Skip to main content

Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

OpenVPN : Unable to access distant subnet over VPN from Office LAN

I have an issue to access a subnet through VPN connexion. I am currently experiencing an issue where traffic between my Office internal network and subnet on a machine over VPN client is not being ...
Meloman's user avatar
  • 111
0 votes
0 answers
38 views

sshuttle ssh_packet_write_poll error on pfsense

I’m trying to use sshuttle on pFsense CE OS and when I execute sshuttle -r *my_actual_username*@*my_actual_host* 0.0.0.0/0, following error shows up: client_loop: ssh_packet_write_poll: Connection to *...
nima's user avatar
  • 3
0 votes
0 answers
130 views

OPNSense: How to communicate with second network that also act as backup WAN

Drawing: https://i.sstatic.net/QjM3a.jpg Hello. I have two networks with different subnet (please refer to drawing). First network is 192.168.1.0 and second network is 192.168.2.0. The OPN Sense act ...
user321280's user avatar
0 votes
0 answers
108 views

Squid Proxy StoreID use with pfSense

I am wondering if anyone can help me with learning more about Squid's StoreID? I have been researching this for some time. I got the web cache accelerator to work however at times I feel it is lacking ...
Jonathan Lee's user avatar
-1 votes
1 answer
108 views

PFSense: Subnet can not communicate to the outside

I have multiple subnets on a hypervisor with four Ethernet ports. Two are called subnets. Both of them are utilizing a NordVPN tunnel as their default gateway. The first subnet LAN can talk to ...
daniellooartist's user avatar
0 votes
0 answers
16 views

Accessing adjacent remote network from existing network tunnel in pfsense ipsec

We have two offices, A and B, with IP segment 192.168.10.0/24 and 192.168.20.0/24 respectively, connected to each other using IPsec tunnel mode. Additionally, office B has an IPsec tunnel mode ...
exclbr5's user avatar
0 votes
1 answer
29 views

Wrong IP address returned for pfSense host name on a router with multiple LANs when using DNS Forwarder/Resolver

Question moved from StackOverflow: Running pfSense 2.4.4 (first saw the problem in 2.0.3) using DNS Forwarder or DNS Resolver for Split-DNS with multiple LANs. LAN1 is 10.10.10.0/24 and LAN2 is 192....
sthames42's user avatar
  • 101
0 votes
0 answers
371 views

Split tunnel configuration with OpenVPN not working on Ubuntu 18.04

I have Ubuntu 18.04 on my laptop and it has a VPN settings configured on it. PfSense is the firewall and the VPN server is OpenVPN. Split tunnel is configured on that OpenVPN client. I can confirm ...
anand.0976's user avatar
0 votes
0 answers
96 views

gRPC proxied through pfSense with HAProxy plugin

I am trying to make a gRPC server available through pfSense with HAProxy running as a plugin. I have ssl termination at HAProxy and it works fine for a number of hosts. But trying to set the gRPC ...
popliviustefan's user avatar
0 votes
1 answer
68 views

pFsense : A rule apply on user account

I have a pFsense user account 'foo.extern'. This account can log to the server with OpenVPN. It works fine. Now i want to make a firewall rule to allow this account only access to the IP adresse 192....
Yaegaki2's user avatar
4 votes
1 answer
297 views

Which LAGG type should be used for MLAG switches to CARP firewalls?

My network setup involves two firewalls in a Common Address Redundancy Protocol (CARP) group, each connected to an MLAG (Multi-Chassis Link Aggregation) configuration of Mikrotik switches. Onward ...
Tintin's user avatar
  • 193
0 votes
0 answers
160 views

How to connect wireless clients to different physical subnets via a single access point but ensure traffic between subnets remains segmented

I’m trying to design a network with a pfSense Firewall / Router. In pfsense I have created four subnets that reside on separate physical ports (not VLANS) on the pfSense hardware: The idea will be ...
SneakyShrike's user avatar
-1 votes
2 answers
654 views

pfSense in disable all packet filtering mode allows web admin on WAN IP [closed]

