Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

Filter by
Sorted by
Tagged with
0 votes
2 answers
2k views

Firewall (pfSense) general, and block ssh attacks "newbie"

i am a little beginner in administration. Have an VPS on ovh.com, where i had expect 28 tries in 2 days from different ip's (usually china) to log on my ssh (late centos installed with Centos Web ...
gcboard's user avatar
0 votes
1 answer
172 views

pfsense firewall for public ip's

We want to add a firewall under our cage rack for a few servers that we run virtual machines under. After further discussion we ended up on setting pfsense under a dedicated server and run a software ...
user3430431's user avatar
1 vote
1 answer
1k views

pfSense: Local subdomain per Interface w/ DHCP

I am running pfSense 2.3.2-RELEASE-p1 with multiple local interfaces, each with a DHCP service configured. The DNS Resolver service is configured to register DHCP leases and DHCP static mappings. In ...
Tim Jones's user avatar
0 votes
1 answer
85 views

ArchLinux multi home not responding on one interface

I have a bunch of kit in a DC running through Cisco ASAs - this isn't really working out as it relies on us creating, paying and waiting for tickets concerning out network config. I've been and ...
Dave's user avatar
  • 1
0 votes
1 answer
204 views

Routing with pfSense

I have inherited a badly designed network, and have to keep it up. There's a machine running VMWare, and a pfSense VMWare appliance is acting as firewall and NAT. The network in use inside this NAT is ...
iMan Biglari's user avatar
1 vote
2 answers
818 views

WAN Static IP with Carp but different GW

I have the following problem, and I cannot find the solution, even after googling and reading the pfsense documentation. my ISP gave me the following information: Gateway: 1.2.3.254/32 Public IP: 5....
Alessandro Perucchi's user avatar
0 votes
0 answers
321 views

pfsense opnvpn cannot access local VPC Subnet IPs

I have setup PfSesne in OpenVPN on AWS in a VPC subnet. private subnet range is 10.0.0.0/24 . it has one EIP . i want to connect to internal LAN subnets by vpn access. i do have enabled the option to ...
Farhan's user avatar
  • 4,309
0 votes
1 answer
1k views

pfSense BGP and NAP

We have an AS number for a C class (/24) and 2 providers. Currently I have a Fortigate and a pfSense in the network. Fortigate is doing the BGP, and pfSense is doing the NAT, DMZ, VPN, VLAN. We are ...
Alin's user avatar
  • 9
1 vote
1 answer
9k views

OpenVPN - ERROR: Linux route add command failed: external program exited with error status: 2

I'm using OpenVPN as my VPN server, and here is the content of auto-generated config file (.ovpn) through pfSense control panel: dev tun persist-tun persist-key cipher AES-256-CBC auth SHA1 tls-...
talha06's user avatar
  • 111
0 votes
1 answer
1k views

How to enable OpenVPN client to address remote computers using hostnames (using PfSense)?

How to allow OpenVPN clients to address remote computers using hostnames? I VPN into a remote site using an OpenVPN server running on PfSense at the remote site. The remote PfSense is running DNS ...
Greg's user avatar
  • 1,677
0 votes
1 answer
7k views

pfsense, in bind, zone is not working

I have installed and configured Bind on latest pfsense, did setting and configured the zones. i have setup the local resolved to the bind server ip like 10.0.0.50. bind is running, but still when i ...
Farhan's user avatar
  • 4,309
0 votes
1 answer
248 views

pfSense Mutli-WAN IP on single interface not achieved so far

I have 5 public IP from ISP and want to utilize all IPs on single WAN interface. My PFSENSE router box has 2 interfaces as follow : em0 --- > WAN Interface (172.27.0.1) em1 --- > LAN Interface (...
Mohan's user avatar
  • 1
0 votes
2 answers
2k views

