Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

1
vote
0answers
26 views

Linux - Change gateway dynamically

in Linux, how can I change the gateway for a destination network dynamically based on the result of a monitor IP (like ping)? I would like a behaviour like pfSense has with the gateway groups. ...
2
votes
1answer
64 views

Subnet routing with pfSense

I have a public IP and and a public /29 subnet assigned to the same NIC in a server running ESXi. I have installed pfSense, as a virtual machine on this ESXi. I gave three virtual NICs to the pfSense:...
0
votes
0answers
31 views

How do I tell KVM to connect to a pfSense guest text terminal?

Intro I'm new to KVM. I'm preparing an instance of pfSense in KVM; running this gets me close but is not completely working: virt-install \ --name pfsense \ --os-variant freebsd11.2 \ --...
0
votes
0answers
40 views

Running a Router Computer Software (i.e. pfSense) on a VM in the Server to Monitor Traffic

It's kind of hard to explain what the title means. I'll explain it. So basically, I have a Server (Dell T710) on our Computer Laboratory in the school, which is running Windows Server 2012. It has 4 ...
0
votes
0answers
22 views

Mobile IPSec VPN works but does not follow 302 redirects

I have a very odd problem, I have a pfsense firewall that is serving IPSec VPN to my mobile phone (Pixel XL, Strongswan VPN). The VPN works fine in that I can connect, reach the internet and the ...
0
votes
0answers
19 views

Make VM accessible over RDP with pfsense

I would like to make my VM which is in the test environment accessible from a specific Network (called FW_PRODUCTIVE) over RDP. For doing that, I did make following steps: Create 1:1 NAT Rule ...
-1
votes
1answer
41 views

Allow outbound traffic from DC via PfSense to the internet?

The situation: Got a Win2016 DC in a cloud network. WAN is disabled for this machine. LAN is connected to PfSense. PfSense manages the VPN and IPSec between cloud an on-premise. PfSense only allows ...
0
votes
0answers
11 views

vpn setup in pfSense - is it working?

I have set up VPN access to my office LAN which uses a pfSense router at the edge. When I connect from a remote site using Microsoft's VPN client, I can access my internal computer nodes. However I'm ...
0
votes
0answers
48 views

Allow virtual instances on openstack behind an pfsense firewall

I have OpenStack Queens deployed using Packstack on CentOS 7. My network has a pfSense firewall. I launched an instance and associated a floating IP to i. But when i try to ping it, it shows "...
0
votes
1answer
20 views

PFSense enable private access via shell

I was setting up a new PFSense and I managed to tick "Block private networks and loopback addresses" on the LAN interface. Is there a shell command through which I can disable that? I know I'm ...
0
votes
0answers
23 views

How offer the teacher to block internet in the classroom?

I work for an high school. Currently we have an old Squid/SquidGuard, using explicit proxy fixed by GPO on Windows 10. Squid asks credentials (ntlm_auth), SquidGuard filters (blacklist) and logs ...
1
vote
0answers
25 views

in pfsense,its possible to secure the the conf.cf (primary configuration file)

I want to give someone a solution based on embedded pfsense. that solution has modificatins in pfsense, which i dont want anyone to steal and use it for their own business. its proprietary solution ...
0
votes
0answers
51 views

pfSense - NAT not working

I have a pfSense on Proxmox VM. I have two IP addreses configured: WAN: xx.xx.88.24 -> public IP accesible from internet LAN: 192.168.1.100 -> corporate intranet I want to access an internal ...
0
votes
1answer
31 views

Connect VM Behind pfsense interface to host on physical home router

I have a Hyper-V server (192.168.1.251) on my home network. My home router is 192.168.1.1. I have a PFSense VM with a bridged network adapter (192.168.1.177) I have a couple of interfaces connected ...
0
votes
0answers
94 views

PfSense(on ESXi) on hetzner, IP Subnet not working

i have one primary IP of Hetzner DS(with ESXi on it, and pfsense). i got a subnet of /29 from hetzner. they say that the subnet IPs must route through Primary IP address of server, like if server IP ...
0
votes
0answers
48 views

Creating a memstick of Pfsense, create only two files

I want to install the Pfsense OS on a server but when I try creating a bootable USB, I have only two files : EFISYS (F:) │ └───efi | └───boot | BOOTx64.efi | startup....
0
votes
0answers
7 views

pfsense config.xml does not match the GUI

I have 2 systems. This first system's config.xml file matches what I see on the GUI. The second system's config.xml does not. What could I be missing
0
votes
0answers
23 views

pfSense: OpenVPN P2P with static IPs

I am in the process of migrating a plain OpenVPN p2p config to pfsense, so that after a DNS switch all peers can seamlessly connect to the pfsense instead of the old server. But i have some problems. ...
0
votes
1answer
85 views

