Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [pfsense]

pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.

Filter by
Sorted by
Tagged with
0 votes
1 answer
45 views

Packetloss on fiber connection [closed]

I have the following setup: Dell R720 Server with Esxi 6.5 running on it. On this esx, there is a pfsense-vm. The first network-adapter of this host is connected to fibre-internet with a media ...
user avatar
  • 101
1 vote
1 answer
62 views

Routing traffic from OpenVPN clients to OPT1

I'm trying to route traffic from OpenVPN clients to a host connected to my pfSense's OPT1. OpenVPN network: 192.168.9.0/24 OPT1 network: 10.139.251.104/29 OPT1 address: 10.139.251.109 Destination ...
user avatar
1 vote
0 answers
38 views

my pfsense is reducing the speed to 40 mbps from 300+ mbps, what can be the issue? [closed]

I have a pfsense system BUSINESS B100 - CELERON DUAL CORE J1800 2.41GHZ 4GB DDR3 SODIMM SSD 60GB HDMI. https://www.amazon.com.br/gp/product/B086M2D8DJ/ref=ppx_yo_dt_b_asin_title_o03_s00?ie=UTF8&...
user avatar
  • 111
1 vote
1 answer
338 views

How to perform an inbound and outbound NAT at the same time in Pfsense?

I have a rule on a stormshield performing NAT on both the source and the destination address. It is done very simply in one rule. Example : --Before translation-- --After ...
user avatar
  • 11
0 votes
1 answer
22 views

Allow only specified set of IPs to use external port on pfSense

I have a pfsense router and a NAT rule that allows a port redirect. | GitHub | - ( Internet ) - [pfsense] -net port translation- [ Jenkins ] I want gitHub to be able to reach my jenkins, but no other ...
user avatar
  • 101
2 votes
1 answer
485 views

pFsense, Unifi AP, HP switch and VLANS

I have a Unifi AP with a single MYNET SSID connected to my HP 2520 switch on port 23. I have a pfSense LAN interface connected on port 1. AP clients get DHCP (192.168.1.0/24) from pfSense and can ...
user avatar
0 votes
1 answer
538 views

pfSense - Trunking VLANs on LAGG vs. individual links

We are a small business. I am running pfSense on a decommissioned developer's PC. We have also a Cisco SG 300 L3 switch, capable of VLANs and LAGG (link aggregation). I am going to do RoaS (router on ...
user avatar
0 votes
2 answers
82 views

Pfsense problem with Cloned VMs in Proxmox [closed]

I found this issue while creating a separated VLAN for my Proxmox server. It seems like that cloned VMs pass the same client identifiers, even though they have different MAC addresses. This issue will ...
user avatar
0 votes
1 answer
3k views

intervlan routing with PfSense

I Need some guidance on getting my lab networking configured. Any support is appreciated. My Lab consists of: 2 cisco switches: 2960s(access layer 2) and 3750X(ip routing/layer 3) Xenserver with ...
user avatar
0 votes
1 answer
4k views

How to forward port 80 and 443 on pfSense to a (internal) nginx webserver?

Yesterday we did a "big bang" firewall switch in our company. Our new firewall is a pfSense server. Lets say our external ip is 84.1.1.1, pfSense is 192.168.1.1 and our web server ip is 192.168.1.2. ...
user avatar
  • 189
0 votes
2 answers
143 views

How Does a Firewall (pfSense) Check Packets Against Rules

For packet rule testing, legacy 5 tuple based techniques employ decision tree, decomposition or hardware (usually TCAM) based approaches. What specific technique do pfSense firewalls employ to test ...
user avatar
  • 85
0 votes
1 answer
46 views

Some questions about a DMZ and where to place my web servers? [duplicate]

Currently i build a new network for our company which is not my specialism as i'm actually a software engineer so excuse me when this is a stupid question. I read a lot about networking last few ...
user avatar
  • 189
0 votes
3 answers
698 views

Why cant i reach the other network while i have added the routes and firewall rules to allow traffic? (Pfsense/USG200)

I have 2 networks, the current one and the new one. The current one is not configured by me and one big mess and contains heavily out dated hardware (especially servers). I want to be able to access ...
user avatar
  • 189
0 votes
2 answers
1k views

Why can i ping domain from Pfsense diagnostics but not from my desktop?

I'm setting up Pfsense to replace our existing firewall with. Currently the setup is pretty straight forward. I have internet connected to my wan port connected a switch to the lan port connected ...
user avatar
  • 189
0 votes
0 answers
62 views

pfSense: Bundling carp VIPs

When configuring Carp for pfSense as recommended by their guide, this issue appears: when pulling out the WAN cable (simulating, say, a cable failure, switch port failure, or network card failure), ...
user avatar
  • 101
0 votes
1 answer
364 views

How to protect a pfSense login page?

