Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

Filter by
Sorted by
Tagged with
0
votes
0answers
6 views

Setup L2TP Tunnel to transport Ethernet Frames on pfSense and xl2tp

We have two sites connected through an IPSec Tunnel established between a pfSense Firewall on each side. Hosts from both sides can communicate fine through IPSec. We have a new application using ATA ...
0
votes
0answers
7 views

hetzner private network, 1 docker host, 1 pfsense, I keep getting “TCP Previous segment not captured” from my containers

this is the network design https://imagebin.ca/v/5NNDpuDwq9PT it's hosted on hetzner, 1 firewall with a public facing interface, pfsense. 1 docker host with two interfaces, one connected to the ...
0
votes
0answers
11 views

HaProxy pfsense 503 Service Unavailable

I am trying to configure Haproxy on Pfsense which has two backend web servers. In /servcies/Haproxy/Stats/ the servers are present and working. My file: /var/log/haproxy.log/ is empty… I do not know ...
0
votes
0answers
10 views

PFSense HAProxy DNS Rebind

I have installed PFSense and HAProxy Package behind Provider router with On Public IP, when trying to redirect all HTTP/HTTPS traffic to ip assigned to PFSense, I am getting HAProxy Front Ends ...
0
votes
0answers
13 views

Cannot Access Web Interface for pfSense Installed on a Virtual Machine

I'm a bit lost on this one as I had this working a while back, but now I'm picking back up testing on a server I cannot get this working. I can see the pfSense on the physical router, but when I ...
0
votes
0answers
20 views

How to reliably block sensitive content on twitter?

Since the introduction of twitters content policy, possibly sensitive content is marked and users have to skip the warning to actually see the tweet. Is there a way to block possibly sensitive tweets ...
0
votes
1answer
97 views

How should certificates for multiple separate sub-domain servers be issued/renewed with Let's Encrypt?

Upgrading my home infrastructure to learn as well as be more secure, I have not been able to find out how best to get certificate(s) issues and installed across my servers, which comprise: Firewall (...
0
votes
1answer
70 views

pfsense OpenVPN client address issue

First VPN client works like a charm (tunnel is 192.168.104.0/24 -> 192.168.104.2 assigned). But once another client logs on an identical IP is assigned. It looks there is no address pool to be defined!...
0
votes
1answer
50 views

BIND9/DNS lookups stopped working after upgrading our Comcast modem/gateway

OK here's our setup, we're running pfSense as our firewall/router. We have a dual-WAN with a Comcast Business Gateway and another local ISP. We're running Samba as the domain controller & Bind9/...
0
votes
1answer
18 views

ESXi vmkernel web gui issue

I have ESXi 6.7 running with pfSense on it as a virtualised router. pfSense, ESXi and other devices are on management VLAN 10. User devices are on different VLANs (lets assume 20 for now). pfSense ...
0
votes
0answers
19 views

Certificate for content filtration

Faced such a problem: the school has state Internet with content filtering (on the provider side or where they do it) using the Inside Systems certificate, without which https connections do not work ...
0
votes
1answer
75 views

Pfsense and Dns Resolver - SSL/TLS for internal access?

I have a Pfsense box that is able to issue/renew acme certificates, with haproxy installed, that has two backend servers that use the generated acme certificate that works fine. (email and nextcloud ...
1
vote
1answer
63 views

pfSense on ESXi VLAN and interface definition dilemma

I'm trying to set up a virtualised pfSense router in ESXi on a Dell server. After many hours of reading, experimenting, watching Youtube videos etc, I'm close to pulling my hairs out... The setup: - ...
1
vote
1answer
40 views

How large does site-to-site VPN subnet need to be?

Users on the data VLAN in our HQ and future remote office(s) will need to access files, floating network licenses etc. from distant servers, so we will need a site-to-site VPN for the data network(s). ...
0
votes
0answers
46 views

freebsd packet filter match last digit of IP address

On my freebsd system I want to use port forwarding to distribute incoming traffic, based on the last digit of the source IP. The following works on linux with iptables: iptables -t nat -A ...
0
votes
0answers
25 views

Why do some packets seem not to participate in connection tracking on my linux firewall?

