Questions tagged [pfsense]
A free firewall based on Packet Filter (pf) and FreeBSD 6.
322
questions
0
votes
1
answer
24
views
Temporary failure in name resolution - pfSense + Ubuntu
I have 2 VMs on Hyper-V:
pfSense
Ubuntu Server 22.04
The pfSense VM is connected to 2 virtual switches - External WAN and Private LAN, which acts as the internal switch for the rest of the VMs.
The ...
- 453k
2
votes
1
answer
1k
views
Why is iperf3 faster in one direction than the other?
I've got a Windows 10 PC with Realtek RTL8125b 2.5GbE interface and I have a Debian Linux 5.10 server with an Intel I225-LM (rev 3) 2.5GbE interface. Running iperf3 -s on the server I get 1.14Gbit/s. ...
- 55.6k
1
vote
3
answers
16k
views
How to configure pfSense as a simple router
I’m working with pfSense 2.5.1 and VMWare Workstation Pro 16.
I’m trying to configure a pfSense vm as a simple router (no firewalling or other stuff) with three NICs:
em0 = WAN (it is natted)
em1 = ...
CommunityBot
- 1
0
votes
1
answer
36
views
Options for Connecting Verizon ONT via 10G CAT6a to Firewall's SFP+ with Intel SoC Limited Compatibility?
Reposting here after visiting Verizon Forums & Netgate Forums...
I have FiOS and the provided ONT outputs 10G via RJ45 Ethernet. I purchased a Netgate 8200 pfSense+ firewall/router appliance. I'm ...
- 19
0
votes
2
answers
6k
views
How to setup remote server name for Openvpn in pfsense
My company runs pfsense 2.3.2-RELEASE as vpn server. All generated Openvpn config file are like this:
persist-tun
persist-key
cipher AES-128-CBC
auth SHA1
tls-client
client
remote 192.168.100.2 1194 ...
CommunityBot
- 1
0
votes
2
answers
5k
views
How to configure the custom options in pfSense for OpenVPN to access the LAN
In the Advanced Configuration section of pfSense's OpenVPN, in Custom Options, there's an example to push "route 10.0.0.0 255.255.255.0".
In my network, my OpenVPN server uses the 10.22.4.0/24 ...
CommunityBot
- 1
0
votes
0
answers
21
views
How to configure a PC running pfsense to act as firewall for all network traffic
I am trying to set up PFsense in my network as a firewall between my modem (ATT modem and my WiFi 6 router). The setup I'm using is a PC with Ubuntu and VMware running PFsense. I have two network ...
- 129k
0
votes
0
answers
19
views
PFSense: Subnet can not communicate to the outside
I have multiple subnets on a hypervisor with four Ethernet ports. Two are called subnets. Both of them are utilizing a NordVPN tunnel as their default gateway.
The first subnet LAN can talk to ...
0
votes
0
answers
25
views
Getting 2 PFSense routers to communicate with eachother
I have two routers. R2 can communicate with R1 but R1 can not communicate with R2. I know that we are supposed to resolve this with static routes. I have a screenshot showing all my work. What am I ...
- 453k
2
votes
1
answer
6k
views
New to Active Domain/Windows DNS, using pfSense resolver for external DNS and routing?
I have some questions about setting up Active Domain with pfSense. I'm pretty new to this and I haven't found any posts specifically dealing with these questions, and I've been scouring for hours.
...
CommunityBot
- 1
1
vote
1
answer
5k
views
pfSense 2.3.2 cannot install Squid and SquidGuard
pfSense 2.3.2 is newly installed but it gives the following error during the Squid and SquidGuard installation.
Number of packages to be installed: 4
The process will require 10 MiB more space.
[1/4] ...
- 55.6k
1
vote
1
answer
4k
views
Is is possible to set up a static IP through Pfsense when user is connecting through OpenVpn?
I'm setting IP based restrictions on our firewall and need to allow certain people to connect even when they are connected through OpenVPN. Is it possible to assign users a static IP?
CommunityBot
- 1
1
vote
1
answer
4k
views
pfSense and USB ethernet
I'm looking to build a pfSense box at home. It seems most ideal to locate a machine with dual ethernet, and designate them WAN and LAN. But I was wondering if it would make sense to use a machine I ...
CommunityBot
- 1
0
votes
1
answer
5k
views
How to block specific URL in SquidGuard in pfSense?
I don't understand, how to utilize SquidGuard in pfSense?
Suppose I wish to ban domain XXX.COM
I go to Target Categories page and created new category TestCategory with the single domain XXX.COM ...
CommunityBot
- 1
0
votes
1
answer
197
views
How to get Starlink to work with an OpenVPN server
I moved and my only option for decent internet is Starlink, which is behind a CGNAT. I don't have a lot of experience with getting around it. Hoping to get some advice or to know what the best way to ...
- 453k
2
votes
1
answer
9k
views
How do I get pfsense WAN IP after I set it up on DHCP?
I just installed a FreeBSD 64-bit virtual machine with pfSense 2.3.2 with VMware Workstation 12, but with VMware Workstation 11 hardware compatibility.
I booted and standard-installed pfSense and got ...
