Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [pfsense]

pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

pfSense - Configuration Issues [closed]

I am attempting to create a network within my VMware ESXi environment, which has a single network interface card (NIC). The network configuration on the ESXi host is as follows: Virtual Switch: ...
smellyourbooks's user avatar
0 votes
0 answers
44 views

How to Route All Traffic from Multiple VLANs through a Specific Public IP in pfSense

I'm managing a pfSense setup with multiple public IP addresses ranging from 198.51.100.241 to 198.51.100.246. My ISP has also routed a subnet (203.0.113.1/24) through one of these public IPs (198.51....
JohnDow's user avatar
  • 51
0 votes
1 answer
43 views

Protect public network with virtual firewall w/o control over the gateway

I have a public network, 123.123.123.0/28, and a local network, 192.168.1.0/24. My ISP gateway for the public network is 123.123.123.1. My virtual firewall and router (pfsense) is running inside ...
Demiler's user avatar
1 vote
1 answer
567 views

How to use 5 static ip addresses with virgin media broad band

I have installed virgin media business broadband and the package comes with 5 static ips. These IP are GRE tunnels from the HITRON router to virgin. the IP addresses are for example 66.66.66.65 - 66....
funkimunky's user avatar
0 votes
0 answers
78 views

PFSense - Deliver IPv6 over OpenVPN Tunnel

I have an Gateway router and I am currently trying to set up a PFSense + OpenVPN Tunnel. However I am having problems with IPv6 connectivity. The FGW is configured with the DMZ for the PFSense ...
Tomás's user avatar
  • 113
0 votes
1 answer
459 views

Why does pfSense require a DNS access list entry when all interfaces are selected?

Netgate 4100 v23.05-RELEASE The DNS Resolver was only working on LAN 1 but not LAN 3 (physical nics, not vlans). I added an access list rule as suggested here to grant LAN 3 access and now ...
user2864874's user avatar
0 votes
0 answers
509 views

Pfsense NAT with site-to-site VPN

For a client I am building a network solution that enables them expanding their available online presence. I am running into a problem with port forwarding to an IP which is routed over an OpenVPN L3 ...
Koen Vuurens's user avatar
1 vote
2 answers
4k views

pfSense: how to route traffic to a specific network via ipsec

We have pfSense 2.60 with one ip public We have a working ipsec tunnel to a customer FortiGate I need to be able to force routing of packets to/from 10.68.245.200/29 via ipsec interface we cannot ...
realtebo's user avatar
  • 123
2 votes
1 answer
1k views

Setting up a pfsense router between two private subnetworks

I have a situation like in the picture: I want to add a pfsense router inside an existing 192.168.1.0/24 subnet and have these possibilities: I want the 192.168.73.0/24 network to have access to the ...
Janjko's user avatar
  • 21
0 votes
2 answers
1k views

connect two private network using pfsense

I have two pfenses (say p1 and p2) in two separate networks. Each has a public IP. There is an internal network on each side (say n1 and n2). I want to connect these two networks through these two ...
horny hacker's user avatar
1 vote
2 answers
107 views

Can 2 modems connected to the same router interfere with each other if their web access interface are the same IP address?

Here is information about the network: I have 2 WAN connections to the same ISP which they provided 2 modems for and configured them to be in bridge mode. My MDF router (pfSense) connects both of ...
Dr_Xunil's user avatar
  • 115
0 votes
2 answers
208 views

Possible for pfSense to act as VPN client and server at the same time?

Let's say I have a network where I run pfSense as a router. I want to be able to VPN in to my network when I'm away, but also want to make all outbound traffic from my network go through another VPN, ...
luisschwab's user avatar
0 votes
2 answers
179 views

Server with multiple NICs takes different route when answering

I have multiple servers which share 2 networks. That is the LAN Network at 192.168.1.0/24, aswell as the Backbone Network at 192.168.5.0/24. ┌────────────────┐ ...
Gandalf1783's user avatar
1 vote
1 answer
892 views

PFSense: Opt port able to get to my LAN port / internet

I am trying to setup a disruption between 2 networks one that is coming from the LAN port and one with a different SUBNET from the other (OPT) port. My LAN is not getting blocked from the OPT subnet ...
BartMolk's user avatar
0 votes
1 answer
206 views

Packetloss on fiber connection [closed]

I have the following setup: Dell R720 Server with Esxi 6.5 running on it. On this esx, there is a pfsense-vm. The first network-adapter of this host is connected to fibre-internet with a media ...
Ef Ge's user avatar
  • 101
1 vote
2 answers
627 views

Routing traffic from OpenVPN clients to OPT1

I'm trying to route traffic from OpenVPN clients to a host connected to my pfSense's OPT1. OpenVPN network: 192.168.9.0/24 OPT1 network: 10.139.251.104/29 OPT1 address: 10.139.251.109 Destination ...
iMan Biglari's user avatar
1 vote
0 answers
220 views

my pfsense is reducing the speed to 40 mbps from 300+ mbps, what can be the issue? [closed]

I have a pfsense system BUSINESS B100 - CELERON DUAL CORE J1800 2.41GHZ 4GB DDR3 SODIMM SSD 60GB HDMI. https://www.amazon.com.br/gp/product/B086M2D8DJ/ref=ppx_yo_dt_b_asin_title_o03_s00?ie=UTF8&...
Tom's user avatar
  • 111
1 vote
1 answer
1k views

How to perform an inbound and outbound NAT at the same time in Pfsense?

