Questions tagged [pfsense]
A free firewall based on Packet Filter (pf) and FreeBSD 6.
322
questions
0
votes
0
answers
18
views
How to configure a PC running pfsense to act as firewall for all network traffic
I am trying to set up PFsense in my network as a firewall between my modem (ATT modem and my WiFi 6 router). The setup I'm using is a PC with Ubuntu and VMware running PFsense. I have two network ...
0
votes
1
answer
28
views
Options for Connecting Verizon ONT via 10G CAT6a to Firewall's SFP+ with Intel SoC Limited Compatibility?
Reposting here after visiting Verizon Forums & Netgate Forums...
I have FiOS and the provided ONT outputs 10G via RJ45 Ethernet. I purchased a Netgate 8200 pfSense+ firewall/router appliance. I'm ...
0
votes
0
answers
18
views
PFSense: Subnet can not communicate to the outside
I have multiple subnets on a hypervisor with four Ethernet ports. Two are called subnets. Both of them are utilizing a NordVPN tunnel as their default gateway.
The first subnet LAN can talk to ...
0
votes
0
answers
25
views
Getting 2 PFSense routers to communicate with eachother
I have two routers. R2 can communicate with R1 but R1 can not communicate with R2. I know that we are supposed to resolve this with static routes. I have a screenshot showing all my work. What am I ...
0
votes
1
answer
135
views
How to get Starlink to work with an OpenVPN server
I moved and my only option for decent internet is Starlink, which is behind a CGNAT. I don't have a lot of experience with getting around it. Hoping to get some advice or to know what the best way to ...
0
votes
0
answers
62
views
Can I have a modem/router going to 2 computers then also have another router going to 2 other computers with all getting internet
I have a modem/router in one, and it's going to 2 computers itself. Then I have an Ethernet cable going to an unmanaged switch, then from the switch going to 2 different computers. All have Ethernet ...
0
votes
0
answers
42
views
redirect to PFsense IPsec tunnel endpoit which has public IP
I have got a working IPsec connection where the Remote subnet has a non internet IP address (105.x.y.z/25).
Trying to access this address of course leads to the public internet.
How can I redirect all ...
0
votes
0
answers
86
views
Wireguard VPN pfSense -> Speedport router: No connection
I have a network A with the subnet 192.168.1.1/24, connected to a Telekom Speedport Smart 3, and a network B with the subnet 10.168.1.1/24, connected to an SG-1100 with pfSense (behind a cable modem).
...
0
votes
0
answers
29
views
PFSense virtual box installation broken
steps to reproduce:
Insert PFSense as iso.
Bootoad from iso in virtual box
Expected:
Install screen is loaded
https://www.youtube.com/watch?v=LX-Y-99zJ3M
Actual:
Screen with list command without ...
0
votes
0
answers
11
views
How to have pfSense append an RFC 6238 suffix to client passwords when connecting to OpenVPN server?
I want to setup pfSense to bridge two networks using OpenVPN.
But due to non-security reasons, and not security reasons, it is required that the user's password have a 6-digit suffix (that follows the ...
1
vote
0
answers
54
views
Fordwarding all incoming traffic to a specific dest IP through OpenVPN tap0 interface
Can anybody help me out on how I am supposed to make sure, my VPS accepts all traffic to 1.1.1.1/30 (sample IP) and forwards it to my pfSense instance?
I've got the following setting:
I have a VPS ...
0
votes
0
answers
116
views
How to connect a physical Windows PC to a virtual PFSense router that runs on a virtual GNS3 network
I’m attempting to access a virtual PFsense devices web GUI that resides on a GNS3 virtual network, from my physical windows PC (where GNS3 is installed on). On the GNS3 VM I have ensured that the ...
0
votes
1
answer
101
views
IpSec StrongSwan HA config misses / no connection
I am using strongswan on rasberian 12 to connect to PFsense with /etc/ipsec.conf from an external network to an PfSense:
config setup
conn %default
keyexchange=ikev1
conn peer-ipsec.xxx.de-...
0
votes
0
answers
93
views
IPSEC libreswan interface endpoint does not match left or right
I am using libreswan on raspberry Pi OS 12 to connect to PFsense with /etc/ipsec.conf
from an external network
config setup
conn %default
#keyexchange=ikev1
conn peer-ipsec.xxx.de-tunnel-1
...
0
votes
0
answers
81
views
Allow traffic from one VLAN to another via WAN access
The most concise way to ask is: I just learned that, even using a public URL to a website hosted on my LAN does not work when visiting it from my other VLAN, but is the fpSense Reflection setting of ...
0
votes
1
answer
203
views
block RFC1918 networks in pFsense for LAN seems not to work
Description of the issue: I've created a rule inside pFsense to block any traffic directed at RFC1918 originating from my OPT1 network, and it works fine. Now when I open terminal on OPT1 network PC I ...
