pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

2
votes
2answers
964 views

Installing embedded pfsense, stuck at boot loader

I am trying to install pfSense embedded image 1.2.3 RC1 onto a CF card. The box looks like it is ready to boot, but gets stuck at "Loading /boot/defaults/loader.conf" followed by "/". Can anyone ...
0
votes
1answer
1k views

pfSense router gives DNS rebinding warning when accessing subdomains

I have just set up a router running pfSense on our network and forwarded the appropriate ports. I have a small web server running in my network, and a domain name pointing to our (WAN) IP. When ...
16
votes
8answers
25k views

How can I use HAproxy with SSL and get X-Forwarded-For headers AND tell PHP that SSL is in use?

I have the following setup: (internet) ---> [ pfSense Box ] /-> [ Apache / PHP server ] [running HAproxy] --+--> [ Apache / PHP server ] ...
3
votes
1answer
6k views

How can I detect a DDoS attack using pfSense so I can tell my ISP who to block? [duplicate]

Last week my network was hit by a DDoS attack which completely saturated our 100 MBps link to the internet and pretty much shut down all the sites and services we host. I understand (from this ...
13
votes
1answer
1k views

What would cause SIP traffic to be seen going into a switch but not coming out?

Background I have been struggling to get my SIP phones to register behind a brand new router and switch in our brand new office. Our PBX is hosted offsite. I have worked with our provider to attempt ...
1
vote
2answers
15k views

pfSense Site-toSite VPN with OpenVPN connects but won't route traffic

Using two pfSense routers, I've created a shared-key VPN between 2 sites. Both routers are pfSense 1.2.2. The pfSense box at the client site is the gateway router for that site, but at the server ...
7
votes
3answers
3k views

Is there danger to virtualizing a router?

I had read on a few forums about pfSense that said it was dangerous to virtualize pfSense. The reason that was stated was an attacker could use pfsense as a spring board for an attack on the ...
3
votes
3answers
477 views

Suggestions for transitioning to new GW/private network

I am replacing a private T1 link with a new firewall device with an ipsec tunnel for a branch office. I am trying to figure out the right way to transition folks at the new site over to the new ...
3
votes
3answers
750 views

Forward UNIX syslog to Windows Event viewer

I'm running a pfSense firewall which runs syslog and can forward it's logs to a remote syslog server. I'd like to be able to view these on my SBS 2011 server's event viewer, via a subscription. I ...
2
votes
1answer
876 views

Physical network setup for pfsense w/ CARP for redundant firewalls

So I'm looking at this diagram: http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP) Does this assume that the "DSL Router" at the top of the drawing has two physical RJ45 ...
2
votes
1answer
2k views

Good, inexpensive 1U pfSense Server Config for 100 Mbps throughput, some IPSec, few VPN

I had asked in another thread about a good 1U firewall. pfSense in combination with a SuperMicro Atom SuperServer was suggested & upvoted a bunch of times. The Atom D525 build with 4 GB RAM runs ...
2
votes
1answer
15k views

How to configure PFSense firewall with external transparent Squid proxy?

I am using PFSense 2.0 and trying to get transparent proxy to work. As the internal Squid won't work with loadbalancing and dual-wan (and it seems Squid doesn't work at all on the latest build), I ...
1
vote
2answers
3k views

pfsense setting up as transparent firewall - dhcp issue

I followed the directions to set up pfsense in bridged / transparent mode per the instructions at http://doc.pfsense.org/index.php/Configuring_pfSense However I can not get a dhcp address from my ...
9
votes
6answers
7k views

monowall vs pfsense

I'm building a router out of a Mini-ITX pc + compact flash card setup and I'm trying to choose a suitable distro. My criteria are: Must be able to run from a CF card (so no excessive disk writes) ...
5
votes
3answers
6k views

How to collect figures of traffic used per-host, broken up by time and destination?

We have a relatively small network, all PSs in one subnet. One PC with two NICs and pfSense installed works as a firewall/router. There is an OpenVPN tunnel to a remote location, created as a ...
3
votes
5answers
2k views

Apache DDoS Protection in router (pFsense) [duplicate]

I'm soon going to change my infrastructure when I buy a new server. I'm going to replace my D-Link DIR-655 router with an pFsense router (and probably use the 655 as an AP) using my old server ...
2
votes
1answer
4k views

Local domain DNS resolution not working using OpenVPN on a pfSense box

I am currently trying to setup an OpenVPN server with the intention of linking several servers together in order to run the backup jobs over the VPN. For this example, this is what I have: A ...
2
votes
1answer
933 views

openvpn: auth-user-pass or (and?) passphrase?

I'm setting up OpenVPN on PfSense 2.0, and now i wonder if should use the "auth-user-pass" option, set an passphrase on the openssl keys or both. Both require an extra password beside of the valid ...
2
votes
2answers
3k views

pfSense: Possible to traffic capture the actual WAN port?

The pfSense router seems to have having problems connecting to the internet. My modem, and my ISP, confirm that i have sync, but at the same time pfSense sometimes just will not connect (using PPPoE). ...
2
votes
2answers
4k views

reverse proxy on PFsense, squid or otherwise

I've been trying to get this to work for days now and its not working. After bashing my head against the desk enough times, I've decided to man up and ask. I'm desperately trying to set up a reverse ...
1
vote
3answers
1k views

Unable to access internal network through PfSense WAN port

Our branch office is unable to connect to our internal network for some reason. However we can connect to the branch office domain controller from behind PfSense. The following is our setup: ...
1
vote
2answers
553 views

once VPNed into pfSense, unable to hit the public URLs of my websites - they are routed to the pfSense box

I have a pfSense box setup as the firewall/router/VPN appliance at my colo. Once I VPN into the colo (either pptp or openvpn, pptp preferred due to multiple clients and ease of configuration), I am ...
1
vote
3answers
1k views

Barebones network appliance, 4+ GbE NICs, Intel chipset [closed]

Looking for a stepped-up ALIX or Soekris embedded network appliance to load pfSense and/or handle other FOSS-based network roles. Main criteria is a GbE NICs (will be used for core ...
0
votes
1answer
295 views

Virtual pfSense Appliance on VMWare Host

I am having some issues setting up the WAN side of pfSense. I have ordered a dedicated box through a hosting service with ESXi loaded on it. Along with that I have 3 public IP addresses that will ...
0
votes
1answer
1k views

Pfsense 2.02 ipsec vpn tunnel goes down randomly

Ipsec vpn tunnels got disconnected randomly but when we restart raccon all tunnel will come up again with out any issue.I would like to know a permanent fix for this. These are the logs: racoon: ...
0
votes
1answer
711 views

PFSENSE Bridge on of the Network Interfaces

I have a PFSENSE installation, which I have just added a new physical interface to for a new requirement 'DIGI'. A third party has installed a DrayTek router on our network which has their equipment ...