Questions tagged [pfsense]
pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.
845
questions
-1
votes
1
answer
52
views
PFSense: Subnet can not communicate to the outside
I have multiple subnets on a hypervisor with four Ethernet ports. Two are called subnets. Both of them are utilizing a NordVPN tunnel as their default gateway.
The first subnet LAN can talk to ...
0
votes
0
answers
14
views
Accessing adjacent remote network from existing network tunnel in pfsense ipsec
We have two offices, A and B, with IP segment 192.168.10.0/24 and 192.168.20.0/24 respectively, connected to each other using IPsec tunnel mode.
Additionally, office B has an IPsec tunnel mode ...
0
votes
1
answer
7
views
Wrong IP address returned for pfSense host name on a router with multiple LANs when using DNS Forwarder/Resolver
Question moved from StackOverflow:
Running pfSense 2.4.4 (first saw the problem in 2.0.3) using DNS Forwarder or DNS Resolver for Split-DNS with multiple LANs. LAN1 is 10.10.10.0/24 and LAN2 is 192....
0
votes
0
answers
97
views
Split tunnel configuration with OpenVPN not working on Ubuntu 18.04
I have Ubuntu 18.04 on my laptop and it has a VPN settings configured on it.
PfSense is the firewall and the VPN server is OpenVPN. Split tunnel is configured on that OpenVPN client. I can confirm ...
0
votes
0
answers
46
views
gRPC proxied through pfSense with HAProxy plugin
I am trying to make a gRPC server available through pfSense with HAProxy running as a plugin.
I have ssl termination at HAProxy and it works fine for a number of hosts.
But trying to set the gRPC ...
0
votes
1
answer
23
views
pFsense : A rule apply on user account
I have a pFsense user account 'foo.extern'. This account can log to the server with OpenVPN. It works fine.
Now i want to make a firewall rule to allow this account only access to the IP adresse 192....
4
votes
1
answer
255
views
Which LAGG type should be used for MLAG switches to CARP firewalls?
My network setup involves two firewalls in a Common Address Redundancy Protocol (CARP) group, each connected to an MLAG (Multi-Chassis Link Aggregation) configuration of Mikrotik switches. Onward ...
0
votes
0
answers
147
views
How to connect wireless clients to different physical subnets via a single access point but ensure traffic between subnets remains segmented
I’m trying to design a network with a pfSense Firewall / Router. In pfsense I have created four subnets that reside on separate physical ports (not VLANS) on the pfSense hardware:
The idea will be ...
-1
votes
2
answers
358
views
pfSense in disable all packet filtering mode allows web admin on WAN IP [closed]
A while back, I had a fiber internet connection installed at my business with a number of public IPv4 addresses. The ISP provided two blocks of IP addresses: a "P2P" block which contains a ...
-3
votes
1
answer
72
views
DHCP moved from [closed]
After connecting several Raspberry Pis running Ubuntu 23.10 to my switch, they are for some reason stepping on each others DHCP leases. DHCP is running on fpsense 2.7.2... Logs:
DHCPREQUEST for 192....
0
votes
0
answers
19
views
pfSense. Alias URL Table with TAR.GZ list on FTP
In pfSense, can I create a "Table URL" alias that points to a TAR.GZ file downloadable via FTP?
Or does it necessarily have to be a full list accessible via HTTP?
0
votes
1
answer
146
views
Reply traffic lost when using an NVA to SNAT
I am trying to implement the following in a lab subscription, as described in https://learn.microsoft.com/en-us/azure/architecture/guide/networking/ipv4-exhaustion#implement-snat-via-third-party-nvas (...
0
votes
0
answers
29
views
pfsense temporarly failed to resolve hosts
Suddenly I was unable to reach the outside world.
I pinged one IP on internet, it worked
I tried to resolve a hostname with the dhpd configured server, i.e. netgate/pfsense, timeout
I tried to ...
0
votes
0
answers
49
views
Can't ping / access GNS3 PFSense virtual device but can ping GNS3 VM on same subnet
I have a basic GNS3 network that I’m trying to setup with PFSense. I have managed to install the PFSense module and can now add it as a device within GNS3.
However after adding, configuring and ...
0
votes
1
answer
185
views
How to access pfsense's LAN without vpn?
I have the following setup and want to access both server A and server B by their IPs from the workstation without VPN and without port-forwarding.
What I have tried so far is:
In pfsense_1, I added ...
0
votes
0
answers
34
views
necesito configurar una regla de firewall en pfsense
chicos estoy haciendo una simulación de ataque DDoS utilizando máquinas virtuales (virtual box) ya logré hacer el ataque, sin embargo, necesito configurar pfsense para poder proteger mi servidor web ...