A user rents a cloud server hosted on VMWare and is provided a pfSense appliance to protect it. The pfSense appliance has a web-based login page to access its console. Although pfSense is supposed ...
user avatar
0 votes
1 answer
605 views

Why can't I connect to PfSense via the switch?

Our current firwall is deprecated and we decided to exchange it with an PfSense server. In my test setup I configured the interfaces as follows: igb0 = WAN enabled igb1 = LAN (should be VLAN trunk ...
user avatar
  • 189
1 vote
2 answers
409 views

VLANS - Layer 2 vs Layer 3 Juniper & Netgate/PfSense

I am working on setting up VLANS on a basically default switch configuration for my SMB network. They have 5 juniper ex2200 switches that are all on the same subnet and have only a default vlan. I ...
user avatar
1 vote
0 answers
1k views

How to block unknown MAC addresses in OpnSense

I'm dealing with an OPNSense router, at the moment I already configured the DHCP server to provide IPv4 addresses only to a legitimate list of fixed MAC addresses and I want to block every unknown MAC,...
user avatar
0 votes
1 answer
159 views

Site-to-Site IPSEC through load balancer with persistence

what I'm trying to achieve is a site to site IPSEC tunnel going through a load balancer, (both sites have pfsense and balancer is f5 big ip) the reason why i'm trying to do that is because: - Site A ...
user avatar
2 votes
2 answers
902 views

problems routing WAN with private IPs and LAN with public IPs

I have just installed pfsense 2.4 for a SOHO I work and I'm getting problems with the routing. I have asked my ISP for a /29 network with public ips for the DMZ, but instead of giving my directly what ...
user avatar
1 vote
2 answers
307 views

Virtualize pfSense on VMware

I'm making a network model and I have issues with virtualization of pfSense under VMware. I have a client in a VLAN 220 (172.2.20.100/23) trying to ping his gateway (pfSense : 172.2.20.1/23) but it ...
user avatar
0 votes
1 answer
281 views

Site-to-site IPsec and rerouting to another IPsec tunnel

We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
user avatar
  • 11
4 votes
1 answer
3k views

pfsense DHCP lease remember time settings?

pfSense remembers DHCP leases for a quite long time, which is good use on a LAN where the same machines request IP numbers frequently and have a chance to always get the same leases. However on an ...
user avatar
2 votes
2 answers
2k views

No route to host for IPs in same subnet being routed by bgp

I have set up BGP to do some custom routing for a subset of addresses in the range 192.168.1.0/24. I have verified that the BGP is working by testing ping/curl on a different host in a different ...
user avatar
  • 272
1 vote
2 answers
387 views

How does pfSense control network traffic when plugged into a switch? [closed]

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
user avatar
  • 111
1 vote
0 answers
130 views

pfSense - VPN access to the printer only [closed]

in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
user avatar
  • 111
0 votes
1 answer
119 views

How to setup OpenVPN to PFsense? [closed]

How to setup OpenVPN to PFsense? My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to Advanced Configuration -> Custom options tls-client tls-version-min 1.2 tls-...
user avatar
1 vote
0 answers
78 views

Using IPv6 6in4 tunnel with multiple VLANs, or LAN Interfaces?

I have a pfSense router, and I've setup a Hurricane 6in4 IPv6 tunnel by following this guide: http://thirdinternet.com/wp-content/uploads/2017/11/Configure-6in4-Tunnel-in-pfSense.pdf It all seems to ...
user avatar
0 votes
1 answer
3k views

Pfsense - blocking a ping immediately

I am having a issue with pfsense... I have a rule that block ping (echo requests) from the LAN network interface to a openvpn client interface (OVP1), the rule is working fine blocking the ping to ...
user avatar
0 votes
1 answer
75 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
user avatar
4 votes
1 answer
2k views

What does 'parent interface' mean with respect to VLANs?

I'm trying to learn about VLANs by configuring a router with PFsense installed. Reading the documentation I came across the following sentence: The following example shows how to configure two ...
user avatar
  • 165
1 vote
1 answer
126 views

What does "delta" stand for in arpwatch?

I've just set up Arpwatch on my pfSense machine and started getting emails about flip flops in my network. As the network is quite big, I understand that the flip flops indicate that a certain IP-...
user avatar
  • 123
3 votes
2 answers
4k views

Why would pfSense ignore arp requests?

