Questions tagged [pfsense]

pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.

Filter by
Sorted by
Tagged with
11
votes
3answers
29k views

Configure pfSense to not give 'potential DNS rebind attack detected' warning for local server

I am needing to access a local LEMP server through its domain name for a PHP package that uses domain names in every link, making IP address usage not possible for this application. I can access the ...
9
votes
2answers
8k views

pfSense multi-wan Bridge, NAT, Load balancing and CARP

Context I currently have : 1 pfSense 2.0.2 router (on a Firebox X-Peak X5000) 2 WAN 1 LAN 3 Servers My interfaces WAN1 68.XX.XXX.98 to 69.XX.XXX.102 WAN2 65.XXX.XXX.58 to 66.XXX.XXX.62 LAN 192.168....
5
votes
2answers
8k views

Pfsense and two networks

I am playing around with pfsense and have an issue with it connecting properly to the internet. It has the 1 WAN port by default but I also want to run 2 other networks 192.168.3.0 and 192.168.4.0 on ...
5
votes
2answers
5k views

OpenVPN Bridge on pfsense: once LAN pings clients, connectivity breaks

So I'm using a pfsense openvpn to bridge my LAN segment so VPN users can access the servers. The problem I'm having now is that I can establish a connection, I can ping the LAN server from the VPN, ...
5
votes
3answers
10k views

pfSense & VMWare ESXi VLAN integration

Were setting up a pfsense box as a virtual machine inside a VMWare ESXi 6.0 environment (inside a VXRail hyper-converged Box). The target configuration is that to access any machine within this box, ...
4
votes
1answer
2k views

pfsense DHCP lease remember time settings?

pfSense remembers DHCP leases for a quite long time, which is good use on a LAN where the same machines request IP numbers frequently and have a chance to always get the same leases. However on an ...
4
votes
1answer
2k views

What does 'parent interface' mean with respect to VLANs?

I'm trying to learn about VLANs by configuring a router with PFsense installed. Reading the documentation I came across the following sentence: The following example shows how to configure two ...
4
votes
1answer
9k views

ASA VPN works as responder but not as initiator

I'm trying to build an IKEv2/IPSec VPN between a pfSense which uses StrongSWAN 5.2.1 and an ASA 5512 (version 9.1 software.) When the pfSense starts the connection, everything works fine. When the ...
4
votes
1answer
1k views

pfSense Site-to-Site routes

I was presented with an issue regarding an actual setup using pfSense at two locations. pfSense Site A is the OpenVPN Server and B is the client. Everything works, the LAN on Site A can communicate ...
4
votes
1answer
2k views

Setup IPSec VPN to a node behind another Pfsense Box

I have a pfsense box (Call this BOX1) that has LANs and a WAN which connects to the internet and is used to create a VPN connection to a client: This has pfsense version 2.0.2-RELEASE (i386) I have a ...
3
votes
3answers
7k views

Block communication between hosts in the same VLAN

I've a pfsense firewall with a managed switch, and i created a VLAN: all works fine, but what i want to do is to block the communication between the hosts in my VLAN. For example, i want that an host ...
3
votes
2answers
3k views

Why would pfSense ignore arp requests?

I'm configuring pfSense 2.4.3p1 as a transparent firewall. It's running in virtual machine with two vtnet paravirtualized adapters: WAN (vtnet0) connected to a 'far-side' network containing the ...
3
votes
1answer
2k views

Spurious restransmission to a server behind pfsense NAT

i'm trying to connect to my ssh test server that i setup behind a pfsense firewall via nat on port 22. When I sniff packet on my laptop (WAN side of pfsense) trying to connect to the server, SYN is ...
3
votes
3answers
5k views

How WANs work and why it is it bad to run DNS and DHCP on a router?

I have some networking questions about isolating networks and why it's bad to run DHCP and DNS on a router and should be run on a server. Question 1: What is the purpose of the WAN interface and how ...
3
votes
2answers
6k views

pfSense IPv6 NAT

I know many of you said that IPv6 has no NAT, but my server provider told me, that it is possible. I have no idea how... I have a pfSense Server as my Firewall (Not the router!). I have a /28 IPv4 ...
3
votes
1answer
748 views

Ping unlocks ipsec vpn

I have a ipsec vpn with a foreign company, this connects my network with their network and they have a different ip subnet. Ipsec is made by a pfsense gateway/firewall. I'm sure it is well configured,...
3
votes
1answer
100 views

