Hot answers tagged

37 votes

Multiple devices with one IPv6 to the Internet?

IPv6 is designed to not do that. Trying IPv4 style NAT with IPv6 will break things. That said, I'm pretty sure you can do NAT IPv6 with Linux iptables, so it's not impossible. But I would strongly ...
21 votes

Multiple devices with one IPv6 to the Internet?

IPv6 doesn't have a NAT standard the way IPv4 does. There is an EXPERIMENMTAL RFC for one-to-one NAT (one outside address for each inside address) on IPv6, but explicitly forbids what you want to do (...
  • 3,198
16 votes
Accepted

ESXi network setup for VMs which connect to the Internet through PfSense

WARNING about your setup I would advise you caution using this system in this setup, if you have only one physical adapter and then only one uplink to the universe from the system. I would ...
10 votes
Accepted

Add an alias to a pfSense interface?

Yes, it's possible but its configuration is in a location that isn't intuitive. Here's how: Go to the Firewall > Virtual IPs menu Click Add Click IP Alias Select the Interface to add the IP alias to ...
10 votes
Accepted

What do the following mean: TCP:RA, TCP:FA ,TCP:PA, TCP:S, TCP:SEC

They represent the TCP flags, indeed. RFC 793, 3.1: Control Bits: 6 bits (from left to right): URG: Urgent Pointer field significant ACK: Acknowledgment field significant PSH: Push Function RST: ...
  • 44.5k
9 votes
Accepted

Netbalancer vs pfsense lan graph traffic? Which one is correct?

They are giving (roughly) the same data. Units matter. :) pfSense is using megabits per second, and Netbalancer is using megabytes per second.
  • 109k
8 votes

Multiple devices with one IPv6 to the Internet?

IPv6 addresses are not the most powerful way to track. DNS traffic shows where on the Internet you are going. On desktop and mobile, ad and social tracking identifiers follow users across devices and ...
7 votes

Multiple devices with one IPv6 to the Internet?

As others have noted, there are many ways your devices will be tracked. Even if you had thousands (instead of just dozens) of them and mapped them all on same IP it wouldn't make much difference. ...
  • 2,459
6 votes

Configuring Pfsense via ssh

Perhaps its easier when you have a look at ansible and playbooks. There are some playbooks for pfsense and i think you find some more. There you can make templates and configure your firewall over ssh ...
  • 1,428
6 votes

Routing between pfSense Subnets and IPSec VPN

Duplicate your existing P2 (click the + to the right of it), change local from 10.0.2.0/24, leaving same 10.172.0.0/16 remote. Do the same, flipping local and remote, on "other router." Then you'll be ...
6 votes

pfSense not forwarding DNS to concerned VPS

This issue is very well documented in Pfsense with workaround: DNS Rebinding Protections The DNS forwarder (dnsmasq) uses the option --stop-dns-rebind by default, which rejects and logs addresses ...
  • 8,921
6 votes
Accepted

difference em0, em1, bge0 - pfsense

In BSD, network interfaces are named after which driver they use. So in your case, emX = Intel, and bgeX = Broadcom. Any of your interfaces can be used for any purpose within pfSense. It's just up to ...
  • 109k
6 votes

pfSense: dynamic DNS does not update automaticaly - it knows it's outdated

It appears that this is a known limitation[1] when pfsense is connected with your modem/router using TCP/IP (either static or dynamic). The workaround is this: Install the cron package (System > ...
  • 1,255
5 votes
Accepted

PFsense https connections unusably slow

It's entirely possible that if you're using pfSense 2.2 or later, you're being affected by this. Symptoms would include: Slowness for other VMs hosted on the KVM platform if they need to access a ...
  • 66
5 votes

Where are pfsense log files?

pfSense stores its log files in the /var/log directory. The logs are not stored in the standard text-based format. Instead they are stored in a 'circular logging' format. Use the clog tool to view ...
5 votes

Failover setup of virtual machines using KVM

I need to host a web application on these 2 servers in failover mode. I want to use KVM virtualization (most likely Ubuntu). There will be a number of VMs on each server. Hey, your thoughts about ...
  • 5,636
5 votes
Accepted

Subnet B can hit A, but not vice versa

"the ping go from one side, Desktop --> Node1 but not when launched from Node1 --> Desktop" - This statement, if accurate, eliminates all possibilities of a routing issue. In order for a ping to work ...
  • 3,418
5 votes
Accepted

How to add custom xinetd Service in pfSense

The config file stored in /var/etc/xinetd.conf is regenerated every time you perform a filter reload. To make changes to this process, you need to modify the filter reload process, you can find it on ...
  • 2,661
5 votes

Multiple devices with one IPv6 to the Internet?

If you want to do unusual/frowned upon stuff then using a pre-canned "router distro" as your edge router probablly isn't the best way to go. Further pfsense is based on freebsd pf which does not ...
  • 4,096
4 votes

Does two pfsense + CARP necessarily require two WAN IP?

It does not, it depends on your Setup. I have a working solution with 1 IP. The Slave just uses the Master as a gateway.
4 votes
Accepted

1 Public IP 1 NIC ESXi to multipule VMs (with external access)

What you need to do is create 2 virtual switches. First one will be connected to a network interface with public IP and other one will be for internal use. Connect pfSync to both, while all other VMs ...
  • 5,247
4 votes
Accepted

pfSense and Disabling SURICATA UDPv4 invalid checksum

According to this site, you can create a disablesid.conf file that looks somewhat like this (there's extra in this, use what you need) https://forum.pfsense.org/index.php?topic=95881.0 # Messes up ...
4 votes
Accepted

Installing Pfsense in KVM

This isn't an answer per se, but I still can't comment because I do not have 50 rep points. But, I got on and tested that exact same pfsense image with both cdrom and location. cdrom with vnc seems ...
4 votes
Accepted

Location of pfSense menu (startup script)?

Simply exit the shell with exit The menu from your screenshot is the default shell for the admin user, /etc/rc.initial
  • 73.4k
4 votes

VLAN help (HP Switch)

First you should know that HP and Cisco use the term "trunk" differently. What HP calls a trunk, Cisco calls an Etherchannel (port aggregation). I'll use the term in the Cisco sense (VLAN trunk) ...
  • 2,149
4 votes
Accepted

SSH Client freeze connect to SSH server with multiple network interface

It's a case of asymmetric routing, caused by the weak host model used in Linux: any interface can be used for any of the IPs belonging to the host. host client sends packets to an address outside of ...
  • 9,496
3 votes

pfsense: how to block internet for one client

I know this is an old question, but it still applies to pfSense 2.4 I recommend using aliases for applying rules to multiple hosts.
3 votes
Accepted

Where are pfsense log files?

As of pfSense 2.5+, logging has changed. There is no longer a clog utility; they're all just plain-text files., though they're still all located at /var/log. It appears that all existing/prior logs ...
  • 1,160
3 votes
Accepted

Route Public Subnet AND create NAT internal subnet

OK, this is a fairly standard "enterprise" ISP setup. Assign the single IP (probably a /30 network) to your WAN interface. Then create IP Alias Virtual IPs for each IP in your block of routed public ...
  • 109k
3 votes
Accepted

Is it possible for a router misconfiguration to cause a telephone line fault/issue?

You're not going to be able to cause physical line faults by misconfiguring the software on your router. I suppose if you physically shorted out the pins in the telephone socket you may trip something ...
  • 531

Only top scored, non community-wiki answers of a minimum length are eligible