I'm configuring pfSense 2.4.3p1 as a transparent firewall. It's running in virtual machine with two vtnet paravirtualized adapters: WAN (vtnet0) connected to a 'far-side' network containing the ...
user avatar
1 vote
0 answers
809 views

pfsense Server Load-balancing on LAN Interface [closed]

I am trying to load balance a couple of web servers from the LAN side as I don't need access from the WAN so that clients on the LAN can access these web servers: LAN IP is 192.168.10.1 I created a ...
user avatar
3 votes
3 answers
9k views

Block communication between hosts in the same VLAN

I've a pfsense firewall with a managed switch, and i created a VLAN: all works fine, but what i want to do is to block the communication between the hosts in my VLAN. For example, i want that an host ...
user avatar
  • 33
2 votes
1 answer
1k views

Configuring the NAT 1:1 rules with pfsense

I have two pfsense. One pfsense is on 192.168.0.1 and another pfsense is on 192.168.20.1. Basically I have installed 20.1 pfsense on one machine 192.168.0.180 which is in the network of 0.1 pfsense, ...
user avatar
1 vote
1 answer
423 views

Pfsense CARP mutliwan

I'm currently trying to build a HA setup using Pfsense/CARP for the first time but i have a few questions about it. On the LAN side i have 3 VLAN's and they failover fine using CARP, the problem is ...
user avatar
1 vote
2 answers
126 views

Setting up a hypervisor network

I have a pfsense appliance that serves as my router. I have four hypervisors that I want to hook up to one of the router interfaces through a switch. The hypervisors will house multiple VMs that are "...
user avatar
2 votes
1 answer
3k views

Can I bulk export aliases from pfSense (in order to import to another pfSense)?

This seems like a simple thing but there doesn't appear to be an easy way (in the GUI). Before I dive into the file system level, I thought I'd ask --- is there an easy export of aliases from pfSense? ...
user avatar
3 votes
1 answer
104 views

How to connect servers from different Datacentres via firewall

really need help since I am still new in firewall. I have 2 firewall located in two separate Datacentres. I need to make a connection for the servers from these 2 DCs. One firewall is running pfsense ...
user avatar
1 vote
0 answers
763 views

Configure pfSense VLAN Trunk

I have setup a pfSense box as a transparent firewall between my Cisco router and first Cisco switch: CISCO ROUTER - 10.10.1.253 ↓ PFSENSE - OPT1 BRIDGE - 10.10.1.252 ↓ CISCO CORE SWITCH - 10.10.1.250 ...
user avatar
0 votes
2 answers
276 views

Ping traverses openvpn tunnel only 1 of 2 times [closed]

I can barely put into words the problem I'm having, but I'll give it a go. I have a pfsense router on which I've set up openvpn to act as a client to connect into another network. This has worked ...
user avatar
  • 101
2 votes
5 answers
2k views

Is a pfSense router w/ a LAN gateway using a /20 bits subnet mask common?

Obviously I'm lacking some networking knowledge, and I wish somebody could help me understand something fishy I found on a pfSense router in an organization yesterday. The pfSense router forces subnet ...
user avatar
  • 123
1 vote
1 answer
1k views

What could cause kvm virtualized pfsense to get 84mbps behind physical pfsense, but then drop to 1mbps when it replaces physical pfsense?

I'm scratching my head on what could cause the following behavior: Scenario A: Laptop -> virtualizedpfsense -> switch -> physicalpfsense -> modem speedtest.com gives me 84mbps download (...
user avatar
  • 287
3 votes
2 answers
7k views

pfSense IPv6 NAT

I know many of you said that IPv6 has no NAT, but my server provider told me, that it is possible. I have no idea how... I have a pfSense Server as my Firewall (Not the router!). I have a /28 IPv4 ...
user avatar
2 votes
1 answer
315 views

Pfsense stack two boxes

We have bought two Pfsense SG-4860 boxes. We have our equipment in a colocation datacenter. Our goals for this project is to have a redundant network with both routers connected to a WAN. The ...
user avatar
0 votes
1 answer
2k views

IP VLANS and SUBNETS on Cisco and PFSENSE

i have a PFSENSE router and a layer 3 cisco switch, the pfsense router connects to the switch on port 1 with the IP address of 192.168.1.2 and the router is 192.168.1.1 I have a vlan that i created ...
user avatar
  • 1
5 votes
3 answers
11k views

pfSense & VMWare ESXi VLAN integration

Were setting up a pfsense box as a virtual machine inside a VMWare ESXi 6.0 environment (inside a VXRail hyper-converged Box). The target configuration is that to access any machine within this box, ...
user avatar
  • 243
1 vote
1 answer
849 views

PfSense Port Forwarding issues

I'm having trouble forwarding a port through PfSense PF WAN: 192.168.254.203 PF LAN: 10.0.0.1 Dest: 10.0.0.6 PfSense is able to ping and ssh .0.6 from local shell, test port works on LAN, but ...
user avatar
  • 11