pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

2
votes
1answer
3k views

Pfsense 2.1 OpenVPN can't reach servers on the LAN

I have a small network set up like this: I have a Pfsense for connecting my servers to the WAN, they are using NAT from the LAN -> WAN. I have an OpenVPN server using TAP to allow remote workers ...
2
votes
1answer
1k views

How do I configure pfsense as an outbound VPN client?

We use pfsense as a router/firewall. Because we're based in China, it is useful for us to have VPN access for all our internal clients. Instead of each individual client connecting to a VPN server ...
0
votes
2answers
22 views

How to change the webgui password in pfsense from a console?

is there any way to change the password of the webgui administrator user in pfsense from my console? Just to mention i didn't locked my self out from the webgui. Regards, ankso
0
votes
0answers
38 views

QoS settings for Wi-Fi calling on pfSense firewall/gateway?

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as the primary Internet gateway for ...
1
vote
2answers
2k views

Pfsense: Inbound Load Balancing https with sticky connection

first of all I'm very sorry for my English... This is my scenario: Internet Firewall+LB: pfsense_1(Active) + pfsense_2(Passive) in CARP Pool servers: 3 x nginx(PHP5+HTTP+HTTPS) Pfsense 1 and 2 ...
-1
votes
1answer
29 views

Do all captive portal solutions work the same way? (cookie, vs MAC address, vs other?)

While traveling and having to interact with a number of broken captive portal implementations I've overheard other passengers having usability issues with iPads, Phones, computers depending on the ...
1
vote
1answer
44 views

Why is my pfSense WAN to Comcast going via 100.99.197.221 which appears to be in Belarus?

We are having internet problems today. We use a Comcast business connection. We have a /29 network from Comcast. We have these IP address: 50.x.x.249, 50.x.x.250, 50.x.x.251, 50.x.x.252, 50.x.x.253 ...
1
vote
1answer
719 views

Howto route VPN client traffic over a VPN tunnel with pfSense?

My pfSense box is running as an OpenVPN client and OpenVPN server. The client tunnel connects our network (192.168.1.1/24) to a remote network (10.10.10.10/24) and works just fine. The server allows ...
0
votes
0answers
41 views

site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops

I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode. I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at ...
2
votes
1answer
2k views

Routing between two routers with static routes

I have a Draytek 3200 router and a pfsense rackmount router that I am trying to get to route to each other. I have a subnet on each router and a subnet for the link between, as shown here: As it ...
0
votes
1answer
43 views

pfSense monitor wan bandwidth by lan ip

I think pfSense is great and has a lot of helpful features. I use it for a lot of things but I cannot find one feature that I really need. My Current setup is several Vlans and 1 Wan. We currently ...
16
votes
7answers
25k views

How can I use HAproxy with SSL and get X-Forwarded-For headers AND tell PHP that SSL is in use?

I have the following setup: (internet) ---> [ pfSense Box ] /-> [ Apache / PHP server ] [running HAproxy] --+--> [ Apache / PHP server ] ...
0
votes
1answer
2k views

Pfsense 2.02 ipsec vpn tunnel goes down randomly

Ipsec vpn tunnels got disconnected randomly but when we restart raccon all tunnel will come up again with out any issue.I would like to know a permanent fix for this. These are the logs: racoon: ...
0
votes
1answer
486 views

Vpn tunnel to Amazon VPC with pfsense

I'm trying to create an ipsec tunnel between my office and our Amazon VPC. However I have never used ipsec before so I'm at lost. The gateway/firewall is running pfsense 2.1.3-RELEASE (i386) on ...
0
votes
1answer
81 views

using pf for packet filtering and ipfw's dummynet for bandwidth limiting at the same time

I would like to ask if it's fine to use pf for all packet filtering (including using altq for traffic shaping) and ipfw's dummynet for bandwidth limiting certain IPs or subnets at the same time. I am ...
0
votes
1answer
705 views

What “traffic flow” would be right in a transparent “squid + dansguardian” pfsense setup?

my thought (i'm not sure if its right): lan interface traffic comes into port 80 destination port is redirected to 8080 (dans guardian) dansguardian outputs traffic to port 3128 (squid) squid ...
0
votes
1answer
706 views

pfsense long ping to google

I have a pfsense box set up. What happens is I set a rule so I can't hit the admin interface 192.168.3.1 from the box. With the rule enabled --- www.l.google.com ping statistics --- 2 packets ...
1
vote
1answer
772 views

