pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

5
votes
0answers
2k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
4
votes
0answers
234 views

IPSec bandwidth between two Pfsense hosts has predictable, variable bandwidth

I have a IPSec tunnel between two Pfsense machines. Both machines are connected to a 100mbps symmetrical connection. The latency between the two routers is ~70ms. I'm using AES-GCM-128 and SHA1, both ...
4
votes
0answers
2k views

Troubleshooting Packet Loss on pfSense + Ubiquiti UniFi (Wireshark maybe?)

I'm dealing with an annoying situation in a small network in my church, which I'm the primary volunteer IT caretaker, of about 20 PCs, give-or-take. We're in Chattanooga, home of Gigabit internet, so ...
4
votes
0answers
653 views

Trying to get a new user up on pfSense IPSec VPN; Config file import failed, now getting gateway errors

Caveat: I am not a sysadmin, so please forgive the n00bness of the query. We have a new user and I'm trying to get them up on VPN. We use pfsense as an IPSEC endpoint. This person is using Shrewsoft ...
3
votes
0answers
198 views

pfSense Internal Traffic Policy Based Routing

What is the current and correct way to apply policy based routing to pfSense internal traffic (originating from the firewall itself)? Creating a floating rule with the WAN interfaces selected, ...
3
votes
0answers
544 views

Redirect network traffic to Proxy with Pfsense

I have a network with 9 clients: 192.168.1.0/24 I need to redirect all traffic from 192.168.1.208 and 192.168.1.209 to an outside proxy server. --------------- |192.168.1.201|--------| --------------...
2
votes
0answers
47 views

SquidGuard holding navigation

This is my first question within ServerFault. So I beg you pardon if the question here is a little out of context or too long. I haven't found anything on the internet so I'm recurring to you. I'm ...
2
votes
0answers
92 views

Blocking pfsense management access in high-availability setup

I have a pfsense setup in a high-availability configuration. There are about 5 separate networks forwhich I would like to block management access to pfsense. There is a destination rule builtin for ...
2
votes
0answers
3k views

How to share bandwidth equitably between 16 users on a pfsense multi-WAN router

I have 16 users connected to my pfSense single-LAN, 3-WAN router. The 3 WAN ports connect to ADSL lines giving about 4Mb/s down, 800kb/s up each. I would like to prevent any one user hogging the ...
2
votes
0answers
772 views

pfsense + haproxy + stunnel as reverse proxy with load balancing and ssl terminaltion

i have this topology as title says with a pfsense with installed haproxy and stunnel. Because i saw that haproxy can't do ssl termination i thought about stunnel. But i don't know how to set up it. My ...
1
vote
0answers
20 views

Can't connect to PFSense webconfig (virtual machine)

I've setup a new PFSense VM (version 2.2.2) in virtualbox, it's connected to three network interfaces, vboxnet6 and vboxnet7 (both host-only adapters) and eth0 (bridged). In this case vboxnet6 is ...
1
vote
0answers
55 views

Get LCD To Work With pfSense

I got a hold of a new firewall and got pfSense installed on it and setup, but after trying for a day I could not get the LCD to show anything after trying multiple drivers and settings. Hope someone ...
1
vote
0answers
31 views

Cannot ping an ip of router

my issue is: r1 ping r4(em0) will lost the first packet r2 ping r3(em0) will lost the first packet too r3 cannot ping r2(eth0) r4 cannot ping r1(eth0) there are 4 routers, and connected with ...
1
vote
0answers
105 views

OpenVPN on pfSense: CRL verify fails with PKI depth 2

I've create a site-to-site OpenVPN structure on pfsense 2.2 using the built in certificate manager and the following: There is a root CA and an intermediate CA from which the server and client certs ...
1
vote
0answers
352 views

certificate issue in squid3 on pfsense

I am using pfsense latest version and installed squid3 with Transparent HTTP Proxy and HTTPS/SSL interception with squidguard but many site are not open and getting below errors. (54) Connection ...
1
vote
0answers
153 views

Routing public IP addresses to customers in a WISP setup

We have a fibre leaseline with a /29 range for our pfSense WAN port 61.179.145.40/29 So the WAN of our pfSense box is 61.179.145.42 with a gateway of 61.179.145.41. Our ISP has also routed 61.179....
1
vote
0answers
512 views

