Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

Filter by
Sorted by
Tagged with
-1
votes
0answers
17 views

pfSense OpenVPN config with 2 WAN connections

Initially I had only one WAN connection but I got a new one for redundancy, thus now I have 2 WAN's (WAN1: 100.100.100.1 and WAN2: 100.200.100.1) configured as WAN LOAD BALANCER (following ...
0
votes
0answers
8 views

Can't connect to XAMPP using pfSense

good afternoon I have a webServer behind a pfSense and also a static IP address. My efforts are all for trying access my webserver using the static ip address (Access remotely) using a specific port. ...
0
votes
0answers
33 views

Unbound not returning A records over IPv6

I recently replaced my pfSense installation with OPNsense and have been struggling a bit with the Unbound installation. In short, it's IPv6 enabled and everything works well (both IPv6 and IPv4) in ...
1
vote
1answer
28 views

Danger of leaked PSK (password) in IPsec tunnel

Let us say I have a IPSEC tunnel between a Pfsense firewall and a Cisco firewall. In the Pfsense panel, when configuring a Site-to-site VPN between them, there is a PSK which is common in both ends, ...
0
votes
0answers
55 views

PFsense NAT settings for proxy usage

So my PFsense machine is the default gateway of the network. I want all HTTP(S) traffic that is sent to be sent via a Proxy: Polarproxy. Polarproxy declare the following iptable rules for doing so, ...
0
votes
1answer
76 views

Where are the logs for pfSense's dynamic DNS client?

In the pfSense web interface, under Services -> Dynamic DNS -> Dynamic DNS Clients -> Edit, there is a checkbox labeled "Enable verbose logging", which the pfSense docs claims to &...
0
votes
0answers
122 views

OPNsense WAN failover causes disruption when non-active WAN is down

I have the latest version of OPNsense set up in a VM on ESXi 7. OPNsense is very similar to pfSense, and I suspect the solution would apply to both. All the NICs are PCI passthrough devices: A ...
0
votes
0answers
16 views

Routing between 2 openvpn subnets

I have 2 subnets both using openvpn on pfsense. 10.0.9.0/24 is a VPN meant for servers, client to client enabled. static IPs. 10.0.8.0/24 is a roadwarrior setup with multiple clients connecting. I'm ...
0
votes
0answers
19 views

Mutli Wan, Multi LAN virtual ip routing traffic

My topology id shown on the picture below. My question is: How can I make the user on my LAN choose which VPN there traffic goes from. (the management of VPN should be just on firewall pfsense). This ...
0
votes
0answers
16 views

How to generate pfSense Suricata alert in interface (OPT1) LAN?

pfSense em2/OPT1 172.31.31.1 host 172.31.31.2 I've tried to use nmap to scan pfSense em2/OPT1 interface (172.31.31.1) from host (172.31.31.2) but I still did not see any Suricata alert at all on ...
0
votes
1answer
19 views

pfSense view allowed/permitted log

I've just installed pfSense and noticed that it only log "blocked" traffic. *Image taken from https://docs.netgate.com/pfsense/en/latest/monitoring/logs/firewall.html How do I enable "...
0
votes
1answer
38 views

HAProxy send-proxy to Nginx

I am trying to reverse proxy clients to a web server through HAProxy and Nginx with SSL traffic using SNI. With the standard configuration, the web server sees the HAProxy IP and connects. When ...
2
votes
0answers
47 views

Need help configuring BIND on Pfsense as an authoritative DNS Server

For a few weeks now I've tried configuring BIND Server on my Pfsense Router as an authoritative DNS Server. I own a domain bought from RoTLD, I've set my nameservers to my external static ip, and they ...
0
votes
0answers
7 views

What is the source file of /raddb/sites-enabled/inner-tunnel-peap in PFSENSE

The default inner-tunnel-{peap or ttls} has sql module disabled so the username/password pair cant be validated during authorize, session check etc. I enabled them manually, everything worked perfect. ...
0
votes
0answers
20 views

How to deploy an out of band pfsense FW

I would like to install pfsense as an out of band firewall, and have it issue TCP RST and TCP CLOSE packets whenever a connection needs to be denied. Has anyone done this and how?
0
votes
0answers
27 views

Pfsense OpenVPN OneLogin

I'm trying to integrate pfsense openvpn with our Onelogin for authentication, does anyone have any experience? Google search didn't help, and there wasn't any clear guide in netgear, pfsense, or ...
0
votes
2answers
77 views

Isolate high risk terminals from the rest of a subnet

I have a secure subnet 172.20.40.0/24 but I have terminals where security can't be guaranteed and I have no control over protocol (Exam rooms, external user access). I'd like to set these up on a ...
0
votes
0answers
19 views