Setup DMZ in Pfsense with virtual servers, physical Pfsense server

I am looking for some networking tips on how to set up a DMZ in Pfsense and place some virtual servers in that DMZ. Right now my network looks like: Uverse (Static IPs) -> Pfsense -> WAN -> (Virtual ...
-1
votes
1answer
43 views

What is it that makes BSD a popular choice for firewalls? [closed]

What is it that makes BSD a popular choice for firewalls? Is the kernel generally more secure?
0
votes
1answer
31 views

Configure clients to navigate through specific wan. Pfsense

I have a machine with a pfsense running. It is configured with three ethernet cards. LAN 192.168.2.1/21 WAN1 200.41.X.2/24 WAN2 200.41.X.3/24 ISP Gateway 200.41.X.1 This is a connection with 5 ...
0
votes
1answer
394 views

cisco vpn client randomly disconnects with pfSense

My network has two gateways, one is a pfSense box that everyone uses. The other one is a TP-Link firewall essentially for tests. Some machines inside my network need to access a VPN through the Cisco ...
1
vote
2answers
23 views

Set default gateway based on protocol using pfSense

I have a pfSense configured with two Internet links for broadband load balancing. One of these links block outgoing traffic on 25 port (WAN1). I have a mail server (IP 10.6.9.2) that should use the ...
0
votes
0answers
58 views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
2answers
96 views

How to setup pfSense with multiple public IP's

Having trouble with multiple public IP's getting routed correctly. I'd like to setup the following network: public_ip1(assigned WAN IF) -> pfSense -> server 1,2,3 - 192.168.0.11, .12, .13 ...
1
vote
3answers
2k views

Unable to access internal network through PfSense WAN port

Our branch office is unable to connect to our internal network for some reason. However we can connect to the branch office domain controller from behind PfSense. The following is our setup: ...
0
votes
1answer
279 views

pfsense PPTP VPN can access LAN but not internet

I am running pfsense at home and I want to set up a PPTP vpn (yes I know its not secure, lets ignore that) My current pfsense setup: LAN: 192.168.1.1 (/24) WAN PPPoE (real world IP lets say ...
0
votes
0answers
46 views

Windows 2008 / 2003 DC can not ping gateway or internet

Im doing some tests trying to setup a domain and i found a very weird behavior. Same thing on windows 2008 r2 and windows 2003 x64 r2. I am running on KVM over proxmox virtualized with virtio. After ...
2
votes
1answer
69 views

pfSense Cluster not working with Manual NAT

I have two pfSense clusters, one is 2.1.4 and one is 2.1.3. The directions suggest that Manual Outbound NAT is required, but the 2.1.3 cluster is working just fine using Automatic NAT, servers and ...
2
votes
3answers
7k views

Pfsense as caching DNS server

Is there any way to use pfsense as caching DNS server. It will resolve domains starting from root servers and will cache them for consequent hits. I tried DNS servers package on pfsense 1.2.2, which ...
1
vote
1answer
178 views

pfSense failover and OpenVPN site-to-site

I have two pfSense Clusters, and am trying to connect them with an OpenVPN site-to-site VPN. Initially, the client was a single pfSense system, and all was well. Now that one system is a cluster, and ...
0
votes
1answer
18 views

VPN Connection pooling?

I'm having a problem on PFSense https://forum.pfsense.org/index.php?topic=23914.0 where I can only connect one client with a PPTP VPN to a VPN Server outside out network. PFsense is our firewall and ...
0
votes
1answer
71 views

How can I disable routing between interfaces by default on pfSense?

