pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

0
votes
1answer
36 views

using pf for packet filtering and ipfw's dummynet for bandwidth limiting at the same time

I would like to ask if it's fine to use pf for all packet filtering (including using altq for traffic shaping) and ipfw's dummynet for bandwidth limiting certain IPs or subnets at the same time. I am ...
0
votes
1answer
475 views

What “traffic flow” would be right in a transparent “squid + dansguardian” pfsense setup?

my thought (i'm not sure if its right): lan interface traffic comes into port 80 destination port is redirected to 8080 (dans guardian) dansguardian outputs traffic to port 3128 (squid) squid ...
0
votes
1answer
328 views

Vpn tunnel to Amazon VPC with pfsense

I'm trying to create an ipsec tunnel between my office and our Amazon VPC. However I have never used ipsec before so I'm at lost. The gateway/firewall is running pfsense 2.1.3-RELEASE (i386) on ...
0
votes
1answer
684 views

pfsense long ping to google

I have a pfsense box set up. What happens is I set a rule so I can't hit the admin interface 192.168.3.1 from the box. With the rule enabled --- www.l.google.com ping statistics --- 2 packets ...
1
vote
1answer
738 views

Setup DMZ in Pfsense with virtual servers, physical Pfsense server

I am looking for some networking tips on how to set up a DMZ in Pfsense and place some virtual servers in that DMZ. Right now my network looks like: Uverse (Static IPs) -> Pfsense -> WAN -> (Virtual ...
-1
votes
1answer
35 views

What is it that makes BSD a popular choice for firewalls? [closed]

What is it that makes BSD a popular choice for firewalls? Is the kernel generally more secure?
0
votes
1answer
21 views

Configure clients to navigate through specific wan. Pfsense

I have a machine with a pfsense running. It is configured with three ethernet cards. LAN 192.168.2.1/21 WAN1 200.41.X.2/24 WAN2 200.41.X.3/24 ISP Gateway 200.41.X.1 This is a connection with 5 ...
0
votes
1answer
383 views

cisco vpn client randomly disconnects with pfSense

My network has two gateways, one is a pfSense box that everyone uses. The other one is a TP-Link firewall essentially for tests. Some machines inside my network need to access a VPN through the Cisco ...
2
votes
1answer
800 views

How do I configure pfsense as an outbound VPN client?

We use pfsense as a router/firewall. Because we're based in China, it is useful for us to have VPN access for all our internal clients. Instead of each individual client connecting to a VPN server ...
1
vote
2answers
17 views

Set default gateway based on protocol using pfSense

I have a pfSense configured with two Internet links for broadband load balancing. One of these links block outgoing traffic on 25 port (WAN1). I have a mail server (IP 10.6.9.2) that should use the ...
1
vote
2answers
2k views

Pfsense: Inbound Load Balancing https with sticky connection

first of all I'm very sorry for my English... This is my scenario: Internet Firewall+LB: pfsense_1(Active) + pfsense_2(Passive) in CARP Pool servers: 3 x nginx(PHP5+HTTP+HTTPS) Pfsense 1 and 2 ...
-2
votes
0answers
27 views

Pfsense on intranet ip address

I wish to secure the traffic between ESXi server vms and other physical nodes on my network. What I have: A public IP address on the WAN port of the Wifi router A dedicated server with 2 NIC ...
0
votes
0answers
32 views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
2answers
45 views

How to setup pfSense with multiple public IP's

Having trouble with multiple public IP's getting routed correctly. I'd like to setup the following network: public_ip1(assigned WAN IF) -> pfSense -> server 1,2,3 - 192.168.0.11, .12, .13 ...
1
vote
3answers
1k views

Unable to access internal network through PfSense WAN port

Our branch office is unable to connect to our internal network for some reason. However we can connect to the branch office domain controller from behind PfSense. The following is our setup: ...
0
votes
1answer
75 views

pfsense PPTP VPN can access LAN but not internet

I am running pfsense at home and I want to set up a PPTP vpn (yes I know its not secure, lets ignore that) My current pfsense setup: LAN: 192.168.1.1 (/24) WAN PPPoE (real world IP lets say ...
0
votes
0answers
29 views

Windows 2008 / 2003 DC can not ping gateway or internet

Im doing some tests trying to setup a domain and i found a very weird behavior. Same thing on windows 2008 r2 and windows 2003 x64 r2. I am running on KVM over proxmox virtualized with virtio. After ...
1
vote
1answer
696 views

Howto route VPN client traffic over a VPN tunnel with pfSense?

