Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

-1
votes
0answers
39 views

Access to http is blocked by pfsense/firewall

I am using VMware ESXi and have configured a pfSense router in a VM.. Other VMs are getting IPs from this router VM. Now on any VM (e.g. Windows 10) If I try to open http://google.com it returns ...
2
votes
0answers
14 views

Changing VMware Network Configuration [closed]

I am in an apartment that PavlovMedia provides DHCP; however, I'm trying to configure my own private network with a pfSense virtual machine as a gateway. Mainly, I just want to use DHCP from my ...
0
votes
0answers
19 views

Multiple IpSec VPNs in failover config - pfSense to Draytek

I am looking to create redundant IpSec VPN Tunnels between two sites. I already have one VPN operational but due to overlapping LAN IP ranges I cannot have more VPNs active at the same time for ...
0
votes
2answers
14 views

pfSense: Allow VLAN Access to all but WAN

I have machines in a VLAN and I need to have them access all but not get out to the internet. I have tried this (and lots of others options) but nothing is working. I simply need to block internet ...
0
votes
1answer
23 views

Share AWS DirectConnect between multiple accounts

AWS allows you to share your DirectConnect connection amongst multiple AWS accounts via a hosted virtual interface (instructions here). I have a pfSense device on the local side of an MPLS line for ...
1
vote
0answers
31 views

OpenVPN client connection gets stuck at “Pre-connection initialization successful” after reboot in Linux Ubuntu 18

My OpenVPN client version 2.4.4 connection is getting stuck after reboot. It started stucking after I configured the OpenVPN Server to pass a list of DNS servers for the OpenVPN clients. I have ...
1
vote
0answers
21 views

How do I make Arpwatch only send new activity/new station emails?

I had set up Arpwatch on my office's pfSense 2.4.3 gateway. Ever since I had done that, I started getting a whole lot of emails - most of them very useful, while some are less useful. I wonder if ...
0
votes
0answers
24 views

pfSense: add multiple static IP/MAC bindings?

I have a pfSense router that handles some labs. It is configured such that DHCP only hands out IP addresses for machines listed in the static IP/MAC bindings list. Whenever we upgrade a lab with new ...
0
votes
0answers
21 views

pFsense drops packets between 2 LAN interfaces - sometimes

I have a pfsense setup with the following output in ifconfig -a /var/log: ifconfig -a bce0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=c00bb<...
-2
votes
0answers
18 views

network-speed is low on only one PC

I have a problem. One of the PC in the LAN have low speed, and sometimes loose connection, but the others PC have normal speed. There are about 40 PC in the net. But only one has this problem. ...
-1
votes
1answer
34 views

Graylog CSV Export is slow after upgrade

After I upgraded from graylog version 2.2.1 to 2.4.3, the csv export became quite slow compared to the previous download rate. I have to say that I did many changes putting it behind pfsense using ...
0
votes
1answer
34 views

NFS w/Kerberos - Network change broke auth?

So, I've recently changed my network setup a bit, and for reasons I'm still trying to suss out replacing the old router with a new PFSense box appears to have broken the authentication within the ...
0
votes
0answers
28 views

pfSense in VMware Workstation: How to map NIC to different VMnet?

I have 3 virtual networks in VMware Workstation. To make it easier to read, I have assigned 3rd octet of the IP Address based on VMnet ID. VMnet1 - 172.31.1.0/24 VMnet2 - 172.31.2.0/24 VMnet3 - 172....
0
votes
1answer
86 views

Split DNS and internal port forwarding

I have a pfSense firewall running in a pretty standard configuration, 1 WAN, 1 LAN. On both sides of the pfsense I'd like to make available a service via DNS name, lets say "service.domain.com". For ...
0
votes
0answers
27 views

OPNSense Have SSH but no Internet or web ui

I have OPNSense running in ESXi on a DL360 G7. Here's what my console shows LAN (em0) -> v4: 192.168.1.1/24 WAN (em1) -> v4: 10.0.0.199/16 (note, it's currently getting internet ...
1
vote
1answer
38 views

Suddenly lost access to pfSense

I've just installed pfSense in VMware and play around with the settings. Suddenly, I lost access to Web GUI. I ran tcpdump on it and was able to see the packet from my notebook reached to it. What ...
0
votes
2answers
78 views

Location of pfSense menu (startup script)?

