Questions tagged [pfsense]
pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.
826
questions
0
votes
0
answers
17
views
HAProxy load balancing check
I have two LDAP servers that replicate together on my LAN. I have a Pfsense CE that performs a load balancing on my two servers for the requests from the WAN. Is it possible to check the number of ...
0
votes
0
answers
31
views
pfsense masquerede connection via OpenVpn
I've a remote site that accpet traffic only from my static address. On my pfsense LAN all works fine but if I try from my home, via OpenVpn connection I can't.
In my openVpn config I push a route to a ...
- 101
1
vote
0
answers
37
views
Why does my pfsense gateway break SSL for some internal hosts?
I have a proxmox cluster with pfsense acting as a firewall and gateway for the cluster nodes and VMs. VMs have no problem, but the cluster nodes can't browse any websites using SSL, which of course ...
- 163
0
votes
0
answers
120
views
DNS query refused when connected to WireGuard/pfSense
I'm using pfSense with OpenVPN for more a decade now. Also intensively used many services from pfSense (DNS resolver, DHCP, HA Proxy, SquidGuard, firewall of course...) In short - I do have some ...
- 261
0
votes
0
answers
118
views
DNS over OpenVPN from PFsense only working when in Full DNS (Use VPN DNS for all traffic)
I configured a DNS Resolver in our PFsense which I also provide as part of the DNS Server list to clients via OpenVPN. Clients can connect via OpenVPN and also resolve local names via the DNS Resolver ...
- 97
0
votes
0
answers
30
views
How do I change which interface gateway pfsense resolves to?
I've recently extended my network from one flat LAN to a couple interfaces using additional physical ports on my router and VLANs. I've kept the old interface up while I'm migrating and for testing ...
- 1
0
votes
0
answers
29
views
IPsec access from multiple local Networks over a single IP Address
I have to connect our company network with the network of a customer to access some of their resources. The IT department of the customer defined a IPsec VPN in tunnel mode with two phase 2 ...
- 101
0
votes
0
answers
13
views
Netgate SG-2100 - OpenVPN can't login to CRM remotely
I haven't been using Pfsense for long and aiming to switch a raft of customers across to it for a bunch of reasons that I'm sure are obvious to all you long time Pfsense users.
Before I even consider ...
- 1
0
votes
0
answers
27
views
OpenVPN from Windows machine to remote machine through pfSense, with reverse traffic/routing allowed when connected
I've the following scenario:
At MainOffice:
firewall PFSENSE with IP WAN: 80.80.80.80, IP LAN: 172.19.2.1
server MAINSERVER with IP 172.19.2.10
At SecondOffice:
NO CONFIGURABLE FIREWALL
server ...
- 1
0
votes
1
answer
185
views
How to run a script in a OpenVPN server hosted in pfSense when client connects?
I've got an pfSense 2.6 instance which hosts OpenVPN for clients. I'm testing with client version OpenVPN Connect 3.3.7 (2979).
There are some web endpoints with a dynamic IP addresses, so I can't ...
- 60
0
votes
0
answers
44
views
VMware Host only networks: Hosts not receiving NULL/FIN/XMAS packets using PFsense router
Setup:
2 host-only ints each connected to a separate host on a separate network
PFsense VM routing between 2 networks (implicit accept on both networks, no other rules)
Can receive normal, syn,syn/ack,...
- 1
0
votes
0
answers
44
views
Cannot establish connection on two-way comms like SSH on Phase 2 VIP attached to LAN IP using NAT 1:1
As the title say, I cannot establish connection on two-way comms like SSH on Phase 2 VIP attached to LAN IP using NAT 1:1.
Phase 1 and Phase 2 is UP.
Phase 2 Remote IP is 192.168.1.248 and Local IP is ...
- 194
1
vote
1
answer
70
views
Google Fiber WAN PoE passthrough two ports of managed switch?
I have a network configuration I would like to make happen, but I'm at a loss at what to call this odd setup, which makes searching quite difficult.
I want to substitute the Google Fiber Networking ...
- 119
0
votes
0
answers
106
views
Tagged port does not work (switch netgear)
I have configured 2 VLANs with firewall (pfsense), but when I set port as tagged in each Vlan, every device lost wan connection and even IP address... I have no idea what could possibly be wrong. ...
- 1
0
votes
0
answers
40
views
AWS to pfsense site-to-site vpn
First of all, am a pfsense and AWS noobie, and this is my first big task on either system.
After creating a Site-to-site vpn between my PFsense andAWS instance, i can see the connections is ...
- 13
0
votes
0
answers
139
views
Static Route on IPSEC tunnel
I have a IPSEC tunnel configured as follows.
Site A (Sophos XG) 192.168.40.0/22 to Site B (pfsense) 10.1.1.0/22
At site B i have a Zabbix instance installed at 10.3.1.2 on a separate VLAN. I want this ...
