Questions tagged [pfsense]

pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.

Filter by
Sorted by
Tagged with
0
votes
1answer
34 views

How to perform an inbound and outbound NAT at the same time in Pfsense?

I have a rule on a stormshield performing NAT on both the source and the destination address. It is done very simply in one rule. Example : --Before translation-- --After ...
0
votes
3answers
387 views

Why cant i reach the other network while i have added the routes and firewall rules to allow traffic? (Pfsense/USG200)

I have 2 networks, the current one and the new one. The current one is not configured by me and one big mess and contains heavily out dated hardware (especially servers). I want to be able to access ...
1
vote
2answers
237 views

VLANS - Layer 2 vs Layer 3 Juniper & Netgate/PfSense

I am working on setting up VLANS on a basically default switch configuration for my SMB network. They have 5 juniper ex2200 switches that are all on the same subnet and have only a default vlan. I ...
1
vote
1answer
404 views

PFSense on AWS with ASG

Have any of you had any experience using PFSense and Auto Scaling in AWS? Does PFSense have support for a user-data field? [1] Is there a way of running start-up custom scripts inside PFSense? ...
11
votes
3answers
29k views

Configure pfSense to not give 'potential DNS rebind attack detected' warning for local server

I am needing to access a local LEMP server through its domain name for a PHP package that uses domain names in every link, making IP address usage not possible for this application. I can access the ...
0
votes
2answers
684 views

Why can i ping domain from Pfsense diagnostics but not from my desktop?

I'm setting up Pfsense to replace our existing firewall with. Currently the setup is pretty straight forward. I have internet connected to my wan port connected a switch to the lan port connected ...
3
votes
2answers
6k views

Pfsense with WAN (NIC 1) and routing between two networks(NIC 2 and 3)

I have a server with three NICs running PfSense. The first NIC connects to my ISP, the second NIC connects to local computers in my office (LAN-1). For the third NIC(LAN-2), i have connected it to a ...
0
votes
1answer
2k views

How to forward port 80 and 443 on pfSense to a (internal) nginx webserver?

Yesterday we did a "big bang" firewall switch in our company. Our new firewall is a pfSense server. Lets say our external ip is 84.1.1.1, pfSense is 192.168.1.1 and our web server ip is 192.168.1.2. ...
0
votes
1answer
198 views

Site-to-site IPsec and rerouting to another IPsec tunnel

We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
0
votes
1answer
16 views

Allow only specified set of IPs to use external port on pfSense

I have a pfsense router and a NAT rule that allows a port redirect. | GitHub | - ( Internet ) - [pfsense] -net port translation- [ Jenkins ] I want gitHub to be able to reach my jenkins, but no other ...
2
votes
1answer
205 views

pFsense, Unifi AP, HP switch and VLANS

I have a Unifi AP with a single MYNET SSID connected to my HP 2520 switch on port 23. I have a pfSense LAN interface connected on port 1. AP clients get DHCP (192.168.1.0/24) from pfSense and can ...
0
votes
1answer
186 views

pfSense - Trunking VLANs on LAGG vs. individual links

We are a small business. I am running pfSense on a decommissioned developer's PC. We have also a Cisco SG 300 L3 switch, capable of VLANs and LAGG (link aggregation). I am going to do RoaS (router on ...
1
vote
2answers
93 views

How Does a Firewall (pfSense) Check Packets Against Rules

For packet rule testing, legacy 5 tuple based techniques employ decision tree, decomposition or hardware (usually TCAM) based approaches. What specific technique do pfSense firewalls employ to test ...
4
votes
1answer
2k views

Setup IPSec VPN to a node behind another Pfsense Box

I have a pfsense box (Call this BOX1) that has LANs and a WAN which connects to the internet and is used to create a VPN connection to a client: This has pfsense version 2.0.2-RELEASE (i386) I have a ...
0
votes
2answers
30 views

Pfsense problem with Cloned VMs in Proxmox [closed]

I found this issue while creating a separated VLAN for my Proxmox server. It seems like that cloned VMs pass the same client identifiers, even though they have different MAC addresses. This issue will ...
5
votes
3answers
10k views

pfSense & VMWare ESXi VLAN integration

Were setting up a pfsense box as a virtual machine inside a VMWare ESXi 6.0 environment (inside a VXRail hyper-converged Box). The target configuration is that to access any machine within this box, ...
2
votes
2answers
7k views