When pfSense is boot, the following menu is displayed on the screen. When we select option number 8 (shell), how do we get back to the menu? What is the filename for this menu?
-1
votes
1answer
68 views

pfsense dns doesn't work anymore for a specific domain

I had a local webserver that was working fine and on which I had a website on domain example.com. I was also using a static public IP for the WAN with ISP #1. Now I decided to move the website to a ...
-1
votes
1answer
69 views

How to set up pfSense/OPNSense on virtual host?

I'm a little confused as how to to host a *Sense box as a VM and have it provide routing for the host. Internet -> Modem/Router (bridge mode) -> en1 on Dell r710 -> OPNSense in a VM Then ...
0
votes
2answers
66 views

VPN Connection to Windows Network behind Firewall

We have a Windows network with a single Windows Server 2012 server which works domain server as well as a file server, which is protected by pfSense firewall. We want to allow a specific user (with ...
0
votes
1answer
114 views

Unifi AP-PRO with pfSense running FreeRADIUS, with MySQL database externally

I'm in the process of moving from a set of Aerohive AP's to Unifi AP-PRO to increase the range of our wifi. Adding more Aerohives could be a solution, but they're way more expensive and I already have ...
0
votes
1answer
147 views

Configure LAN for IPv6 with SLAAC on WAN

My ISP assigns me an IPv4 address via DHCP and an IPv6 subnet through SLAAC. I set up my pfSense box to use NAT and DHCPv4 for my LAN network which works fine. However, on the IPv6 side, my LAN ...
0
votes
1answer
175 views

pfSense unable to LDAP bind to Active Directory Server

I've been instructed to setup an OpenVPN Server on our local pfSense VM. I've combed over tutorials and guides, netgate, openvpn documentation and I feel I must be missing something. I've tested the ...
0
votes
0answers
35 views

pfSense Port Forwarding with Static WAN IP

This is my first pfSense install and I'm trying to setup a WAN static ip portforward to internal ips for our clients to send data to their printers within our building. How I think this should / ...
0
votes
0answers
53 views

pfSense IPSec tunnel to AWS VPN fails to connect

I'm trying to set up a IPSec tunnel between an AWS VPC (using their VPN Gateway) and a pfSense. I have set up the IPSec config in pfSense according to the config I'm given from AWS. However, there ...
0
votes
0answers
82 views

ISP /29 Public IP not working on pfsense

recently I have purchased a block of /29 Public ips from our ISP. I have my network setup whereby the isp modem (SmartRG 360n) is in bridged mode which feeds a pfsense firewall. The wan is configured ...
0
votes
0answers
77 views

PfSense double nat and opening ports with ISP modem

At the office we I have a router/modem from my ISP which cannot be used in bridge mode, unfortunately. So I'll have to work with double NAT. Setup: (82.xx.xx.xx "wan" - ISP modem/router - 192.168.2....
0
votes
0answers
95 views

Setting up pfSense to bridge LAN NICs and connect WAN

I have a machine with four NICs (physical ethernet ports) and I'd like to set up a fully updated pfSense on it. So far it looks like this: A few things I've done so far: I've set up the bridge ("...
1
vote
1answer
158 views

Very high tcp retransmit rate to Internet on devices inside LAN

I work with Linux systems a lot as a developer and have a moderate level of networking knowledge, but the following situation is a real baffling mystery: I'm running pfSense 2.4.3 (that's current) on ...
0
votes
0answers
160 views

pfsense and virtual IP addresses

I'm quite new to pfsense and network configuration in general, so I'm sorry if the question is too simple. I'm trying to set up an IPSec connection to a client machine, and to assign a hostname to a ...
0
votes
0answers
25 views

Is there any way, in pfSense, to set up multiple routes to the same LAN subnet?

What I mean is, that I've got a given subnet with multiple points of ingress for redundancy - multiple gateway IPs to those subnets. I haven't found a way in pfSense, though, to be able to specify ...
0
votes
0answers
156 views

IPsec with NAT between pfSense and Fortigate - no ping or access from both sides

We have an IPsec VPN tunnel with NAT between pfSense 2.3.4 and Fortigate up and running. The local networks are the same (overlapping), so we use NAT. pfSense is managed by us and Fortigate by a ...
0
votes
1answer
187 views

Connecting to vpn through double nat

I have a pfsense gateway that connects to the ISP and gets a publix address. It takes care of servers and clients without a problem. To that gateway I connected another pfsense to play around and just ...
2
votes
0answers
398 views

Reverse proxy on pfSense 2.1.5 with Squid

I installed Squid on my pfSense and I am trying to reach 192.168.1.41 when the request is for sub1.dom.it, and I am trying to reach 192.168.1.42 when the request is for sub2.dom.it. I used to have ...
1
vote
0answers
71 views

pfSense : How to do 1:1 NAT to server hosted at remote location linked through IPSec tunnel

We have 2 data centers at 2 different locations and are moving our services from location A to B without interruption. Both location have a PFSense Firewall configured with IPSec tunnel between each ...
0
votes
0answers
64 views

What are the pros and cons of using PfSense DNS Forwarder or Resolver?

