/router. The office subnet is "controlled" by Active Directory using Windows ...
1
vote
3answers
1k views

Unable to access internal network through PfSense WAN port

Our branch office is unable to connect to our internal network for some reason. However we can connect to the branch office domain controller from behind PfSense. The following is our setup: ...
3
votes
3answers
653 views

Forward UNIX syslog to Windows Event viewer

I'm running a pfSense firewall which runs syslog and can forward it's logs to a remote syslog server. I'd like to be able to view these on my SBS 2011 server's event viewer, via a subscription. I ...
1
vote
2answers
622 views

Can I use pfsense or m0n0wall to simulate packet loss and jitter?

Can I use pfsense or m0n0wall to simulate WAN-like packet loss, jitter, duplication, and reordering? I see questions looking for dedicated solutions like: What tool(s) can I use to simulate a WAN for ...
4
votes
2answers
1k views

NAT Reflection, or Split DNS?

I'm working on a network restructure that has three geographical locations, but will share some services. Two of the locations have workstations, and one has only servers (in a CoLo facility). We will ...
1
vote
2answers
3k views

pfsense setting up as transparent firewall - dhcp issue

I followed the directions to set up pfsense in bridged / transparent mode per the instructions at http://doc.pfsense.org/index.php/Configuring_pfSense However I can not get a dhcp address from my ...
3
votes
0answers
756 views

pfsense 2.0 traffic priority - set full priority for single host

I have a network with several computers all on the same network and since I have very limited bandwidth I would like to prioritize traffic almost like a CPU scheduler prioritize processes. Example: ...
0
votes
2answers
128 views

Both DC's able to connect to branch office, Branch DC can only connect to one local DC

I am stumped on this one, I appreciate any help with this scenario because this just seems odd. We have 3 domain controllers: DC1 - 192.168.1.2 - main office (LAN port of PFSense) DC2 - 192.168.1.4 ...
1
vote
3answers
2k views

Can't ping host in OpenVPN Site-to-Site VPN

My logs say that a connection has been established but I cant ping the host. Here are my logs. Firewall 1 Logs: May 24 10:42:57 openvpn[9163]: /etc/rc.filter_configure tun0 1500 1544 10.0.8.1 ...
0
votes
1answer
4k views

pfSense Squid Transparent: HTTPS works not on clients using Virtual IP?

Here's my config pfSense LAN's Real Interface IP: 192.168.1.1/22 Virtual IP1: 10.1.1.1/24 Client PC 1 LAN IP: 10.1.1.2/24 Client PC 2 LAN IP: 192.168.1.2/22 Client PC 1 cannot access HTTPS ...
4
votes
3answers
4k views

pfsense log file retention

We have a pfSense firewall in our datacentre. By default, pfSense is only storing 500K of firewall filter logs, which is only a few hours for us. How can I increase this? pfSense uses clog rather ...
5
votes
3answers
1k views

IPv6 LAN to IPv4 with PFsense

Is it possible to setup PFsense to do IPv6 to IPv4? I am setting up an IPv6 LAN for "testing" and also to mess around with and I can't get an IPv6 address from my ISP so I need a way to change IPv6 ...
5
votes
1answer
5k views

How do I assign a public IP to a machine behind a pfSense box using 1:1 NAT?

This should be dead simple but for the life of me, I can't get it working. I must be doing something stupid. I have a PFsense server with a public IP address. Behind it is three LAN segments: [ ...
0
votes
0answers
2k views

pfSense - simple DHCP relay configuration - how?

I am trying to figure out how I can have a machine on the "LAN" nic of pfSense get a DHCP address from a DHCP server on the "WAN" nic of pfSense (happens to be a Windows Server 2003 machine if that ...
1
vote
2answers
2k views

Snort [PFSense] is configured but not blocking or generating alerts!

I've got PFSense V 2.0-RC1 (i386) and I've got the latest version of Snort installed I've loaded up a bunch of rules from Oinkmaster, I've enabled all of the preprocessors, and I've ensured the ...
0
votes
2answers
209 views

using “include” like statement in pf.conf to include some parts from other files

I want to be able to include some parts of my pf.conf from other set of files. For example I will include "set timeout" vs like statements in another file. Using anchors and "load anchor from ...
2
votes
1answer
893 views

Best practice for load balancing and virtualisation

I made some searches here and didn't find anything relevant enough for me. I'll try to be as brief as I can. I currently have OSX servers, three of them. I am moving to a virtualisation enviroment ...
1
vote
2answers
1k views

“Content Injection” using my Squid Proxy (pfSense). Is this possible?

In my pfsense box, I'm using Captive Portal (connected to RADIUS MS AD) and Squid setup as Transparent Proxy. I would like to know if it is possible for me to maybe "inject" a small HTML DIV on the ...
3
votes
1answer
95 views

blocking packets larger then specific size with pf

Is there a way with pf to block specific type of packets larger than specific size?
1
vote
2answers
485 views

Ping from subnet over IPSec

I have set up a distributed network as in the figure below. The subnet x.15.x is a remote subnet, connected to the internal LAN via IPsec VPN. The Firewall has 3 interfaces, one connected to the net, ...
3
votes
5answers
2k views

Apache DDoS Protection in router (pFsense) [duplicate]

I'm soon going to change my infrastructure when I buy a new server. I'm going to replace my D-Link DIR-655 router with an pFsense router (and probably use the 655 as an AP) using my old server ...
1
vote
1answer
331 views

Running software router in VM, MAC Address issue

Hey everyone. I am trying to setup a slew of VM's for testing out a bunch of routing software packages like m0n0wall, pfsense, endian, vyetta, and more. I have a beefy vm server with 2 onboard NIC's ...
2
votes
2answers
4k views