CommunityBot
- 1
1
vote
5
answers
11k
views
On pfsense, why won't static IP addresses work?
I have a pfsense router. I also have an iPhone.
On my router, I clicked "Set a static mapping for this device"
I set the static ip to 10.12.1.56 for my iphones mac address.
Well the DHCP server won'...
CommunityBot
- 1
0
votes
0
answers
43
views
redirect to PFsense IPsec tunnel endpoit which has public IP
I have got a working IPsec connection where the Remote subnet has a non internet IP address (105.x.y.z/25).
Trying to access this address of course leads to the public internet.
How can I redirect all ...
- 63
0
votes
0
answers
78
views
Can I have a modem/router going to 2 computers then also have another router going to 2 other computers with all getting internet
I have a modem/router in one, and it's going to 2 computers itself. Then I have an Ethernet cable going to an unmanaged switch, then from the switch going to 2 different computers. All have Ethernet ...
- 55.6k
0
votes
0
answers
95
views
Wireguard VPN pfSense -> Speedport router: No connection
I have a network A with the subnet 192.168.1.1/24, connected to a Telekom Speedport Smart 3, and a network B with the subnet 10.168.1.1/24, connected to an SG-1100 with pfSense (behind a cable modem).
...
1
vote
1
answer
4k
views
How to install PFSense via PXE
I was wondering if anyone knew how to install PFSense using a PXE server. I am currently using CentOS 7.4 acting as both the DHCP and PXE server.
What I have tried:
Using Memdisk to load the ISO / ...
CommunityBot
- 1
1
vote
2
answers
7k
views
pfSense inaccessible from LAN
My pfSense ( pfSense version 2.3.4, FreeBSD 10.3-RELEASE-p19) homemade router from older PC was working just fine for few months but it suddenly stopped working and is inaccessible from any LAN ...
- 101
0
votes
0
answers
29
views
PFSense virtual box installation broken
steps to reproduce:
Insert PFSense as iso.
Bootoad from iso in virtual box
Expected:
Install screen is loaded
https://www.youtube.com/watch?v=LX-Y-99zJ3M
Actual:
Screen with list command without ...
Alex Anonym
6
votes
1
answer
14k
views
How to limit bandwidth used by an IP in the penalty box in pfSense
We're trying to use the pfSense traffic shaping feature known as the Penalty Box. We are interested in limiting the bandwidth of a particular IP to 2%.
Note: There is a four-year-old bug in pfSense ...
CommunityBot
- 1
1
vote
2
answers
7k
views
Have Site-To-Site (IPSEC) connected but cannot ping anything other than router
Just setup a new Azure subscription, and i'm stumped trying to troubleshoot why I can't ping any local VMWare machines from a Azure VM. After successfully setting up an IPSec Site-To-Site VPN.
I am ...
CommunityBot
- 1
0
votes
1
answer
20k
views
How to use push "route 10.0.0.0 255.255.255.0" on pfSense
My OpenVPN server has a local IP address 10.21.1.4 (it's on the 10.21.1.0/24 subnet), and uses the 10.21.4.0/24 subnet for the tunnel. What route should I push to grant VPN clients access to the LAN (...
CommunityBot
- 1
0
votes
0
answers
12
views
How to have pfSense append an RFC 6238 suffix to client passwords when connecting to OpenVPN server?
I want to setup pfSense to bridge two networks using OpenVPN.
But due to non-security reasons, and not security reasons, it is required that the user's password have a 6-digit suffix (that follows the ...
- 22.2k
1
vote
0
answers
56
views
Fordwarding all incoming traffic to a specific dest IP through OpenVPN tap0 interface
Can anybody help me out on how I am supposed to make sure, my VPS accepts all traffic to 1.1.1.1/30 (sample IP) and forwards it to my pfSense instance?
I've got the following setting:
I have a VPS ...
- 11
0
votes
0
answers
101
views
IPSEC libreswan interface endpoint does not match left or right
I am using libreswan on raspberry Pi OS 12 to connect to PFsense with /etc/ipsec.conf
from an external network
config setup
conn %default
#keyexchange=ikev1
conn peer-ipsec.xxx.de-tunnel-1
...
- 63
0
votes
2
answers
6k
views
Network Discovery of CIFS, SMB, Samba with pfSense and different subnet mask, same LAN
I have a network setup with the following:
A wireless router with DD-WRT passing multiple SSID's via separate
VLANs to a pfSense box.
Ethernet connected computers including one samba server within
...
CommunityBot
- 1
0
votes
0
answers
134
views
How to connect a physical Windows PC to a virtual PFSense router that runs on a virtual GNS3 network
I’m attempting to access a virtual PFsense devices web GUI that resides on a GNS3 virtual network, from my physical windows PC (where GNS3 is installed on). On the GNS3 VM I have ensured that the ...
- 55.6k
0
votes
1
answer
114
views
IpSec StrongSwan HA config misses / no connection
I am using strongswan on rasberian 12 to connect to PFsense with /etc/ipsec.conf from an external network to an PfSense:
config setup
conn %default
keyexchange=ikev1
conn peer-ipsec.xxx.de-...