VPC EC2 NAT not workign using pfsense

i have my setup like this: Internet -> PfSense -> Privats subnet server PfSense and Private subnet server are inside a VPC with following IP. PfSense has internet connection. it has an Elastic IP. ...
Farhan's user avatar
  • 4,309
1 vote
1 answer
2k views

Configure Squid proxy server or pfsense to achieve WLAN URL logging

Using Squid proxy server and pfsense are out of my comfort zone, I have managed to install Squid on an Ubuntu server and give it a static IP and connect to it via LAN after setting HTTP_access to ...
user avatar
0 votes
1 answer
205 views

is there a web-cache that act as bridge?

i have pfsense 2.3.2 and i want to make it work as a traffic controller through limiter and be web cache but this is a bug limiter don't not work where nat is applied so if i got a machine with ...
nizzard0094's user avatar
0 votes
1 answer
372 views

how can i export sflow data to be saved in pcap on other server in realtime?

I have a pfsense server, all of attacks will come to its WAN interface. i have setup another packet analysis tool on private network behind pfsense. i want to send realtime WAN traffic from pfsense ...
Farhan's user avatar
  • 4,309
1 vote
1 answer
2k views

pfSense allow one part of the network access to VPN Tunnel

I Have two pfSense routers (Router 1 and Router 2) ROuter 1 is VPN Server for other routers and in his LAN network are different servers like domain server, mail server... Router 2 is WiFI captiv ...
Kando's user avatar
  • 11
8 votes
1 answer
2k views

What is the proper way to configure Active Directory and Domain Controllers when only a dynamic (not static) IPv6 prefix is available?

When neither provider-independent address space or an ISP assigned static prefix is available, and a delegated prefix (via DHCPv6) is the only option… What is the "best practice" for configuring ...
Corey's user avatar
  • 2,081
0 votes
1 answer
1k views

DNS doesn't work over WLAN on Android devices when there's over 3 APs

My problem is that if I add over 3 access points to my WLAN network DNS stops working on Android devices. All other operating systems are working (Windows 7, Windows 10, iPhones). I've looked on ...
Eastman's user avatar
  • 60
0 votes
2 answers
8k views

How to configure pfSense to allow/deny web sites on a per client (or ip range) basis

I would like to know how to implement a more granular filtering in pfSense. Scenario: pfSense with 2 WAN and 1 LAN 160 clients with DHCP I would like to know how to allow websites on a per client ...
user376817's user avatar
4 votes
2 answers
23k views

PFSense DNS Not working

I replaced a Dell tower running PFSense 2.2 that kept needing to be rebooted with a Nokia (Nokia Checkpoint IP390 8 Gigabit Ethernet GbE 4GB CF 1GB RAM) rack mount appliance running the newest PFSense ...
Alan's user avatar
  • 553
1 vote
1 answer
685 views

pfSense DMZ VMware and Ubuntu 16.04.1 LTS

In a VMware environment I am having connectivity issues (no ping) between the gateway (pfSense DMZ) and Ubuntu server 16.04.1 LTS. Pfsense is working fine from the LAN subnet 192.168.1.0/24 but not ...
Bobo's user avatar
  • 11
1 vote
1 answer
1k views

pfSense CARP seems to cause NIC issues

Within 12 hours of turning on HA we can't reach the webGUI, ping the pfSense machine, or have the pfSense machine ping anything. Prior to doing HA everything was working fine. After having this issue ...
Nicholas Yount's user avatar
4 votes
1 answer
4k views

How to disable NetBIOS over TCP/IP on pfSense via DHCP

I have a pfSense applicance running version 2.x. I want to disable NetBios over TCP/IP via the DHCP Server so it is not activated on Windows clients. It's possible to do it with a Windows server but I ...
Florent's user avatar
  • 43
0 votes
1 answer
1k views

(SOLVED) Make CENTOS reply through the exact same eth regardless of local ips

SOLVED: check the end of the post Network diagram: https://i.stack.imgur.com/UUJxo.jpg This is called asymmetrical routing. I do not want it. It happens because despite the request arriving at ...
spyshagg's user avatar
0 votes
2 answers
2k views