PFSENSE - Squid - Transparent Mode not working correctly

I am having this weird problem with squid (both squid and squid 3). After installing, i forwarded all my traffic from mikrotik in port 3128 but the requests seemed to fail. After researching I noticed ...
1
vote
0answers
53 views

Connect pfsense and VPC in AWS by ipsec tunnel

I'm trying to connect my pfsense box with AWS VPC by ipsec tunnel. I read couple of tutorials and all looks good. But ... Yes, always there is some but. When only one person is working then all is ...
1
vote
0answers
166 views

Disabling bypass mode on Intel NICs

I'm trying to install PFSense on some decommissioned firewall gear. I've installed PFSense just fine, except for the two NICs are stuck in bypass mode. I don't see any options in the BIOS to edit ...
1
vote
0answers
109 views

PFSense NATing to a load balanced server

I apologize for not being able to post the network diagram here but as this is my first time asking a question here I am not allowed. So here is the scenario: We have a site that is build with a ...
1
vote
0answers
106 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it (...
1
vote
0answers
31 views

Summary Error Configuring HAProxy via pfSense

I configured a frontend record that is refering to a backend server pool with one record. The referred HAProxy Backend server pool contains a single record with the Max con value set to 2000. In the ...
1
vote
0answers
460 views

pfSense 2.2: HAProxy for HTTP + CARP + MultiWAN with VIPs issue (Outbound NAT?)

I have two pfSense firewalls with CARP setup, 2 WANs and HAProxy that points to HTTP servers in my LAN. Scheme: **pfSense server #1** ISP#1 - Public IP1.1 - pfSense#1 with HAProxy - HTTP ISP#2 - ...
1
vote
0answers
4k views

ntopng: Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec]

I am exploring ntopng reports on my router and seeing, that one computer on my LAN is a flooder. ntopng says Host XXX.XXX.XXX.XXX is a flooder [NNN new flows in the last 3 sec] How to explore these ...
1
vote
0answers
343 views

How Do I get unbound to only use DNSSEC?

I have a pfsense box, that I am in the process of configuring for the first time I would like to use DNSSEC. I used this site to check my DNSSEC status. When I go to this site I am told that my "...
1
vote
0answers
2k views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
1
vote
0answers
471 views

PfSense IPSec VPN client

I am new in PfSense I have configured site to site VPN and it works fine, "Site A" ( PfSense) and "Site B" ( SonicWall) both can access each other LAN network. Now i have also configured IPSec Mobile ...
1
vote
0answers
551 views

pfSense: Captive portal auth via Active Directory (2003)

I'm trying to set up a new firewall server. We chose pfSense and it's working nicely so far. We managed to our Windows Server 2003 Active Directory as a user Authentication Server (System -> User ...
1
vote
0answers
8k views

pfSense no access from lan to wan

Can anyone please help me ? Probably the answer is already somewhere in the forum, but unfortunately I have not found it until now. Since two days I fight to have access to the internet across a ...
1
vote
0answers
308 views

pfSense + Squid, Windows 2008 DHCP

I recently installed pfSense and Squid3-dev on a spare machine. It is now connected to the network and Internet is working alright. The problem is that I can't get my users to go through Squid proxy ...
1
vote
0answers
2k views

pfsense Captive Portal redirect to <ip>:8000/$PORTAL_ACTION$

Something is wrong when I try to replace the portal login page with a customized one. After the sign in button is clicked, I was redirected to: (server IP):8000/$PORTAL_ACTION$. What is this $...
1
vote
0answers
427 views

Multiple network routing

I am after some advice on how to achieve multiple independent LANs, that can restrictively talk to each other (at minimal cost). I have 3 LANS LAN A - Admin Lan - Multiple servers and workstations, ...
1
vote
0answers
898 views

PFSense VLAN's - clients cant access devices on a defined VLAN

I'm having an issue setting up pfSense with VLAN's, basically, the pfSense boxes can ping the devices on the tagged vlan, but clients routing through pfSense cannot. There are two Cisco SG500 ...
1
vote
0answers
2k views

