Questions tagged [pfsense]
pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.
306
questions with no upvoted or accepted answers
6
votes
0
answers
1k
views
pfSense Internal Traffic Policy Based Routing
What is the current and correct way to apply policy based routing to pfSense internal traffic (originating from the firewall itself)? Creating a floating rule with the WAN interfaces selected, ...
5
votes
2
answers
1k
views
pfSense - IKEv2 with EAP-RADIUS: Any fallback option if the RADIUS server is down?
I'm deploying an IKEv2 VPN authenticating against a RADIUS service within a pfSense 2.3-RELEASE box. But I'm afraid of the complications of this approach when the RADIUS server is down.
Since the ...
5
votes
1
answer
5k
views
pfsense bridge of vlan interfaces
Hardware Setup
AMD E1-2100 Mini-ITX Motherboard with Onboard Gigabit (re0)
Intel PCI Express (x4) 4-port Gigabit Adapter (igb[0123])
Software Setup
pfSense v2.3
I'm trying to replicate my OpenWRT ...
5
votes
0
answers
1k
views
IPSec bandwidth between two Pfsense hosts has predictable, variable bandwidth
I have a IPSec tunnel between two Pfsense machines. Both machines are connected to a 100mbps symmetrical connection. The latency between the two routers is ~70ms. I'm using AES-GCM-128 and SHA1, both ...
5
votes
1
answer
2k
views
pfsense 2.0 traffic priority - set full priority for single host
I have a network with several computers all on the same network and since I have very limited bandwidth I would like to prioritize traffic almost like a CPU scheduler prioritize processes.
Example:
...
4
votes
0
answers
5k
views
Troubleshooting Packet Loss on pfSense + Ubiquiti UniFi (Wireshark maybe?)
I'm dealing with an annoying situation in a small network in my church, which I'm the primary volunteer IT caretaker, of about 20 PCs, give-or-take.
We're in Chattanooga, home of Gigabit internet, so ...
4
votes
0
answers
695
views
Trying to get a new user up on pfSense IPSec VPN; Config file import failed, now getting gateway errors
Caveat: I am not a sysadmin, so please forgive the n00bness of the query. We have a new user and I'm trying to get them up on VPN. We use pfsense as an IPSEC endpoint. This person is using Shrewsoft ...
3
votes
0
answers
570
views
Need help configuring BIND on Pfsense as an authoritative DNS Server
For a few weeks now I've tried configuring BIND Server on my Pfsense Router as an authoritative DNS Server.
I own a domain bought from RoTLD, I've set my nameservers to my external static ip, and they ...
3
votes
0
answers
3k
views
Transparent Tor Proxy with pfSense
I'm trying to set up a transparent Tor proxy in Virtualbox using pfSense.
In the end I want all traffic to be passed through Tor, whenever I connect a VM to the same internal network as the proxy.
I ...
3
votes
0
answers
664
views
PFSense IPv4 TCP/UDP connections from LAN not connecting
I have a PFSense firewall sitting as a gateway for a group of VM's sitting on top of a Xen hypervisor (all machines except for the host are virtual). I have PFSense acting as a waypoint for me to be ...
3
votes
1
answer
3k
views
Redirect network traffic to Proxy with Pfsense
I have a network with 9 clients: 192.168.1.0/24
I need to redirect all traffic from 192.168.1.208 and 192.168.1.209 to an outside proxy server.
---------------
|192.168.1.201|--------|
--------------...
3
votes
1
answer
4k
views
site to site vpn between sonicwall and pfsense
The problem i am facing is establishment of a site to site VPN in between pfSense( version 2.0.1) and SonicWall Pro2040 Enhanced ( Firmware Version: SonicOS Enhanced 4.2.1.4-7e) .
All of the ...
3
votes
0
answers
3k
views
Redundant Firewalls And Switches HSRP and CARP
I currently have planned
2 x uplinks (HSRP Active/Standby)
2 x pfsense firewalls (Carp Enabled)
2 x layer2 switches
Please criticize or offer help on the correct way to do this.
I have a feeling im ...
3
votes
1
answer
7k
views
Use Framed-IP-Address RADIUS attribute for IP allocation with DHCP on Windows Server 2012R2
I have configured a DHCP server on Windows Server with an NPS Policy, connected to a FreeRADIUS2 server running on pfSense.
Authentication is based on MAC address. If MAC address is not present in ...
3
votes
3
answers
9k
views
Pfsense OpenVPN Site to Site Routing issues
I know this question has been asked a plethora of times before and I have looked over probably 100 different answers and still can't seem to get this to work.
I'm trying to create a very simple site ...
2
votes
1
answer
522
views
Why does my pfsense gateway break SSL for some internal hosts?
I have a proxmox cluster with pfsense acting as a firewall and gateway for the cluster nodes and VMs. VMs have no problem, but the cluster nodes can't browse any websites using SSL, which of course ...