- 165
0
votes
0
answers
95
views
Setup another proxy servers each client ip in squid pfsense
i am using squid proxy on pfsense and proxy server from proxy-seller.com. I want to configure proxy server for each client ip on squid pkg. eg: 192.168.1.100 will use proxy 171.16.235.18:3356@user:...
0
votes
0
answers
29
views
Is it valuable to do DNS Leak Testing directly from a firewall and not just from the client side?
I've been writing a tool that can be added as a package for pfSense, and essentially the tool allows you to perform a DNS leak test on any of the interfaces on the firewall appliance.
One developer I ...
0
votes
0
answers
58
views
pfSense: NAT port range to SSH on several servers using aliases?
In pfSense, is it possible to map several ports to a single port on several machines in a way that each port will target the same port on a different machine using aliases?
Here is a scenario and what ...
- 100
1
vote
1
answer
630
views
Redirect HTTP to HTTPS whilst allowing ACME challenges through the 'Standalone HTTP server' method in pfSense (with ACME and HAProxy)?
I use my pfSense with ACME and HAProxy extensions to manage and auto-renew certificates as well as having a reverse proxy with load balancing capabilities. In my ACME module I define my domains to ...
- 100
0
votes
1
answer
335
views
WireGuard VPN setup not returning data to client
I had a WG setup that worked great until my pfSense hardware crashed. Rebuilt on an old Dell box now; everything except Wireguard is working. Data seems to flow from peer through Wireguard to internet,...
- 199
1
vote
0
answers
26
views
pfsense device freeze at a time load balancing airtel works fine
We have 2 lease lines Tata and Airtel. Primary is Tata & Sec is Airtel If Tata down pfsense device freezes at a time load balancing airtel works fine but has been 192.168.1.1 not working.Anybody ...
- 11
0
votes
1
answer
194
views
Use a virtual Network in PFsense to redirect packages to device in another network
I'm using PFsense and i have this situation:
Network Example
I have a Pfsens already connected with "Site1" through OpenVPN. I can acess the "Device" normally in Pfsense network.
...
0
votes
0
answers
265
views
PFsense with user-specified WAN gateway
In my network I have two different gateways to access the internet.
Without PFsense, clients would configure a static IP and configure the gateway that they need. Most clients have two network ...
- 121
0
votes
0
answers
111
views
How can i send the logs with syslog-ng from my pfSense to a Ubuntu Server?
I wanted to send the logs from my pfSense to a Ubuntu Server with syslog-ng. I have searched how to do this but have not found a good solution. I have tried it several times, but so far it has not ...
- 1
0
votes
1
answer
153
views
Why do i see ipv6 addresses on haproxy logs?
We have received complaints that some users cannot access the site during the day. Somehow they see maintanence page. When we examined the haproxy logs, we saw that all 503 error's requests' source ...
- 1
0
votes
0
answers
124
views
HAProxy with PfSense - servers not resolving to HAProxy IP
Trying to set up HAProxy so that I can access my NAS externally via SSL.
From what I understand, when doing a DNS lookup on the NAS, it must resolve to HAProxy's IP. If this is the case, how do I ...
- 101
1
vote
3
answers
368
views
Internet access problems on subnet
Hello Server Fault friends!
I have a question that I believe should be easy to answer for someone who really gets how a typical subnet should be configured with a router such as PFSense.
My Problem: I ...
- 129
1
vote
1
answer
865
views
pfSense VLAN tagged and untagged packets on one interface
I'm running into an issue here, I'm sure I'm being a fool but after 4 hours thought I'd see if anyone can quickly educate me!
I have a new pfSense. Its going into an SMB client who currently only have ...
- 86
0
votes
0
answers
79
views
Can't communicate on remote ip using local vip through IPSEC (IPSEC is up + Test port works)
good afternoon.
I have the following problem in pfSense:
The Service for package Zabbix Proxy not want to go up.
The scenario is as follows:
pfSense has a IPSEC VPN with Zabbix Server
Zabbix IP is ...
- 194
0
votes
1
answer
274
views
Returns of UDP packets are discarded
I use High avaibility pfSense 2.6.0 cluster and I strange behavior with UDP when use Discord voice channel.
In fact, discord voice channel display "No route" and traffic analysis paquets ...
- 157
0
votes
0
answers
54
views
pfSense nat a port to a site-to-site openvpn host
I have 2 pfsense linked via a openvpn site-to-site configuration.
I have this : Site A with public IP : pubA, and a Site B that have a non-public-rootable ip, on site B I have a host hostB that I want ...
- 111
0
votes
0
answers
839
views
Dell Poweredge R640 - System BIOS has halted
I'm running pfSense on a Dell Poweredge R640, but after upgrading to the latest bios, it has trouble booting.
The attached picture says that LBR is not available.
Any idea what that means and how to ...
- 1
0
votes
0
answers
15
views
Application and Server Communcation Between Two Firewalls
I have a test scenario where I have an application elastic-agent (behind Pfsense Firewall A) that needs to send communication over 8220 and 9200 to my server elasticsearch (behind Pfsense Firewall B). ...