How to enable source-based policy routing with pfsense

I'm trying to setup pfsense to use WAN1 for all LAN traffic except when a computer has been added to an alias I labeled "PRIORITY". Those computers use WAN2. On the firewall rules, I set a LAN rule ...
1
vote
0answers
7k views

pfSense IPsec VPN setup (Log error: racoon: INFO: unsupported PF_KEY message REGISTER)

Good morning, I'm trying to setup an IPSec Tunnel on a pfSense firewall. I have 2 interfaces configured: WAN (public firewall IP: .../31) LAN (internal static IPs: 192.168.104.0/29) I set up the ...
1
vote
0answers
776 views

need help to setup internet load-balancing for a small ISP

I need some help about the following problems: I want to do load-balancing for two Internet dsl connection from same isp and same speed I need to manage fail over also I want to manage up to 50 user ...
1
vote
0answers
2k views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
1
vote
0answers
802 views

Nginx+Pfsense+IIS+NLB: upstream timed out (110: Connection timed out)

We have an Nginx Reverse Proxy (RP) bound to one IP, that load-balances/fails-over to two IPs that are located roughly 140ms away, by network time. Each of these upstream IPs are on different ISPs, ...
0
votes
0answers
13 views

How to give VMs access to the internet in an OVH server?

I have a SoYouStart server which is from OVH. I installed proxmox on it and I can access proxmox and use proxmox to access the web just fine. Any VM I install however can't access the wider internet ...
0
votes
0answers
40 views

pfsense inter vlan slow speed

In our company we use pfsesne 2.3 as a router. Problem is with inter-vlan transfer, which is very slow about 150kbit/s in both ways. Its very strange , network is 1GB , transfers inside vlan's are god ...
0
votes
0answers
12 views

Turn-key VPN setup to make server behind firewall accessible

I am looking to a solution for a following problem - on a location A, I am allowed to use as much bandwidth as required, with the caveat that I am constantly behind a firewall without a public IP ...
0
votes
0answers
48 views

Most Secure Way To Setup Virtualized pfSense Gateway

I currently have a pfSense router and am interested in virtualizing it because of the plethora of benefits of virtualization. I am interested in doing this in the most secure way possible and have ...
0
votes
0answers
72 views

How can VM and Docker bridge traffic be routed through a pfSense VM?

I think this question is a result of me not being able to wrap my head around Docker networking and not being super great at Slackware. It seems like there should be a simple solution; I'm just ...
0
votes
0answers
48 views

PFsense 2.2.6 static dhcp hostname blank

We are on pfsense 2.2.6 and we enable static dhcp for each mac address on each VLAN where dhcp is enable. DHCP is working good but when I enable static dhcp and leave the hostname empty and when I ...
0
votes
0answers
52 views

FreebSD 10.1 x64 KLDLOAD UCOM and UTDFI

Using a freebsd 10.1 x64 system. I am trying to get an LCD working and need to load UCOM.ko and UTDFI.ko. When I try to load them I get unsupported file type. I took them off another freebsd 10.1 x64 ...
0
votes
0answers
76 views

It is possible to use not NAT able VoIP Softswitch behind pfsense/siproxd

We are using diffrent VoIP Softswitches (asterisk/squire) behind a pfsense Firewall and connect to diffrent SIP Endpoints. The local softswitches only have a local IP and the Endpoints are public IPs. ...
0
votes
0answers
54 views

solutions to filter traffic with group based rules

I have a 25 computer network with 1 pfsense box (with squid installed) and 1 openLDAP server configured & working , 70% of the network is wired the rest is password protected wireless. Right now ...
0
votes
0answers
33 views

Unequal gigabit speed client-server

I'm testing my internal home network using iperf3. iperf3.exe -c router -i 1 -t 20 -w384k I have a gigabit switch and all computers have gigabit network cards and, theoretically, all cables are in ...
0
votes
0answers
35 views

Routing multiple LAN-s in OpenVPN

I have the following network scenario: PC0 in network 172.16.0.0 that is connected to RouterA RouterA as a Server is connected to RouterB as a Client via OpenVPN (I have 19 Clients that are ...
0
votes
0answers
62 views

pfSense Killing Uploads to Any Wordpress Site

I am running a pfSense firewall on version 2.2.6. As far as I remember I have had working rules and have not had any issues uploading to my wordpress sites until this last upgrade. If I try to upload ...