I have a rule on a stormshield performing NAT on both the source and the destination address. It is done very simply in one rule. Example : --Before translation-- --After ...
molik's user avatar
  • 13
0 votes
1 answer
308 views

Allow only specified set of IPs to use external port on pfSense

I have a pfsense router and a NAT rule that allows a port redirect. | GitHub | - ( Internet ) - [pfsense] -net port translation- [ Jenkins ] I want gitHub to be able to reach my jenkins, but no other ...
nycynik's user avatar
  • 101
2 votes
1 answer
836 views

pFsense, Unifi AP, HP switch and VLANS

I have a Unifi AP with a single MYNET SSID connected to my HP 2520 switch on port 23. I have a pfSense LAN interface connected on port 1. AP clients get DHCP (192.168.1.0/24) from pfSense and can ...
Nstevens's user avatar
  • 123
0 votes
1 answer
1k views

pfSense - Trunking VLANs on LAGG vs. individual links

We are a small business. I am running pfSense on a decommissioned developer's PC. We have also a Cisco SG 300 L3 switch, capable of VLANs and LAGG (link aggregation). I am going to do RoaS (router on ...
Pavel Tankov's user avatar
0 votes
2 answers
222 views

Pfsense problem with Cloned VMs in Proxmox [closed]

I found this issue while creating a separated VLAN for my Proxmox server. It seems like that cloned VMs pass the same client identifiers, even though they have different MAC addresses. This issue will ...
Filipe Lemos's user avatar
0 votes
2 answers
3k views

intervlan routing with PfSense

I Need some guidance on getting my lab networking configured. Any support is appreciated. My Lab consists of: 2 cisco switches: 2960s(access layer 2) and 3750X(ip routing/layer 3) Xenserver with ...
BocajNET's user avatar
0 votes
1 answer
9k views

How to forward port 80 and 443 on pfSense to a (internal) nginx webserver?

Yesterday we did a "big bang" firewall switch in our company. Our new firewall is a pfSense server. Lets say our external ip is 84.1.1.1, pfSense is 192.168.1.1 and our web server ip is 192.168.1.2. ...
CodeNinja's user avatar
  • 219
0 votes
2 answers
317 views

How Does a Firewall (pfSense) Check Packets Against Rules

For packet rule testing, legacy 5 tuple based techniques employ decision tree, decomposition or hardware (usually TCAM) based approaches. What specific technique do pfSense firewalls employ to test ...
H.Jamil's user avatar
  • 95
0 votes
1 answer
188 views

Some questions about a DMZ and where to place my web servers? [duplicate]

Currently i build a new network for our company which is not my specialism as i'm actually a software engineer so excuse me when this is a stupid question. I read a lot about networking last few ...
CodeNinja's user avatar
  • 219
0 votes
4 answers
1k views

Why cant i reach the other network while i have added the routes and firewall rules to allow traffic? (Pfsense/USG200)

I have 2 networks, the current one and the new one. The current one is not configured by me and one big mess and contains heavily out dated hardware (especially servers). I want to be able to access ...
CodeNinja's user avatar
  • 219
0 votes
2 answers
2k views

Why can i ping domain from Pfsense diagnostics but not from my desktop?

I'm setting up Pfsense to replace our existing firewall with. Currently the setup is pretty straight forward. I have internet connected to my wan port connected a switch to the lan port connected ...
CodeNinja's user avatar
  • 219
0 votes
0 answers
114 views

pfSense: Bundling carp VIPs

When configuring Carp for pfSense as recommended by their guide, this issue appears: when pulling out the WAN cable (simulating, say, a cable failure, switch port failure, or network card failure), ...
aphid's user avatar
  • 101
0 votes
1 answer
810 views

How to protect a pfSense login page?

A user rents a cloud server hosted on VMWare and is provided a pfSense appliance to protect it. The pfSense appliance has a web-based login page to access its console. Although pfSense is supposed ...
gonzobrains's user avatar
0 votes
1 answer
1k views

Why can't I connect to PfSense via the switch?

