Questions tagged [pfsense]
pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.
103
questions
0
votes
1
answer
48
views
Impossible to reach the gateway
I am running pfSense and different OS on Virtualbox with Host-Only card with theses parameters:
IPv4 address: 192.168.56.1
IPv4 mask: 255.255.0.0
My LAN interface is 192.168.1.1/24. I can connect ...
0
votes
1
answer
49
views
How to use 5 static ip addresses with virgin media broad band
I have installed virgin media business broadband and the package comes with 5 static ips. These IP are GRE tunnels from the HITRON router to virgin.
the IP addresses are for example
66.66.66.65 - 66....
0
votes
0
answers
38
views
PFSense - Deliver IPv6 over OpenVPN Tunnel
I have an Gateway router and I am currently trying to set up a PFSense + OpenVPN Tunnel. However I am having problems with IPv6 connectivity.
The FGW is configured with the DMZ for the PFSense ...
- 113
0
votes
1
answer
125
views
Why does pfSense require a DNS access list entry when all interfaces are selected?
Netgate 4100
v23.05-RELEASE
The DNS Resolver was only working on LAN 1 but not LAN 3 (physical nics, not vlans). I added an access list rule as suggested here to grant LAN 3 access and now ...
- 101
0
votes
0
answers
241
views
Pfsense NAT with site-to-site VPN
For a client I am building a network solution that enables them expanding their available online presence.
I am running into a problem with port forwarding to an IP which is routed over an OpenVPN L3 ...
1
vote
2
answers
1k
views
pfSense: how to route traffic to a specific network via ipsec
We have pfSense 2.60 with one ip public
We have a working ipsec tunnel to a customer FortiGate
I need to be able to force routing of packets to/from 10.68.245.200/29 via ipsec interface
we cannot ...
- 113
2
votes
1
answer
297
views
Setting up a pfsense router between two private subnetworks
I have a situation like in the picture:
I want to add a pfsense router inside an existing 192.168.1.0/24 subnet and have these possibilities:
I want the 192.168.73.0/24 network to have access to the ...
- 21
0
votes
2
answers
617
views
connect two private network using pfsense
I have two pfenses (say p1 and p2) in two separate networks. Each has a public IP. There is an internal network on each side (say n1 and n2). I want to connect these two networks through these two ...
0
votes
2
answers
72
views
Can 2 modems connected to the same router interfere with each other if their web access interface are the same IP address?
Here is information about the network:
I have 2 WAN connections to the same ISP which they provided 2 modems
for and configured them to be in bridge mode.
My MDF router (pfSense) connects both of ...
- 105
0
votes
2
answers
156
views
Possible for pfSense to act as VPN client and server at the same time?
Let's say I have a network where I run pfSense as a router. I want to be able to VPN in to my network when I'm away, but also want to make all outbound traffic from my network go through another VPN, ...
0
votes
2
answers
141
views
Server with multiple NICs takes different route when answering
I have multiple servers which share 2 networks.
That is the LAN Network at 192.168.1.0/24,
aswell as the Backbone Network at 192.168.5.0/24.
┌────────────────┐
...
0
votes
1
answer
649
views
PFSense: Opt port able to get to my LAN port / internet
I am trying to setup a disruption between 2 networks one that is coming from the LAN port and one with a different SUBNET from the other (OPT) port.
My LAN is not getting blocked from the OPT subnet ...
- 1
0
votes
1
answer
170
views
Packetloss on fiber connection [closed]
I have the following setup:
Dell R720 Server with Esxi 6.5 running on it. On this esx, there is a pfsense-vm.
The first network-adapter of this host is connected to fibre-internet with a media ...
- 101
1
vote
2
answers
405
views
Routing traffic from OpenVPN clients to OPT1
I'm trying to route traffic from OpenVPN clients to a host connected to my pfSense's OPT1.
OpenVPN network: 192.168.9.0/24
OPT1 network: 10.139.251.104/29
OPT1 address: 10.139.251.109
Destination ...
- 113
1
vote
0
answers
167
views
my pfsense is reducing the speed to 40 mbps from 300+ mbps, what can be the issue? [closed]
I have a pfsense system BUSINESS B100 - CELERON DUAL CORE J1800 2.41GHZ 4GB DDR3 SODIMM SSD 60GB HDMI. https://www.amazon.com.br/gp/product/B086M2D8DJ/ref=ppx_yo_dt_b_asin_title_o03_s00?ie=UTF8&...
- 111
1
vote
1
answer
1k
views
How to perform an inbound and outbound NAT at the same time in Pfsense?
