pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

3
votes
0answers
809 views

pfsense 2.0 traffic priority - set full priority for single host

I have a network with several computers all on the same network and since I have very limited bandwidth I would like to prioritize traffic almost like a CPU scheduler prioritize processes. Example: ...
-1
votes
0answers
7 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
1
vote
2answers
2k views

Pfsense: Inbound Load Balancing https with sticky connection

first of all I'm very sorry for my English... This is my scenario: Internet Firewall+LB: pfsense_1(Active) + pfsense_2(Passive) in CARP Pool servers: 3 x nginx(PHP5+HTTP+HTTPS) Pfsense 1 and 2 ...
0
votes
1answer
965 views

pfSense in VMWare Cannot Access Web Control

I'm running VMWare ESXi Free on a rented box. I have 2 physical NICs, 1 connected to the Internet, one connected to the Private Network in our DC. Each NIC is connected to a vSwitch and each vSwitch ...
2
votes
1answer
3k views

Routing between two routers with static routes

I have a Draytek 3200 router and a pfsense rackmount router that I am trying to get to route to each other. I have a subnet on each router and a subnet for the link between, as shown here: As it ...
0
votes
1answer
1k views

pfsense live cd and boot options

I donwloaded pfsense live cd 2.1.3 and now I want to run pfsense from an usb cdrom drive. It loads a while and than crahses with "unable to mount ..." I know I have to choose boot option 3 in order ...
0
votes
0answers
16 views

Access pfSense reverse proxy sites from LAN

I've configured multiple webservers inside the reverse proxy package to redirect to a single servers, but on different ports. app1.mysite.com -> app.mysite.local:8000 app2.mysite.com -> ...
0
votes
2answers
2k views

pfsense PPTP VPN can access LAN but not internet

I am running pfsense at home and I want to set up a PPTP vpn (yes I know its not secure, lets ignore that) My current pfsense setup: LAN: 192.168.1.1 (/24) WAN PPPoE (real world IP lets say ...
0
votes
1answer
1k views

What “traffic flow” would be right in a transparent “squid + dansguardian” pfsense setup?

my thought (i'm not sure if its right): lan interface traffic comes into port 80 destination port is redirected to 8080 (dans guardian) dansguardian outputs traffic to port 3128 (squid) squid ...
1
vote
1answer
1k views

pfSense - Site to Site OpenVPN

I have two pfSense 2.1 servers running with LANs of 192.168.0.0/24 and 192.168.10.0/24. The pfSense servers are 192.168.0.1 and 192.168.10.1 I just configured an OpenVPN site to site tunnel, that ...
1
vote
1answer
2k views

Migrating Apache reverse proxy to Squid3 using pfSense

I currently have a pfSense firewall that redirects port 80 and 443 to an internal Apache that acts as a reverse proxy for several subdomains on our company. Since pfSense provides a reverse proxy ...
1
vote
1answer
927 views

Setup DMZ in Pfsense with virtual servers, physical Pfsense server

I am looking for some networking tips on how to set up a DMZ in Pfsense and place some virtual servers in that DMZ. Right now my network looks like: Uverse (Static IPs) -> Pfsense -> WAN -> (Virtual ...
2
votes
1answer
860 views

WLAN card as LAN interface?

I have a system with 2 network adapters: a wifi card (atheros) and an ethernet card. Both network adapters are recognized by pfsense 2.1 without problems, but I don't know how to configure it: I ...
0
votes
1answer
965 views

Vpn tunnel to Amazon VPC with pfsense

I'm trying to create an ipsec tunnel between my office and our Amazon VPC. However I have never used ipsec before so I'm at lost. The gateway/firewall is running pfsense 2.1.3-RELEASE (i386) on ...
3
votes
0answers
111 views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
0
votes
0answers
3 views

Internal network issues between pfSense and Windows in VirtualBox [migrated]

I have three virtual machines running on Virtual Box. First one is Linux (pfsense) that's acting as a router with two network adapters one bridged and one set to the internal network. The other two ...
0
votes
0answers
55 views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
1
vote
0answers
40 views

How to make the virtual IP on LAN interface become Master on the only pfSense node with a working/connected WAN interface?