How to implement firewall to grant network access for VPN users as-needed (per-user principle of least privilege, OpenVPN)

How can I setup OpenVPN in conjunction with my firewall in such a way that my VPN users' traffic is DROPed by default to all network resources, and only ACCEPTed through the firewall if that user ...
0
votes
0answers
59 views

Pfsense Web Configurator Doesnt Work

I am recently having this issue whenever i try to access to pfsense web gui, the connection time out, i use nmap to scan port 80 and 443 and those ports are not available, also used the -Pn argument ...
1
vote
1answer
407 views

Offloading PPPoE from an OPNsense router

I'm running opnSense, a FreeBSD-based firewall and router similar to pfSense, in a virtual machine under VMware ESXi 7 on a Dell PowerEdge R230, as a router for my home network. No other VMs are ...
0
votes
0answers
26 views

Configure PFSense to reach subnets not directly connected to LAN INTERFACE

Good afternoon, Kindly note i am new to Pfesence, I need the device to reach the 172.30.28.0 subnet which is it is not directly connected to. To the best of my knowledge PFsense can not route traffic ...
0
votes
0answers
39 views

Is it possible to configure OPNSense/PFsense as pass through firewall with IPS mode?

I have a CISCO firewall with all static public IP's are configured, I do want to add one more layer of protection on top of the firewall using Suricata IPS. The real problem is, if i place my "...
0
votes
0answers
19 views

how to config dynamic nat in pfsense firewall?

Sorry for asking you guys something but i'm a newbie in pfsense. So, i'm really not understand how to config dynamic nat (as cisco router) in pfsense? if possible, can you show the step-to-step to ...
0
votes
1answer
47 views

pfSense OpenVPN on AWS VPC

We are in the process of migrating our office servers to AWS to finally decommission. Since we are familiar with pfSense, we are using a mix of AWS services but want to use pfSense as a the OpenVPC ...
0
votes
1answer
78 views

Is IP Forwarding possible for OpenVPN using pfSense on Google Cloud Platform?

I have a scenario with a pfSense machine (subnet x.x.0.0) on GCP, IPSEC vpn with 10 Site-to-Site is working normal but OpenVPN is not, the struggle resides in routing the packets through OpenVPN ...
0
votes
1answer
48 views

Pfsense OpenVPN : Why is a client IP used as a gateway?

I am wondering why a client IP (172.21.0.2) is used as a Gateway for the OpenVPN subnet (172.21.0.0/20) ? This IP is attributed to the first client connected. Note that I did not encounter any issue ...
0
votes
1answer
19 views

deploy a vpn from an appliance

I have a client (for our SOC) whos home is protected by a PAN 200 firewall (palto alto) but doesnt have a static ip address. The issue Im facing is how to send all the logs to our vps without having ...
0
votes
0answers
73 views

OpenVPN server inside a (second) LAN: not working from outside second firewall

I've been trying to get OpenVPN working from behind a second firewall. I've tried two main ways: the standard OpenVPN Access Server installed on Ubuntu, which involves setting port forwarding and ...
-2
votes
1answer
191 views

Firewall rules does not apply to pfsense hosted machine [closed]

I am using pfsense as my home firewall and configured multi-wan setup. In addition, I have installed package 'Telegraf ' package for exporting my pfsense stats into InfluxDB, also in 'Telegraf' ...
0
votes
1answer
23 views

xinetd doesn't read “included directory”

I want to monitor my pfSense-Box with check_mk. Therefore I need access to a certain port via xinetd. I found a descripton for that in: https://forum.netgate.com/topic/99612/pfsense-2-3-check_mk-...
1
vote
0answers
32 views

IPSec tunnel with pfSense networking issues

I'm having networking issues with a pfSense appliance launched from AWS market place. The network looks something like this: We connect to our customer checkpoint appliance. They require that we ...
1
vote
0answers
12 views

How can I configure outer and inner PFSense boxes to allow specific traffic to pass, and so devices can ping each other?

