pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

0
votes
1answer
5 views

pfSense monitor wan bandwidth by lan ip

I think pfSense is great and has a lot of helpful features. I use it for a lot of things but I cannot find one feature that I really need. My Current setup is several Vlans and 1 Wan. We currently ...
0
votes
0answers
7 views

Setup two discrete networks on one FIOS connection

I would like to set up a second discrete network in my office for testing and development purposes, but I haven't been able to find a solution here that pertains to my particular situation. If ...
16
votes
8answers
25k views

How can I use HAproxy with SSL and get X-Forwarded-For headers AND tell PHP that SSL is in use?

I have the following setup: (internet) ---> [ pfSense Box ] /-> [ Apache / PHP server ] [running HAproxy] --+--> [ Apache / PHP server ] ...
0
votes
1answer
1k views

Pfsense 2.02 ipsec vpn tunnel goes down randomly

Ipsec vpn tunnels got disconnected randomly but when we restart raccon all tunnel will come up again with out any issue.I would like to know a permanent fix for this. These are the logs: racoon: ...
0
votes
1answer
357 views

Vpn tunnel to Amazon VPC with pfsense

I'm trying to create an ipsec tunnel between my office and our Amazon VPC. However I have never used ipsec before so I'm at lost. The gateway/firewall is running pfsense 2.1.3-RELEASE (i386) on ...
0
votes
1answer
49 views

using pf for packet filtering and ipfw's dummynet for bandwidth limiting at the same time

I would like to ask if it's fine to use pf for all packet filtering (including using altq for traffic shaping) and ipfw's dummynet for bandwidth limiting certain IPs or subnets at the same time. I am ...
0
votes
1answer
521 views

What “traffic flow” would be right in a transparent “squid + dansguardian” pfsense setup?

my thought (i'm not sure if its right): lan interface traffic comes into port 80 destination port is redirected to 8080 (dans guardian) dansguardian outputs traffic to port 3128 (squid) squid ...
0
votes
1answer
690 views

pfsense long ping to google

I have a pfsense box set up. What happens is I set a rule so I can't hit the admin interface 192.168.3.1 from the box. With the rule enabled --- www.l.google.com ping statistics --- 2 packets ...
1
vote
1answer
748 views

Setup DMZ in Pfsense with virtual servers, physical Pfsense server

I am looking for some networking tips on how to set up a DMZ in Pfsense and place some virtual servers in that DMZ. Right now my network looks like: Uverse (Static IPs) -> Pfsense -> WAN -> (Virtual ...
-1
votes
1answer
39 views

What is it that makes BSD a popular choice for firewalls? [closed]

What is it that makes BSD a popular choice for firewalls? Is the kernel generally more secure?
0
votes
1answer
24 views

Configure clients to navigate through specific wan. Pfsense

I have a machine with a pfsense running. It is configured with three ethernet cards. LAN 192.168.2.1/21 WAN1 200.41.X.2/24 WAN2 200.41.X.3/24 ISP Gateway 200.41.X.1 This is a connection with 5 ...
0
votes
1answer
385 views

cisco vpn client randomly disconnects with pfSense

My network has two gateways, one is a pfSense box that everyone uses. The other one is a TP-Link firewall essentially for tests. Some machines inside my network need to access a VPN through the Cisco ...
2
votes
1answer
870 views

How do I configure pfsense as an outbound VPN client?

We use pfsense as a router/firewall. Because we're based in China, it is useful for us to have VPN access for all our internal clients. Instead of each individual client connecting to a VPN server ...
1
vote
2answers
17 views

Set default gateway based on protocol using pfSense

I have a pfSense configured with two Internet links for broadband load balancing. One of these links block outgoing traffic on 25 port (WAN1). I have a mail server (IP 10.6.9.2) that should use the ...
1
vote
2answers
2k views

Pfsense: Inbound Load Balancing https with sticky connection

first of all I'm very sorry for my English... This is my scenario: Internet Firewall+LB: pfsense_1(Active) + pfsense_2(Passive) in CARP Pool servers: 3 x nginx(PHP5+HTTP+HTTPS) Pfsense 1 and 2 ...
-2
votes
0answers
35 views