Not able to forward Pfsense 2.4.4 Squid log to elk

I have tried a couple of options so far but not able to forward logs to my elk server. Can someone please help me on this and guide me what configuration changes I have to make in order to achieve ...
0
votes
2answers
405 views

pfSense allow ping only from 1 IP address

We are a dutch company with an office in the USA. This office has an pfSense firewall device with the 182.12.12.12 IP address . In the Netherlands' office we have an IP address like this: 100.12.10....
0
votes
1answer
60 views

scp to pfsense not working

When ever I try to scp a file from pfsense I get back what appears to be the help for pfsense's scp: scp admin@fw:/tmp/test /tmp/ usage: scp [-12346BCpqrv] [-c cipher] [-F ssh_config] [-i ...
1
vote
1answer
64 views

can pfSense captive portal grant internet access to IP which is assigned by Windows DHCP server only?

In our organization we have a wifi access point and IP addresses are assigned by a Windows DHCP server. We have MAC filtering enabled for internet access in the DHCP server but the issue is that if ...
0
votes
0answers
34 views

How do I assign a specific interface or IP for squid to use for outbound external authentication (ldap)

Background: I have a few pfSense servers that run a squid proxy, each one is configured with a central LDAP backend available over a VPN tunnel, is most cases this is OpenVPN but in one case we are ...
-2
votes
1answer
105 views

Windows server VM can't access internet through pfSense

System overview: 1.Ubuntu 18.4 running virtualbox. 2.Two VM machines, pfSense firewall and windows server 2016. I'am trying to configure the windows server to go through the pfSense, so i chosed a ...
1
vote
0answers
92 views

IPV6 Small Business Implementation - Windows DHCP/DNS, PFSense, IPV6

I have some confusion about IPV6 on a Small Business Network. I'm sure one part or the other is covered extensively, but I can't seem to find answers. (Background info) I have a home network that ...
1
vote
0answers
31 views

sudden lost of access to esxi vSphere network

Our lab setup consists of a vSphere Esxi server hosting some VMs. In front of VMs exists a pfSense router VM. All VMs are getting connectivity from router and additionally a openVPN server is set in ...
2
votes
0answers
20 views

Changing VMware Network Configuration [closed]

I am in an apartment that PavlovMedia provides DHCP; however, I'm trying to configure my own private network with a pfSense virtual machine as a gateway. Mainly, I just want to use DHCP from my ...
0
votes
0answers
209 views

Multiple IpSec VPNs in failover config - pfSense to Draytek

I am looking to create redundant IpSec VPN Tunnels between two sites. I already have one VPN operational but due to overlapping LAN IP ranges I cannot have more VPNs active at the same time for ...
0
votes
2answers
312 views

pfSense: Allow VLAN Access to all but WAN

I have machines in a VLAN and I need to have them access all but not get out to the internet. I have tried this (and lots of others options) but nothing is working. I simply need to block internet ...
0
votes
1answer
193 views

Share AWS DirectConnect between multiple accounts

AWS allows you to share your DirectConnect connection amongst multiple AWS accounts via a hosted virtual interface (instructions here). I have a pfSense device on the local side of an MPLS line for ...
1
vote
0answers
302 views

OpenVPN client connection gets stuck at “Pre-connection initialization successful” after reboot in Linux Ubuntu 18

My OpenVPN client version 2.4.4 connection is getting stuck after reboot. It started stucking after I configured the OpenVPN Server to pass a list of DNS servers for the OpenVPN clients. I have ...
1
vote
0answers
277 views

How do I make Arpwatch only send new activity/new station emails?

I had set up Arpwatch on my office's pfSense 2.4.3 gateway. Ever since I had done that, I started getting a whole lot of emails - most of them very useful, while some are less useful. I wonder if ...
0
votes
1answer
138 views

pfSense: add multiple static IP/MAC bindings?