I have a rule on a stormshield performing NAT on both the source and the destination address. It is done very simply in one rule. Example :
--Before translation-- --After ...
- 13
0
votes
1
answer
180
views
Allow only specified set of IPs to use external port on pfSense
I have a pfsense router and a NAT rule that allows a port redirect.
| GitHub | - ( Internet ) - [pfsense] -net port translation- [ Jenkins ]
I want gitHub to be able to reach my jenkins, but no other ...
- 101
2
votes
1
answer
750
views
pFsense, Unifi AP, HP switch and VLANS
I have a Unifi AP with a single MYNET SSID connected to my HP 2520 switch on port 23. I have a pfSense LAN interface connected on port 1. AP clients get DHCP (192.168.1.0/24) from pfSense and can ...
- 123
0
votes
1
answer
1k
views
pfSense - Trunking VLANs on LAGG vs. individual links
We are a small business. I am running pfSense on a decommissioned developer's PC. We have also a Cisco SG 300 L3 switch, capable of VLANs and LAGG (link aggregation).
I am going to do RoaS (router on ...
- 103
0
votes
2
answers
175
views
Pfsense problem with Cloned VMs in Proxmox [closed]
I found this issue while creating a separated VLAN for my Proxmox server. It seems like that cloned VMs pass the same client identifiers, even though they have different MAC addresses.
This issue will ...
- 101
0
votes
2
answers
3k
views
intervlan routing with PfSense
I Need some guidance on getting my lab networking configured. Any support is appreciated.
My Lab consists of:
2 cisco switches: 2960s(access layer 2) and 3750X(ip routing/layer 3)
Xenserver with ...
- 1
0
votes
1
answer
7k
views
How to forward port 80 and 443 on pfSense to a (internal) nginx webserver?
Yesterday we did a "big bang" firewall switch in our company. Our new firewall is a pfSense server.
Lets say our external ip is 84.1.1.1, pfSense is 192.168.1.1 and our web server ip is 192.168.1.2.
...
- 219
0
votes
2
answers
264
views
How Does a Firewall (pfSense) Check Packets Against Rules
For packet rule testing, legacy 5 tuple based techniques employ decision tree, decomposition or hardware (usually TCAM) based approaches. What specific technique do pfSense firewalls employ to test ...
- 95
0
votes
1
answer
132
views
Some questions about a DMZ and where to place my web servers? [duplicate]
Currently i build a new network for our company which is not my specialism as i'm actually a software engineer so excuse me when this is a stupid question.
I read a lot about networking last few ...
- 219
0
votes
4
answers
925
views
Why cant i reach the other network while i have added the routes and firewall rules to allow traffic? (Pfsense/USG200)
I have 2 networks, the current one and the new one. The current one is not configured by me and one big mess and contains heavily out dated hardware (especially servers). I want to be able to access ...
- 219
0
votes
2
answers
2k
views
Why can i ping domain from Pfsense diagnostics but not from my desktop?
I'm setting up Pfsense to replace our existing firewall with. Currently the setup is pretty straight forward.
I have internet connected to my wan port
connected a switch to the lan port
connected ...
- 219
0
votes
0
answers
96
views
pfSense: Bundling carp VIPs
When configuring Carp for pfSense as recommended by their guide, this issue appears: when pulling out the WAN cable (simulating, say, a cable failure, switch port failure, or network card failure), ...
- 101
0
votes
1
answer
680
views
How to protect a pfSense login page?
A user rents a cloud server hosted on VMWare and is provided a pfSense appliance to protect it. The pfSense appliance has a web-based login page to access its console. Although pfSense is supposed ...
- 101
0
votes
1
answer
1k
views
Why can't I connect to PfSense via the switch?
Our current firwall is deprecated and we decided to exchange it with an PfSense server.
In my test setup I configured the interfaces as follows:
igb0 = WAN
enabled
igb1 = LAN (should be VLAN trunk ...
- 219
1
vote
2
answers
643
views
VLANS - Layer 2 vs Layer 3 Juniper & Netgate/PfSense
I am working on setting up VLANS on a basically default switch configuration for my SMB network. They have 5 juniper ex2200 switches that are all on the same subnet and have only a default vlan. I ...
1
vote
0
answers
2k
views
How to block unknown MAC addresses in OpnSense
I'm dealing with an OPNSense router, at the moment I already configured the DHCP server to provide IPv4 addresses only to a legitimate list of fixed MAC addresses and I want to block every unknown MAC,...
