Skip to main content
Share Your Experience: Take the 2024 Developer Survey
36 votes

Multiple devices with one IPv6 to the Internet?

IPv6 is designed to not do that. Trying IPv4 style NAT with IPv6 will break things. That said, I'm pretty sure you can do NAT IPv6 with Linux iptables, so it's not impossible. But I would strongly ...
Sander Steffann's user avatar
21 votes

Multiple devices with one IPv6 to the Internet?

IPv6 doesn't have a NAT standard the way IPv4 does. There is an EXPERIMENMTAL RFC for one-to-one NAT (one outside address for each inside address) on IPv6, but explicitly forbids what you want to do (...
Ron Maupin's user avatar
  • 3,273
16 votes
Accepted

ESXi network setup for VMs which connect to the Internet through PfSense

WARNING about your setup I would advise you caution using this system in this setup, if you have only one physical adapter and then only one uplink to the universe from the system. I would ...
Thomas Ward's user avatar
11 votes
Accepted

What do the following mean: TCP:RA, TCP:FA ,TCP:PA, TCP:S, TCP:SEC

They represent the TCP flags, indeed. RFC 793, 3.1: Control Bits: 6 bits (from left to right): URG: Urgent Pointer field significant ACK: Acknowledgment field significant PSH: Push Function RST: ...
Esa Jokinen's user avatar
  • 50.1k
10 votes
Accepted

Add an alias to a pfSense interface?

Yes, it's possible but its configuration is in a location that isn't intuitive. Here's how: Go to the Firewall > Virtual IPs menu Click Add Click IP Alias Select the Interface to add the IP alias to ...
Robert Mooney's user avatar
8 votes

Multiple devices with one IPv6 to the Internet?

IPv6 addresses are not the most powerful way to track. DNS traffic shows where on the Internet you are going. On desktop and mobile, ad and social tracking identifiers follow users across devices and ...
John Mahowald's user avatar
7 votes

Multiple devices with one IPv6 to the Internet?

As others have noted, there are many ways your devices will be tracked. Even if you had thousands (instead of just dozens) of them and mapped them all on same IP it wouldn't make much difference. ...
Matija Nalis's user avatar
  • 2,508
6 votes
Accepted

difference em0, em1, bge0 - pfsense

In BSD, network interfaces are named after which driver they use. So in your case, emX = Intel, and bgeX = Broadcom. Any of your interfaces can be used for any purpose within pfSense. It's just up to ...
EEAA's user avatar
  • 110k
6 votes

pfSense: dynamic DNS does not update automaticaly - it knows it's outdated

It appears that this is a known limitation[1] when pfsense is connected with your modem/router using TCP/IP (either static or dynamic). The workaround is this: Install the cron package (System > ...
ndemou's user avatar
  • 1,365
5 votes

Failover setup of virtual machines using KVM

I need to host a web application on these 2 servers in failover mode. I want to use KVM virtualization (most likely Ubuntu). There will be a number of VMs on each server. Hey, your thoughts about ...
Net Runner's user avatar
  • 6,249
5 votes
Accepted

Subnet B can hit A, but not vice versa

"the ping go from one side, Desktop --> Node1 but not when launched from Node1 --> Desktop" - This statement, if accurate, eliminates all possibilities of a routing issue. In order for a ping to work ...
Appleoddity's user avatar
  • 3,870
5 votes
Accepted

How to add custom xinetd Service in pfSense

The config file stored in /var/etc/xinetd.conf is regenerated every time you perform a filter reload. To make changes to this process, you need to modify the filter reload process, you can find it on ...
Luca Gibelli's user avatar
  • 2,791
5 votes

Multiple devices with one IPv6 to the Internet?

If you want to do unusual/frowned upon stuff then using a pre-canned "router distro" as your edge router probablly isn't the best way to go. Further pfsense is based on freebsd pf which does not ...
Peter Green's user avatar
  • 4,316
4 votes
Accepted

pfSense and Disabling SURICATA UDPv4 invalid checksum

According to this site, you can create a disablesid.conf file that looks somewhat like this (there's extra in this, use what you need) https://forum.pfsense.org/index.php?topic=95881.0 # Messes up ...
Ryan Babchishin's user avatar
4 votes
Accepted

Installing Pfsense in KVM

This isn't an answer per se, but I still can't comment because I do not have 50 rep points. But, I got on and tested that exact same pfsense image with both cdrom and location. cdrom with vnc seems ...
Gregory Martin's user avatar
4 votes
Accepted

Location of pfSense menu (startup script)?