I'm trying to build a multi Wan configuration with High Availability (CARP) functionality. Currently the setup is on virtual machines (before it's released to production). It is on vmware Fusion with ...
0
votes
1answer
25 views

routing for iax-protocol does not work on pfsense

I have problems with a pfsense-box routing iax-traffic (UDP port 4569). Our company has a central office and eight branch-offices. At the branch-offices we use pfsense as firewall and VPN endpoints ...
0
votes
1answer
41 views

pfSense: How to add a second WAN subnet for dummies

Can anyone point me to info on what to change on a pfSense device for a 2nd subnet on a single interface? My colo provider has allocated a /29 subnet to me of which I can use 3 IP addresses (for some ...
0
votes
0answers
75 views

pfSense: Captive Portal is extremely slow

I migrated my pfSense firewall (2.0.2) from an old computer to a more powerful server. I set up the newest pfSense version 2.1 and migrated via export and import my complete settings. Now I encounter ...
0
votes
3answers
173 views

PFsense IPSec VPN failing phase 2

I am very new to VPNs and I am getting errors. I have posted the following lines that I think are the most relevant: Dec 2 08:41:03 racoon: DEBUG: IV freed Dec 2 08:41:03 racoon: [EUA]: ...
1
vote
0answers
32 views

Pfsense Openpvn and Vmware issue

Here is my network: Client --- WAN --- PfSense(VMWare) --- LAN --- vSwitch (Promiscuous) \--- ESXi Management (192.168.2.1) ...
1
vote
1answer
212 views

pfSense OpenVPN from specific IPs and Anywhere

I have 4 Openvpn users, but i would like to restrict the 3 of them to allow connect through the VPN only from specific IPs and the 4th from anywhere. Anyone knows how can i do that? I thought about a ...
0
votes
1answer
118 views

How to use pfSense as a firewall in order to assign url whitelists to IP groups

In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...
0
votes
1answer
187 views

1 Public IP 1 NIC ESXi to multipule VMs (with external access)

So I have purchased a Server from https://www.kimsufi.com/fr/index.xml, KS-5A to be exact. Kimsufi only give you 1 Public IP address and 1 NIC to work with, and you cannot purchase more. I have ...
0
votes
1answer
81 views

pfsense with three WAN IP and outgoing NAT

similar situation as this one: How to setup pfSense with multiple public IP's i have a pfsense with multiple wlan ip's. I'm using a Hetzner Server with vmware so i have a virtual machine with ...
0
votes
2answers
1k views

How to setup pfSense with multiple public IP's

Having trouble with multiple public IP's getting routed correctly. I'd like to setup the following network: public_ip1(assigned WAN IF) -> pfSense -> server 1,2,3 - 192.168.0.11, .12, .13 ...
0
votes
0answers
85 views

PfSense IPSec VPN client

I am new in PfSense I have configured site to site VPN and it works fine, "Site A" ( PfSense) and "Site B" ( SonicWall) both can access each other LAN network. Now i have also configured IPSec Mobile ...
1
vote
0answers
3k views

pfSense no access from lan to wan

Can anyone please help me ? Probably the answer is already somewhere in the forum, but unfortunately I have not found it until now. Since two days I fight to have access to the internet across a ...
5
votes
1answer
566 views

Designing segmented LAN with fairly shared hi-speed internet access on a tight budget

With another member of the owners' association, I've been tasked with designing and setting up shared, hi-speed, internet access, for our apartment building. We have very little budget and hope to be ...
0
votes
0answers
160 views

pfSense OpenVPN Routing to Sever LAN

I'm trying to get my OpenVPN server to route traffic from clients to the server's LAN. My setup is as follows: pfSense box at 10.1.1.1 Other servers on the LAN at 10.1.10.0/24 (with DNS server at ...
0
votes
0answers
178 views

pfsense access openvpn client´s lan

I want to cover the following case: pfsense server´s LAN: 10.1.0.0/24 openvpn client network: 10.2.0.0/24 Local network of one openvpn client: 192.168.2.0/24 Working: Access the network ...
3
votes
1answer
4k views

How do I configure pfsense as an outbound VPN client?