0
votes
0
answers
60
views
Installing pfsense on Company Network
I would greatly appreciate some tips and advice on how I can replace my company Router with pfsense. I will explain the network infrastructure shortly.
The Network Setup is as follows
ISP connects to &...
0
votes
0
answers
105
views
Can't ping / access GNS3 PFSense virtual device but can ping GNS3 VM on same subnet
I have a basic GNS3 network that I’m trying to setup with PFSense. I have managed to install the PFSense module and can now add it as a device within GNS3.
However after adding, configuring and ...
0
votes
1
answer
104
views
PFSense as linode Firewall
I am building my master’s final project and was planning on having pfsense as the main firewall to monitor and manage all the instances. I chose Linode, well due to cheap and network chuck’s ...
0
votes
0
answers
195
views
pfsense squid proxy is blocking some sites
I am not expert in pfsense firewall. Though I have pfsense 2.6.0 installed with squid & squidguard. Also i have configured target catagories in SquidGuard. All is working as per my configuration ...
1
vote
1
answer
495
views
How do I route (send) mail through a WireGuard Tunnel when sending email from one of my self-hosted domains?
The Issue: Mail is not going OUT over the WireGuard tunnel.
The Question: How do I configure the mail server or pfSense to use the WireGuard tunnel when sending email from one of my self-hosted ...
0
votes
0
answers
184
views
pfSense not working properly on Azure VNet? What do i do?
I'm currently working on a project based on creating virtual networks and configuring a virtualized firewall (pfSense) along with access control. I was given this project idea in a cybersecurity ...
0
votes
0
answers
38
views
pfsense usb ethernets disabling eachother
Using pfsense 2.6.0, i've two identical usb ethernet with realtek chipset (i know it's a bad choice but every seller in my country have the same chinese crap so i'm stuck with it).
I've installed ...
0
votes
0
answers
766
views
Using pfSense on proxmox as an Internet router for my LAN
I have 2 networks, one is 192.168.0.0/24 and the other is 192.168.1.0/24.
The first network has access to the Internet and the Internet gateway is 192.168.0.1(my dsl router IP).
The second one has not ...
0
votes
0
answers
224
views
Pfsense DNS Resolver not working for internal VM
I got Pfsense and 2 VM behind NAT. The 2 VM host Plesk with 1 domain (domain1.com on VM1 and domain2.com on VM2). When I go to domain1.com or domain2.com from external computer, no problem. But if I ...
0
votes
0
answers
148
views
IPSEC VPN to secondary router with additional remote network
Our SITE A router/firewall is PFSense.
SITE A Has a LAN of 10.2.1.0/24 with an IPSEC tunnel up between that and cellular router with a LAN of 192.168.182.46. This is connected to the customers ...
3
votes
1
answer
1k
views
pfSense and OpenVPN client but traffic exits through the WAN interface
My goal is to have my internal network traffic go out to the internet through a VPN tunnel.
I checked all previous questions but none of them had the same problem as I am facing, and none of the ...
1
vote
0
answers
95
views
PFsense : connection between subnets
My setup:
PFsense, 3 interfaces in use :
WAN : connected to Internet as it should be
LAN : first LAN, interface address 192.168.2.10
OPT1 : second LAN, interface address 192.168.3.10
On my first LAN,...
1
vote
0
answers
220
views
pfsense firewall with 2 networks each with their own APs. One network wifi works fine, the other does not. Hardline for both work fine
Apologies if this sort of question has been answered before. Saw lots of great stuff on SU, but not my scenario.
Setup
I have a pfSense firewall running 2 DHCP servers, each assigned to a different ...
0
votes
0
answers
221
views
pfSense: How to set OpenVPN client as default gateway for just one interface?
I have two LAN interfaces, 192.168.2.1 and .31.1 on my pfSense VM, with VLAN ID 2 and 31, and two WAN interfaces, one to my ISP and another an OpenVPN client to PIA.
I've set the default firewall &...
0
votes
1
answer
319
views
RDP fails when using Public IP to connect from LAN client
The title pretty much says it. Here's the setup:
host: Windows 11 Pro
client: RD Client on iPhone
WAN_IP: using Public DNS
LAN_IP: using host's LAN static IP
port forwards are configured properly on ...
0
votes
0
answers
340
views
PfSense - Squid/LightSquid report
I set up Squid/LightSquid with SSL and certs on my machines. When I open LightSquid, I get the report with the host in the URLs, but I also get many entries that have solely IP addresses listed and ...
0
votes
0
answers
102
views
Allow traffic through 2 tunnels on pfsense
I have a device X 192.168.60.123 on location A and a 3rdparty server 172.16.0.2 on location C .