I have a pfSense router that handles some labs. It is configured such that DHCP only hands out IP addresses for machines listed in the static IP/MAC bindings list. Whenever we upgrade a lab with new ...
0
votes
0answers
68 views

pFsense drops packets between 2 LAN interfaces - sometimes

I have a pfsense setup with the following output in ifconfig -a /var/log: ifconfig -a bce0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=c00bb<...
-1
votes
1answer
53 views

Graylog CSV Export is slow after upgrade

After I upgraded from graylog version 2.2.1 to 2.4.3, the csv export became quite slow compared to the previous download rate. I have to say that I did many changes putting it behind pfsense using ...
0
votes
1answer
55 views

NFS w/Kerberos - Network change broke auth?

So, I've recently changed my network setup a bit, and for reasons I'm still trying to suss out replacing the old router with a new PFSense box appears to have broken the authentication within the ...
0
votes
0answers
164 views

pfSense in VMware Workstation: How to map NIC to different VMnet?

I have 3 virtual networks in VMware Workstation. To make it easier to read, I have assigned 3rd octet of the IP Address based on VMnet ID. VMnet1 - 172.31.1.0/24 VMnet2 - 172.31.2.0/24 VMnet3 - 172....
0
votes
1answer
587 views

Split DNS and internal port forwarding

I have a pfSense firewall running in a pretty standard configuration, 1 WAN, 1 LAN. On both sides of the pfsense I'd like to make available a service via DNS name, lets say "service.domain.com". For ...
0
votes
0answers
52 views

OPNSense Have SSH but no Internet or web ui

I have OPNSense running in ESXi on a DL360 G7. Here's what my console shows LAN (em0) -> v4: 192.168.1.1/24 WAN (em1) -> v4: 10.0.0.199/16 (note, it's currently getting internet ...
1
vote
1answer
46 views

Suddenly lost access to pfSense

I've just installed pfSense in VMware and play around with the settings. Suddenly, I lost access to Web GUI. I ran tcpdump on it and was able to see the packet from my notebook reached to it. What ...
0
votes
2answers
196 views

Location of pfSense menu (startup script)?

When pfSense is boot, the following menu is displayed on the screen. When we select option number 8 (shell), how do we get back to the menu? What is the filename for this menu?
-1
votes
1answer
390 views

pfsense dns doesn't work anymore for a specific domain

I had a local webserver that was working fine and on which I had a website on domain example.com. I was also using a static public IP for the WAN with ISP #1. Now I decided to move the website to a ...
-1
votes
1answer
522 views

How to set up pfSense/OPNSense on virtual host?

I'm a little confused as how to to host a *Sense box as a VM and have it provide routing for the host. Internet -> Modem/Router (bridge mode) -> en1 on Dell r710 -> OPNSense in a VM Then ...
0
votes
2answers
216 views

VPN Connection to Windows Network behind Firewall

We have a Windows network with a single Windows Server 2012 server which works domain server as well as a file server, which is protected by pfSense firewall. We want to allow a specific user (with ...
0
votes
1answer
460 views

Unifi AP-PRO with pfSense running FreeRADIUS, with MySQL database externally

I'm in the process of moving from a set of Aerohive AP's to Unifi AP-PRO to increase the range of our wifi. Adding more Aerohives could be a solution, but they're way more expensive and I already have ...
0
votes
1answer
485 views

Configure LAN for IPv6 with SLAAC on WAN

My ISP assigns me an IPv4 address via DHCP and an IPv6 subnet through SLAAC. I set up my pfSense box to use NAT and DHCPv4 for my LAN network which works fine. However, on the IPv6 side, my LAN ...
0
votes
1answer
816 views

pfSense unable to LDAP bind to Active Directory Server

I've been instructed to setup an OpenVPN Server on our local pfSense VM. I've combed over tutorials and guides, netgate, openvpn documentation and I feel I must be missing something. I've tested the ...
0
votes
0answers
73 views

pfSense Port Forwarding with Static WAN IP

This is my first pfSense install and I'm trying to setup a WAN static ip portforward to internal ips for our clients to send data to their printers within our building. How I think this should / ...
0
votes
0answers
131 views

pfSense IPSec tunnel to AWS VPN fails to connect

I'm trying to set up a IPSec tunnel between an AWS VPC (using their VPN Gateway) and a pfSense. I have set up the IPSec config in pfSense according to the config I'm given from AWS. However, there ...
0
votes
0answers
209 views

PfSense double nat and opening ports with ISP modem

At the office we I have a router/modem from my ISP which cannot be used in bridge mode, unfortunately. So I'll have to work with double NAT. Setup: (82.xx.xx.xx "wan" - ISP modem/router - 192.168.2....