pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

2
votes
1answer
795 views

PFSense with multi WAN failover

I have two Linux box running PFsense, one of them is a master and the other one is a backup. The master is having IP 192.168.1.2 and backup is having IP 192.168.1.3. I have created a VIP 192.168.1.1 ...
2
votes
1answer
879 views

WLAN card as LAN interface?

I have a system with 2 network adapters: a wifi card (atheros) and an ethernet card. Both network adapters are recognized by pfsense 2.1 without problems, but I don't know how to configure it: I ...
2
votes
1answer
3k views

Routing between two routers with static routes

I have a Draytek 3200 router and a pfsense rackmount router that I am trying to get to route to each other. I have a subnet on each router and a subnet for the link between, as shown here: As it ...
1
vote
1answer
15 views

Configuring Pfsense via ssh

I want to know how i can completely configure and add add tables to pfsense via ssh. my goal is to have a web installer that configured multiple system and based on the output it will configure the ...
7
votes
0answers
971 views

Virtualized pfSense 2.0.1 affecting Hyper-V host connectivity? arp?

The Setup I have setup pfSense 2.0.1 (64bit-amd image) as a host in Hyper-V. As described in other blogs I had to do the “ifconfig down deX”, “ifconfig up deX” to get the network up and running. The ...
3
votes
0answers
132 views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
3
votes
0answers
811 views

pfsense 2.0 traffic priority - set full priority for single host

I have a network with several computers all on the same network and since I have very limited bandwidth I would like to prioritize traffic almost like a CPU scheduler prioritize processes. Example: ...
3
votes
0answers
637 views

Trying to get a new user up on pfSense IPSec VPN; Config file import failed, now getting gateway errors

Caveat: I am not a sysadmin, so please forgive the n00bness of the query. We have a new user and I'm trying to get them up on VPN. We use pfsense as an IPSEC endpoint. This person is using Shrewsoft ...
2
votes
0answers
330 views

Troubleshooting Packet Loss on pfSense + Ubiquiti UniFi (Wireshark maybe?)

I'm dealing with an annoying situation in a small network in my church, which I'm the primary volunteer IT caretaker, of about 20 PCs, give-or-take. We're in Chattanooga, home of Gigabit internet, so ...
2
votes
0answers
2k views

How to share bandwidth equitably between 16 users on a pfsense multi-WAN router

I have 16 users connected to my pfSense single-LAN, 3-WAN router. The 3 WAN ports connect to ADSL lines giving about 4Mb/s down, 800kb/s up each. I would like to prevent any one user hogging the ...
1
vote
0answers
17 views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
1
vote
0answers
22 views

pfSense Outbound NAT not working

I have a VMware vSphere Hypervisor with several Hadoop VMs running. Since our support activated Port Security on our router, only two MACs are allowed to be connected to one port of the router. This ...
1
vote
0answers
50 views

How to make the virtual IP on LAN interface become Master on the only pfSense node with a working/connected WAN interface?

I'm trying to build a multi Wan configuration with High Availability (CARP) functionality. Currently the setup is on virtual machines (before it's released to production). It is on vmware Fusion with ...
1
vote
0answers
36 views

Pfsense Openpvn and Vmware issue

Here is my network: Client --- WAN --- PfSense(VMWare) --- LAN --- vSwitch (Promiscuous) \--- ESXi Management (192.168.2.1) ...
1
vote
0answers
209 views

pfSense: Captive portal auth via Active Directory (2003)

I'm trying to set up a new firewall server. We chose pfSense and it's working nicely so far. We managed to our Windows Server 2003 Active Directory as a user Authentication Server (System -> User ...
1
vote
0answers
415 views

Pfsense OpenVPN Site to Site Routing issues

I know this question has been asked a plethora of times before and I have looked over probably 100 different answers and still cant seem to get this to work. Im trying to create a very simple site to ...
1
vote
0answers
3k views

pfSense no access from lan to wan

Can anyone please help me ? Probably the answer is already somewhere in the forum, but unfortunately I have not found it until now. Since two days I fight to have access to the internet across a ...
1
vote
0answers
169 views

pfSense + Squid, Windows 2008 DHCP

I recently installed pfSense and Squid3-dev on a spare machine. It is now connected to the network and Internet is working alright. The problem is that I can't get my users to go through Squid proxy ...
1
vote
0answers
939 views

pfsense Captive Portal redirect to <ip>:8000/$PORTAL_ACTION$

Something is wrong when I try to replace the portal login page with a customized one. After the sign in button is clicked, I was redirected to: (server IP):8000/$PORTAL_ACTION$. What is this ...
1
vote
0answers
728 views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
1
vote
0answers
246 views

Multiple network routing

I am after some advice on how to achieve multiple independent LANs, that can restrictively talk to each other (at minimal cost). I have 3 LANS LAN A - Admin Lan - Multiple servers and workstations, ...
1
vote
0answers
701 views

PFSense VLAN's - clients cant access devices on a defined VLAN

I'm having an issue setting up pfSense with VLAN's, basically, the pfSense boxes can ping the devices on the tagged vlan, but clients routing through pfSense cannot. There are two Cisco SG500 ...
1
vote
0answers
1k views

How to enable source-based policy routing with pfsense

I'm trying to setup pfsense to use WAN1 for all LAN traffic except when a computer has been added to an alias I labeled "PRIORITY". Those computers use WAN2. On the firewall rules, I set a LAN rule ...
1
vote
0answers
5k views

pfSense IPsec VPN setup (Log error: racoon: INFO: unsupported PF_KEY message REGISTER)

