Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

-2
votes
0answers
9 views

Ssh from pfsense lan Network to outside network [on hold]

I have a lan behind pfsense and need to ssh a server outside the network. Ssh is working inside the network.
0
votes
0answers
10 views

pfSense: OpenVPN P2P with static IPs

I am in the process of migrating a plain OpenVPN p2p config to pfsense, so that after a DNS switch all peers can seamlessly connect to the pfsense instead of the old server. But i have some problems. ...
0
votes
1answer
27 views

Not able to forward Pfsense 2.4.4 Squid log to elk

I have tried a couple of options so far but not able to forward logs to my elk server. Can someone please help me on this and guide me what configuration changes I have to make in order to achieve ...
-3
votes
0answers
20 views

site-to-site OpenVPN Server on pfSense and Client DD-WRT , Can Access RDP,http but the sip softphone won't Register? [closed]

I'm trying to get an OpenVPN tunnel from pfSense 2.4.4-RELEASE to a Open VPN Client on DDWRT for SIP Softphones(X-Lite). I have a local LAN 192.168.10.0/24 on pfsense ,avaya system with ip address ...
-1
votes
0answers
35 views

How to setup OpenVPN to PFsense?

How to setup OpenVPN to PFsense? My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to Advanced Configuration -> Custom options tls-client tls-version-min 1.2 tls-...
0
votes
0answers
26 views

vSphere Isolated Network with Internet Access

I have a simple vSphere setup where we have a flat LAN with a physical SOHO router performing NAT. Our ISP provides only a single public IP address. In our office LAN, we have an ESXi host with a ...
0
votes
0answers
9 views

Secondary pf sense firewall not ping to first pf sense firewall LAN IP via secondary firewall Virtual IP

I have 2 Pfsense firewall, first firewall for local environment use and secondary firewall for IPSEC tunnel use. both firewalls are connected to each other and working fine but my secondary IPSEC ...
0
votes
2answers
46 views

pfSense allow ping only from 1 IP address

We are a dutch company with an office in the USA. This office has an pfSense firewall device with the 182.12.12.12 IP address . In the Netherlands' office we have an IP address like this: 100.12.10....
0
votes
1answer
25 views

scp to pfsense not working

When ever I try to scp a file from pfsense I get back what appears to be the help for pfsense's scp: scp admin@fw:/tmp/test /tmp/ usage: scp [-12346BCpqrv] [-c cipher] [-F ssh_config] [-i ...
1
vote
1answer
31 views

can pfSense captive portal grant internet access to IP which is assigned by Windows DHCP server only?

In our organization we have a wifi access point and IP addresses are assigned by a Windows DHCP server. We have MAC filtering enabled for internet access in the DHCP server but the issue is that if ...
0
votes
0answers
16 views

How do I assign a specific interface or IP for squid to use for outbound external authentication (ldap)

Background: I have a few pfSense servers that run a squid proxy, each one is configured with a central LDAP backend available over a VPN tunnel, is most cases this is OpenVPN but in one case we are ...
0
votes
0answers
25 views

Openshift clusters balancing on HAProxy (pfsense)

I'm using pfsense as a haproxy provider from external into internal side. Internally I have four clusters: lets assume there are: cluster1, cluster2, cluster3 and cluster4 Openshift (OKD) is using: ...
-2
votes
1answer
40 views

Windows server VM can't access internet through pfSense

System overview: 1.Ubuntu 18.4 running virtualbox. 2.Two VM machines, pfSense firewall and windows server 2016. I'am trying to configure the windows server to go through the pfSense, so i chosed a ...
1
vote
0answers
53 views

IPV6 Small Business Implementation - Windows DHCP/DNS, PFSense, IPV6

I have some confusion about IPV6 on a Small Business Network. I'm sure one part or the other is covered extensively, but I can't seem to find answers. (Background info) I have a home network that ...
0
votes
0answers
31 views

pfSense redirect incoming traffic through the WAN to IP on the LAN

I'm new to pfSense, I'd like to know how to redirect all incoming traffic to a DNS alias to an IP within my LAN. Example: My server (pfSense): example.com Apache Web Server: 10.10.20.10 An external ...
0
votes
0answers
49 views

PFSense with HAProxy: Serving simple http page and OpenVpn

I've setup my PFSense with HAProxy as reverse proxy using a single public IP address, in order to serve my http app, that listen on the port 80, everything works fine, but when i try to setup a TCP ...
0
votes
0answers
20 views