Pfsense on intranet ip address

I wish to secure the traffic between ESXi server vms and other physical nodes on my network. What I have: A public IP address on the WAN port of the Wifi router A dedicated server with 2 NIC ...
0
votes
0answers
35 views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
2answers
52 views

How to setup pfSense with multiple public IP's

Having trouble with multiple public IP's getting routed correctly. I'd like to setup the following network: public_ip1(assigned WAN IF) -> pfSense -> server 1,2,3 - 192.168.0.11, .12, .13 ...
1
vote
3answers
1k views

Unable to access internal network through PfSense WAN port

Our branch office is unable to connect to our internal network for some reason. However we can connect to the branch office domain controller from behind PfSense. The following is our setup: ...
0
votes
1answer
96 views

pfsense PPTP VPN can access LAN but not internet

I am running pfsense at home and I want to set up a PPTP vpn (yes I know its not secure, lets ignore that) My current pfsense setup: LAN: 192.168.1.1 (/24) WAN PPPoE (real world IP lets say ...
0
votes
0answers
33 views

Windows 2008 / 2003 DC can not ping gateway or internet

Im doing some tests trying to setup a domain and i found a very weird behavior. Same thing on windows 2008 r2 and windows 2003 x64 r2. I am running on KVM over proxmox virtualized with virtio. After ...
1
vote
1answer
701 views

Howto route VPN client traffic over a VPN tunnel with pfSense?

My pfSense box is running as an OpenVPN client and OpenVPN server. The client tunnel connects our network (192.168.1.1/24) to a remote network (10.10.10.10/24) and works just fine. The server allows ...
-1
votes
0answers
21 views

Lightsquid logs not showing all users

Our company is using Lightsquid software to monitor our users on a PFsense firewall with sophos Antivirus. However our Lightsquid reports is not picking up all our users some appear and reappear at ...
2
votes
1answer
50 views

pfSense Cluster not working with Manual NAT

I have two pfSense clusters, one is 2.1.4 and one is 2.1.3. The directions suggest that Manual Outbound NAT is required, but the 2.1.3 cluster is working just fine using Automatic NAT, servers and ...
2
votes
1answer
2k views

Routing between two routers with static routes

I have a Draytek 3200 router and a pfsense rackmount router that I am trying to get to route to each other. I have a subnet on each router and a subnet for the link between, as shown here: As it ...
2
votes
3answers
7k views

Pfsense as caching DNS server

Is there any way to use pfsense as caching DNS server. It will resolve domains starting from root servers and will cache them for consequent hits. I tried DNS servers package on pfsense 1.2.2, which ...
1
vote
1answer
119 views

pfSense failover and OpenVPN site-to-site

I have two pfSense Clusters, and am trying to connect them with an OpenVPN site-to-site VPN. Initially, the client was a single pfSense system, and all was well. Now that one system is a cluster, and ...
0
votes
1answer
16 views

VPN Connection pooling?

I'm having a problem on PFSense https://forum.pfsense.org/index.php?topic=23914.0 where I can only connect one client with a PPTP VPN to a VPN Server outside out network. PFsense is our firewall and ...
0
votes
1answer
38 views

How can I disable routing between interfaces by default on pfSense?

By default, pfSense routes traffic between WAN, LAN, OPT1, OPT2, ... Currently I am explicitly blocking certain combinations via firewall rules. How can I configure pfSense to use a whitelisting ...
0
votes
1answer
44 views

pfSense dropping gateway interface randomly

The basic topology of the office is ISP-Router <-> pfSense <-> Switch <-> Servers and APs. It has been newly deployed Once a while our internet goes out and one of us has to manually get ...
0
votes
1answer
138 views

Unusual OpenVPN server log entries every minute - Connection reset, restarting [0]

OpenVPN is running on pfSense 2.0-release. Until recently, these messages had not occurred. In the OpenVPN server logs, the follwing set of messages repeats every minute openvpn[34562]: ...
0
votes
1answer
204 views

pfSense on failover won't route with GW on a completely different subnet

I'm trying to install a pfSense with an IP failover (requirement from online.net) but I can't get the server to route the requests. Last time I got it working with the following commands: route ...
3
votes
1answer
2k views

How can I disable NTP in pfsense?

I am running my pfSense gateway in a ESXi server. right now the server gets its time from the NTP server specified in the general settings section of the WebGUI. I want to disable this so pfSense ...
1
vote
1answer
71 views

Use pfSense for outgoing mail?