By default, pfSense routes traffic between WAN, LAN, OPT1, OPT2, ... Currently I am explicitly blocking certain combinations via firewall rules. How can I configure pfSense to use a whitelisting ...
0
votes
1answer
57 views

pfSense dropping gateway interface randomly

The basic topology of the office is ISP-Router <-> pfSense <-> Switch <-> Servers and APs. It has been newly deployed Once a while our internet goes out and one of us has to manually get ...
0
votes
1answer
357 views

Unusual OpenVPN server log entries every minute - Connection reset, restarting [0]

OpenVPN is running on pfSense 2.0-release. Until recently, these messages had not occurred. In the OpenVPN server logs, the follwing set of messages repeats every minute openvpn[34562]: ...
0
votes
1answer
237 views

pfSense on failover won't route with GW on a completely different subnet

I'm trying to install a pfSense with an IP failover (requirement from online.net) but I can't get the server to route the requests. Last time I got it working with the following commands: route ...
3
votes
1answer
2k views

How can I disable NTP in pfsense?

I am running my pfSense gateway in a ESXi server. right now the server gets its time from the NTP server specified in the general settings section of the WebGUI. I want to disable this so pfSense ...
1
vote
1answer
108 views

Use pfSense for outgoing mail?

How/Can/Should I use my pfSense router as an outgoing mail server? I have several webservers and devices on my internal network that need to send mail out to the Internet. However, I don't need a ...
1
vote
1answer
69 views

pfsense: Prohibit all outbound connectivity from inside going out, except for one system's traffic

I've got a lab environment here for some testing of software which should only run on this "lab environment" network. To that end, the "lab environment" has a pfsense firewall sitting on the ...
2
votes
1answer
283 views

PFSense with multi WAN failover

I have two Linux box running PFsense, one of them is a master and the other one is a backup. The master is having IP 192.168.1.2 and backup is having IP 192.168.1.3. I have created a VIP 192.168.1.1 ...
0
votes
0answers
124 views

pfSense LAN network unable to communicate with remote network on OpenVPN TAP connection

I set up pfSense to connect to a remote network (192.168.122.0/24) that only accepts tap connections. The connection is being initiated successfully. pfSense (192.168.1.1/24) itself can connect to ...
0
votes
2answers
560 views

pfSense OpenVPN DNS Resolution

It seems that my problem is a common issue, and I've read several answers on Server Fault, but I can't seem to get my issue figured out. One of my clients is running pfSense 2.1.4, at an internal IP ...
1
vote
1answer
4k views

pfSense routing between subnets behind OPT1 and LAN

pfSense short config summary: WAN interface is on a registered Internet block of addresses connected to ISP via fibre LAN interface has IP address 10.200.1.3/24 OPT1 interface has IP address ...
0
votes
2answers
90 views

pfsense CARP - wan failure on firewall

I have recently configured 2 firewall (on 2 DELL PowerEdge R210II with ESXI 5.1) with pfsense. We have several LANs and 2 WANs. Everything is running fine but i have a strange behavior: i can access ...
1
vote
0answers
54 views

Pfsense OpenVPN Site to Site Routing issues

I know this question has been asked a plethora of times before and I have looked over probably 100 different answers and still cant seem to get this to work. Im trying to create a very simple site to ...
0
votes
2answers
667 views

Reverse Proxy multi-subnets

I'm having some problems that I think I should not be ordinarily facing. But after being beating senseless by this, I'm calling out uncle. I have previously posted something along these lines here: ...
0
votes
1answer
251 views

pfSense in VMWare Cannot Access Web Control

I'm running VMWare ESXi Free on a rented box. I have 2 physical NICs, 1 connected to the Internet, one connected to the Private Network in our DC. Each NIC is connected to a vSwitch and each vSwitch ...
0
votes
0answers
853 views

pfSense no access from lan to wan

Can anyone please help me ? Probably the answer is already somewhere in the forum, but unfortunately I have not found it until now. Since two days I fight to have access to the internet across a ...
2
votes
1answer
243 views

How do I configure a second pfSense server for failover?

I have 2 pfSense servers (the new and the old one) which are used as routers, DHCP and DNS servers. I want to configure the old one as a backup of the new one. It means that when all is ok, all the ...
0
votes
0answers
97 views

Shutdown Script using “plink” on Windows Server 2k8

I have a pfsense machine which I am trying to shutdown when the main server running Win2k8 is shutdown. I have created a batch file with this command: E:\plink\plink -ssh -P 22 -pw mypassword ...
1
vote
1answer
897 views

Pfsense+squid LDAP search filter error

Just installed pfsense and squid on a spare machine. I am trying to get Squid to authenticate AD users via LDAP. First I tried this: ...