Connect to OpenVPN from subnet, PfSense

I'm trying to setup OpenVPN on PfSense so all network client traffic is tunneled through a VPN by default. The OpenVPN service connects to the provider's servers just fine, but the clients cannot ...
1
vote
0answers
28 views

sudden lost of access to esxi vSphere network

Our lab setup consists of a vSphere Esxi server hosting some VMs. In front of VMs exists a pfSense router VM. All VMs are getting connectivity from router and additionally a openVPN server is set in ...
2
votes
0answers
18 views

Changing VMware Network Configuration [closed]

I am in an apartment that PavlovMedia provides DHCP; however, I'm trying to configure my own private network with a pfSense virtual machine as a gateway. Mainly, I just want to use DHCP from my ...
0
votes
0answers
94 views

Multiple IpSec VPNs in failover config - pfSense to Draytek

I am looking to create redundant IpSec VPN Tunnels between two sites. I already have one VPN operational but due to overlapping LAN IP ranges I cannot have more VPNs active at the same time for ...
0
votes
2answers
91 views

pfSense: Allow VLAN Access to all but WAN

I have machines in a VLAN and I need to have them access all but not get out to the internet. I have tried this (and lots of others options) but nothing is working. I simply need to block internet ...
0
votes
1answer
52 views

Share AWS DirectConnect between multiple accounts

AWS allows you to share your DirectConnect connection amongst multiple AWS accounts via a hosted virtual interface (instructions here). I have a pfSense device on the local side of an MPLS line for ...
1
vote
0answers
152 views

OpenVPN client connection gets stuck at “Pre-connection initialization successful” after reboot in Linux Ubuntu 18

My OpenVPN client version 2.4.4 connection is getting stuck after reboot. It started stucking after I configured the OpenVPN Server to pass a list of DNS servers for the OpenVPN clients. I have ...
1
vote
0answers
110 views

How do I make Arpwatch only send new activity/new station emails?

I had set up Arpwatch on my office's pfSense 2.4.3 gateway. Ever since I had done that, I started getting a whole lot of emails - most of them very useful, while some are less useful. I wonder if ...
0
votes
1answer
72 views

pfSense: add multiple static IP/MAC bindings?

I have a pfSense router that handles some labs. It is configured such that DHCP only hands out IP addresses for machines listed in the static IP/MAC bindings list. Whenever we upgrade a lab with new ...
0
votes
0answers
47 views

pFsense drops packets between 2 LAN interfaces - sometimes

I have a pfsense setup with the following output in ifconfig -a /var/log: ifconfig -a bce0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=c00bb<...
-1
votes
1answer
46 views

Graylog CSV Export is slow after upgrade

After I upgraded from graylog version 2.2.1 to 2.4.3, the csv export became quite slow compared to the previous download rate. I have to say that I did many changes putting it behind pfsense using ...
0
votes
1answer
43 views

NFS w/Kerberos - Network change broke auth?

So, I've recently changed my network setup a bit, and for reasons I'm still trying to suss out replacing the old router with a new PFSense box appears to have broken the authentication within the ...
0
votes
0answers
75 views

pfSense in VMware Workstation: How to map NIC to different VMnet?

I have 3 virtual networks in VMware Workstation. To make it easier to read, I have assigned 3rd octet of the IP Address based on VMnet ID. VMnet1 - 172.31.1.0/24 VMnet2 - 172.31.2.0/24 VMnet3 - 172....
0
votes
1answer
280 views

Split DNS and internal port forwarding

I have a pfSense firewall running in a pretty standard configuration, 1 WAN, 1 LAN. On both sides of the pfsense I'd like to make available a service via DNS name, lets say "service.domain.com". For ...
0
votes
0answers
36 views

OPNSense Have SSH but no Internet or web ui

I have OPNSense running in ESXi on a DL360 G7. Here's what my console shows LAN (em0) -> v4: 192.168.1.1/24 WAN (em1) -> v4: 10.0.0.199/16 (note, it's currently getting internet ...
1
vote
1answer
42 views

Suddenly lost access to pfSense

I've just installed pfSense in VMware and play around with the settings. Suddenly, I lost access to Web GUI. I ran tcpdump on it and was able to see the packet from my notebook reached to it. What ...
0
votes
2answers
125 views

Location of pfSense menu (startup script)?

When pfSense is boot, the following menu is displayed on the screen. When we select option number 8 (shell), how do we get back to the menu? What is the filename for this menu?
-1
votes
1answer
202 views

pfsense dns doesn't work anymore for a specific domain

I had a local webserver that was working fine and on which I had a website on domain example.com. I was also using a static public IP for the WAN with ISP #1. Now I decided to move the website to a ...
-1
votes
1answer
235 views

How to set up pfSense/OPNSense on virtual host?