I have the following infrastructure currently set up, with colors for what I would like to achieve: The outer pfsense (EDGE) is currently providing a DMZ to the public and OpenVPN to our road ...
0
votes
0answers
28 views

PFSense - use specific gateway for a wildcard domain

I'm using PFSense 2.4.5 with 2 Gateways, First gateway is used for all traffic, secondary gateway is used only for failover. Now I would like to pass only some services like MS Teams through secondary ...
0
votes
0answers
143 views

bbb behind pfsense/firewall/nat

I have a virtualized server with 5 vm, and I have one domain and only 2 public IP (can not buy more IP). vm1: pfsense, eth1: public IP x.x.x.x, eth2: local IP: 10.0.0.1 vm2, vm3, vm4, vm5 (is empty) ...
0
votes
0answers
61 views

choose between multiple pppoe servers connected to the same switch

I have a big 48ports managed switch, on this switch there are connected two ONT/PON zyxel adapters over their eth port, each one is equipped with 1 / 500 Gbs fiber connectivity of the same ISP and two ...
0
votes
1answer
33 views

Pfsense open port to internet connection

I switched from Ubuntu to pfsense. Which ports and how to open the internet to work? If I do any (the last rule works) but that's not what I want. i just want to open (53,80,443) Pfsense Ubuntu ...
1
vote
1answer
191 views

Forest trust relationship between WAN and LAN through Pfsense

I'm using Pfsense with 3 interfaces : LAN, DMZ and WAN. The LAN contains my Domain Controller and my main forest of course (abc.com), the DMZ contains some web servers. The other forest is located ...
0
votes
0answers
45 views

IPSec Phase 2 Configuration For Translated Subnets?

I have two networks with the 10.0.0.0/8 subnet I'm trying to connect via IPSec tunnels. I have the phase 1 configurations working but am a bit stuck on the phase 2 configurations. Each firewall used ...
0
votes
1answer
71 views

Openvpn site-to-site: cannot access remote network, remote network can access local

I have poured over so many suggestions and spent so many hours (upon hours) on this and simply cannot come up with why a specific vpn connection is only one-sided. I have a centos aws ec2 server (...
0
votes
0answers
91 views

Squid and Squidguard forces restricted mode in youtube

I configured a squid & squidGuard on pfsense to filter and log access at the school. For some reason, we are unable to watch some videos on youtube with restriction limitation ("youtube ...
0
votes
0answers
733 views

pfSense - Port forward through site-to-site VPN

I'm trying to solve a problem on my setup, and kindly ask your help. This is the scenario. Site 1 Internet connection via 4G/LTE provider, with natted connection pfSense firewall 172.20.0.0/25 LAN ...
0
votes
0answers
43 views

OPENSTACK CLOUD UBUNTU - vm behind pfsense, doesn't surf internet well (some sites yes some others no)

I have this configuration, and I don't manage to figure out the problem: pfsense vm with LAN 172.25.0.10 and WAN 192.168.10.10 (I did pfsense updates, ping, traceroute, so in internet works ok.) vm ...
0
votes
0answers
16 views

How to connect 2 IPSec sites with each other via the “main site”

First of all, i'm originally a software engineer with some network knowledge so no network specialist. At my current job i'm also responsable for the network. I say this because it may be a bit stupid ...
0
votes
0answers
202 views

VMware nested ESXi + pfSense + VLAN trunk lab

I got a lab issue. The environment is: A nested ESXi env 3 x ESXi 6.7 U2 VMs within the 1st level ESXi One VCSA 6.7 U2 VM within the 1st level ESXi A pfSense 2.4.5-p1 VM within the 1st level ESXi 2 x ...
0
votes
1answer
370 views

Pfsense DNS port-forwarding

I've encountered a problem when port-forwarding a DNS server using PFSense. I've pf'd many services on this same firewall, only am I unable to port forward a DNS server. DIG dns using local address: ...
0
votes
0answers
54 views

Trying to port forward client vpn connection on pfsense to computer on local network

I set up a vpn connection as a client to a remote network to link it to my home network. While I'm able to ping computers on the remote network I can't do things like make the remote servers connect ...
1
vote
1answer
29 views

kernel message, who knows what this means

kernel: [2427107.300793] traps: ATA-0 [27274] trap int3 ip:7f2c48115064 sp:7f2c22e9ad90 error:0 in VBoxDD.so[7f2c480ec000+155000] the message is recorded in the virtualbox host system when this comes ...
0
votes
0answers
48 views

pfsense wireless access point is not connecting to a wireless repeater

My pfsense machine is currently connect to an wifi AP. To extend the wifi range I bought an tplink wifi repeater. Pfsense lan 192.168.1.1 Lan range 192.168.1.100- 199 Wireless access point's static ip ...
0
votes
0answers
17 views

access vpn network behind pfsense from client using another vpn?

I have this model: user -vpn-> pfsense (local network: 10.211.1.0/24) -vpn-> aws (172.31.0.0/16) (pfsense to aws is site-to-site vpn and always up) I want user's able to access private network ...
0
votes
0answers
21 views

pfSense WAN2 w/OpenVPN Routing Issue

I seem to be having an issue with this, 6 days stuck on the same issue. I have a Multi-WAN situation where I want only want OpenVPN to be used when I am failed over. So far I have made sure OpenVPN is ...

1
2 3 4 5
16