How to connect servers from different Datacentres via firewall

really need help since I am still new in firewall. I have 2 firewall located in two separate Datacentres. I need to make a connection for the servers from these 2 DCs. One firewall is running pfsense ...
3
votes
2answers
197 views

Subnet routing rules without connecting additional cables

Is it possible to set up routing rules without connecting additional cables to the Cisco routers? The problem is that we have old Ciscos, and two ethernet ports are used already. We use Cisco 1841 ...
3
votes
2answers
6k views

Pfsense with WAN (NIC 1) and routing between two networks(NIC 2 and 3)

I have a server with three NICs running PfSense. The first NIC connects to my ISP, the second NIC connects to local computers in my office (LAN-1). For the third NIC(LAN-2), i have connected it to a ...
2
votes
5answers
2k views

Is a pfSense router w/ a LAN gateway using a /20 bits subnet mask common?

Obviously I'm lacking some networking knowledge, and I wish somebody could help me understand something fishy I found on a pfSense router in an organization yesterday. The pfSense router forces subnet ...
2
votes
2answers
1k views

No route to host for IPs in same subnet being routed by bgp

I have set up BGP to do some custom routing for a subset of addresses in the range 192.168.1.0/24. I have verified that the BGP is working by testing ping/curl on a different host in a different ...
2
votes
1answer
3k views

Can I bulk export aliases from pfSense (in order to import to another pfSense)?

This seems like a simple thing but there doesn't appear to be an easy way (in the GUI). Before I dive into the file system level, I thought I'd ask --- is there an easy export of aliases from pfSense? ...
2
votes
1answer
3k views

OSPF between Cisco & PFsense

Cisco OSPF has area 0 with 10.0.0.0/24. PFsense OSPF has area 0 with 10.0.0.0/24 and area 10 with 10.10.2.0/24 and area 20 with 192.168.122.0/24. The routers have full "FULL/DR" & "FULL/BDR" ...
2
votes
1answer
11k views

Access pfSense LAN through OpenVPN

I'm trying to access a LAN through OpenVPN. My current setup is that I have one machine (Linux (old)) that can successfully connect to OpenVPN running on a pfSense (2.3.2) machine. Behind the pfSense ...
2
votes
1answer
3k views

can pfsense perform ipv6 nat (for outbound service redirection)

I have to keep prefacing my question with "I am not trying to reimplement ipv4 nat inbound for outdated security I don't understand correctly". Hi! I am wondering if it is possible to implement an ...
2
votes
2answers
734 views

problems routing WAN with private IPs and LAN with public IPs

I have just installed pfsense 2.4 for a SOHO I work and I'm getting problems with the routing. I have asked my ISP for a /29 network with public ips for the DMZ, but instead of giving my directly what ...
2
votes
2answers
7k views

Assign public IP of /29 block directly to a connected device in pfSense

Ultimately what I want to do is connect a second physically separate gateway, and assign its WAN port one of the public IP addresses given by our ISP. So I have the following setup currently and is ...
2
votes
2answers
3k views

pfSense - High Availibility Cluster

I'm setting up a High Availability Cluster with two pfSense SG-4860 routers. I have a question about setting up the network. Here is the diagram they provide: I have a question about the WAN part. ...
2
votes
1answer
1k views

ESXI + pFsense + L3 Switch + Airport extreme setup advice

I have been struggling with this issue for a few days now. please bear with me, I am not a expert in networking. I am trying to setup ESXI lab with network segmentation based on Vlans defined in ...
2
votes
1answer
2k views

Is it possible to implement IPSec with failover between one pfSense firewall and Amazon VPC (no BGP)

I'm trying to create a VPN connexion between my firewall (a pfsense 2.0.1) and my Amazon Virtual Private Cloud (VPC). Amazon provides two peers endpoints to mount two IPsec tunnels on the same VPC. ...
2
votes
1answer
205 views

pFsense, Unifi AP, HP switch and VLANS

I have a Unifi AP with a single MYNET SSID connected to my HP 2520 switch on port 23. I have a pfSense LAN interface connected on port 1. AP clients get DHCP (192.168.1.0/24) from pfSense and can ...
2
votes
1answer
1k views

Configuring the NAT 1:1 rules with pfsense

I have two pfsense. One pfsense is on 192.168.0.1 and another pfsense is on 192.168.20.1. Basically I have installed 20.1 pfsense on one machine 192.168.0.180 which is in the network of 0.1 pfsense, ...
2
votes
1answer
261 views

Pfsense stack two boxes

We have bought two Pfsense SG-4860 boxes. We have our equipment in a colocation datacenter. Our goals for this project is to have a redundant network with both routers connected to a WAN. The ...
2
votes
2answers
6k views

