Questions tagged [pfsense]

pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.

Filter by
Sorted by
Tagged with
1
vote
1answer
4k views

Issues trunking VLANs from pfSense to Cisco switch

I am currently using an old desktop with a dual port PCI NIC as a pfSense router. Interface em0 is assigned to the WAN interface, and em1 is assigned to the LAN interface, as well as 3 VLAN interfaces ...
4
votes
1answer
1k views

pfSense Site-to-Site routes

I was presented with an issue regarding an actual setup using pfSense at two locations. pfSense Site A is the OpenVPN Server and B is the client. Everything works, the LAN on Site A can communicate ...
0
votes
1answer
879 views

High traffic caused by DHCPv6 [closed]

We have a medium sized network setup with multiple switches and one firewall (pfsense). We now have IPv6 since two months and sometimes can observe, that there is a huge amount of traffic on the ...
3
votes
3answers
5k views

How WANs work and why it is it bad to run DNS and DHCP on a router?

I have some networking questions about isolating networks and why it's bad to run DHCP and DNS on a router and should be run on a server. Question 1: What is the purpose of the WAN interface and how ...
2
votes
1answer
3k views

OSPF between Cisco & PFsense

Cisco OSPF has area 0 with 10.0.0.0/24. PFsense OSPF has area 0 with 10.0.0.0/24 and area 10 with 10.10.2.0/24 and area 20 with 192.168.122.0/24. The routers have full "FULL/DR" & "FULL/BDR" ...
1
vote
1answer
1k views

How to force users to authenticate to get IP adress from DHCP?

Can You help me !! I want to force users to authentificate to get IP from DHCP-server (win server) if not they can't get ip @ adress !! even they are connected to network
2
votes
1answer
11k views

Access pfSense LAN through OpenVPN

I'm trying to access a LAN through OpenVPN. My current setup is that I have one machine (Linux (old)) that can successfully connect to OpenVPN running on a pfSense (2.3.2) machine. Behind the pfSense ...
0
votes
4answers
779 views

Pfsense wan traffic differs from lan

Having 2 pfsense FWs in a large populated area with 3 VLANs, (students + teachers + admins), I set up limiters in the firewall rules to avoid the connection speed limits to be reached (30Mb up/dwn) ...
2
votes
1answer
8k views

Port Forwarding on unavoidable Double-NAT pfSense

I've got a pfSense box which is acting as DHCP/DNS for one LAN, which all office computers and servers connect to. We have a modem which cannot be put into bridge mode for several reasons and cannot ...
-1
votes
1answer
77 views

can you explain for me more detail this tutorial, please?

I see this tutorial, http://djinnsour.com/2015/08/23/adding-a-public-ip-address-to-a-system-behind-pfsense-using-nat-11/. Author of this blog say, add external ip to this network, so what is the ...
1
vote
1answer
357 views

ESI PBX LAN-only VoIP phone forwarding thru IPSec tunnel - remote router sees packets but not phone, doesn't forward

Okay, so we have an older X-Class ESI PBX system, an ESI IVX 128x FSIII [see below for link]. We have an LNC card installed in it, which allows for the use of up to 12 LAN-only VoIP phones. We have an ...
1
vote
1answer
3k views

pfSense join 2 networks

I've got 2 pfsense boxes taking care of separate networks, with separate gateways. We've managed to drop a cable between the 2 networks so would now like to join the 2 networks so machines on each ...
0
votes
1answer
2k views

pfSense Web UI not showing Dynamic DNS IP address

I'm running pfSense 2.2.6-RELEASE and have configured two DynDNS providers: no-ip.biz and nsupdate.info. (I added the latter since no-ip.biz started nagging that I need to log in every 30 days and ...
3
votes
1answer
748 views

Ping unlocks ipsec vpn

I have a ipsec vpn with a foreign company, this connects my network with their network and they have a different ip subnet. Ipsec is made by a pfsense gateway/firewall. I'm sure it is well configured,...
0
votes
1answer
1k views

pfSense update page (and/or regular web pages) not loading properly

Some weeks ago I installed pfSense on one of these boards, it has been working well, but today weird things started to happen. Webpages did not load properly, but only specific elements fail (date ...
3
votes
1answer
2k views

Spurious restransmission to a server behind pfsense NAT

i'm trying to connect to my ssh test server that i setup behind a pfsense firewall via nat on port 22. When I sniff packet on my laptop (WAN side of pfsense) trying to connect to the server, SYN is ...
1
vote
1answer
167 views

IPsec device downstream from router/dhcp server

Looking to implement a pfSense SG-2440 downstream from the primary router so that we can (road warrior) VPN in. I know that I'll have to forward ports 500, 50, and 51 to the pfSense device from the ...
1
vote
1answer
2k views

pfSense traffic shaping with CBQ [closed]

I'm new to networking, but I did some research, and I could not determine the source of the problem. I want to prioritize gaming traffic by port, destination, or anything else I decide. I configured ...
2
votes
2answers
3k views

pfSense - High Availibility Cluster

I'm setting up a High Availability Cluster with two pfSense SG-4860 routers. I have a question about setting up the network. Here is the diagram they provide: I have a question about the WAN part. ...
1
vote
1answer
893 views

Network Segregation by pfsense + ESXi VLAN

Given ESXi host with 1 NIC Inside the host, there're 2 virtual switches: switch1 and switch2 In switch1, there's 1 WAN interface In swtich2, there's 4 VLANs: VLAN10, VLAN20, VLAN30, and VLAN40 ...
1
vote
2answers
2k views

pfSense: ICMP Ping allowed, but not possible

I have a pfSense 2.2.6 box that is connected with a WAN link that supports native IPv6. IPv6 is working great, and my clients can access IPv6 services on the Internet and also on the local network. ...
1
vote
1answer
551 views

How do I segment my network?