My pfSense box is running as an OpenVPN client and OpenVPN server. The client tunnel connects our network (192.168.1.1/24) to a remote network (10.10.10.10/24) and works just fine. The server allows ...
-1
votes
0answers
19 views

Lightsquid logs not showing all users

Our company is using Lightsquid software to monitor our users on a PFsense firewall with sophos Antivirus. However our Lightsquid reports is not picking up all our users some appear and reappear at ...
2
votes
1answer
47 views

pfSense Cluster not working with Manual NAT

I have two pfSense clusters, one is 2.1.4 and one is 2.1.3. The directions suggest that Manual Outbound NAT is required, but the 2.1.3 cluster is working just fine using Automatic NAT, servers and ...
2
votes
1answer
2k views

Routing between two routers with static routes

I have a Draytek 3200 router and a pfsense rackmount router that I am trying to get to route to each other. I have a subnet on each router and a subnet for the link between, as shown here: As it ...
2
votes
3answers
7k views

Pfsense as caching DNS server

Is there any way to use pfsense as caching DNS server. It will resolve domains starting from root servers and will cache them for consequent hits. I tried DNS servers package on pfsense 1.2.2, which ...
1
vote
1answer
106 views

pfSense failover and OpenVPN site-to-site

I have two pfSense Clusters, and am trying to connect them with an OpenVPN site-to-site VPN. Initially, the client was a single pfSense system, and all was well. Now that one system is a cluster, and ...
0
votes
1answer
15 views

VPN Connection pooling?

I'm having a problem on PFSense https://forum.pfsense.org/index.php?topic=23914.0 where I can only connect one client with a PPTP VPN to a VPN Server outside out network. PFsense is our firewall and ...
0
votes
1answer
38 views

How can I disable routing between interfaces by default on pfSense?

By default, pfSense routes traffic between WAN, LAN, OPT1, OPT2, ... Currently I am explicitly blocking certain combinations via firewall rules. How can I configure pfSense to use a whitelisting ...
0
votes
1answer
43 views

pfSense dropping gateway interface randomly

The basic topology of the office is ISP-Router <-> pfSense <-> Switch <-> Servers and APs. It has been newly deployed Once a while our internet goes out and one of us has to manually get ...
0
votes
1answer
103 views

Unusual OpenVPN server log entries every minute - Connection reset, restarting [0]

OpenVPN is running on pfSense 2.0-release. Until recently, these messages had not occurred. In the OpenVPN server logs, the follwing set of messages repeats every minute openvpn[34562]: ...
0
votes
1answer
202 views

pfSense on failover won't route with GW on a completely different subnet

I'm trying to install a pfSense with an IP failover (requirement from online.net) but I can't get the server to route the requests. Last time I got it working with the following commands: route ...
3
votes
1answer
2k views

How can I disable NTP in pfsense?

I am running my pfSense gateway in a ESXi server. right now the server gets its time from the NTP server specified in the general settings section of the WebGUI. I want to disable this so pfSense ...
1
vote
1answer
62 views

Use pfSense for outgoing mail?

How/Can/Should I use my pfSense router as an outgoing mail server? I have several webservers and devices on my internal network that need to send mail out to the Internet. However, I don't need a ...
1
vote
1answer
41 views

pfsense: Prohibit all outbound connectivity from inside going out, except for one system's traffic

I've got a lab environment here for some testing of software which should only run on this "lab environment" network. To that end, the "lab environment" has a pfsense firewall sitting on the ...
2
votes
1answer
131 views

PFSense with multi WAN failover

I have two Linux box running PFsense, one of them is a master and the other one is a backup. The master is having IP 192.168.1.2 and backup is having IP 192.168.1.3. I have created a VIP 192.168.1.1 ...
0
votes
0answers
81 views

pfSense LAN network unable to communicate with remote network on OpenVPN TAP connection