Squid Reverse Proxy alternating between destinations

I'm faced with with an odd issues I can not explain. After having setup the Squid Reverse Proxy in pfSense, 1 of the 2 mappings I've setup keeps alternating between destinations, while the other ...
2
votes
1answer
8k views

Port Forwarding on unavoidable Double-NAT pfSense

I've got a pfSense box which is acting as DHCP/DNS for one LAN, which all office computers and servers connect to. We have a modem which cannot be put into bridge mode for several reasons and cannot ...
1
vote
2answers
93 views

How Does a Firewall (pfSense) Check Packets Against Rules

For packet rule testing, legacy 5 tuple based techniques employ decision tree, decomposition or hardware (usually TCAM) based approaches. What specific technique do pfSense firewalls employ to test ...
1
vote
1answer
119 views

What does “delta” stand for in arpwatch?

I've just set up Arpwatch on my pfSense machine and started getting emails about flip flops in my network. As the network is quite big, I understand that the flip flops indicate that a certain IP-...
1
vote
1answer
1k views

What could cause kvm virtualized pfsense to get 84mbps behind physical pfsense, but then drop to 1mbps when it replaces physical pfsense?

I'm scratching my head on what could cause the following behavior: Scenario A: Laptop -> virtualizedpfsense -> switch -> physicalpfsense -> modem speedtest.com gives me 84mbps download (...
1
vote
2answers
335 views

How does pfSense control network traffic when plugged into a switch? [closed]

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
1
vote
2answers
118 views

Setting up a hypervisor network

I have a pfsense appliance that serves as my router. I have four hypervisors that I want to hook up to one of the router interfaces through a switch. The hypervisors will house multiple VMs that are "...
1
vote
1answer
4k views

Issues trunking VLANs from pfSense to Cisco switch

I am currently using an old desktop with a dual port PCI NIC as a pfSense router. Interface em0 is assigned to the WAN interface, and em1 is assigned to the LAN interface, as well as 3 VLAN interfaces ...
1
vote
1answer
1k views

How to force users to authenticate to get IP adress from DHCP?

Can You help me !! I want to force users to authentificate to get IP from DHCP-server (win server) if not they can't get ip @ adress !! even they are connected to network
1
vote
1answer
893 views

Network Segregation by pfsense + ESXi VLAN

Given ESXi host with 1 NIC Inside the host, there're 2 virtual switches: switch1 and switch2 In switch1, there's 1 WAN interface In swtich2, there's 4 VLANs: VLAN10, VLAN20, VLAN30, and VLAN40 ...
1
vote
2answers
2k views

pfSense: ICMP Ping allowed, but not possible

I have a pfSense 2.2.6 box that is connected with a WAN link that supports native IPv6. IPv6 is working great, and my clients can access IPv6 services on the Internet and also on the local network. ...
1
vote
3answers
792 views

Connectivity issues/L3 switch

I'm having issues with connectivity on my home lab network after trying a different setup. Can't connect to the pfsense box from LAN, though pfsense can reach all the way to the LAN network. From the ...
1
vote
2answers
272 views

Virtualize pfSense on VMware

I'm making a network model and I have issues with virtualization of pfSense under VMware. I have a client in a VLAN 220 (172.2.20.100/23) trying to ping his gateway (pfSense : 172.2.20.1/23) but it ...
1
vote
1answer
394 views

Pfsense CARP mutliwan

I'm currently trying to build a HA setup using Pfsense/CARP for the first time but i have a few questions about it. On the LAN side i have 3 VLAN's and they failover fine using CARP, the problem is ...
1
vote
1answer
829 views

PfSense Port Forwarding issues

I'm having trouble forwarding a port through PfSense PF WAN: 192.168.254.203 PF LAN: 10.0.0.1 Dest: 10.0.0.6 PfSense is able to ping and ssh .0.6 from local shell, test port works on LAN, but ...
1
vote
1answer
357 views

ESI PBX LAN-only VoIP phone forwarding thru IPSec tunnel - remote router sees packets but not phone, doesn't forward

Okay, so we have an older X-Class ESI PBX system, an ESI IVX 128x FSIII [see below for link]. We have an LNC card installed in it, which allows for the use of up to 12 LAN-only VoIP phones. We have an ...
1
vote
1answer
3k views

pfSense join 2 networks

I've got 2 pfsense boxes taking care of separate networks, with separate gateways. We've managed to drop a cable between the 2 networks so would now like to join the 2 networks so machines on each ...