Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

Filter by
Sorted by
Tagged with
1 vote
1 answer
5k views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
-1 votes
1 answer
53 views

PFSense: Subnet can not communicate to the outside

I have multiple subnets on a hypervisor with four Ethernet ports. Two are called subnets. Both of them are utilizing a NordVPN tunnel as their default gateway. The first subnet LAN can talk to ...
0 votes
0 answers
14 views

Accessing adjacent remote network from existing network tunnel in pfsense ipsec

We have two offices, A and B, with IP segment 192.168.10.0/24 and 192.168.20.0/24 respectively, connected to each other using IPsec tunnel mode. Additionally, office B has an IPsec tunnel mode ...
0 votes
1 answer
7 views

Wrong IP address returned for pfSense host name on a router with multiple LANs when using DNS Forwarder/Resolver

Question moved from StackOverflow: Running pfSense 2.4.4 (first saw the problem in 2.0.3) using DNS Forwarder or DNS Resolver for Split-DNS with multiple LANs. LAN1 is 10.10.10.0/24 and LAN2 is 192....
-1 votes
2 answers
358 views

pfSense in disable all packet filtering mode allows web admin on WAN IP [closed]

A while back, I had a fiber internet connection installed at my business with a number of public IPv4 addresses. The ISP provided two blocks of IP addresses: a "P2P" block which contains a ...
2 votes
2 answers
3k views

OPNsense WAN failover causes disruption when non-active WAN is down

I have the latest version of OPNsense set up in a VM on ESXi 7. OPNsense is very similar to pfSense, and I suspect the solution would apply to both. All the NICs are PCI passthrough devices: A ...
5 votes
1 answer
5k views

pfsense bridge of vlan interfaces

Hardware Setup AMD E1-2100 Mini-ITX Motherboard with Onboard Gigabit (re0) Intel PCI Express (x4) 4-port Gigabit Adapter (igb[0123]) Software Setup pfSense v2.3 I'm trying to replicate my OpenWRT ...
1 vote
2 answers
10k views

pfSense bridging Wi-Fi and LAN: allow access between Wi-Fi and LAN

EDIT: Why would I want to do such a thing? This is a test, and there is 1 machine behind pfSense that I wish to manage, and Wi-Fi makes that easy. Carrying on: The auto-suggessted topics by Server ...
1 vote
1 answer
7k views

How can VM and Docker bridge traffic be routed through a pfSense VM?

I think this question is a result of me not being able to wrap my head around Docker networking and not being super great at Slackware. It seems like there should be a simple solution; I'm just ...
5 votes
4 answers
4k views

Forward UNIX syslog to Windows Event viewer

I'm running a pfSense firewall which runs syslog and can forward it's logs to a remote syslog server. I'd like to be able to view these on my SBS 2011 server's event viewer, via a subscription. I ...
0 votes
0 answers
97 views

Split tunnel configuration with OpenVPN not working on Ubuntu 18.04

I have Ubuntu 18.04 on my laptop and it has a VPN settings configured on it. PfSense is the firewall and the VPN server is OpenVPN. Split tunnel is configured on that OpenVPN client. I can confirm ...
0 votes
0 answers
46 views

gRPC proxied through pfSense with HAProxy plugin

I am trying to make a gRPC server available through pfSense with HAProxy running as a plugin. I have ssl termination at HAProxy and it works fine for a number of hosts. But trying to set the gRPC ...
0 votes
0 answers
620 views

OpenVPN TCP connection to firewall failing: unknown error

I am encountering an error when attempting to connect to my office using OpenVPN. The error message: Tue Jul 18 12:34:52 2023 WARNING: Compression for receiving enabled. Compression has been used in ...
2 votes
1 answer
9k views

pfSense - NAT not working

I have a pfSense on Proxmox VM. I have two IP addreses configured: WAN: xx.xx.88.24 -> public IP accesible from internet LAN: 192.168.1.100 -> corporate intranet I want to access an internal ...
3 votes
3 answers
9k views

Pfsense OpenVPN Site to Site Routing issues

I know this question has been asked a plethora of times before and I have looked over probably 100 different answers and still can't seem to get this to work. I'm trying to create a very simple site ...
1 vote
1 answer
11k views

pfSense Outbound NAT not working

I have a VMware vSphere Hypervisor with several Hadoop VMs running. Since our support activated Port Security on our router, only two MACs are allowed to be connected to one port of the router. This ...
0 votes
1 answer
23 views

pFsense : A rule apply on user account

I have a pFsense user account 'foo.extern'. This account can log to the server with OpenVPN. It works fine. Now i want to make a firewall rule to allow this account only access to the IP adresse 192....
4 votes
1 answer
255 views

Which LAGG type should be used for MLAG switches to CARP firewalls?