- 1
0
votes
0
answers
599
views
Docker does not work behind VPN: DNS or routing problems?
Hi all sorry for the noob question. I've read a lot of posts online but nothing seems to help.
I have a fresh Ubuntu 22 and fresh Docker install.
This Ubuntu machine is behind a pfSense router. This ...
- 9
0
votes
0
answers
80
views
Restrict an instance access through security groups to itself on aws (Pfsense)
My intention is to create a VPN server.
So i created and configured an instance on AWS as a VPN server (Pfsense), then i added in the security groups the destination 0.0.0.0/0 of the VPN port (1194). ...
0
votes
1
answer
449
views
VPN Site-to-Site pfSense to fortigate : authentication failed
I can't make my VPN connection between à Fortigate 7 and a pfSense working.
Problem seems to be on fortigate side with logs :
ike 0:IPSec StS:276: sent IKE msg (AUTH): 10.10.1.1:4500-><IP1>:...
0
votes
1
answer
330
views
clients on a pfsense with zentyal on local network/domain can't resolve/ping hostnames into ip address to use with Veyon
Hi I have network at a school setup with
pfsense as firewall, router, dhcp and captive portal (for wifi), domain: schoolname.intranet
zentyal: freeradius, ldap, dc, and dns
problem:
clients can't ...
- 111
0
votes
0
answers
1k
views
client_loop: send disconnect: Broken pipe from a ssh connection over OpenVPN behind pfSense firewall
I have a Debian 11.4 server running on a LAN behind a pfSense firewall. I'm using OpenVPN to connect to the firewall and open a tunnel on my server side LAN and connect to the server.
All fine, ssh ...
- 121
0
votes
0
answers
2k
views
Allow pfSense to route from LAN to WAN devices
New to pfSense.
My pfSense WAN = 192.168.1.50 (DHCP from my home router)
My pfSense LAN = 192.168.55.0/24
My Cisco switch = 'Default VLAN1 with 192.168.55.254`
I can ping from 192.168.55.0/24 devices ...
- 121
0
votes
0
answers
85
views
Routing IPSEC traffic to specific network (VM's) - pfSense / HyerV
G'day,
Environment: OVH
Hypervisor: Windows Server 2019
VPN: IPSEC pfSense Virtual Appliance with its own external WAN interface and a LAN interface to the Hypervisor's VM's
Issue:
We're trying to set ...
2
votes
1
answer
482
views
OVH IPv6 on ESXi -> pfSense -> VM setup
Currently setting up some VMs on an ESXi host on an OVH machine. I have two IPv4s on OVH including a virtual MAC address as needed by OVH. One IPv4 for the ESXi host itself, another one for the ...
0
votes
1
answer
191
views
domain "alias" in LAN
I have the following setup:
a registered domain, domain1.com, with several websites/webapps under different subdomains: sub1.domain1.com, sub2.domain1.com etc.
on my LAN I have a pfsense router and
a ...
0
votes
0
answers
1k
views
Why we get TCP retransmissions through IPSec Site-by-Site Tunnel
We use two pfsense firewalls at two locations and have connected the locations using IPsec site-by-site. That had worked well for a long time, now we had installed the 2.6.0 update at both locations ...
- 886
0
votes
0
answers
515
views
Openvpn allow access to clients from private network
I do have a setup with pfsense. I have configured 2 LAN subnets: 192.168.50.0/24 is a DMZ 192.168.100.0/24 is a Management
Then in DMZ I do have an openvpn server. To that server multiple clients are ...
- 101
0
votes
0
answers
172
views
pfSense with FRR not sending RIP advertisements
I've been banging my head against this for a week, on and off.
I have a pair of pfSense firewalls (2.6.0-RELEASE) configured for high availability. They support an internal LAN, a DMZ, an OpenVPN ...
- 13
0
votes
1
answer
1k
views
Pfsense ftp connection
I have set up my pfsense firewall and want to make a connection to my ftp server from the outside. i have set up a port forward to my server with the following data (img 1/2) but i cant seem to make a ...
0
votes
0
answers
4k
views
pfSense - How to allow traffic only to the internet for part of hosts?
I have computers on my network that I want to allow access to LAN resources - I created an alias with their IP addresses (LAN_WHITELIST). For the other devices I would like to do Internet access only.
...
- 105
1
vote
1
answer
1k
views
How to get hard disk status from RAID with SmartCTL for monitoring purposes?
I have a FreeBSD with a RAID running 3 Hard Disks.
I was given the challenge to monitor its RAID - If a hard disk fails or it presents some problem i need to know.
So, the first thing i am doing right ...
- 194
0
votes
0
answers
388
views
Re-route all internet traffic through firewall
I'm setting up a dual firewall setup with a DMZ and an internal network. The servers are dedicated root servers running Debain Bullseye, all necessarily having a NIC with a public IP. In addition, ...
- 51