2
votes
1
answer
656
views
OVH IPv6 on ESXi -> pfSense -> VM setup
Currently setting up some VMs on an ESXi host on an OVH machine. I have two IPv4s on OVH including a virtual MAC address as needed by OVH. One IPv4 for the ESXi host itself, another one for the ...
2
votes
1
answer
2k
views
Expose Kubernetes cluster behind a pfSense
I installed a Kubernetes cluster on a Bare-metal sever.
This server contains a Proxmox hypervisor, I have the following virtual machines
a pfSense (192.168.9.254)
two masters for the Kubernetes ...
2
votes
0
answers
975
views
pfSense: config with daloRadius (freeRadius) to setup download quota limitation
I have pfsense and daloRadius(running freeRadius inside) up and running, I successfully configured radius parameters on pfSense and the NAS on daloRadius and they can talk to each other.
I am able to ...
2
votes
0
answers
5k
views
Dig +trace not working, while +notrace works
I am trying to troubleshoot some DNS issues and I am starting by trying to trace my DNS lookups using dig +trace. Im getting some weird results. If do a normal dig to my unbound resolver.
dig @192....
2
votes
1
answer
9k
views
pfSense - NAT not working
I have a pfSense on Proxmox VM. I have two IP addreses configured:
WAN: xx.xx.88.24 -> public IP accesible from internet
LAN: 192.168.1.100 -> corporate intranet
I want to access an internal ...
2
votes
0
answers
2k
views
Reverse proxy on pfSense 2.1.5 with Squid
I installed Squid on my pfSense and I am trying to reach 192.168.1.41 when the request is for sub1.dom.it, and I am trying to reach 192.168.1.42 when the request is for sub2.dom.it.
I used to have ...
2
votes
0
answers
2k
views
What are the pros and cons of using PfSense DNS Forwarder or Resolver?
I am looking for a clean set of pros and cons for two mutually exclusive DNS configurations for pfsense router: Forwarder and Resolver.
The configuration that I have in mind is a complex home-office ...
2
votes
0
answers
844
views
IKEv2 with EAP-MSCHAPv2 with static IP for each client
I've successfully created an IKEv2 with EAP-MSCHAPv2 VPN for Windows 10 clients using PFSense. This is the link that I followed for doing so: https://doc.pfsense.org/index.php/IKEv2_with_EAP-MSCHAPv2
...
2
votes
1
answer
2k
views
pfSense and ESXI WAN
I have a dedicated server which came with ESXI 6.5 pre-installed. There is just one IP dedicated to this, the management IP: 62.121.90.xx/27 from where I can log to ESXI. This instance had just one ...
2
votes
0
answers
2k
views
NAT Port Forward to VCSA Web Client not working
tldr; VCSA won't load upon external NAT port forward connection.
I am trying to login to the vSphere Web Client (VCSA web client) from an external IP address. I have a functioning NAT port forward ...
2
votes
1
answer
1k
views
Firewall aliases mapped on DNS entries in pfsense
Is there a way, in PfSense, to add aliases to the firewall, based on hostnames registered in the DNS server?
What I want to achieve is to setup a port forwarding rule, using pure NAT, to PC1.example....
2
votes
0
answers
819
views
PFSense wildcard records for local hosts
PFSense 2.3.2-RELEASE-p1
I have a local server running Apache. www.office.lan resolves to this server's IP.
I want to run multiple virtual hosts, each accessible by a unique subdomain, for example:
...
2
votes
1
answer
2k
views
Can't connect to PFSense webconfig (virtual machine)
I've setup a new PFSense VM (version 2.2.2) in virtualbox, it's connected to three network interfaces, vboxnet6 and vboxnet7 (both host-only adapters) and eth0 (bridged).
In this case vboxnet6 is ...
2
votes
1
answer
4k
views
Can't connect to Ubuntu server on LAN from pfSense VPN
Quick summary
pfSense server is connected to the WAN and LAN. This box also has an OpenVPN server running.
The LAN clients use 192.168.20.0/24
OpenVPN clients use 192.168.30.0/24
On the LAN I have ...
2
votes
0
answers
243
views
SquidGuard holding navigation
This is my first question within ServerFault. So I beg you pardon if the question here is a little out of context or too long. I haven't found anything on the internet so I'm recurring to you.
I'm ...
2
votes
0
answers
1k
views
Routing public IP addresses to customers in a WISP setup
We have a fibre leaseline with a /29 range for our pfSense WAN port
61.179.145.40/29
So the WAN of our pfSense box is 61.179.145.42 with a gateway of 61.179.145.41.
Our ISP has also routed 61.179....
2
votes
0
answers
135
views
Blocking pfsense management access in high-availability setup
I have a pfsense setup in a high-availability configuration. There are about 5 separate networks forwhich I would like to block management access to pfsense. There is a destination rule builtin for ...
2
votes
0
answers
5k
views
How to share bandwidth equitably between 16 users on a pfsense multi-WAN router
I have 16 users connected to my pfSense single-LAN, 3-WAN router.