My network setup involves two firewalls in a Common Address Redundancy Protocol (CARP) group, each connected to an MLAG (Multi-Chassis Link Aggregation) configuration of Mikrotik switches. Onward ...
0 votes
0 answers
147 views

How to connect wireless clients to different physical subnets via a single access point but ensure traffic between subnets remains segmented

I’m trying to design a network with a pfSense Firewall / Router. In pfsense I have created four subnets that reside on separate physical ports (not VLANS) on the pfSense hardware: The idea will be ...
3 votes
1 answer
3k views

Redirect network traffic to Proxy with Pfsense

I have a network with 9 clients: 192.168.1.0/24 I need to redirect all traffic from 192.168.1.208 and 192.168.1.209 to an outside proxy server. --------------- |192.168.1.201|--------| --------------...
0 votes
1 answer
4k views

Cant ping LAN devices with Pfsense and OpenVPN

I am currently doing a test for our OpenVPN setup through Pfsense, we have 2 Pfsense running on the network, For the default gateway of the LAN Network as Main Firewall. For the OpenVPN Clients as a ...
-3 votes
1 answer
72 views

DHCP moved from [closed]

After connecting several Raspberry Pis running Ubuntu 23.10 to my switch, they are for some reason stepping on each others DHCP leases. DHCP is running on fpsense 2.7.2... Logs: DHCPREQUEST for 192....
3 votes
1 answer
4k views

site to site vpn between sonicwall and pfsense

The problem i am facing is establishment of a site to site VPN in between pfSense( version 2.0.1) and SonicWall Pro2040 Enhanced ( Firmware Version: SonicOS Enhanced 4.2.1.4-7e) . All of the ...
0 votes
0 answers
19 views

pfSense. Alias URL Table with TAR.GZ list on FTP

In pfSense, can I create a "Table URL" alias that points to a TAR.GZ file downloadable via FTP? Or does it necessarily have to be a full list accessible via HTTP?
0 votes
1 answer
146 views

Reply traffic lost when using an NVA to SNAT

I am trying to implement the following in a lab subscription, as described in https://learn.microsoft.com/en-us/azure/architecture/guide/networking/ipv4-exhaustion#implement-snat-via-third-party-nvas (...
1 vote
2 answers
5k views

Offloading PPPoE from an OPNsense router

I'm running opnSense, a FreeBSD-based firewall and router similar to pfSense, in a virtual machine under VMware ESXi 7 on a Dell PowerEdge R230, as a router for my home network. No other VMs are ...
0 votes
0 answers
29 views

pfsense temporarly failed to resolve hosts

Suddenly I was unable to reach the outside world. I pinged one IP on internet, it worked I tried to resolve a hostname with the dhpd configured server, i.e. netgate/pfsense, timeout I tried to ...
0 votes
1 answer
185 views

How to access pfsense's LAN without vpn?

I have the following setup and want to access both server A and server B by their IPs from the workstation without VPN and without port-forwarding. What I have tried so far is: In pfsense_1, I added ...
0 votes
0 answers
49 views

Can't ping / access GNS3 PFSense virtual device but can ping GNS3 VM on same subnet

I have a basic GNS3 network that I’m trying to setup with PFSense. I have managed to install the PFSense module and can now add it as a device within GNS3. However after adding, configuring and ...
0 votes
0 answers
34 views

necesito configurar una regla de firewall en pfsense

chicos estoy haciendo una simulación de ataque DDoS utilizando máquinas virtuales (virtual box) ya logré hacer el ataque, sin embargo, necesito configurar pfsense para poder proteger mi servidor web ...
0 votes
0 answers
85 views

Network traffic being filtered on OVH Public Cloud's Private Network

We are currently attempting to set up an isolated infrastructure separate from the WAN using a firewall (pfsense) and private networks. We are experiencing connectivity issues on the virtual network ...
1 vote
2 answers
232 views

How would you set up a macOS laptop to maintain the same IP address between ethernet and wifi?

I have a situation where I need to maintain the same IP address and/or hostname between two network interfaces on several macOS laptops: the ethernet and wifi. The topology is such that there is a ...
0 votes
1 answer
147 views

Forward (NAT) port on FW to the device without having GW set on it?

In short: Is it possible to access the device/server (without the GW address set in the Network configuration of this device) from outside the device's LAN? Current setup: I'm renting an ESXi server ...
2 votes
1 answer
522 views

Why does my pfsense gateway break SSL for some internal hosts?

