37
votes
Multiple devices with one IPv6 to the Internet?
IPv6 is designed to not do that. Trying IPv4 style NAT with IPv6 will break things. That said, I'm pretty sure you can do NAT IPv6 with Linux iptables, so it's not impossible. But I would strongly ...
- 7,662
21
votes
Multiple devices with one IPv6 to the Internet?
IPv6 doesn't have a NAT standard the way IPv4 does. There is an EXPERIMENMTAL RFC for one-to-one NAT (one outside address for each inside address) on IPv6, but explicitly forbids what you want to do (...
- 3,198
16
votes
Accepted
ESXi network setup for VMs which connect to the Internet through PfSense
WARNING about your setup
I would advise you caution using this system in this setup, if you have only one physical adapter and then only one uplink to the universe from the system. I would ...
- 787
10
votes
Accepted
Add an alias to a pfSense interface?
Yes, it's possible but its configuration is in a location that isn't intuitive. Here's how:
Go to the Firewall > Virtual IPs menu
Click Add
Click IP Alias
Select the Interface to add the IP alias to
...
- 396
10
votes
Accepted
What do the following mean: TCP:RA, TCP:FA ,TCP:PA, TCP:S, TCP:SEC
They represent the TCP flags, indeed. RFC 793, 3.1:
Control Bits: 6 bits (from left to right):
URG: Urgent Pointer field significant
ACK: Acknowledgment field significant
PSH: Push Function
RST: ...
- 44.5k
9
votes
Accepted
Netbalancer vs pfsense lan graph traffic? Which one is correct?
They are giving (roughly) the same data. Units matter. :)
pfSense is using megabits per second, and Netbalancer is using megabytes per second.
- 109k
8
votes
Multiple devices with one IPv6 to the Internet?
IPv6 addresses are not the most powerful way to track. DNS traffic shows where on the Internet you are going. On desktop and mobile, ad and social tracking identifiers follow users across devices and ...
- 30.9k
7
votes
Multiple devices with one IPv6 to the Internet?
As others have noted, there are many ways your devices will be tracked. Even if you had thousands (instead of just dozens) of them and mapped them all on same IP it wouldn't make much difference.
...
- 2,459
6
votes
Configuring Pfsense via ssh
Perhaps its easier when you have a look at ansible and playbooks. There are some playbooks for pfsense and i think you find some more. There you can make templates and configure your firewall over ssh ...
- 1,428
6
votes
Routing between pfSense Subnets and IPSec VPN
Duplicate your existing P2 (click the + to the right of it), change local from 10.0.2.0/24, leaving same 10.172.0.0/16 remote. Do the same, flipping local and remote, on "other router." Then you'll be ...
- 2,978
6
votes
pfSense not forwarding DNS to concerned VPS
This issue is very well documented in Pfsense with workaround: DNS Rebinding Protections
The DNS forwarder (dnsmasq) uses the option --stop-dns-rebind by
default, which rejects and logs addresses ...
- 8,921
6
votes
Accepted
difference em0, em1, bge0 - pfsense
In BSD, network interfaces are named after which driver they use. So in your case, emX = Intel, and bgeX = Broadcom.
Any of your interfaces can be used for any purpose within pfSense. It's just up to ...
- 109k
6
votes
pfSense: dynamic DNS does not update automaticaly - it knows it's outdated
It appears that this is a known limitation[1] when pfsense is connected with your modem/router using TCP/IP (either static or dynamic). The workaround is this:
Install the cron package (System > ...
- 1,255
5
votes
Accepted
PFsense https connections unusably slow
It's entirely possible that if you're using pfSense 2.2 or later, you're being affected by this. Symptoms would include:
Slowness for other VMs hosted on the KVM platform if they need to access a ...
- 66
5
votes
Where are pfsense log files?
pfSense stores its log files in the /var/log directory.
The logs are not stored in the standard text-based format. Instead they are stored in a 'circular logging' format. Use the clog tool to view ...
5
votes
Failover setup of virtual machines using KVM
I need to host a web application on these 2 servers in failover mode. I want to use KVM virtualization (most likely Ubuntu). There will be a number of VMs on each server.
Hey, your thoughts about ...
- 5,636
5
votes
Accepted
Subnet B can hit A, but not vice versa
"the ping go from one side, Desktop --> Node1 but not when launched from Node1 --> Desktop" - This statement, if accurate, eliminates all possibilities of a routing issue.
In order for a ping to work ...
- 3,418
5
votes
Accepted
How to add custom xinetd Service in pfSense
The config file stored in /var/etc/xinetd.conf is regenerated every time you perform a filter reload.
To make changes to this process, you need to modify the filter reload process, you can find it on ...
- 2,661
5
votes
Multiple devices with one IPv6 to the Internet?
If you want to do unusual/frowned upon stuff then using a pre-canned "router distro" as your edge router probablly isn't the best way to go. Further pfsense is based on freebsd pf which does not ...
- 4,096
4
votes
Does two pfsense + CARP necessarily require two WAN IP?
It does not, it depends on your Setup. I have a working solution with 1 IP. The Slave just uses the Master as a gateway.
- 201
4
votes
Accepted
1 Public IP 1 NIC ESXi to multipule VMs (with external access)
What you need to do is create 2 virtual switches. First one will be connected to a network interface with public IP and other one will be for internal use.
Connect pfSync to both, while all other VMs ...
- 5,247
4
votes
Accepted
pfSense and Disabling SURICATA UDPv4 invalid checksum
According to this site, you can create a disablesid.conf file that looks somewhat like this (there's extra in this, use what you need)
https://forum.pfsense.org/index.php?topic=95881.0
# Messes up ...
- 6,200
4
votes
Accepted
Installing Pfsense in KVM
This isn't an answer per se, but I still can't comment because I do not have 50 rep points. But, I got on and tested that exact same pfsense image with both cdrom and location. cdrom with vnc seems ...
- 366
4
votes
Accepted
Location of pfSense menu (startup script)?
Simply exit the shell with exit
The menu from your screenshot is the default shell for the admin user, /etc/rc.initial
- 73.4k
4
votes
VLAN help (HP Switch)
First you should know that HP and Cisco use the term "trunk" differently. What HP calls a trunk, Cisco calls an Etherchannel (port aggregation).
I'll use the term in the Cisco sense (VLAN trunk) ...
- 2,149
4
votes
Accepted
SSH Client freeze connect to SSH server with multiple network interface
It's a case of asymmetric routing, caused by the weak host model used in Linux: any interface can be used for any of the IPs belonging to the host.
host client sends packets to an address outside of ...
- 9,496
3
votes
pfsense: how to block internet for one client
I know this is an old question, but it still applies to pfSense 2.4
I recommend using aliases for applying rules to multiple hosts.
- 131
3
votes
Accepted
Where are pfsense log files?
As of pfSense 2.5+, logging has changed. There is no longer a clog utility; they're all just plain-text files., though they're still all located at /var/log. It appears that all existing/prior logs ...
- 1,160
3
votes
Accepted
Route Public Subnet AND create NAT internal subnet
OK, this is a fairly standard "enterprise" ISP setup.
Assign the single IP (probably a /30 network) to your WAN interface. Then create IP Alias Virtual IPs for each IP in your block of routed public ...
- 109k
3
votes
Accepted
Is it possible for a router misconfiguration to cause a telephone line fault/issue?
You're not going to be able to cause physical line faults by misconfiguring the software on your router. I suppose if you physically shorted out the pins in the telephone socket you may trip something ...
- 531
Only top scored, non community-wiki answers of a minimum length are eligible