Configuring pfSense OpenVPN in Azure

I have a small network in Azure that I need to grant access to. Because most of the people in my office use Macbooks, the Microsoft VPN gateway is not going to work. To enable a VPN connection, I ...
Andy Davis's user avatar
1 vote
1 answer
92 views

Link pfsense networks (bridge, vlan)

I've got two pfsense instances with the same networks configured (both works with 192.168.1.0/24 and there are no ip conflicts). Both of them works in different networks (WANs). Here's the little ...
Thomas's user avatar
  • 123
1 vote
1 answer
4k views

OpenVPN switch back to primary server after connection recovery on pfSense

We are using pfSense as Openvpn server / clients. We are have around 20 site to site pfSense clients which connects to main site using Openvpn site to site configuration. On main pfSense (vpn server) ...
adopilot's user avatar
  • 1,531
2 votes
1 answer
2k views

Shrink FreeBSD root partition

I currently have a pfSense 2.3.2-RELEASE which was installed with too little RAM and, now I realized that the swap partition is too small (8GB) and I want to expand it. The problem is there's no free ...
Maurício Mota's user avatar
0 votes
1 answer
43 views

Controlling Outbound Firewall Rules

We want to block all out bound except for those applications we want to allow out like HTTP on 80 and 443 for example. Is it best to place the rule on the WAN interface over the LAN due to the fact ...
Jason's user avatar
  • 3,941
1 vote
2 answers
20k views

Allowing HTTPS through the pfSense Firewall

I've included my current setup. However, when I try and access the firewall from outside my organization, I only get this: ERR_CONNECTION_TIMED_OUT Am I not the correct protocols through? EDIT: (...
Jason's user avatar
  • 3,941
3 votes
2 answers
10k views

pfSense and Disabling SURICATA UDPv4 invalid checksum

We have a pfSense router running with packet inspection. Our logs are filling up with these requests: SURICATA UDPv4 invalid checksum Research shows that we should do the following: Disable the ...
Jason's user avatar
  • 3,941
0 votes
1 answer
135 views

Ideal way to monitor MOS scores with pfSense based routers

We currently have well over 200 pfSense routers in deployment at locations around the world running around 10,000 VoIP phones. Our issue is we need a way to monitor MOS and other QoS aspects and ...
Jason's user avatar
  • 3,941
0 votes
1 answer
3k views

PFSense refuses IPv6 Gateway Config

I am configuring a PFSense box to use as a firewall. It's config should be: IPv6 address: 2a01:4f8:a0:241b::1 Gateway: fe80::1 But when I try to add this gateway in the gui, PFSense refuses and ...
kazaamjt's user avatar
  • 145
2 votes
1 answer
1k views

PFSense not getting WAN IP but Ethernet Adapter has one (Hyper-V)

we have a Hyper-v machine running on WS2012R2 Datacenter Machine. Our modem is in bridge mode. Our office Mikrotik is currently getting a WAN IP address just fine. However, we want to move over to ...
Jason's user avatar
  • 3,941
2 votes
2 answers
32k views

Allow pfSense to route from WAN to LAN

I have a pfSense instance with two network interfaces set up between a LAN and WAN: 192.168.1.0/24 (WAN) <-> (192.168.1.100) pfSense (10.0.1.100) <-> 10.0.1.1/24(LAN) For simplicity, I ...
0x90's user avatar
  • 186
0 votes
1 answer
404 views

DHCP/Gateway done by pfSense Virtual Machine to physical network

I have an ESXi host server that has a pfSense virtual machine within it. The VM is acting as a DHCP Server / Gateway to an internal vSwitch that is within that ESXi host. If I use a physical NIC on ...
TheFrack's user avatar
  • 191
2 votes
2 answers
12k views

difference em0, em1, bge0 - pfsense

While assign interface in pfsense I found three interfaces em0, em1, bge0. I assigned bge0 for WAN and em1 for LAN. it worked. but honestly I don't know what is the exact difference between these ...
Bilal Usean's user avatar
1 vote
1 answer
3k views

how to make sure modem is truly in bridge mode

I need public ip in pfsense wan interface so I configure my adsl modem as bridge mode But I have little doubt on this "it is truly in bridge mode". What are the steps to make sure about bridge mode ...
Bilal Usean's user avatar
0 votes
1 answer
722 views

set WAN IP in pfsense openvpn site to site connection?

