pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

learn more… | top users | synonyms

18
votes
6answers
46k views

How can I use HAproxy with SSL and get X-Forwarded-For headers AND tell PHP that SSL is in use?

I have the following setup: (internet) ---> [ pfSense Box ] /-> [ Apache / PHP server ] [running HAproxy] --+--> [ Apache / PHP server ] ...
13
votes
1answer
2k views

What would cause SIP traffic to be seen going into a switch but not coming out?

Background I have been struggling to get my SIP phones to register behind a brand new router and switch in our brand new office. Our PBX is hosted offsite. I have worked with our provider to attempt ...
11
votes
1answer
11k views

Connect to multiple AP with one Wifi adapter under Linux/FreeBSD?

How can I connect to more than one Wifi access point simultaneously using a single wireless adapter? I'm currently using pfSense as my home router and I want it to connect to multiple APs wirelessly. ...
10
votes
6answers
8k views

monowall vs pfsense

I'm building a router out of a Mini-ITX pc + compact flash card setup and I'm trying to choose a suitable distro. My criteria are: Must be able to run from a CF card (so no excessive disk writes) I'...
10
votes
1answer
5k views

How can I get FreeNAS and pfSense to report more using SNMP?

I have two servers which run variants of FreeBSD: One is a pfSense router and one is a FreeNAS 8 server. Both these servers run SNMP, and I am collecting and graphing their information using a third ...
9
votes
3answers
7k views

Is there danger to virtualizing a router?

I had read on a few forums about pfSense that said it was dangerous to virtualize pfSense. The reason that was stated was an attacker could use pfsense as a spring board for an attack on the ...
8
votes
4answers
2k views

OpenBSD/FreeBSD Firewall w/ GUI that is compatible with Intel 82574L Gigabit LAN NICs

I recently purchased a server to run m0n0wall or pfSense but I've learned since then that both of these firewall products are based on versions of FreeBSD which weren't yet compatible with the NICs in ...
8
votes
2answers
1k views

Virtualized pfSense 2.0.1 affecting Hyper-V host connectivity? arp?

The Setup I have setup pfSense 2.0.1 (64bit-amd image) as a host in Hyper-V. As described in other blogs I had to do the “ifconfig down deX”, “ifconfig up deX” to get the network up and running. The ...
8
votes
4answers
962 views

Wireless AAA for a small, bandwidth-limited hotel

We (the tech I work with and myself) live in a remote northern town where Internet access is somewhat of a luxury, and bandwidth is quite limited. Here, overage charges ranging from few hundreds, to ...
7
votes
2answers
5k views

Virtualized firewall under Hyper-V?

We are currently considering installing an instance of pfSense on our Hyper-V R2 based server to act as a content filter, captive portal and general firewall. Although it is usually bad practice to ...
7
votes
2answers
4k views

pfSense Firewall or Linksys/Cisco router for small offices

I'm about to start switching some networks around for multiple small offices. Each office has about 10 to 15 users and 10 to 15 computers. Each office has a spread of generic routers and access points....
7
votes
1answer
3k views

Hurricane Electric Tunnel with Pfsense?

How would I setup a HE net Tunnel to route through PFsense so I can have v6 addresses on my servers? I already have the tunnel setup on their end, but there is no instructions for PFsense.
7
votes
2answers
8k views

Pass through public IP addresses to pfSense

I have a server in my datacenter that has multiple publicly routed IP addresses, and I'm now running ESXi to manage it. Before, I had some VMs running under the host that created a network: inet ...
6
votes
1answer
680 views

pfSense not forwarding DNS to concerned VPS

We are running Xenserver hyper-visor and I created 5 VM and 1VM for pfSense so all VMs are in 172.16.0.0/24 range attached to pfSenese LAN interface. pfSense has two interfaces: LAN (172.16.0.100 as a ...
6
votes
1answer
1k views

Designing segmented LAN with fairly shared hi-speed internet access on a tight budget

With another member of the owners' association, I've been tasked with designing and setting up shared, hi-speed, internet access, for our apartment building. We have very little budget and hope to be ...
6
votes
1answer
18k views

How do I assign a public IP to a machine behind a pfSense box using 1:1 NAT?