Good morning, I'm trying to setup an IPSec Tunnel on a pfSense firewall. I have 2 interfaces configured: WAN (public firewall IP: .../31) LAN (internal static IPs: 192.168.104.0/29) I set up the ...
1
vote
0answers
521 views

pfsense + haproxy + stunnel as reverse proxy with load balancing and ssl terminaltion

i have this topology as title says with a pfsense with installed haproxy and stunnel. Because i saw that haproxy can't do ssl termination i thought about stunnel. But i don't know how to set up it. My ...
1
vote
0answers
540 views

need help to setup internet load-balancing for a small ISP

I need some help about the following problems: I want to do load-balancing for two Internet dsl connection from same isp and same speed I need to manage fail over also I want to manage up to 50 user ...
1
vote
0answers
1k views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
1
vote
0answers
639 views

Nginx+Pfsense+IIS+NLB: upstream timed out (110: Connection timed out)

We have an Nginx Reverse Proxy (RP) bound to one IP, that load-balances/fails-over to two IPs that are located roughly 140ms away, by network time. Each of these upstream IPs are on different ISPs, ...
0
votes
0answers
21 views

How Do I get unbound to only use DNSSEC?

I have a pfsense box, that I am in the process of configuring for the first time I would like to use DNSSEC. I used this site to check my DNSSEC status. When I go to this site I am told that my ...
0
votes
0answers
17 views

Using reverse proxy on pfsense

Excuse for my english, it's not my language. I would like to know how can i use pfsense in reverse proxy mode? I have three computers: First PC: PFsense Second PC: a webserver (apache) Third PC: ...
0
votes
0answers
22 views

Access pfSense reverse proxy sites from LAN

I've configured multiple webservers inside the reverse proxy package to redirect to a single servers, but on different ports. app1.mysite.com -> app.mysite.local:8000 app2.mysite.com -> ...
0
votes
0answers
67 views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
0
votes
0answers
84 views

pfSense: Captive Portal is extremely slow

I migrated my pfSense firewall (2.0.2) from an old computer to a more powerful server. I set up the newest pfSense version 2.1 and migrated via export and import my complete settings. Now I encounter ...
0
votes
0answers
92 views

PfSense IPSec VPN client

I am new in PfSense I have configured site to site VPN and it works fine, "Site A" ( PfSense) and "Site B" ( SonicWall) both can access each other LAN network. Now i have also configured IPSec Mobile ...
0
votes
0answers
195 views

pfSense OpenVPN Routing to Sever LAN

I'm trying to get my OpenVPN server to route traffic from clients to the server's LAN. My setup is as follows: pfSense box at 10.1.1.1 Other servers on the LAN at 10.1.10.0/24 (with DNS server at ...
0
votes
0answers
190 views

pfsense access openvpn client´s lan

I want to cover the following case: pfsense server´s LAN: 10.1.0.0/24 openvpn client network: 10.2.0.0/24 Local network of one openvpn client: 192.168.2.0/24 Working: Access the network ...
0
votes
0answers
177 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
0
votes
0answers
880 views

pfsense reverse proxy + HTTPS/SSL interception

I have pfSense 2.1.5 and squid3-dev 3.3.10 configured as reverse proxy for internal http web server and server proxy (port 3128).It works. Activating HTTPS/SSL interception (Enable SSL filtering) on ...
0
votes
0answers
61 views

pfsense: break gmirror raid 1 before upgrading

I have a pfsense firewall in an appliance. The disk is using gmirror with RAID 1 setup. Before this, whenever I want to do OS upgrade, I will shut down the appliance, remove it from server rack, open ...
0
votes
0answers
386 views

site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops

I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode. I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at ...
0
votes
0answers
342 views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
0answers
151 views

Windows 2008 / 2003 DC can not ping gateway or internet

Im doing some tests trying to setup a domain and i found a very weird behavior. Same thing on windows 2008 r2 and windows 2003 x64 r2. I am running on KVM over proxmox virtualized with virtio. After ...
0
votes
0answers
230 views

pfSense LAN network unable to communicate with remote network on OpenVPN TAP connection

I set up pfSense to connect to a remote network (192.168.122.0/24) that only accepts tap connections. The connection is being initiated successfully. pfSense (192.168.1.1/24) itself can connect to ...
0
votes
0answers
309 views

Shutdown Script using “plink” on Windows Server 2k8

I have a pfsense machine which I am trying to shutdown when the main server running Win2k8 is shutdown. I have created a batch file with this command: E:\plink\plink -ssh -P 22 -pw mypassword ...
0
votes
0answers
510 views

pfSense NAT routing using VLANs

We already have pfSense installed and it is working for our single IP address on 1.1.1.1. We also have a further 3 ip addresses (1.1.1.2, 1.1.1.3, 1.1.1.4) which are set up as VLANs on the WAN ...
0
votes
0answers
681 views

Pfsense PPTP VPN Error 806

I was previously using another firewall software and simply by port forwarding port 1723 from the ADSL interface to a Windows Server attached to the LAN, we were able to VPN in. Since switching to ...
0
votes
0answers
127 views

Force all traffic through VPN

I am using PfSense as a firewall, with its VPN functionality. The client I use is Shrew Soft VPN client. As it is a split tunnel, is there a way I can force all traffic through the VPN connection, ...
0
votes
0answers
154 views

How to import users (openvpn) into PFsense

I have a OpenVPN setup from an barebone server with ~60 users, and searching for a way to import those users with certificates into a new PFsense setup. They don't have passwords, because we use ldap ...
0
votes
0answers
523 views

pfSense cannot access some web sites

Been using pfSense as my office gateway for a week now. It's works great, but only one wierd thing. Somehow I cannot access some web sites. At first I though it's was a web site itself, so I connect ...
-1
votes
0answers
23 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...