I am new to networking, I am trying to connect two networks using pfsense openvpn site to site connection but upto now I can't successful. Please see my configuration here. basics idea is most of ...
Bilal Usean's user avatar
1 vote
1 answer
2k views

client get not connected in pfsense openvpn site to site

I am trying to connect pfsense openvpn site to site (peer to peer shared key), but upto now I could not found any traffic between client and server. openvpn server log Listening for incoming TCP ...
Bilal Usean's user avatar
1 vote
1 answer
7k views

pfSense Shell : apply config modification without reboot

I'm currently trying to edit the configuration of a running pfSense in production with the pfSsh.php shell. By using the pfSsh.php shell I'm able to modify the configuration but once I write it, it ...
Arka's user avatar
  • 13
2 votes
2 answers
2k views

pfSense on x64 hardware increased network performance?

Main server has 50x50 mbps dedicated fiber ISP. We currently have a Netgear FVS336Gv3 wired router with WAN to LAN throughput rating of 300 mbps. This device performs all routing to/from the internet ...
dan's user avatar
  • 279
0 votes
2 answers
13k views

Public pfSense don't resolve external DNS lookups

I have pfSense with external IP with Unbound DNS Resolver running on it. When I send inquiry from internal network, it replies, but when I send inquiry from external machine it doesn't reply. ...
Vladimir's user avatar
  • 135
1 vote
1 answer
2k views

pfsense(2.3.1_5) Squid transparent proxy redirects internally hosted sites from http to https

I'm having an issue with Squid's transparent proxy on my pfSense firewall. My company hosts an internal git server at the following address (for example purposes) http://git.gitserver.com/. From our ...
RyeGuy's user avatar
  • 11
0 votes
1 answer
945 views

VMWare ESXi 6 with pfsense as router on one nic for 3x windows server

I just ordered dedicated server i7 4790 with 16GB ram and 1xHDD 7200rpp, with one Nic (2 available, 1 is unplugged), 5 Ips. Is it possible to run 3x VMs (Windows server) and 1x VMs for pfsense on ...
xCiCi's user avatar
  • 11
0 votes
0 answers
2k views

PfSense box not passing traffic between WAN and LAN

I just tried to insert a PfSense box into my network and I seem to have broken something in the process. Need some outside help to point out any errors I might have missed. The setup was working ...
Joshua's user avatar
  • 21
0 votes
1 answer
369 views

Hyper-V unbind NIC from host

I have a server with 2 NICs. NIC1: direct cable from modem (ISP provides 8 public IPs). NIC2: to the internal network. Software is Hyper-V Server. Created 2 Virtual Switches in Hyper-V, one with ...
Anemoia's user avatar
  • 316
1 vote
2 answers
4k views

Configuration to connect an Acess Point into a pfSense Network

At the moment I have an wired network provided by my pfSense router. I bought an Access point (tl-wa801nd access point), in order to have a wireless network in my wired network. In my computer host, I ...
Nau's user avatar
  • 111
0 votes
1 answer
3k views

Nat or Static Route in pfsense

I installed PFsense on VMware with two interfaces. 1.WAN -> 192.168.1.110 ->Bridge Getaway->192.168.1.1=>Modem IP 2.LAN -> 10.1.1.1 ->LAN Segment how config Nat and Route ...
user356671's user avatar

1
6 7
8
9 10
17