A while back, I had a fiber internet connection installed at my business with a number of public IPv4 addresses. The ISP provided two blocks of IP addresses: a "P2P" block which contains a ...
cmshowers's user avatar
-3 votes
1 answer
80 views

DHCP moved from [closed]

After connecting several Raspberry Pis running Ubuntu 23.10 to my switch, they are for some reason stepping on each others DHCP leases. DHCP is running on fpsense 2.7.2... Logs: DHCPREQUEST for 192....
Greg's user avatar
  • 125
0 votes
0 answers
27 views

pfSense. Alias URL Table with TAR.GZ list on FTP

In pfSense, can I create a "Table URL" alias that points to a TAR.GZ file downloadable via FTP? Or does it necessarily have to be a full list accessible via HTTP?
Dark Corner's user avatar
0 votes
1 answer
168 views

Reply traffic lost when using an NVA to SNAT

I am trying to implement the following in a lab subscription, as described in https://learn.microsoft.com/en-us/azure/architecture/guide/networking/ipv4-exhaustion#implement-snat-via-third-party-nvas (...
jimbobmcgee's user avatar
  • 2,695
0 votes
0 answers
41 views

pfsense temporarly failed to resolve hosts

Suddenly I was unable to reach the outside world. I pinged one IP on internet, it worked I tried to resolve a hostname with the dhpd configured server, i.e. netgate/pfsense, timeout I tried to ...
user1707414's user avatar
0 votes
0 answers
67 views

Can't ping / access GNS3 PFSense virtual device but can ping GNS3 VM on same subnet

I have a basic GNS3 network that I’m trying to setup with PFSense. I have managed to install the PFSense module and can now add it as a device within GNS3. However after adding, configuring and ...
SneakyShrike's user avatar
0 votes
1 answer
249 views

How to access pfsense's LAN without vpn?

I have the following setup and want to access both server A and server B by their IPs from the workstation without VPN and without port-forwarding. What I have tried so far is: In pfsense_1, I added ...
idemery's user avatar
0 votes
0 answers
47 views

necesito configurar una regla de firewall en pfsense

chicos estoy haciendo una simulación de ataque DDoS utilizando máquinas virtuales (virtual box) ya logré hacer el ataque, sin embargo, necesito configurar pfsense para poder proteger mi servidor web ...
Victoria Vargas.'s user avatar
0 votes
0 answers
100 views

Network traffic being filtered on OVH Public Cloud's Private Network

We are currently attempting to set up an isolated infrastructure separate from the WAN using a firewall (pfsense) and private networks. We are experiencing connectivity issues on the virtual network ...
Corentin Soulet's user avatar
1 vote
2 answers
289 views

How would you set up a macOS laptop to maintain the same IP address between ethernet and wifi?

I have a situation where I need to maintain the same IP address and/or hostname between two network interfaces on several macOS laptops: the ethernet and wifi. The topology is such that there is a ...
ylluminate's user avatar
  • 1,197
0 votes
1 answer
204 views

Forward (NAT) port on FW to the device without having GW set on it?

In short: Is it possible to access the device/server (without the GW address set in the Network configuration of this device) from outside the device's LAN? Current setup: I'm renting an ESXi server ...
Leonid Pervak's user avatar
0 votes
0 answers
47 views

(Networking noob) I can't get network to work on a server using pfsense and juniper switch

I work at a company as an IT administrator, but my experience with networking is very limited. I was always focused on the OS and application side of things. Recently the only other IT administrator ...
MutedVideo's user avatar
0 votes
0 answers
176 views

Pfsense breaks certification chain

I have a problem I was thinking it was a simple one. It seems it is not. Not from my point of vue :( In the same GCP Project, I have two independant VPC, one linked to the vtnet0 (LAN) of a pfsense 2....
mat.viguier's user avatar
0 votes
0 answers
89 views

pfSense L2 firewall not blocking half of DHCP traffic

I have a pfSense instance (NetGate SG-series), with setup: 802.11q enabled LAN ports 1 (LANP) and 2 (LANB) with VLAN assignments Interfaces assigned and enabled LANP: (1, 5t) tag configuration ...
Reinderien's user avatar
0 votes
0 answers
566 views

Why does this traffic selector not match?