- 63
0
votes
0
answers
100
views
Allow traffic from one VLAN to another via WAN access
The most concise way to ask is: I just learned that, even using a public URL to a website hosted on my LAN does not work when visiting it from my other VLAN, but is the fpSense Reflection setting of ...
- 435
0
votes
1
answer
222
views
block RFC1918 networks in pFsense for LAN seems not to work
Description of the issue: I've created a rule inside pFsense to block any traffic directed at RFC1918 originating from my OPT1 network, and it works fine. Now when I open terminal on OPT1 network PC I ...
- 453k
0
votes
0
answers
64
views
Installing pfsense on Company Network
I would greatly appreciate some tips and advice on how I can replace my company Router with pfsense. I will explain the network infrastructure shortly.
The Network Setup is as follows
ISP connects to &...
- 1
0
votes
0
answers
110
views
Can't ping / access GNS3 PFSense virtual device but can ping GNS3 VM on same subnet
I have a basic GNS3 network that I’m trying to setup with PFSense. I have managed to install the PFSense module and can now add it as a device within GNS3.
However after adding, configuring and ...
- 157
0
votes
1
answer
117
views
PFSense as linode Firewall
I am building my master’s final project and was planning on having pfsense as the main firewall to monitor and manage all the instances. I chose Linode, well due to cheap and network chuck’s ...
- 453k
0
votes
1
answer
3k
views
Asterisk/FreePBX behind pfSense – no audio in/out
I have following setup:
ISP modem in bridge mode -> pfSense firewall -> HP2920 switch -> asterisk | VoIP phones
I finally got inbound and outbound calls working but I hear no audio in/out. ...
CommunityBot
- 1
1
vote
1
answer
4k
views
Configuring pfSense for IPTV delivered via separate VLAN on WAN link
I am trying to set up pfSense as my primary Internet router, replacing the provider router.
Basic Internet connectivity works as it should: configure the external interface as a DHCP client, configure ...
CommunityBot
- 1
0
votes
0
answers
197
views
pfsense squid proxy is blocking some sites
I am not expert in pfsense firewall. Though I have pfsense 2.6.0 installed with squid & squidguard. Also i have configured target catagories in SquidGuard. All is working as per my configuration ...
1
vote
1
answer
526
views
How do I route (send) mail through a WireGuard Tunnel when sending email from one of my self-hosted domains?
The Issue: Mail is not going OUT over the WireGuard tunnel.
The Question: How do I configure the mail server or pfSense to use the WireGuard tunnel when sending email from one of my self-hosted ...
- 644
0
votes
0
answers
190
views
pfSense not working properly on Azure VNet? What do i do?
I'm currently working on a project based on creating virtual networks and configuring a virtualized firewall (pfSense) along with access control. I was given this project idea in a cybersecurity ...
- 101
0
votes
0
answers
38
views
pfsense usb ethernets disabling eachother
Using pfsense 2.6.0, i've two identical usb ethernet with realtek chipset (i know it's a bad choice but every seller in my country have the same chinese crap so i'm stuck with it).
I've installed ...
- 11
0
votes
0
answers
785
views
Using pfSense on proxmox as an Internet router for my LAN
I have 2 networks, one is 192.168.0.0/24 and the other is 192.168.1.0/24.
The first network has access to the Internet and the Internet gateway is 192.168.0.1(my dsl router IP).
The second one has not ...
- 1
0
votes
0
answers
228
views
Pfsense DNS Resolver not working for internal VM
I got Pfsense and 2 VM behind NAT. The 2 VM host Plesk with 1 domain (domain1.com on VM1 and domain2.com on VM2). When I go to domain1.com or domain2.com from external computer, no problem. But if I ...
- 101
0
votes
0
answers
150
views
IPSEC VPN to secondary router with additional remote network
Our SITE A router/firewall is PFSense.
SITE A Has a LAN of 10.2.1.0/24 with an IPSEC tunnel up between that and cellular router with a LAN of 192.168.182.46. This is connected to the customers ...
- 1
3
votes
1
answer
1k
views
pfSense and OpenVPN client but traffic exits through the WAN interface
My goal is to have my internal network traffic go out to the internet through a VPN tunnel.
I checked all previous questions but none of them had the same problem as I am facing, and none of the ...
- 453k
1
vote
0
answers
101
views
PFsense : connection between subnets
My setup:
PFsense, 3 interfaces in use :
WAN : connected to Internet as it should be
LAN : first LAN, interface address 192.168.2.10
OPT1 : second LAN, interface address 192.168.3.10
On my first LAN,...
0
votes
1
answer
1k
views
IPv6 masquerading on linux
Problem
I have following setup to access both IPv4 and IPv6 internet
[RockyLinux 9 ] [pfSense ]
[GRE IPv6: fdfe:xxxx::1/64 ]<------ GRE ...
1
vote
0
answers
227
views
pfsense firewall with 2 networks each with their own APs. One network wifi works fine, the other does not. Hardline for both work fine
Apologies if this sort of question has been answered before. Saw lots of great stuff on SU, but not my scenario.
Setup
I have a pfSense firewall running 2 DHCP servers, each assigned to a different ...
- 111