Simply exit the shell with exit The menu from your screenshot is the default shell for the admin user, /etc/rc.initial
HBruijn's user avatar
  • 80.6k
4 votes

VLAN help (HP Switch)

First you should know that HP and Cisco use the term "trunk" differently. What HP calls a trunk, Cisco calls an Etherchannel (port aggregation). I'll use the term in the Cisco sense (VLAN trunk) ...
Ron Trunk's user avatar
  • 2,179
4 votes

Multiple devices with one IPv6 to the Internet?

You can do IPv6 NAT just fine with any sufficiently modern iptables-supporting router between the network you are hiding and the network you have the single IP on. It is in practice used to put ...
interfect's user avatar
  • 343
4 votes
Accepted

SSH Client freeze connect to SSH server with multiple network interface

It's a case of asymmetric routing, caused by the weak host model used in Linux: any interface can be used for any of the IPs belonging to the host. host client sends packets to an address outside of ...
A.B's user avatar
  • 12.9k
4 votes
Accepted

How large does site-to-site VPN subnet need to be?

A site-to-site VPN usually is fully routed network. Meaning there is no NAT or anything. The subnet used for the VPN only needs addresses for the connected routers. So the minimum size of the ...
Zoredache's user avatar
  • 132k
4 votes
Accepted

Which LAGG type should be used for MLAG switches to CARP firewalls?

(M)LAG is used for aggregating links on the data link layer (L2), where there are multiple physical paths between different L2 nodes. CARP (or HSRP, VRRP) is a network-layer redundancy protocol, using ...
Zac67's user avatar
  • 11.9k
3 votes

pfsense: how to block internet for one client

I know this is an old question, but it still applies to pfSense 2.4 I recommend using aliases for applying rules to multiple hosts.
HarlemSquirrel's user avatar
3 votes

pfSense on x64 hardware increased network performance?

TCP/IP basics: throughput <= TCP buffer size / RTT My question is: would scrapping the Netgear FVS336Gv3 router for a dedicated x64 box running pfSense increase throughput over the VPN ...
Michal Sokolowski's user avatar
3 votes
Accepted

Where are pfsense log files?

As of pfSense 2.5+, logging has changed. There is no longer a clog utility; they're all just plain-text files., though they're still all located at /var/log. It appears that all existing/prior logs ...
Granger's user avatar
  • 1,160
3 votes
Accepted

PFSense not getting WAN IP but Ethernet Adapter has one (Hyper-V)

Your ISP might be the cause If you haven't already, try fully resetting the modem according to your ISPs instructions. I've seen this same problem before where the ISP will not hand out an IP to a ...
Ryan Babchishin's user avatar
3 votes
Accepted

How to disable NetBIOS over TCP/IP on pfSense via DHCP

Add an additional option of 43 / String / 01:04:00:00:00:02
Corey's user avatar
  • 2,081
3 votes

What is the proper way to configure Active Directory and Domain Controllers when only a dynamic (not static) IPv6 prefix is available?

I never received an answer on this and couldn't find anything else on the Intertubes, so I figured I would answer this myself with my own setup/experience. ISP: Comcast with a delegated prefix via ...
Corey's user avatar
  • 2,081
3 votes
Accepted

pfsense, in bind, zone is not working

Seems missing the view, try to add a view ( tab view ) and add to zone. ( tab zone, field view )
user3535644's user avatar
3 votes
Accepted

How do you expand /var in pfsense when you run it in memory?

It's right there in front of your nose. :) Generally speaking, though, you should limit the amount of data you're storing on your pfsense instance. For logs, ship them off to another loghost for ...
EEAA's user avatar
  • 110k

Only top scored, non community-wiki answers of a minimum length are eligible