Correct settings for pfSense and TinyDNS

My TinyDNS install on pfSense is only able to resolve local host names. Any external domains, come back as blank. The strange thing, is that they resolve correctly when SSH'd to the pfSense box. I ...
0
votes
2answers
4k views

Hypercom Optimum T4220 POS Credit Card Terminal Fails ISP Test With Successful DHCP lease from a pfsense Netgate Appliance with static IP DSL WAN

This has been an ongoing issue for a couple of weeks. The credit card terminal will lose the ability to connect to the processor server over SSL. The IP config looks correct, the DHCP lease looks ...
2
votes
4answers
633 views

PFsense stability with IPv6

We are considering getting a 1Gig rack from a DC and as a little bonus they throw in a /48 v6 for you. I figure this can be split so that each client has their own /64 to use as they please... The ...
3
votes
4answers
2k views

Failover routing between 2 gateways

I have 2 routers in a cabinet and would like to setup fail over between the two for our servers sort of like BGP but not BGP :). I need to setup the system to realize gateway 1 is (down) or under ...
1
vote
2answers
524 views

once VPNed into pfSense, unable to hit the public URLs of my websites - they are routed to the pfSense box

I have a pfSense box setup as the firewall/router/VPN appliance at my colo. Once I VPN into the colo (either pptp or openvpn, pptp preferred due to multiple clients and ease of configuration), I am ...
0
votes
1answer
122 views

Linux Firewall - Complex Scenario

Ok, heres the situation I'm trying to resolve. We've got two ISPs each providing a block of 5 static addresses. Right now we've got a pair of Cisco 2610 routers managing them. Things were mostly ...
1
vote
2answers
732 views

Does pfSense support AMD64?

Specifically I'm looking at running it on a node on this hardware: http://www.supermicro.com/Aplus/system/2U/2022/AS-2022TG-HTRF.cfm Any gotchas lurking out there? I'm assuming the AMD soft raid ...
2
votes
4answers
2k views

OpenVZ vs KVM for Linux VMs

Hardware: Intel® Core™ i7-920, 12 GB DDR3 RAM, 2 x 1500 GB SATA-II HDD (no SoftRaid because Proxmox developers don't support softraid and they are sure you'll run into problems) Software: Proxmox VE ...
7
votes
1answer
2k views

Hurricane Electric Tunnel with Pfsense?

How would I setup a HE net Tunnel to route through PFsense so I can have v6 addresses on my servers? I already have the tunnel setup on their end, but there is no instructions for PFsense.
0
votes
1answer
432 views

PFSense CSR Generation

I'm trying to figure out how to generate a CSR so I can generate and install a SSL cert. Here's a link to what I've what tried. Granted that post was for m0n0wall, but I figured openssl is openssl. ...
5
votes
3answers
5k views

How to collect figures of traffic used per-host, broken up by time and destination?

We have a relatively small network, all PSs in one subnet. One PC with two NICs and pfSense installed works as a firewall/router. There is an OpenVPN tunnel to a remote location, created as a ...
0
votes
2answers
122 views

What package is dirname located in for freebsd

I am trying to install some software on pfsense 1.2.3 but the scripts are complaining about not finding the dirname binary. I have done a find on the system but cannot find it, and google is not ...
0
votes
1answer
777 views

pfsense multi-site VPN VOIP deployment

have main office pfsense firewall configured like this: local networks WAN -> internet LAN -> local network VOIP -> IP phones need to connect remote offices (multi-users) and single remote users ...
1
vote
1answer
937 views

PFSense VPN Routing

We use PFSense firewalls at three installations with the following LAN networks: 1.) Datacenter #1: 10.0.0.0/16 2.) Datacenter #2: 10.1.0.0/16 3.) HQ: 10.2.0.0/16 All of these locations are ...
3
votes
4answers
3k views

Forefront TMG vs pfSense

We currently run pfSense with no problems, however we are looking at TMG as it is included in our partner subscription to MS and allows Windows 7 DirectConnect features to our domain for off-site ...
1
vote
2answers
5k views

Install pfSense from USB Stick

Is it possible to install pfSense from a USB stick, or will I need an external CD drive?
0
votes
2answers
588 views

Reviews of pfSense [closed]

Does anyone know of any professionally made reviews of pfSense (cnet, zdnet, etc...)? I need to find one for a project of mine...
2
votes
1answer
2k views

Good, inexpensive 1U pfSense Server Config for 100 Mbps throughput, some IPSec, few VPN

I had asked in another thread about a good 1U firewall. pfSense in combination with a SuperMicro Atom SuperServer was suggested & upvoted a bunch of times. The Atom D525 build with 4 GB RAM runs ...
4
votes
3answers
665 views

*nix CARP or VMWare Fault Tolerance?

We're experimenting with what VMWare called a "Fully Collapsed DMZ" on blade centre. Basically our DMZ goes straight into a vSwitch and all the security appliances are virtualised. I've spent days ...
6
votes
1answer
4k views

Connect to multiple AP with one Wifi adapter under Linux/FreeBSD?

How can I connect to more than one Wifi access point simultaneously using a single wireless adapter? I'm currently using pfSense as my home router and I want it to connect to multiple APs wirelessly. ...
0
votes
1answer
490 views

Data grapsh for local IP addresses in pfSense

I am using pfSense as router with LightSquid transparent proxy. Reports that LightSquid offers me are great, I can see amount of data transfered trought router, grouped by hours,months,weeks, Also I ...