0
votes
0
answers
85
views
Network traffic being filtered on OVH Public Cloud's Private Network
We are currently attempting to set up an isolated infrastructure separate from the WAN using a firewall (pfsense) and private networks. We are experiencing connectivity issues on the virtual network ...
1
vote
2
answers
232
views
How would you set up a macOS laptop to maintain the same IP address between ethernet and wifi?
I have a situation where I need to maintain the same IP address and/or hostname between two network interfaces on several macOS laptops: the ethernet and wifi.
The topology is such that there is a ...
0
votes
1
answer
147
views
Forward (NAT) port on FW to the device without having GW set on it?
In short:
Is it possible to access the device/server (without the GW address set in the Network configuration of this device) from outside the device's LAN?
Current setup:
I'm renting an ESXi server ...
0
votes
0
answers
40
views
(Networking noob) I can't get network to work on a server using pfsense and juniper switch
I work at a company as an IT administrator, but my experience with networking is very limited. I was always focused on the OS and application side of things. Recently the only other IT administrator ...
0
votes
0
answers
153
views
Pfsense breaks certification chain
I have a problem I was thinking it was a simple one.
It seems it is not. Not from my point of vue :(
In the same GCP Project,
I have two independant VPC, one linked to the vtnet0 (LAN) of a pfsense 2....
0
votes
0
answers
75
views
pfSense L2 firewall not blocking half of DHCP traffic
I have a pfSense instance (NetGate SG-series), with setup:
802.11q enabled
LAN ports 1 (LANP) and 2 (LANB) with VLAN assignments
Interfaces assigned and enabled
LANP:
(1, 5t) tag configuration
...
0
votes
0
answers
400
views
Why does this traffic selector not match?
(Note: I'm really using pfSense, but I'm just going to focus on the ipsec.conf files, since pfSense doesn't seem particularly relevant to the issue.)
We're getting the following error from charon:
Aug ...
0
votes
0
answers
141
views
PfSense - Ha proxy Wan Ip timeout when outside network requests
Currently I'm setting up a home lab and I've the following architecture
Architecture
I've setup my ISP provider to redirect any 80 requests to my pfsense firewall.
Created a rule allowing any requests ...
0
votes
1
answer
318
views
haproxy on pfsense fw to guac
I am having some issues with setting up a publicly accessible guacamole server thru my pfsense, which is running haproxy.
Internet > pfsense
\ haproxy > guac
I have my domain DNS thru ...
0
votes
1
answer
172
views
What subnet mask to use for a virtual IP in pfSense
I have a subnet 192.168.0.0/24.
I want to create a new virtual IP address (VIP) in pfSense at 192.168.0.2.
What difference does it make what subnet mask I use for the VIP?
Should I set the VIP to 192....
0
votes
0
answers
163
views
OpenVPN connection failed
suddenly openvpn lost connection to server. The logs are following:
server logs:
Jul 21 00:07:40 openvpn 29858 100.90.2.29:62306 TLS Error: Auth Username/Password was not provided by peer
Jul 21 00:07:...
0
votes
0
answers
620
views
OpenVPN TCP connection to firewall failing: unknown error
I am encountering an error when attempting to connect to my office using OpenVPN. The error message:
Tue Jul 18 12:34:52 2023 WARNING: Compression for receiving enabled. Compression has been used in ...
1
vote
0
answers
495
views
deploying pfSense in OVH public cloud as a DHCP server in HA
I am trying to deploy two pfSense in the OVH public cloud (OpenStack).
Each has its own public IPs and public connectivity works without any problem.
Things become more complicated on the vRack part (...
0
votes
0
answers
51
views
How many ip's can i add in pfsense alias
I have a pfsense 2.4.4-RELEASE-p1.I have an alias problem.
I created an alias with ~100 subnets in operator cloud,
I created a rule with this alias, but it doesn't work.
To check, I created a rule ...
-1
votes
1
answer
44
views
Firewall failover internal ip
I have multiple servers at my data center and i want to switch to pfsense, but i don't know if it can automatically fall over to the second server that is a mirror from the first server.
So if the ...
0
votes
1
answer
223
views
pfsense firewall/NAT rules for 2 different LAN where LAN2 has public facing server
I'm looking for a pfsense ruleset that allows a client on LAN1 192.168.3.10 to access a public server on LAN2 10.0.0.2. ports 60000 -60015 TCP/UDP. I otherwise wish to keep these LAN's isolated from ...
0
votes
1
answer
501
views
UDP Broadcast Forwarding Between Subnets
We have an application that broadcasts UDP to allow for the detection of IP Based Systems on a network by an in house application.
We widely use Open Source and especially PFSense. It seems you cannot ...