We use pfsense as a router/firewall. Because we're based in China, it is useful for us to have VPN access for all our internal clients. Instead of each individual client connecting to a VPN server ...
0
votes
2answers
800 views

SSH session through an IPSec VPN tunnel freezes when command outputs longer text

I connect to a QNap NAS (Ubuntu 4.1.2) in the office through an IPSec tunnel established between two pfSense firewalls. This has worked fine for months. I recently replaced the NAS with a newer model ...
0
votes
0answers
174 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
0
votes
4answers
3k views

Having two subdomains on one public IP addres behind pFsense router

I have one public static IP address. I have my main domain register at local Internet provider and their DNS. My main router is pfSense and behind it i have my local network. My WEB server is in ...
1
vote
0answers
203 views

pfSense: Captive portal auth via Active Directory (2003)

I'm trying to set up a new firewall server. We chose pfSense and it's working nicely so far. We managed to our Windows Server 2003 Active Directory as a user Authentication Server (System -> User ...
7
votes
1answer
7k views

Connect to multiple AP with one Wifi adapter under Linux/FreeBSD?

How can I connect to more than one Wifi access point simultaneously using a single wireless adapter? I'm currently using pfSense as my home router and I want it to connect to multiple APs wirelessly. ...
1
vote
1answer
601 views

QoS settings for Wi-Fi calling on pfSense firewall/gateway?

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as the primary Internet gateway for ...
0
votes
2answers
2k views

Unusual OpenVPN server log entries every minute - Connection reset, restarting [0]

OpenVPN is running on pfSense 2.0-release. Until recently, these messages had not occurred. In the OpenVPN server logs, the follwing set of messages repeats every minute openvpn[34562]: ...
0
votes
0answers
772 views

pfsense reverse proxy + HTTPS/SSL interception

I have pfSense 2.1.5 and squid3-dev 3.3.10 configured as reverse proxy for internal http web server and server proxy (port 3128).It works. Activating HTTPS/SSL interception (Enable SSL filtering) on ...
2
votes
0answers
311 views

Troubleshooting Packet Loss on pfSense + Ubiquiti UniFi (Wireshark maybe?)

I'm dealing with an annoying situation in a small network in my church, which I'm the primary volunteer IT caretaker, of about 20 PCs, give-or-take. We're in Chattanooga, home of Gigabit internet, so ...
1
vote
1answer
3k views

pfSense OpenVPN clients routing

We've setup OpenVPN using pfSense 2.0.2. Local subnet is 192.168.1.0/24, VPN clients are 10.0.1.0/24 We also have another subnet 192.168.0.0/24 which is connected through pfSense IPSec as a ...
0
votes
0answers
54 views

pfsense: break gmirror raid 1 before upgrading

I have a pfsense firewall in an appliance. The disk is using gmirror with RAID 1 setup. Before this, whenever I want to do OS upgrade, I will shut down the appliance, remove it from server rack, open ...
2
votes
1answer
927 views

SonicWall TZ 200 Network bandwidth or usage monitoring

I was using Pfsense for a while and recently replaced it with SonicWall TZ200. What I miss now is a Bandwidth or usage monitoring like BandwidthD to monitor IP wise traffic. How can I do this ...
2
votes
1answer
833 views

Howto route VPN client traffic over a VPN tunnel with pfSense?

My pfSense box is running as an OpenVPN client and OpenVPN server. The client tunnel connects our network (192.168.1.1/24) to a remote network (10.10.10.10/24) and works just fine. The server allows ...
0
votes
0answers
291 views

Shutdown Script using “plink” on Windows Server 2k8

I have a pfsense machine which I am trying to shutdown when the main server running Win2k8 is shutdown. I have created a batch file with this command: E:\plink\plink -ssh -P 22 -pw mypassword ...
0
votes
1answer
228 views

pfSense Routing a packet out the same interface it arrived on

I have pfSense with one LAN interface which is connected to a switch. All ports on this switch are part of the LAN (VLAN 10). I have access points which are also part of the LAN, they have a static ...
0
votes
1answer
463 views

Implement HTTPS in with pfSense, Varnish and Tomcat

Situation I have an ESXi Server hosting multiple VMs, including one for each pfSense, Varnish and Tomcat. They are configured like the following: pfSenseVM (Firewall, IP=10.0.0.1) NAT Rules from ...