I'm a little confused as how to to host a *Sense box as a VM and have it provide routing for the host. Internet -> Modem/Router (bridge mode) -> en1 on Dell r710 -> OPNSense in a VM Then ...
0
votes
2answers
156 views

VPN Connection to Windows Network behind Firewall

We have a Windows network with a single Windows Server 2012 server which works domain server as well as a file server, which is protected by pfSense firewall. We want to allow a specific user (with ...
0
votes
1answer
294 views

Unifi AP-PRO with pfSense running FreeRADIUS, with MySQL database externally

I'm in the process of moving from a set of Aerohive AP's to Unifi AP-PRO to increase the range of our wifi. Adding more Aerohives could be a solution, but they're way more expensive and I already have ...
0
votes
1answer
299 views

Configure LAN for IPv6 with SLAAC on WAN

My ISP assigns me an IPv4 address via DHCP and an IPv6 subnet through SLAAC. I set up my pfSense box to use NAT and DHCPv4 for my LAN network which works fine. However, on the IPv6 side, my LAN ...
0
votes
1answer
493 views

pfSense unable to LDAP bind to Active Directory Server

I've been instructed to setup an OpenVPN Server on our local pfSense VM. I've combed over tutorials and guides, netgate, openvpn documentation and I feel I must be missing something. I've tested the ...
0
votes
0answers
63 views

pfSense Port Forwarding with Static WAN IP

This is my first pfSense install and I'm trying to setup a WAN static ip portforward to internal ips for our clients to send data to their printers within our building. How I think this should / ...
0
votes
0answers
105 views

pfSense IPSec tunnel to AWS VPN fails to connect

I'm trying to set up a IPSec tunnel between an AWS VPC (using their VPN Gateway) and a pfSense. I have set up the IPSec config in pfSense according to the config I'm given from AWS. However, there ...
0
votes
0answers
143 views

ISP /29 Public IP not working on pfsense

recently I have purchased a block of /29 Public ips from our ISP. I have my network setup whereby the isp modem (SmartRG 360n) is in bridged mode which feeds a pfsense firewall. The wan is configured ...
0
votes
0answers
119 views

PfSense double nat and opening ports with ISP modem

At the office we I have a router/modem from my ISP which cannot be used in bridge mode, unfortunately. So I'll have to work with double NAT. Setup: (82.xx.xx.xx "wan" - ISP modem/router - 192.168.2....
0
votes
1answer
336 views

Setting up pfSense to bridge LAN NICs and connect WAN

I have a machine with four NICs (physical ethernet ports) and I'd like to set up a fully updated pfSense on it. So far it looks like this: A few things I've done so far: I've set up the bridge ("...
1
vote
1answer
230 views

Very high tcp retransmit rate to Internet on devices inside LAN

I work with Linux systems a lot as a developer and have a moderate level of networking knowledge, but the following situation is a real baffling mystery: I'm running pfSense 2.4.3 (that's current) on ...
0
votes
0answers
344 views

pfsense and virtual IP addresses

I'm quite new to pfsense and network configuration in general, so I'm sorry if the question is too simple. I'm trying to set up an IPSec connection to a client machine, and to assign a hostname to a ...
0
votes
0answers
29 views

Is there any way, in pfSense, to set up multiple routes to the same LAN subnet?

What I mean is, that I've got a given subnet with multiple points of ingress for redundancy - multiple gateway IPs to those subnets. I haven't found a way in pfSense, though, to be able to specify ...
0
votes
0answers
217 views

IPsec with NAT between pfSense and Fortigate - no ping or access from both sides

We have an IPsec VPN tunnel with NAT between pfSense 2.3.4 and Fortigate up and running. The local networks are the same (overlapping), so we use NAT. pfSense is managed by us and Fortigate by a ...
0
votes
1answer
286 views

Connecting to vpn through double nat

I have a pfsense gateway that connects to the ISP and gets a publix address. It takes care of servers and clients without a problem. To that gateway I connected another pfsense to play around and just ...
2
votes
0answers
637 views

Reverse proxy on pfSense 2.1.5 with Squid

I installed Squid on my pfSense and I am trying to reach 192.168.1.41 when the request is for sub1.dom.it, and I am trying to reach 192.168.1.42 when the request is for sub2.dom.it. I used to have ...