(Note: I'm really using pfSense, but I'm just going to focus on the ipsec.conf files, since pfSense doesn't seem particularly relevant to the issue.) We're getting the following error from charon: Aug ...
Thanatos's user avatar
  • 366
0 votes
0 answers
170 views

PfSense - Ha proxy Wan Ip timeout when outside network requests

Currently I'm setting up a home lab and I've the following architecture Architecture I've setup my ISP provider to redirect any 80 requests to my pfsense firewall. Created a rule allowing any requests ...
Vinicius Andrade's user avatar
0 votes
1 answer
392 views

haproxy on pfsense fw to guac

I am having some issues with setting up a publicly accessible guacamole server thru my pfsense, which is running haproxy. Internet > pfsense \ haproxy > guac I have my domain DNS thru ...
nepher ki3den's user avatar
0 votes
1 answer
227 views

What subnet mask to use for a virtual IP in pfSense

I have a subnet 192.168.0.0/24. I want to create a new virtual IP address (VIP) in pfSense at 192.168.0.2. What difference does it make what subnet mask I use for the VIP? Should I set the VIP to 192....
lindhe's user avatar
  • 136
0 votes
0 answers
203 views

OpenVPN connection failed

suddenly openvpn lost connection to server. The logs are following: server logs: Jul 21 00:07:40 openvpn 29858 100.90.2.29:62306 TLS Error: Auth Username/Password was not provided by peer Jul 21 00:07:...
Multiserv's user avatar
0 votes
0 answers
717 views

OpenVPN TCP connection to firewall failing: unknown error

I am encountering an error when attempting to connect to my office using OpenVPN. The error message: Tue Jul 18 12:34:52 2023 WARNING: Compression for receiving enabled. Compression has been used in ...
nanto's user avatar
  • 1
1 vote
0 answers
586 views

deploying pfSense in OVH public cloud as a DHCP server in HA

I am trying to deploy two pfSense in the OVH public cloud (OpenStack). Each has its own public IPs and public connectivity works without any problem. Things become more complicated on the vRack part (...
Dboy's user avatar
  • 41
0 votes
0 answers
64 views

How many ip's can i add in pfsense alias

I have a pfsense 2.4.4-RELEASE-p1.I have an alias problem. I created an alias with ~100 subnets in operator cloud, I created a rule with this alias, but it doesn't work. To check, I created a rule ...
Whoisperfect's user avatar
-1 votes
1 answer
48 views

Firewall failover internal ip

I have multiple servers at my data center and i want to switch to pfsense, but i don't know if it can automatically fall over to the second server that is a mirror from the first server. So if the ...
Lennard K's user avatar
0 votes
1 answer
293 views

pfsense firewall/NAT rules for 2 different LAN where LAN2 has public facing server

I'm looking for a pfsense ruleset that allows a client on LAN1 192.168.3.10 to access a public server on LAN2 10.0.0.2. ports 60000 -60015 TCP/UDP. I otherwise wish to keep these LAN's isolated from ...
RangeyRover's user avatar
0 votes
1 answer
682 views

UDP Broadcast Forwarding Between Subnets

We have an application that broadcasts UDP to allow for the detection of IP Based Systems on a network by an in house application. We widely use Open Source and especially PFSense. It seems you cannot ...
JakeFury's user avatar
0 votes
0 answers
65 views

grab https URL without import CA into PC from squid access log

1.The domain aa.com was belongs to our company and we have the public and private key of Wildcard certificate about aa.com. 2.We want to grab all of the URL from the access log which about *.aa.com, ...
insmod's user avatar
  • 1
0 votes
2 answers
659 views

NAT for Debian based WireGuard router in Hetzner cloud

I have rented several cloud servers from Hetzner. These are all on a private network (10.20.20.0/24), with only one server of them even having a public IP. Following this German tutorial, I want to ...
alexanderh's user avatar
2 votes
1 answer
626 views

Why does my pfsense gateway break SSL for some internal hosts?