I am looking for a clean set of pros and cons for two mutually exclusive DNS configurations for pfsense router: Forwarder and Resolver. The configuration that I have in mind is a complex home-office ...
0
votes
0answers
262 views

UniFi and pfSense IPSec VPN not passing traffic

I have a IPSec VPN running between two sites. Site A is pfSense and site B is a UniFi Security Gateway. I have got the VPN established but I cant ping anything in either direction on the network. Any ...
0
votes
0answers
21 views

Issues with AWS IPSec when accessing from UAE

I set up a pfSense device in EC2 instance in AWSand configured to support IPsec from ios devices. While the connection is working properly, and also the internet access from USA and Europe, some of ...
1
vote
1answer
43 views

Juniper => D-Link => pfSense - how make WAN for pfSense

Ssory for, maybe, stupid question(and bad english), i'm newbie in system administration, but task it is. We have this net scheme - simple view: ISP Gateway || Juniper SRX240H(our gateway) ||...
1
vote
0answers
50 views

PFSENSE Topology w/Cisco L3 Switces

I have the need to configure a router on a stick variant where I have WAN in (not shown on image) and 2 LAN ports that go to each of the switches shown in the image. The vlan 'subinterfaces' live on ...
1
vote
1answer
103 views

Dedicated IP for webserver through pfsense and a draytek 2860

We have a leased line which has 8 public IP addresses. This connects to our Draytek 2860 router. From here we have an internal network which we use for our office computers and another network for ...
0
votes
0answers
415 views

Pfsense block only the internet on one single IP

Im after blocking a single IP on pfsense from the internet only, it can talk to other Ips on the lan fine only the internet. the IP in question is 10.0.0.22 Ive added a rule which failed to work ...
2
votes
0answers
149 views

IKEv2 with EAP-MSCHAPv2 with static IP for each client

I've successfully created an IKEv2 with EAP-MSCHAPv2 VPN for Windows 10 clients using PFSense. This is the link that I followed for doing so: https://doc.pfsense.org/index.php/IKEv2_with_EAP-MSCHAPv2 ...
0
votes
0answers
120 views

How to have multiple routes to the same remote VPN in pfSense?

We have a pfSense server in two offices. Our main office has a VPN server configured, and our satellite office has a VPN client configured, using the IP 123.156.88.253 (just an example). We have just ...
0
votes
0answers
24 views

pfSense LAN Configuration

I bougth a new pfSense router, I have 3 ports, WAN, LAN and DMZ. WAN -> I pluged in my WAN cable, it does work fine, via WLAN My goal is: LAN -> Switch -> Printer, PC, NAT, etc WLAN -> mobile ...
0
votes
0answers
224 views

Can't access pfSense web interface via IPSec VPN unless a device is connected to LAN?

I have a pfSense firewall (Netgate SG-1000) IPSec'd to a SonicWall. It seems like the IPSec VPN is working well, but only when a device is connected to the pfSense LAN. My understanding is that I ...
0
votes
0answers
674 views

pfsense squid SSL_ERROR_RX_RECORD_TOO_LONG

I have pfsense running squid proxy and squid guard. It was working like charm until few days ago, after that all https traffic started to give the below error SSL_ERROR_RX_RECORD_TOO_LONG. I have ...
0
votes
0answers
109 views

Load balance incoming and outcoming requests using pfsense?

I would like to load balance incoming requests using pfsense, is the use of 2 pfsense and pfsync along side dns round Robin possible for that? Also, how could I be able to load balance outcoming ...
1
vote
1answer
439 views

pfsense: dynamic dns doesn't update automaticaly - it knows it's outdated

I'm using dyndns with pfsense and I have a router connected on the WAN line (DHCP configuration). Every few days my ISP changes my IP and pfsense fails to update it automatically. If I open the WebUI ...
2
votes
3answers
308 views

How to prevent clients from getting static IPs (set by Client Specific Overrides) in OpenVPN via PfSense?

I am getting problems with the current setting in an OpenVPN via PfSense. The situation is the following: I have created a OpenVPN server in the network 192.168.222.0/24; Created two client ...