- 11
0
votes
1
answer
283
views
Site-to-Site IPSEC through load balancer with persistence
what I'm trying to achieve is a site to site IPSEC tunnel going through a load balancer, (both sites have pfsense and balancer is f5 big ip)
the reason why i'm trying to do that is because:
- Site A ...
- 3
2
votes
2
answers
1k
views
problems routing WAN with private IPs and LAN with public IPs
I have just installed pfsense 2.4 for a SOHO I work and I'm getting problems with the routing.
I have asked my ISP for a /29 network with public ips for the DMZ, but instead of giving my directly what ...
1
vote
2
answers
354
views
Virtualize pfSense on VMware
I'm making a network model and I have issues with virtualization of pfSense under VMware.
I have a client in a VLAN 220 (172.2.20.100/23) trying to ping his gateway (pfSense : 172.2.20.1/23) but it ...
- 21
0
votes
1
answer
375
views
Site-to-site IPsec and rerouting to another IPsec tunnel
We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
- 11
4
votes
1
answer
5k
views
pfsense DHCP lease remember time settings?
pfSense remembers DHCP leases for a quite long time, which is good use on a LAN where the same machines request IP numbers frequently and have a chance to always get the same leases. However on an ...
- 143
2
votes
2
answers
3k
views
No route to host for IPs in same subnet being routed by bgp
I have set up BGP to do some custom routing for a subset of addresses in the range 192.168.1.0/24.
I have verified that the BGP is working by testing ping/curl on a different host in a different ...
- 272
1
vote
2
answers
566
views
How does pfSense control network traffic when plugged into a switch? [closed]
I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
- 111
1
vote
0
answers
209
views
pfSense - VPN access to the printer only [closed]
in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
- 111
0
votes
1
answer
138
views
How to setup OpenVPN to PFsense? [closed]
How to setup OpenVPN to PFsense?
My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to
Advanced Configuration -> Custom options
tls-client
tls-version-min 1.2
tls-...
user46149
1
vote
0
answers
136
views
Using IPv6 6in4 tunnel with multiple VLANs, or LAN Interfaces?
I have a pfSense router, and I've setup a Hurricane 6in4 IPv6 tunnel by following this guide:
http://thirdinternet.com/wp-content/uploads/2017/11/Configure-6in4-Tunnel-in-pfSense.pdf
It all seems to ...
- 151
0
votes
1
answer
3k
views
Pfsense - blocking a ping immediately
I am having a issue with pfsense...
I have a rule that block ping (echo requests) from the LAN network interface to a openvpn client interface (OVP1), the rule is working fine blocking the ping to ...
0
votes
1
answer
80
views
Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]
I’m in desperate need of some unbiased advice and suggestions.
Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing.
I have a 1gb leased ...
4
votes
1
answer
4k
views
What does 'parent interface' mean with respect to VLANs?
I'm trying to learn about VLANs by configuring a router with PFsense installed.
Reading the documentation I came across the following sentence:
The following example shows how to configure two ...
- 175
1
vote
1
answer
144
views
What does "delta" stand for in arpwatch?
I've just set up Arpwatch on my pfSense machine and started getting emails about flip flops in my network. As the network is quite big, I understand that the flip flops indicate that a certain IP-...
- 123
3
votes
2
answers
5k
views
Why would pfSense ignore arp requests?
I'm configuring pfSense 2.4.3p1 as a transparent firewall. It's running in virtual machine with two vtnet paravirtualized adapters:
WAN (vtnet0) connected to a 'far-side' network containing the ...
- 161
1
vote
0
answers
865
views
pfsense Server Load-balancing on LAN Interface [closed]
I am trying to load balance a couple of web servers from the LAN side as I don't need access from the WAN so that clients on the LAN can access these web servers:
LAN IP is 192.168.10.1
I created a ...
- 31
3
votes
3
answers
12k
views
Block communication between hosts in the same VLAN
I've a pfsense firewall with a managed switch, and i created a VLAN: all works fine, but what i want to do is to block the communication between the hosts in my VLAN.
For example, i want that an host ...
- 33
2
votes
1
answer
2k
views
Configuring the NAT 1:1 rules with pfsense
I have two pfsense. One pfsense is on 192.168.0.1 and another pfsense is on 192.168.20.1. Basically I have installed 20.1 pfsense on one machine 192.168.0.180 which is in the network of 0.1 pfsense, ...
- 131
1
vote
1
answer
498
views
Pfsense CARP mutliwan
I'm currently trying to build a HA setup using Pfsense/CARP for the first time but i have a few questions about it.
On the LAN side i have 3 VLAN's and they failover fine using CARP, the problem is ...
