2,248 reputation
510
bio website chrisbuechler.com
location Austin, TX
age
visits member for 5 years, 7 months
seen Mar 28 at 23:06

Co-founder of pfSense open source firewall distro, and ESF, the business behind the project.


Mar
24
comment pfSense/strongSwan “deleting half open IKE_SA after timeout” - IPSec connection Android 4.4 to pfSense 2.2.1 fails
That is the root problem. It's only an issue with aggressive mode + PSK. Changing to RSA instead of PSK is the best solution.
Jan
29
awarded  Nice Answer
Jan
16
comment Using Free/Open BSD + pf as a DDoS filter
It's absolutely true. It's 4 years later so things are a little diff today, but still today finding a firewall that'll handle line rate multi-Gb at 64 byte frames is difficult to impossible depending on what options you want to or can afford to consider. It's much more practical to find something that'll do 1 Gb line rate with 64 byte frames today than it was in 2011. Just multiply that 1 Gb a few times to take into account the years, and it's still true today.
Dec
14
answered pfSense: How to add a second WAN subnet for dummies
Sep
24
awarded  Autobiographer
Sep
3
awarded  Yearling
Aug
16
comment How to setup pfSense with multiple public IP's
Policy route is any firewall rule that specifies a gateway.
Aug
7
answered How to setup pfSense with multiple public IP's
Jul
26
comment pfSense failover and OpenVPN site-to-site
The "interface" box determines what IP is bound, that's where you pick the CARP IP. Trust me...I only founded pfSense and literally wrote the book on it.
Jul
26
comment pfsense long ping to google
Better to have a local cache with the DNS forwarder, and its behavior of querying all configured servers simultaneously taking the fastest response, rather than clients waiting for a timeout, moving to another server, rinse and repeat.
Jul
24
comment pfSense dropping gateway interface randomly
Where you can set it as static, that's always preferable. Not because there's any problem inherent in doing DHCP generally speaking, but there are cases with some cable modems for instance in the "modem assigns you a private IP" scenario I mentioned where a static WAN might mask that kind of problem.
Jul
24
comment IPSec L2L Failover between two pfSense devices
OpenVPN can and will fail over. IPsec as well, not aware of any significant issues there, though there are occasional circumstances where you need the Sys>Advanced option to restart IPsec on WAN failure for it to successfully come up on the other WAN.
Jul
24
answered pfSense failover and OpenVPN site-to-site
Jul
23
answered VPN Connection pooling?
Jul
23
answered How can I disable routing between interfaces by default on pfSense?
Jul
23
answered pfSense dropping gateway interface randomly
Jul
23
answered Unusual OpenVPN server log entries every minute - Connection reset, restarting [0]
Apr
2
answered Firewall high availability
Jan
15
answered site to site vpn between sonicwall and pfsense
Sep
26
answered pfSense multi site-to-site vpn with openvpn