I set up pfSense to connect to a remote network (192.168.122.0/24) that only accepts tap connections. The connection is being initiated successfully. pfSense (192.168.1.1/24) itself can connect to ...
0
votes
2answers
278 views

pfSense OpenVPN DNS Resolution

It seems that my problem is a common issue, and I've read several answers on Server Fault, but I can't seem to get my issue figured out. One of my clients is running pfSense 2.1.4, at an internal IP ...
1
vote
1answer
3k views

pfSense routing between subnets behind OPT1 and LAN

pfSense short config summary: WAN interface is on a registered Internet block of addresses connected to ISP via fibre LAN interface has IP address 10.200.1.3/24 OPT1 interface has IP address ...
0
votes
2answers
75 views

pfsense CARP - wan failure on firewall

I have recently configured 2 firewall (on 2 DELL PowerEdge R210II with ESXI 5.1) with pfsense. We have several LANs and 2 WANs. Everything is running fine but i have a strange behavior: i can access ...
1
vote
0answers
48 views

Pfsense OpenVPN Site to Site Routing issues

I know this question has been asked a plethora of times before and I have looked over probably 100 different answers and still cant seem to get this to work. Im trying to create a very simple site to ...
0
votes
2answers
658 views

Reverse Proxy multi-subnets

I'm having some problems that I think I should not be ordinarily facing. But after being beating senseless by this, I'm calling out uncle. I have previously posted something along these lines here: ...
0
votes
1answer
133 views

pfSense in VMWare Cannot Access Web Control

I'm running VMWare ESXi Free on a rented box. I have 2 physical NICs, 1 connected to the Internet, one connected to the Private Network in our DC. Each NIC is connected to a vSwitch and each vSwitch ...
0
votes
0answers
356 views

pfSense no access from lan to wan

Can anyone please help me ? Probably the answer is already somewhere in the forum, but unfortunately I have not found it until now. Since two days I fight to have access to the internet across a ...
2
votes
1answer
197 views

How do I configure a second pfSense server for failover?

I have 2 pfSense servers (the new and the old one) which are used as routers, DHCP and DNS servers. I want to configure the old one as a backup of the new one. It means that when all is ok, all the ...
0
votes
0answers
64 views

Shutdown Script using “plink” on Windows Server 2k8

I have a pfsense machine which I am trying to shutdown when the main server running Win2k8 is shutdown. I have created a batch file with this command: E:\plink\plink -ssh -P 22 -pw mypassword ...
1
vote
1answer
637 views

Pfsense+squid LDAP search filter error

Just installed pfsense and squid on a spare machine. I am trying to get Squid to authenticate AD users via LDAP. First I tried this: ...
1
vote
1answer
100 views

dansguardian error: filterports must match number of filterips (pfsense)

Hi I'm setting up pfsense with squid3 and dansguardian packages. When I try to start the dansguardian service however, I get the following errors: May 27 22:17:37 php: /pkg_edit.php: The command ...
1
vote
0answers
96 views

pfSense + Squid, Windows 2008 DHCP

I recently installed pfSense and Squid3-dev on a spare machine. It is now connected to the network and Internet is working alright. The problem is that I can't get my users to go through Squid proxy ...
-4
votes
1answer
1k views

Pfsense over Ubuntu 12.04

Is it required to install virtual box in order to install pfsense? I mean I would like to directy install pfsense over ubuntu 12.04 operating system without needing any virtualbox like software? Does ...
13
votes
1answer
1k views

What would cause SIP traffic to be seen going into a switch but not coming out?

Background I have been struggling to get my SIP phones to register behind a brand new router and switch in our brand new office. Our PBX is hosted offsite. I have worked with our provider to attempt ...
1
vote
1answer
672 views

Assign static IPs to tap clients in pfSense's OpenVPN server

I am trying to set up a pfSense server with OpenVPN. The OpenVPN will use the tap interface, tun clients are no option for us. The LAN network is 10.0.0.0/24, the pfSense machine is 10.0.0.10 and ...
0
votes
0answers
168 views

pfSense NAT routing using VLANs

We already have pfSense installed and it is working for our single IP address on 1.1.1.1. We also have a further 3 ip addresses (1.1.1.2, 1.1.1.3, 1.1.1.4) which are set up as VLANs on the WAN ...
1
vote
0answers
640 views

Migrating Apache reverse proxy to Squid3 using pfSense

I currently have a pfSense firewall that redirects port 80 and 443 to an internal Apache that acts as a reverse proxy for several subdomains on our company. Since pfSense provides a reverse proxy ...