I have a KVM host with a virtual pfSense that should NAT traffic from other virtual boxes behind the pfSense's public IP. The pfSense is connected to two bridges: vmbr0 is connecting it to the public ...
0
votes
0answers
21 views

IPSec + IKEv2 with Pre-Shared Key between Open vSwitch and pfSense

I have a simple network made of an Open vSwitch Ubuntu Server-based virtual machine connected to a pfSense firewall. I would like to connect this two with an IPSec + IKEv2 secure tunnel. {10.2.2.0/24}...
0
votes
1answer
384 views

What do the following mean: TCP:RA, TCP:FA ,TCP:PA, TCP:S, TCP:SEC

I'm specifically looking for a definition of what the following mean: TCP:RA, TCP:FA ,TCP:PA, TCP:S, TCP:SEC The context is that I'm looking at some pfSense logs which are showing rejected packets by ...
0
votes
0answers
48 views

pfSense - can't connect to server from LAN with DDNS address

I've tried looking for a solution to this, but I'm honestly at a loss for what to search for. I'm using pfSense with a separate LAN and DMZ with several port forwarding rules. I'm hosting a service I ...
0
votes
0answers
15 views

Configuring with openVPN with pfSense

I'm having problems configuring the IP tunnel the network in pfSense 2.4.4 The LAN network is a 10.1.0.0 /16, the IP assigned to the server is 10.1.250.2. My problem is the following if I use this ...
0
votes
0answers
12 views

resolve dns record behind pfsense

We have DMZ behind pfSense firewall. In our DMZ we have Windows DNS server and define one record and we connect to DMZ with OpenVPN. Telnet is OK (telnet IP-DNS-Server 53), but when checking nslookup ...
0
votes
1answer
58 views

Reverse proxy using haproxy redirection of node-red dashboard

I have multiple node-red servers running behind a HAProxy reverse proxy which runs as apart of a pfSense box. I want to access different node-red instances by accessing the pfSense box at different ...
0
votes
0answers
37 views

OpenVPN Server/Client Setup - Clients on both sides can't reach each other

I am hoping that someone can assist me with this issue, as it's kinda boggling my mind. The base-level issue is that clients on both side of an OpenVPN tunnel cannot talk to eachother. The goal is ...
2
votes
1answer
160 views

Kubernetes + Rancher: multiple VLANs

I intend to deploy a k8s + Rancher cluster on my local network, but my environment has several VLANs, with pfsense acting as a firewal and router between such VLANs. My cluster resides in XCP-NG as a ...
2
votes
1answer
100 views

SSH Client freeze connect to SSH server with multiple network interface

Case 1: SSH host has ONE network interface Routing table for host SSH: [SSH] $ ip route default via 192.168.211.1 dev eth0 192.168.211.0/24 dev eth0 proto kernel scope link src 192.168.211.119 ...
1
vote
2answers
56 views

Is it possible to apply firewall on LAN to LAN packets with just PfSense and a layer 2 switch?

Is it possible to apply firewall rules on LAN to LAN packets? Imagine the following architecture: To get a valid IP, the clients must authenticate to PfSense LAN network using 802.1x against the ...
0
votes
0answers
33 views

Sophos with PFSense: How to Route Traffic with VMware ESXi

I am running ESXi 6.7 on a physical computer with 5 NICs. I have a PFSense virtual machine acting as my gateway, providing DNS and DHCP services to my client computers. I'd like to inject Sophos XG ...
0
votes
0answers
40 views

IPSEC+NAT issue (attempted with pfsense)

I've been trying to join two networks (A) 172.17.0.0/22 and (B) 10.80.0.0/14 with IPSEC and pfsense. So that computers on the (A) network can connect to computers on the (B) network. No big deal, ...
0
votes
0answers
22 views

Sharing public Wan IP Subnet between 2 locations (Site to Site WAN?)

An ISP has allocated us a /27 to use. We need to use some of the IPs within the /27 in a separate location where the ISP (transit) is a different ISP. Public IP Subnet (/27) <=> Pf Sense (PF A) &...
0
votes
0answers
106 views

pFsense OpenVPN routing issue

this is my scenario pFsense server (Lan ip: 192.168.1.1/24) running OpenVPN server (tunnel network: 10.1.11.0/24) configured as Remote Access (PeerToPeer has same problems!) Remote Network: 192.168....
0
votes
0answers
85 views

FreeRADIUS: EAP-TLS not configured correctly?

UPDATE: I played around a little more and tried using a Radius testing tool on my laptop - I entered the RADIUS server, shared key, etc, and it successfully contacted the server and returned "Assess-...
0
votes
1answer
136 views

Route only specific subnet through OpenVPN tunnel

I know there are many similar postings out there, but none of them could solve my issue. I have to Sites: A and B which are connected via OpenVPN tunnel. I would like to route a specific subnet of ...
0
votes
1answer
41 views

Is it possible to track new querys on DB?