This should be dead simple but for the life of me, I can't get it working. I must be doing something stupid. I have a PFsense server with a public IP address. Behind it is three LAN segments: [ ...
6
votes
3answers
8k views

pfsense log file retention

We have a pfSense firewall in our datacentre. By default, pfSense is only storing 500K of firewall filter logs, which is only a few hours for us. How can I increase this? pfSense uses clog rather ...
5
votes
3answers
1k views

*nix CARP or VMWare Fault Tolerance?

We're experimenting with what VMWare called a "Fully Collapsed DMZ" on blade centre. Basically our DMZ goes straight into a vSwitch and all the security appliances are virtualised. I've spent days ...
5
votes
2answers
9k views

Where are pfsense log files?

Where can the pfsense log files be located and viewed? I have searched the documentation and it doesn't indicate the log files location for the various components of pfsense.
5
votes
1answer
9k views

Why is pfSense blocking multicast traffic when it is explicitly enabled?

I have a pair of pfSense firewall/routers set up in CARP/XML Config cluster. On the LAN side, the switch also has a pair of servers running corosync/pacemaker/drbd. These are on a different ip network,...
5
votes
2answers
5k views

public ip resolves externally but not internally

I have a one to one NAT on pfsense that assigns a public IP to an internal IP (running a web server). When I open the public IP from an internal machine, it will not resolve to the internal IP, ...
5
votes
3answers
12k views

How to collect figures of traffic used per-host, broken up by time and destination?

We have a relatively small network, all PSs in one subnet. One PC with two NICs and pfSense installed works as a firewall/router. There is an OpenVPN tunnel to a remote location, created as a site-to-...
5
votes
1answer
77 views

pfSense - IKEv2 with EAP-RADIUS: Any fallback option if the RADIUS server is down?

I'm deploying an IKEv2 VPN authenticating against a RADIUS service within a pfSense 2.3-RELEASE box. But I'm afraid of the complications of this approach when the RADIUS server is down. Since the ...
5
votes
0answers
2k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
5
votes
1answer
921 views

pfsense 2.0 traffic priority - set full priority for single host

I have a network with several computers all on the same network and since I have very limited bandwidth I would like to prioritize traffic almost like a CPU scheduler prioritize processes. Example: ...
5
votes
4answers
3k views

IPv6 LAN to IPv4 with PFsense

Is it possible to setup PFsense to do IPv6 to IPv4? I am setting up an IPv6 LAN for "testing" and also to mess around with and I can't get an IPv6 address from my ISP so I need a way to change IPv6 ...
4
votes
3answers
4k views

Does two pfsense + CARP necessarily require two WAN IP?

I am looking to setup CARP following this guide across two pfSense firewalls. I have setup CARP before on a WAN link with a big IP space, so allocating a distinct WAN IP per each device (as shown in ...
4
votes
2answers
10k views

Can I use pfsense as a DNS server?

If I have a pfsense based firewall in front of my servers, can I use this also for DNS? Thanks
4
votes
2answers
307 views

Internal DNS server provide response to external requests?

I have a pfSense firewall and a Windows 2008 R2 DNS server. I'd really like my DNS server to respond to external queries for my subdomains. Right now, I'm using a 3rd party service for that. Is ...
4
votes
2answers
2k views

NAT Reflection, or Split DNS?

I'm working on a network restructure that has three geographical locations, but will share some services. Two of the locations have workstations, and one has only servers (in a CoLo facility). We will ...
4
votes
1answer
607 views

Running pfSense server after load balancer, dhcp?

I got the following situation: Two wan, load balanced by a hardware load balancing router Wifi network (can be up to twenty AP's) And I need the following: Need a captive portal where clients ...
4
votes
2answers
7k views

Pfsense mbuf full, what to do?

I noticed today that the MBUF usage has hit its limit. Apparently the site I'm running under pfsense is having some troubles too, I'd like to know if it would be safe to just sysctl kern.ipc....
4
votes
4answers
6k views

pfsense 2.0.2 racoon(ipsec vpn) unreliable

I'm having issues with racoon (ipsec VPN) on pFSense 2.0.2 (and 2.0.1). According to racoon all my tunnels are up (I have about 130 of them), but over time more and more of them won't pass traffic ...
4
votes
1answer
3k views

pfSense router on a LAN with two gateways

I have a LAN with an ADSL modem/router on it. We have just gained an alternative high-speed internet connection at our location, and I want to connect the LAN to it, eventually dropping the ADSL. I'...
4
votes
2answers
6k views

How can I track down what part of pfsense is blocking website access?