The 3 WAN ports connect to ADSL lines giving about 4Mb/s down, 800kb/s up each.
I would like to prevent any one user hogging the ...
2
votes
0
answers
9k
views
pfSense IPsec VPN setup (Log error: racoon: INFO: unsupported PF_KEY message REGISTER)
Good morning,
I'm trying to setup an IPSec Tunnel on a pfSense firewall.
I have 2 interfaces configured:
WAN (public firewall IP: .../31)
LAN (internal static IPs: 192.168.104.0/29)
I set up the ...
2
votes
0
answers
1k
views
pfsense + haproxy + stunnel as reverse proxy with load balancing and ssl terminaltion
i have this topology as title says with a pfsense with installed haproxy and stunnel. Because i saw that haproxy can't do ssl termination i thought about stunnel. But i don't know how to set up it. My ...
2
votes
1
answer
4k
views
Azure S2S VPN: Egress Packets Dropped due to Traffic Selector Mismatch
I have set up a S2S VPN in Azure to connect to an on-prem device (PfSense) of a 3rd Party.
We have managed to establish the VPN tunnel, and I can see the status of the connection in the Azure Portal ...
1
vote
0
answers
496
views
deploying pfSense in OVH public cloud as a DHCP server in HA
I am trying to deploy two pfSense in the OVH public cloud (OpenStack).
Each has its own public IPs and public connectivity works without any problem.
Things become more complicated on the vRack part (...
1
vote
0
answers
33
views
pfsense device freeze at a time load balancing airtel works fine
We have 2 lease lines Tata and Airtel. Primary is Tata & Sec is Airtel If Tata down pfsense device freezes at a time load balancing airtel works fine but has been 192.168.1.1 not working.Anybody ...
1
vote
1
answer
1k
views
Installing pfsense 2.5.2 ( freebsd 12 ) in KVM
Seems that I am having an issue installing pfsense firewall which is build on freeBSD12 into a qemu/kvm in Ubuntu.
When it starts to boot, prior to the 'Install Box' I get a kernal panic Image of fail ...
1
vote
0
answers
769
views
Pfsense upstream gateway how it works?
I have 2 pfsense firewall setup in my office with 2 ISP, the primary firewall is connected to both ISP-1 AND ISP-2 and the secondary firewall that has OpenVPN setup is only connected to ISP-2. now ...
1
vote
1
answer
2k
views
pfSense NAT to server in a second LAN subnet behind an internal second router (not working)
I have a pfSense firewall/router that is exposing some services to my public ip.
This is working fine, as long as the service is on the primary LAN subnet (192.168.1.0/24), let's call it LAN-A.
E.g. ...
1
vote
0
answers
646
views
pfsense NAT DNS to different LAN IPs
I have a pfsense firewall, and I need to NAT connection on WAN port 80 to LAN servers.
Ex:
server1.mydomain.com to 192.168.100.200
server2.mydomain.com to 192.168.100.201
I have no idea how to do that....
1
vote
0
answers
4k
views
Why do we lose IPSec connections and can't re-establish them?
We have tens of IPSec connections between our office and customer sites. At the office we use pfSense V2.4.5 as VPN gateway and placing Ubiquiti Edgerouter X devices with the latest firmware on the ...
1
vote
2
answers
1k
views
pfSense IPv6 routing issues
I'm struggeling to get my pfSense appliance to route the IPv6 traffic from LAN to WAN.
My public network is AA:BB:CC:/48 with the provider's router having AA:BB:CC::FF01:1001
Assigning the WAN ...
1
vote
1
answer
341
views
Danger of leaked PSK (password) in IPsec tunnel
Let us say I have a IPSEC tunnel between a Pfsense firewall and a Cisco firewall. In the Pfsense panel, when configuring a Site-to-site VPN between them, there is a PSK which is common in both ends, ...
1
vote
2
answers
5k
views
Offloading PPPoE from an OPNsense router
I'm running opnSense, a FreeBSD-based firewall and router similar to pfSense, in a virtual machine under VMware ESXi 7 on a Dell PowerEdge R230, as a router for my home network. No other VMs are ...
1
vote
0
answers
957
views
IPSec tunnel with pfSense networking issues
I'm having networking issues with a pfSense appliance launched from AWS market place. The network looks something like this:
We connect to our customer checkpoint appliance. They require that we ...
1
vote
0
answers
90
views
How can I configure outer and inner PFSense boxes to allow specific traffic to pass, and so devices can ping each other?
I have the following infrastructure currently set up, with colors for what I would like to achieve:
The outer pfsense (EDGE) is currently providing a DMZ to the public and OpenVPN to our road ...
1
vote
0
answers
452
views
pfSense: unable to configure 1:1 NAT to a remote IPSec
I'm having a hard time figuring out how to configure 1:1 NAT between my local LAN and a remote subnet connected through IPSec.
I have a fresh install of pfSense-2.4.5p1, with a public IPv4 on WAN and ...