I'm searching for a new options all days and I'm making a new Word file with all the information I get but I can't reach a conclusion. I'll explain the main idea. My idea: User (Employee, client) => ...
0
votes
0answers
31 views

No memory demand for OPNSENSE on Hyper-V

I have a OPNSENSE virtual machine on Hyper-V. Initially the memory was set to static and the memory demand was always 0 (not display). I also tried setting dynamic memory but nothing has changed. ...
0
votes
0answers
152 views

pfSense won't route NAT or OpenVPN traffic to certain LAN IPs

I have a Netgate SG-5100 running the latest PFSense (2.4.4 at the moment). I'm facing an odd issue where certain IPs on my LAN are not reachable when the traffic originates on the WAN side - either ...
0
votes
0answers
30 views

pfsense OpenVPN won't route to static IPs on LAN but will to DHCP IPs

I have a pfSense firewall (Netgate SG-5100) and am facing an odd issue. When I connect to the firewall externally through OpenVPN I can only access certain servers on the LAN. All the servers have ...
1
vote
1answer
108 views

VLAN not working on PFSense (SG 1100) with HP switch (HP E3500-48G-PoE yl)

Recently I bought a PFSense server (SG 1100) and a HP switch (HP E3500-48G-PoE yl). My idea is to create VLANs on the PFSense server, and use them on the connected HP switch. I have found a ...
0
votes
1answer
77 views

High bandwidth ARP traffic on LAN interfaces

I'm using a PfSense Firewall with a few VLANs since over 4 years and in the last couple of days I've noticed network connectivity issues in two of the VLANs. Using the web interface I'm seeing ...
0
votes
1answer
19 views

Opensense - Uses route but is directly connected

I have the following configuration: Network Architecture Router 1 (192.168.5.1/28) with Network 192.168.1.0/24 (Opensense) Router 2 (192.168.5.2/28) with Network 192.168.2.0/24 (PfSense) Server 192....
0
votes
0answers
49 views

how to route from WAN to another third net behind LAN on pfsense

I have the following situation: I need to get the WAN network properly routed to LAN2 behind the Pfsense firewall: 192.168.60.0/24 (WAN) <-> (192.168.60.90) pfSense (192.168.191.90) <-> 192.168....
0
votes
1answer
482 views

Allow traffic from 192.168.0.0/24 to 192.168.1.0/24

First off, its been years since I've really dove into anything network related so I'll try to explain the best I can and accept I probably messed up somewhere along the way. My primary network (ISP ...
0
votes
1answer
852 views

pfsense - route OpenVPN roadwarrior over IPSec to secondary office

Having some trouble connecting clients from one office to the other. (10.1.1.0/24) (192.168.5.0/24) Office ONE <--- IPSec ---> Office TWO ^ | v Road ...
0
votes
0answers
52 views

Vlans with pfsense and sg 250 cisco switch

I have this window pc running commfort (messaging chart server) previously resided on the default vlan (vlan 1). I setup pfsense NAT Port forward rule to expose this machine and external users can ...
0
votes
0answers
68 views

pfSense openvpn site to site vpn and remote vpn route issues?

I have 2 installed firewalls. The first has a public IP and 2 openvpn servers: site-to-site(to connect with the second one) and remote vpn for client connections. The second one located in local ...
5
votes
7answers
3k views

Multiple devices with one IPv6 to the Internet?

I want to connect several devices (in the LAN) to the Internet via a single public IPv6 address. Unfortunately I did not find a good way to do this. The only idea I had was to tunnel everything from ...
0
votes
1answer
79 views

How to use my router's Mac Address on Pfsense installed on Esxi

My ISP bind my router's Mac address so only this router can connect to their pppoe server, now I want to connect it on Pfsense installed on Esxi for better configuration options but pppoe server is ...
0
votes
1answer
86 views

pfsense with only carp addresses

I currently have two pfsense boxes with a standard carp setup as per the docs, it works great. Two part question here: how does anything even work? My experience when accidentally having two ips on ...
0
votes
0answers
24 views

How to remove readonly option while booting pfsense after crash

On a pfsense System there is a issue after a crash, so I boot in recovery mode from a USB Device and do a fsck -yf on the root drive. Now after that step I do a normal boot but the system still boot ...
1
vote
0answers
483 views

Expose Kubernetes cluster behind a pfSense

I installed a Kubernetes cluster on a Bare-metal sever. This server contains a Proxmox hypervisor, I have the following virtual machines a pfSense (192.168.9.254) two masters for the Kubernetes ...
0
votes
0answers
60 views

pfSense multi site-to-site vpn with ipsec pointing same local network

I've an ipsec working on my pfsense with this configuration. Sites and subnets: Site A: 10.1.0.0/16 Linking sites: Site A (Server) < 10.0.2.150/32 > (Client) Site b (Server) < 10.0.15.130/32 ...

1
2 3 4 5
15