Assign public IP of /29 block directly to a connected device in pfSense

Ultimately what I want to do is connect a second physically separate gateway, and assign its WAN port one of the public IP addresses given by our ISP. So I have the following setup currently and is ...
0
votes
1answer
2k views

intervlan routing with PfSense

I Need some guidance on getting my lab networking configured. Any support is appreciated. My Lab consists of: 2 cisco switches: 2960s(access layer 2) and 3750X(ip routing/layer 3) Xenserver with ...
0
votes
1answer
24 views

Some questions about a DMZ and where to place my web servers? [duplicate]

Currently i build a new network for our company which is not my specialism as i'm actually a software engineer so excuse me when this is a stupid question. I read a lot about networking last few ...
0
votes
0answers
33 views

pfSense: Bundling carp VIPs

When configuring Carp for pfSense as recommended by their guide, this issue appears: when pulling out the WAN cable (simulating, say, a cable failure, switch port failure, or network card failure), ...
0
votes
1answer
197 views

How to protect a pfSense login page?

A user rents a cloud server hosted on VMWare and is provided a pfSense appliance to protect it. The pfSense appliance has a web-based login page to access its console. Although pfSense is supposed ...
0
votes
1answer
337 views

Why can't I connect to PfSense via the switch?

Our current firwall is deprecated and we decided to exchange it with an PfSense server. In my test setup I configured the interfaces as follows: igb0 = WAN enabled igb1 = LAN (should be VLAN trunk ...
1
vote
0answers
684 views

How to block unknown MAC addresses in OpnSense

I'm dealing with an OPNSense router, at the moment I already configured the DHCP server to provide IPv4 addresses only to a legitimate list of fixed MAC addresses and I want to block every unknown MAC,...
2
votes
2answers
734 views

problems routing WAN with private IPs and LAN with public IPs

I have just installed pfsense 2.4 for a SOHO I work and I'm getting problems with the routing. I have asked my ISP for a /29 network with public ips for the DMZ, but instead of giving my directly what ...
0
votes
1answer
88 views

Site-to-Site IPSEC through load balancer with persistence

what I'm trying to achieve is a site to site IPSEC tunnel going through a load balancer, (both sites have pfsense and balancer is f5 big ip) the reason why i'm trying to do that is because: - Site A ...
3
votes
1answer
748 views

Ping unlocks ipsec vpn

I have a ipsec vpn with a foreign company, this connects my network with their network and they have a different ip subnet. Ipsec is made by a pfsense gateway/firewall. I'm sure it is well configured,...
3
votes
2answers
6k views

pfSense IPv6 NAT

I know many of you said that IPv6 has no NAT, but my server provider told me, that it is possible. I have no idea how... I have a pfSense Server as my Firewall (Not the router!). I have a /28 IPv4 ...
1
vote
2answers
272 views

Virtualize pfSense on VMware

I'm making a network model and I have issues with virtualization of pfSense under VMware. I have a client in a VLAN 220 (172.2.20.100/23) trying to ping his gateway (pfSense : 172.2.20.1/23) but it ...
2
votes
1answer
3k views

OSPF between Cisco & PFsense

Cisco OSPF has area 0 with 10.0.0.0/24. PFsense OSPF has area 0 with 10.0.0.0/24 and area 10 with 10.10.2.0/24 and area 20 with 192.168.122.0/24. The routers have full "FULL/DR" & "FULL/BDR" ...
3
votes
3answers
5k views

How WANs work and why it is it bad to run DNS and DHCP on a router?

I have some networking questions about isolating networks and why it's bad to run DHCP and DNS on a router and should be run on a server. Question 1: What is the purpose of the WAN interface and how ...
4
votes
1answer
2k views

pfsense DHCP lease remember time settings?

pfSense remembers DHCP leases for a quite long time, which is good use on a LAN where the same machines request IP numbers frequently and have a chance to always get the same leases. However on an ...
4
votes
1answer
1k views

pfSense Site-to-Site routes

I was presented with an issue regarding an actual setup using pfSense at two locations. pfSense Site A is the OpenVPN Server and B is the client. Everything works, the LAN on Site A can communicate ...
2
votes
1answer
3k views

Can I bulk export aliases from pfSense (in order to import to another pfSense)?