0
votes
0
answers
38
views
grab https URL without import CA into PC from squid access log
1.The domain aa.com was belongs to our company and we have the public and private key of Wildcard certificate about aa.com.
2.We want to grab all of the URL from the access log which about *.aa.com, ...
0
votes
2
answers
501
views
NAT for Debian based WireGuard router in Hetzner cloud
I have rented several cloud servers from Hetzner. These are all on a private network (10.20.20.0/24), with only one server of them even having a public IP.
Following this German tutorial, I want to ...
0
votes
0
answers
104
views
HAProxy load balancing check
I have two LDAP servers that replicate together on my LAN. I have a Pfsense CE that performs a load balancing on my two servers for the requests from the WAN. Is it possible to check the number of ...
0
votes
0
answers
39
views
pfsense masquerede connection via OpenVpn
I've a remote site that accpet traffic only from my static address. On my pfsense LAN all works fine but if I try from my home, via OpenVpn connection I can't.
In my openVpn config I push a route to a ...
2
votes
1
answer
522
views
Why does my pfsense gateway break SSL for some internal hosts?
I have a proxmox cluster with pfsense acting as a firewall and gateway for the cluster nodes and VMs. VMs have no problem, but the cluster nodes can't browse any websites using SSL, which of course ...
0
votes
0
answers
750
views
DNS query refused when connected to WireGuard/pfSense
I'm using pfSense with OpenVPN for more a decade now. Also intensively used many services from pfSense (DNS resolver, DHCP, HA Proxy, SquidGuard, firewall of course...) In short - I do have some ...
0
votes
0
answers
977
views
DNS over OpenVPN from PFsense only working when in Full DNS (Use VPN DNS for all traffic)
I configured a DNS Resolver in our PFsense which I also provide as part of the DNS Server list to clients via OpenVPN. Clients can connect via OpenVPN and also resolve local names via the DNS Resolver ...
0
votes
0
answers
288
views
How do I change which interface gateway pfsense resolves to?
I've recently extended my network from one flat LAN to a couple interfaces using additional physical ports on my router and VLANs. I've kept the old interface up while I'm migrating and for testing ...
0
votes
0
answers
427
views
IPsec access from multiple local Networks over a single IP Address
I have to connect our company network with the network of a customer to access some of their resources. The IT department of the customer defined a IPsec VPN in tunnel mode with two phase 2 ...
0
votes
1
answer
700
views
How to run a script in a OpenVPN server hosted in pfSense when client connects?
I've got an pfSense 2.6 instance which hosts OpenVPN for clients. I'm testing with client version OpenVPN Connect 3.3.7 (2979).
There are some web endpoints with a dynamic IP addresses, so I can't ...
0
votes
1
answer
96
views
Cannot establish connection on two-way comms like SSH on Phase 2 VIP attached to LAN IP using NAT 1:1
As the title say, I cannot establish connection on two-way comms like SSH on Phase 2 VIP attached to LAN IP using NAT 1:1.
Phase 1 and Phase 2 is UP.
Phase 2 Remote IP is 192.168.1.248 and Local IP is ...
1
vote
1
answer
179
views
Google Fiber WAN PoE passthrough two ports of managed switch?
I have a network configuration I would like to make happen, but I'm at a loss at what to call this odd setup, which makes searching quite difficult.
I want to substitute the Google Fiber Networking ...
0
votes
0
answers
182
views
Tagged port does not work (switch netgear)
I have configured 2 VLANs with firewall (pfsense), but when I set port as tagged in each Vlan, every device lost wan connection and even IP address... I have no idea what could possibly be wrong. ...
1
vote
1
answer
2k
views
Redirect HTTP to HTTPS whilst allowing ACME challenges through the 'Standalone HTTP server' method in pfSense (with ACME and HAProxy)?
I use my pfSense with ACME and HAProxy extensions to manage and auto-renew certificates as well as having a reverse proxy with load balancing capabilities. In my ACME module I define my domains to ...
0
votes
1
answer
594
views
WireGuard VPN setup not returning data to client
I had a WG setup that worked great until my pfSense hardware crashed. Rebuilt on an old Dell box now; everything except Wireguard is working. Data seems to flow from peer through Wireguard to internet,...
1
vote
0
answers
33
views
pfsense device freeze at a time load balancing airtel works fine
We have 2 lease lines Tata and Airtel. Primary is Tata & Sec is Airtel If Tata down pfsense device freezes at a time load balancing airtel works fine but has been 192.168.1.1 not working.Anybody ...
0
votes
1
answer
417
views
Use a virtual Network in PFsense to redirect packages to device in another network
I'm using PFsense and i have this situation:
Network Example
I have a Pfsens already connected with "Site1" through OpenVPN. I can acess the "Device" normally in Pfsense network.
...