I'm on a network where I don't own the router and I don't want to modify the network existing network by running a firewall over the entire network however I want to have a firewall protecting my ...
3
votes
2answers
197 views

Subnet routing rules without connecting additional cables

Is it possible to set up routing rules without connecting additional cables to the Cisco routers? The problem is that we have old Ciscos, and two ethernet ports are used already. We use Cisco 1841 ...
1
vote
1answer
404 views

PFSense on AWS with ASG

Have any of you had any experience using PFSense and Auto Scaling in AWS? Does PFSense have support for a user-data field? [1] Is there a way of running start-up custom scripts inside PFSense? ...
2
votes
2answers
6k views

Squid Reverse Proxy alternating between destinations

I'm faced with with an odd issues I can not explain. After having setup the Squid Reverse Proxy in pfSense, 1 of the 2 mappings I've setup keeps alternating between destinations, while the other ...
1
vote
3answers
792 views

Connectivity issues/L3 switch

I'm having issues with connectivity on my home lab network after trying a different setup. Can't connect to the pfsense box from LAN, though pfsense can reach all the way to the LAN network. From the ...
3
votes
2answers
6k views

Pfsense with WAN (NIC 1) and routing between two networks(NIC 2 and 3)

I have a server with three NICs running PfSense. The first NIC connects to my ISP, the second NIC connects to local computers in my office (LAN-1). For the third NIC(LAN-2), i have connected it to a ...
1
vote
2answers
2k views

File Uploads to Internet not working with PF Sense as Gateway [closed]

We're running PFSense Version: 2.2.2 On our LAN the PFSense box is our default gateway, so it goes: USER PC -> PFSense Box -> Firewall -> Internet We've set allow ANY ANY rules on the firewall of ...
2
votes
1answer
3k views

can pfsense perform ipv6 nat (for outbound service redirection)

I have to keep prefacing my question with "I am not trying to reimplement ipv4 nat inbound for outdated security I don't understand correctly". Hi! I am wondering if it is possible to implement an ...
2
votes
1answer
1k views

ESXI + pFsense + L3 Switch + Airport extreme setup advice

I have been struggling with this issue for a few days now. please bear with me, I am not a expert in networking. I am trying to setup ESXI lab with network segmentation based on Vlans defined in ...
4
votes
1answer
9k views

ASA VPN works as responder but not as initiator

I'm trying to build an IKEv2/IPSec VPN between a pfSense which uses StrongSWAN 5.2.1 and an ASA 5512 (version 9.1 software.) When the pfSense starts the connection, everything works fine. When the ...
11
votes
3answers
29k views

Configure pfSense to not give 'potential DNS rebind attack detected' warning for local server

I am needing to access a local LEMP server through its domain name for a PHP package that uses domain names in every link, making IP address usage not possible for this application. I can access the ...
1
vote
1answer
2k views

Can't access Bridged DMZ IP's from NATed LAN

I've configured my pfSense router with two bridged WAN to a DMZ (OPT2). Everything is fine to access web server from external with public IP directly on servers behind DMZ. The setup is pretty much ...
2
votes
1answer
2k views

Is it possible to implement IPSec with failover between one pfSense firewall and Amazon VPC (no BGP)

I'm trying to create a VPN connexion between my firewall (a pfsense 2.0.1) and my Amazon Virtual Private Cloud (VPC). Amazon provides two peers endpoints to mount two IPsec tunnels on the same VPC. ...
5
votes
2answers
8k views

Pfsense and two networks

I am playing around with pfsense and have an issue with it connecting properly to the internet. It has the 1 WAN port by default but I also want to run 2 other networks 192.168.3.0 and 192.168.4.0 on ...
4
votes
1answer
2k views

Setup IPSec VPN to a node behind another Pfsense Box

I have a pfsense box (Call this BOX1) that has LANs and a WAN which connects to the internet and is used to create a VPN connection to a client: This has pfsense version 2.0.2-RELEASE (i386) I have a ...
5
votes
2answers
5k views

OpenVPN Bridge on pfsense: once LAN pings clients, connectivity breaks

So I'm using a pfsense openvpn to bridge my LAN segment so VPN users can access the servers. The problem I'm having now is that I can establish a connection, I can ping the LAN server from the VPN, ...
9
votes
2answers
8k views

pfSense multi-wan Bridge, NAT, Load balancing and CARP

Context I currently have : 1 pfSense 2.0.2 router (on a Firebox X-Peak X5000) 2 WAN 1 LAN 3 Servers My interfaces WAN1 68.XX.XXX.98 to 69.XX.XXX.102 WAN2 65.XXX.XXX.58 to 66.XXX.XXX.62 LAN 192.168....

1
2