This seems like a simple thing but there doesn't appear to be an easy way (in the GUI). Before I dive into the file system level, I thought I'd ask --- is there an easy export of aliases from pfSense? ...
2
votes
2answers
1k views

No route to host for IPs in same subnet being routed by bgp

I have set up BGP to do some custom routing for a subset of addresses in the range 192.168.1.0/24. I have verified that the BGP is working by testing ping/curl on a different host in a different ...
1
vote
2answers
335 views

How does pfSense control network traffic when plugged into a switch? [closed]

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
1
vote
0answers
100 views

pfSense - VPN access to the printer only [closed]

in my small company I have a LAN network connected to the outside world via pfSense based router. On this router we have OpenVPN configured for employees. In this network we have printer and several ...
3
votes
1answer
2k views

Spurious restransmission to a server behind pfsense NAT

i'm trying to connect to my ssh test server that i setup behind a pfsense firewall via nat on port 22. When I sniff packet on my laptop (WAN side of pfsense) trying to connect to the server, SYN is ...
2
votes
1answer
2k views

Is it possible to implement IPSec with failover between one pfSense firewall and Amazon VPC (no BGP)

I'm trying to create a VPN connexion between my firewall (a pfsense 2.0.1) and my Amazon Virtual Private Cloud (VPC). Amazon provides two peers endpoints to mount two IPsec tunnels on the same VPC. ...
0
votes
1answer
2k views

Pfsense - blocking a ping immediately

I am having a issue with pfsense... I have a rule that block ping (echo requests) from the LAN network interface to a openvpn client interface (OVP1), the rule is working fine blocking the ping to ...
4
votes
1answer
2k views

What does 'parent interface' mean with respect to VLANs?

I'm trying to learn about VLANs by configuring a router with PFsense installed. Reading the documentation I came across the following sentence: The following example shows how to configure two ...
0
votes
1answer
111 views

How to setup OpenVPN to PFsense? [closed]

How to setup OpenVPN to PFsense? My OpenVPN server used Angristan Openvpn-install, so I need to add there 3 lines to Advanced Configuration -> Custom options tls-client tls-version-min 1.2 tls-...
1
vote
0answers
74 views

Using IPv6 6in4 tunnel with multiple VLANs, or LAN Interfaces?

I have a pfSense router, and I've setup a Hurricane 6in4 IPv6 tunnel by following this guide: http://thirdinternet.com/wp-content/uploads/2017/11/Configure-6in4-Tunnel-in-pfSense.pdf It all seems to ...
0
votes
1answer
73 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
1
vote
1answer
119 views

What does “delta” stand for in arpwatch?

I've just set up Arpwatch on my pfSense machine and started getting emails about flip flops in my network. As the network is quite big, I understand that the flip flops indicate that a certain IP-...
3
votes
2answers
3k views

Why would pfSense ignore arp requests?

I'm configuring pfSense 2.4.3p1 as a transparent firewall. It's running in virtual machine with two vtnet paravirtualized adapters: WAN (vtnet0) connected to a 'far-side' network containing the ...
1
vote
1answer
829 views

PfSense Port Forwarding issues

I'm having trouble forwarding a port through PfSense PF WAN: 192.168.254.203 PF LAN: 10.0.0.1 Dest: 10.0.0.6 PfSense is able to ping and ssh .0.6 from local shell, test port works on LAN, but ...
1
vote
0answers
761 views

pfsense Server Load-balancing on LAN Interface [closed]

I am trying to load balance a couple of web servers from the LAN side as I don't need access from the WAN so that clients on the LAN can access these web servers: LAN IP is 192.168.10.1 I created a ...
2
votes
1answer
1k views

Configuring the NAT 1:1 rules with pfsense

I have two pfsense. One pfsense is on 192.168.0.1 and another pfsense is on 192.168.20.1. Basically I have installed 20.1 pfsense on one machine 192.168.0.180 which is in the network of 0.1 pfsense, ...
3
votes
3answers
7k views

Block communication between hosts in the same VLAN

I've a pfsense firewall with a managed switch, and i created a VLAN: all works fine, but what i want to do is to block the communication between the hosts in my VLAN. For example, i want that an host ...
1
vote
1answer
357 views

ESI PBX LAN-only VoIP phone forwarding thru IPSec tunnel - remote router sees packets but not phone, doesn't forward

Okay, so we have an older X-Class ESI PBX system, an ESI IVX 128x FSIII [see below for link]. We have an LNC card installed in it, which allows for the use of up to 12 LAN-only VoIP phones. We have an ...