I have a proxmox cluster with pfsense acting as a firewall and gateway for the cluster nodes and VMs. VMs have no problem, but the cluster nodes can't browse any websites using SSL, which of course ...
0 votes
0 answers
40 views

(Networking noob) I can't get network to work on a server using pfsense and juniper switch

I work at a company as an IT administrator, but my experience with networking is very limited. I was always focused on the OS and application side of things. Recently the only other IT administrator ...
0 votes
0 answers
153 views

Pfsense breaks certification chain

I have a problem I was thinking it was a simple one. It seems it is not. Not from my point of vue :( In the same GCP Project, I have two independant VPC, one linked to the vtnet0 (LAN) of a pfsense 2....
0 votes
0 answers
75 views

pfSense L2 firewall not blocking half of DHCP traffic

I have a pfSense instance (NetGate SG-series), with setup: 802.11q enabled LAN ports 1 (LANP) and 2 (LANB) with VLAN assignments Interfaces assigned and enabled LANP: (1, 5t) tag configuration ...
2 votes
2 answers
7k views

Haproxy log file with pfsense

I am trying to read the /var/log/haproxy.log file with the command: clog -f haproxy.log but nothing happens. No window opens. How do I see my error log? I’m on pfsense.
3 votes
3 answers
4k views

How to prevent clients from getting static IPs (set by Client Specific Overrides) in OpenVPN via PfSense?

I am getting problems with the current setting in an OpenVPN via PfSense. The situation is the following: I have created a OpenVPN server in the network 192.168.222.0/24; Created two client ...
0 votes
0 answers
400 views

Why does this traffic selector not match?

(Note: I'm really using pfSense, but I'm just going to focus on the ipsec.conf files, since pfSense doesn't seem particularly relevant to the issue.) We're getting the following error from charon: Aug ...
0 votes
0 answers
141 views

PfSense - Ha proxy Wan Ip timeout when outside network requests

Currently I'm setting up a home lab and I've the following architecture Architecture I've setup my ISP provider to redirect any 80 requests to my pfsense firewall. Created a rule allowing any requests ...
0 votes
1 answer
318 views

haproxy on pfsense fw to guac

I am having some issues with setting up a publicly accessible guacamole server thru my pfsense, which is running haproxy. Internet > pfsense \ haproxy > guac I have my domain DNS thru ...
1 vote
2 answers
4k views

Configuration to connect an Acess Point into a pfSense Network

At the moment I have an wired network provided by my pfSense router. I bought an Access point (tl-wa801nd access point), in order to have a wireless network in my wired network. In my computer host, I ...
0 votes
1 answer
172 views

What subnet mask to use for a virtual IP in pfSense

I have a subnet 192.168.0.0/24. I want to create a new virtual IP address (VIP) in pfSense at 192.168.0.2. What difference does it make what subnet mask I use for the VIP? Should I set the VIP to 192....
0 votes
0 answers
163 views

OpenVPN connection failed

suddenly openvpn lost connection to server. The logs are following: server logs: Jul 21 00:07:40 openvpn 29858 100.90.2.29:62306 TLS Error: Auth Username/Password was not provided by peer Jul 21 00:07:...
1 vote
0 answers
495 views

deploying pfSense in OVH public cloud as a DHCP server in HA

I am trying to deploy two pfSense in the OVH public cloud (OpenStack). Each has its own public IPs and public connectivity works without any problem. Things become more complicated on the vRack part (...
0 votes
0 answers
51 views

How many ip's can i add in pfsense alias

I have a pfsense 2.4.4-RELEASE-p1.I have an alias problem. I created an alias with ~100 subnets in operator cloud, I created a rule with this alias, but it doesn't work. To check, I created a rule ...
-1 votes
1 answer
44 views

Firewall failover internal ip

I have multiple servers at my data center and i want to switch to pfsense, but i don't know if it can automatically fall over to the second server that is a mirror from the first server. So if the ...
0 votes
1 answer
6k views

Pfsense routing between OPT subnet and LAN subnet

Hereafter is my today address plan and related cabling which works partially. on top of this picture I have in mind to offer a OpenVPN connection NATed to the OPT subnet (but this is for later because ...
0 votes
1 answer
223 views

pfsense firewall/NAT rules for 2 different LAN where LAN2 has public facing server

I'm looking for a pfsense ruleset that allows a client on LAN1 192.168.3.10 to access a public server on LAN2 10.0.0.2. ports 60000 -60015 TCP/UDP. I otherwise wish to keep these LAN's isolated from ...

1
2 3 4 5
17