I've got a PFSense firewall/gateway on our network. Everything works great except for the fact that I cannot access one specific website. Pfsense is running the following packages Country Block ...
4
votes
3answers
1k views

Configuring Pfsense via ssh

I want to know how i can completely configure and add add tables to pfsense via ssh. my goal is to have a web installer that configured multiple system and based on the output it will configure the ...
4
votes
1answer
2k views

pfSense setup recommendations

I want to setup a WAN, DMZ and private LAN. I want to do a Deny ALL and just open the 4-5 ports that I need to DMZ and a Deny all on the private LAN on the DMZ are a web web servers, all have public ...
4
votes
2answers
10k views

Routing between two routers with static routes

I have a Draytek 3200 router and a pfsense rackmount router that I am trying to get to route to each other. I have a subnet on each router and a subnet for the link between, as shown here: As it ...
4
votes
1answer
9k views

Local domain DNS resolution not working using OpenVPN on a pfSense box

I am currently trying to setup an OpenVPN server with the intention of linking several servers together in order to run the backup jobs over the VPN. For this example, this is what I have: A ...
4
votes
1answer
30k views

How do I route between interfaces in PFsense?

I have a PFsense router which divides a single WAN connection into three NAT networks on three interfaces: LAN, OPT1 and OPT2. This allows me to segregate my network so that computers on the OPT1 and ...
4
votes
2answers
4k views

PFSense 2.0 RC 3 - Routing problem with PPTP VPN

I have configured a PPTP VPN on my PFSense 2.0 RC3 router. The internet traffic comes to my modem (10.0.0.0/24) and then through my router (192.168.100.0/24). My PPTP subnet is 192.168.101.0/24. ...
4
votes
0answers
252 views

IPSec bandwidth between two Pfsense hosts has predictable, variable bandwidth

I have a IPSec tunnel between two Pfsense machines. Both machines are connected to a 100mbps symmetrical connection. The latency between the two routers is ~70ms. I'm using AES-GCM-128 and SHA1, both ...
4
votes
0answers
2k views

Troubleshooting Packet Loss on pfSense + Ubiquiti UniFi (Wireshark maybe?)

I'm dealing with an annoying situation in a small network in my church, which I'm the primary volunteer IT caretaker, of about 20 PCs, give-or-take. We're in Chattanooga, home of Gigabit internet, so ...
4
votes
0answers
653 views

Trying to get a new user up on pfSense IPSec VPN; Config file import failed, now getting gateway errors

Caveat: I am not a sysadmin, so please forgive the n00bness of the query. We have a new user and I'm trying to get them up on VPN. We use pfsense as an IPSEC endpoint. This person is using Shrewsoft ...
4
votes
2answers
13k views

Setting up authorative DNS nameserver with PfSense?

I am trying to run point a domain at my pfsense server and have it run a DNS server which is authorative. So I installed TinyDNS. Ok, so I setup a rule in pf. The rule is TCP/UDP. Source interface is ...
3
votes
4answers
5k views

Forefront TMG vs pfSense

We currently run pfSense with no problems, however we are looking at TMG as it is included in our partner subscription to MS and allows Windows 7 DirectConnect features to our domain for off-site ...
3
votes
3answers
4k views

What are the security risks of using pfsense in a virtualised environment?

I am thinking of using pfsense on my ubuntu server box. I'd virtualise pfsense with virtualbox, and have it route and firewall all traffic both on and destined to my server as well as the the rest of ...
3
votes
1answer
14k views

How can I detect a DDoS attack using pfSense so I can tell my ISP who to block? [duplicate]

Last week my network was hit by a DDoS attack which completely saturated our 100 MBps link to the internet and pretty much shut down all the sites and services we host. I understand (from this ...
3
votes
2answers
2k views

Blocking a network device from communicating with another device on the LAN

I have been working with the firewall/router distribution Pfsense for a while now and I have been trying to figure out how to "isolate" a server on my LAN from other computers on my LAN by using deny/...
3
votes
1answer
3k views

How do I configure a second pfSense server for failover?

I have 2 pfSense servers (the new and the old one) which are used as routers, DHCP and DNS servers. I want to configure the old one as a backup of the new one. It means that when all is ok, all the ...