How/Can/Should I use my pfSense router as an outgoing mail server? I have several webservers and devices on my internal network that need to send mail out to the Internet. However, I don't need a ...
1
vote
1answer
44 views

pfsense: Prohibit all outbound connectivity from inside going out, except for one system's traffic

I've got a lab environment here for some testing of software which should only run on this "lab environment" network. To that end, the "lab environment" has a pfsense firewall sitting on the ...
2
votes
1answer
153 views

PFSense with multi WAN failover

I have two Linux box running PFsense, one of them is a master and the other one is a backup. The master is having IP 192.168.1.2 and backup is having IP 192.168.1.3. I have created a VIP 192.168.1.1 ...
0
votes
0answers
94 views

pfSense LAN network unable to communicate with remote network on OpenVPN TAP connection

I set up pfSense to connect to a remote network (192.168.122.0/24) that only accepts tap connections. The connection is being initiated successfully. pfSense (192.168.1.1/24) itself can connect to ...
0
votes
2answers
326 views

pfSense OpenVPN DNS Resolution

It seems that my problem is a common issue, and I've read several answers on Server Fault, but I can't seem to get my issue figured out. One of my clients is running pfSense 2.1.4, at an internal IP ...
1
vote
1answer
3k views

pfSense routing between subnets behind OPT1 and LAN

pfSense short config summary: WAN interface is on a registered Internet block of addresses connected to ISP via fibre LAN interface has IP address 10.200.1.3/24 OPT1 interface has IP address ...
0
votes
2answers
77 views

pfsense CARP - wan failure on firewall

I have recently configured 2 firewall (on 2 DELL PowerEdge R210II with ESXI 5.1) with pfsense. We have several LANs and 2 WANs. Everything is running fine but i have a strange behavior: i can access ...
1
vote
0answers
49 views

Pfsense OpenVPN Site to Site Routing issues

I know this question has been asked a plethora of times before and I have looked over probably 100 different answers and still cant seem to get this to work. Im trying to create a very simple site to ...
0
votes
2answers
660 views

Reverse Proxy multi-subnets

I'm having some problems that I think I should not be ordinarily facing. But after being beating senseless by this, I'm calling out uncle. I have previously posted something along these lines here: ...
0
votes
1answer
152 views

pfSense in VMWare Cannot Access Web Control

I'm running VMWare ESXi Free on a rented box. I have 2 physical NICs, 1 connected to the Internet, one connected to the Private Network in our DC. Each NIC is connected to a vSwitch and each vSwitch ...
0
votes
0answers
446 views

pfSense no access from lan to wan

Can anyone please help me ? Probably the answer is already somewhere in the forum, but unfortunately I have not found it until now. Since two days I fight to have access to the internet across a ...
2
votes
1answer
205 views

How do I configure a second pfSense server for failover?

I have 2 pfSense servers (the new and the old one) which are used as routers, DHCP and DNS servers. I want to configure the old one as a backup of the new one. It means that when all is ok, all the ...
0
votes
0answers
68 views

Shutdown Script using “plink” on Windows Server 2k8

I have a pfsense machine which I am trying to shutdown when the main server running Win2k8 is shutdown. I have created a batch file with this command: E:\plink\plink -ssh -P 22 -pw mypassword ...
1
vote
1answer
684 views

Pfsense+squid LDAP search filter error

Just installed pfsense and squid on a spare machine. I am trying to get Squid to authenticate AD users via LDAP. First I tried this: ...
1
vote
1answer
104 views

dansguardian error: filterports must match number of filterips (pfsense)

Hi I'm setting up pfsense with squid3 and dansguardian packages. When I try to start the dansguardian service however, I get the following errors: May 27 22:17:37 php: /pkg_edit.php: The command ...
1
vote
0answers
100 views

pfSense + Squid, Windows 2008 DHCP

I recently installed pfSense and Squid3-dev on a spare machine. It is now connected to the network and Internet is working alright. The problem is that I can't get my users to go through Squid proxy ...
-4
votes
1answer
1k views

Pfsense over Ubuntu 12.04

Is it required to install virtual box in order to install pfsense? I mean I would like to directy install pfsense over ubuntu 12.04 operating system without needing any virtualbox like software? Does ...