I have a proxmox cluster with pfsense acting as a firewall and gateway for the cluster nodes and VMs. VMs have no problem, but the cluster nodes can't browse any websites using SSL, which of course ...
barrymac's user avatar
  • 173
0 votes
0 answers
904 views

DNS query refused when connected to WireGuard/pfSense

I'm using pfSense with OpenVPN for more a decade now. Also intensively used many services from pfSense (DNS resolver, DHCP, HA Proxy, SquidGuard, firewall of course...) In short - I do have some ...
Aleksandar Pesic's user avatar
0 votes
0 answers
1k views

DNS over OpenVPN from PFsense only working when in Full DNS (Use VPN DNS for all traffic)

I configured a DNS Resolver in our PFsense which I also provide as part of the DNS Server list to clients via OpenVPN. Clients can connect via OpenVPN and also resolve local names via the DNS Resolver ...
doom4's user avatar
  • 101
0 votes
1 answer
821 views

How to run a script in a OpenVPN server hosted in pfSense when client connects?

I've got an pfSense 2.6 instance which hosts OpenVPN for clients. I'm testing with client version OpenVPN Connect 3.3.7 (2979). There are some web endpoints with a dynamic IP addresses, so I can't ...
Eastman's user avatar
  • 60
0 votes
1 answer
96 views

Cannot establish connection on two-way comms like SSH on Phase 2 VIP attached to LAN IP using NAT 1:1

As the title say, I cannot establish connection on two-way comms like SSH on Phase 2 VIP attached to LAN IP using NAT 1:1. Phase 1 and Phase 2 is UP. Phase 2 Remote IP is 192.168.1.248 and Local IP is ...
Raul Chiarella's user avatar
1 vote
1 answer
209 views

Google Fiber WAN PoE passthrough two ports of managed switch?

I have a network configuration I would like to make happen, but I'm at a loss at what to call this odd setup, which makes searching quite difficult. I want to substitute the Google Fiber Networking ...
Jacob Jewett's user avatar
0 votes
0 answers
207 views

Tagged port does not work (switch netgear)

I have configured 2 VLANs with firewall (pfsense), but when I set port as tagged in each Vlan, every device lost wan connection and even IP address... I have no idea what could possibly be wrong. ...
wewtorek's user avatar
1 vote
1 answer
2k views

Redirect HTTP to HTTPS whilst allowing ACME challenges through the 'Standalone HTTP server' method in pfSense (with ACME and HAProxy)?

I use my pfSense with ACME and HAProxy extensions to manage and auto-renew certificates as well as having a reverse proxy with load balancing capabilities. In my ACME module I define my domains to ...
Martin Braun's user avatar
0 votes
1 answer
649 views

WireGuard VPN setup not returning data to client

I had a WG setup that worked great until my pfSense hardware crashed. Rebuilt on an old Dell box now; everything except Wireguard is working. Data seems to flow from peer through Wireguard to internet,...
erict's user avatar
  • 209
1 vote
0 answers
37 views

pfsense device freeze at a time load balancing airtel works fine

We have 2 lease lines Tata and Airtel. Primary is Tata & Sec is Airtel If Tata down pfsense device freezes at a time load balancing airtel works fine but has been 192.168.1.1 not working.Anybody ...
ebms hussain's user avatar
0 votes
1 answer
481 views

Use a virtual Network in PFsense to redirect packages to device in another network

I'm using PFsense and i have this situation: Network Example I have a Pfsens already connected with "Site1" through OpenVPN. I can acess the "Device" normally in Pfsense network. ...
FelipeFonsecabh's user avatar

1
2 3 4 5
17