There is a ipsectunnel between location A 192.168.60.0 and location B 192.168.1.0.
Then there is a ...
0
votes
0
answers
458
views
How do I change which interface gateway pfsense resolves to?
I've recently extended my network from one flat LAN to a couple interfaces using additional physical ports on my router and VLANs. I've kept the old interface up while I'm migrating and for testing ...
1
vote
1
answer
542
views
Pfsense web interface : 404 pages not found
I'm using a Pfsense as a home firewall, I set it up some month before and it worked perfectly.
Now that I need to open a new port I connect to https://pfsenseip as usual, but this time the result is ...
0
votes
0
answers
93
views
DNAT web server behind double firewall
I have this topology and I want to access my webserver that's located behind the internal firewall
sophos WAN : 213.x.x.75
sophos LAN : 172.16.0.2/24
Pfsense WAN : 172.16.0.1/24
pfsense LAN : 192.168....
0
votes
0
answers
142
views
How to access a computer connected to LAN via another computer?
I have the following network configuration:
I wan to able to access the laptop through the entire network, I can't connect it to the switch directly because of physical constraints (there are more ...
1
vote
0
answers
185
views
pfsense routing table: link vs interface
Here is my pfsense IPv4 outing table (netatst -r):
Destination Gateway Flags Netif Expire
default 192.168.4.1 UGS em0
127.0.0.1 link#4 ...
0
votes
0
answers
274
views
Diagnosing an intermittently failing M2 PCIe I225v NIC in PCI passthrough
I am using a M2 PCIe I225v NIC (http://www.iocrest.com/index.php?id=2316) as a PCI passthrough on my Proxmox host - passed to a pfSense VM (running freeBSD-14, but same occurs on freeBSD-13). It's ...
1
vote
1
answer
710
views
pfSense host DNS resolver not working in guest VM (Ubuntu or NixOS)
I was recommended to move this to superuser from servervault, hopefully it's appropriate for here.
I'm a hobbyist / tinkerer using bhyve (in pfSense running on a physical machine) to start up a Linux ...
-1
votes
2
answers
103
views
Trying to understand my level of privacy with a VPN in play, but also routing DNS directly to root servers
When I run a http://dnschecks.tools I get the following:
Given I'm using pfSense with Unbound and OpenVPN, I'm doing my own DNS queries to the root servers. The IP listed on IPXO is my VPN IP, and on ...
0
votes
0
answers
456
views
PFsense not routing from wan to ipv6 lease
I have a pfsense router connected to starlink internet. It's currently providing me a /56 that I'm using to provide IPV6 leases via the DHCPv6 server. I have serval devices that have active IPV6 ...
1
vote
1
answer
749
views
No internet connection and connectivity between some devices on a network
My home network was running 100% fine before I left for holidays, now I'm having a few issues. Here is a basic network diagram that outlines the key features.
The network is as follows: I have ...
1
vote
0
answers
213
views
How Does Wireguard Peer Communication Work?
I have wireguard setup in a VPS to get around CGNAT. My pfSense router is connected to it as a peer, and then I have my phone as a peer to the VPS. This is because I can't add it in pfSense without an ...
-2
votes
1
answer
157
views
Switch and router configuration
I have a mini PC with dual NICs that I want to use for a pfSense router. At the moment there is a regular router with four LAN ports there. Two of these go to switches - a managed PoE one for a bunch ...
0
votes
1
answer
161
views
What would cause network traffic to spike in evenly distributed spurts?
This happens periodically, and I am looking into ways to monitor network traffic more closely, but it looks like my WAN2 (in) traffic bounces in almost perfect intervals, and at the same peak usage. ...
0
votes
0
answers
343
views
Firmware unavailable for Netgate XG-7100
I'm stuck with the firmware version 2.4.5 on this XG-7100 firewall and it seems that whatever branch or guide from netgate or thread I follow I cannot make pfSense to see a new firmware.
Current ...
1
vote
1
answer
471
views
How do I connect a vm to my opt1 network of pf sense
My pfsense is setup with 3 network adapters:
Adapter 1 being 'NAT'
Adapter 2 being 'Internal Network' and is on Lan1
the third Adapter is 'Host-Only adapter' and is on 'VirtualBox Host-Only Ethernet ...
0
votes
0
answers
648
views
Configure pfSense from LAN to WAN to LAN
I have a simple website running accessible from internet using port forwarding for 80 and 443.
Now I noticed that I cannot access this website myself. The website is default only available for people ...
0
votes
1
answer
1k
views
IPv6 masquerading on linux
Problem
I have following setup to access both IPv4 and IPv6 internet
[RockyLinux 9 ] [pfSense ]
[GRE IPv6: fdfe:xxxx::1/64 ]<------ GRE ...