Our current firwall is deprecated and we decided to exchange it with an PfSense server. In my test setup I configured the interfaces as follows: igb0 = WAN enabled igb1 = LAN (should be VLAN trunk ...
CodeNinja's user avatar
  • 219
1 vote
2 answers
717 views

VLANS - Layer 2 vs Layer 3 Juniper & Netgate/PfSense

I am working on setting up VLANS on a basically default switch configuration for my SMB network. They have 5 juniper ex2200 switches that are all on the same subnet and have only a default vlan. I ...
humbleStrength's user avatar
1 vote
0 answers
3k views

How to block unknown MAC addresses in OpnSense

I'm dealing with an OPNSense router, at the moment I already configured the DHCP server to provide IPv4 addresses only to a legitimate list of fixed MAC addresses and I want to block every unknown MAC,...
Fuocoman's user avatar
0 votes
1 answer
344 views

Site-to-Site IPSEC through load balancer with persistence

what I'm trying to achieve is a site to site IPSEC tunnel going through a load balancer, (both sites have pfsense and balancer is f5 big ip) the reason why i'm trying to do that is because: - Site A ...
Ahmad313's user avatar
2 votes
2 answers
1k views

problems routing WAN with private IPs and LAN with public IPs

I have just installed pfsense 2.4 for a SOHO I work and I'm getting problems with the routing. I have asked my ISP for a /29 network with public ips for the DMZ, but instead of giving my directly what ...
Jorge Regalado's user avatar
1 vote
2 answers
369 views

Virtualize pfSense on VMware

I'm making a network model and I have issues with virtualization of pfSense under VMware. I have a client in a VLAN 220 (172.2.20.100/23) trying to ping his gateway (pfSense : 172.2.20.1/23) but it ...
PiKeTemplar's user avatar
0 votes
1 answer
397 views

Site-to-site IPsec and rerouting to another IPsec tunnel

We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
taiffu's user avatar
  • 11
4 votes
1 answer
6k views

pfsense DHCP lease remember time settings?

pfSense remembers DHCP leases for a quite long time, which is good use on a LAN where the same machines request IP numbers frequently and have a chance to always get the same leases. However on an ...
user6329530's user avatar
2 votes
2 answers
3k views

No route to host for IPs in same subnet being routed by bgp

I have set up BGP to do some custom routing for a subset of addresses in the range 192.168.1.0/24. I have verified that the BGP is working by testing ping/curl on a different host in a different ...
jmreicha's user avatar
  • 272
1 vote
2 answers
643 views

How does pfSense control network traffic when plugged into a switch? [closed]

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
daveslab's user avatar
  • 111
1 vote
0 answers
221 views

pfSense - VPN access to the printer only [closed]

in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
bLAZ's user avatar
  • 111
0 votes
1 answer
150 views

How to setup OpenVPN to PFsense? [closed]

How to setup OpenVPN to PFsense? My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to Advanced Configuration -> Custom options tls-client tls-version-min 1.2 tls-...
user avatar
1 vote
0 answers
155 views

Using IPv6 6in4 tunnel with multiple VLANs, or LAN Interfaces?

I have a pfSense router, and I've setup a Hurricane 6in4 IPv6 tunnel by following this guide: http://thirdinternet.com/wp-content/uploads/2017/11/Configure-6in4-Tunnel-in-pfSense.pdf It all seems to ...
victorhooi's user avatar
0 votes
1 answer
3k views

Pfsense - blocking a ping immediately

I am having a issue with pfsense... I have a rule that block ping (echo requests) from the LAN network interface to a openvpn client interface (OVP1), the rule is working fine blocking the ping to ...
Luciano Andress Martini's user avatar
0 votes
1 answer
87 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
Confused James's user avatar
4 votes
1 answer
4k views

What does 'parent interface' mean with respect to VLANs?

I'm trying to learn about VLANs by configuring a router with PFsense installed. Reading the documentation I came across the following sentence: The following example shows how to configure two ...
MarkMark's user avatar
  • 175
1 vote
1 answer
148 views

What does "delta" stand for in arpwatch?

I've just set up Arpwatch on my pfSense machine and started getting emails about flip flops in my network. As the network is quite big, I understand that the flip flops indicate that a certain IP-...
Oleg's user avatar
  • 123
3 votes
2 answers
5k views

Why would pfSense ignore arp requests?

I'm configuring pfSense 2.4.3p1 as a transparent firewall. It's running in virtual machine with two vtnet paravirtualized adapters: WAN (vtnet0) connected to a 'far-side' network containing the ...
Reinderien's user avatar
1 vote
0 answers
897 views

pfsense Server Load-balancing on LAN Interface [closed]

I am trying to load balance a couple of web servers from the LAN side as I don't need access from the WAN so that clients on the LAN can access these web servers: LAN IP is 192.168.10.1 I created a ...
elekgeek's user avatar
3 votes
3 answers
14k views

Block communication between hosts in the same VLAN

I've a pfsense firewall with a managed switch, and i created a VLAN: all works fine, but what i want to do is to block the communication between the hosts in my VLAN. For example, i want that an host ...
Fram's user avatar
  • 33