Skip to main content

Questions tagged [pfsense]

pfSense is an open source firewall/router computer software distribution based on FreeBSD. It is installed on a computer to make a dedicated firewall/router for a network and is known for its reliability and high-grade features.

Filter by
Sorted by
Tagged with
0 votes
0 answers
24 views

How to Allow all NATed traffic from iptables firewall via pfsense (gateway)

I have an iptables firewall (machine 1) and a centos 7 based gateway (machine 2), which is having 2 interfaces (machine-2:int-1) from WAN [/30] and (machine-2:int-2) is LAN [/28] one of the static IP ...
Ratna Kumar's user avatar
2 votes
1 answer
218 views

pfSense (FreeBSD 14.0) - Prometheus Node Exporter gives log errors - fix or suppress in log

On pfSense, I've enabled Prometheus Node Exporter, but it gives the following log errors each 15 seconds: Feb 15 09:53:57 vault node_exporter[25559]: ts=2024-02-15T08:53:57.164Z caller=collector.go:...
Artur Meinild's user avatar
1 vote
0 answers
33 views

pfSense (FreeBSD) - tail -f not showing entire log when filtering with cut or sed [duplicate]

I have a strange problem when trying to display logs on pfSense (and I can reproduce the same problem on Ubuntu server also). The problem is this (with examples): I'm trying to display a running dhcp ...
Artur Meinild's user avatar
0 votes
0 answers
49 views

Need help with Wireguard allowedip/pre/post settings

I started playing with wireguard on a pfsense router to try to see if I could overcome a CG Nat on a hotspot I want to use when visiting my mother a couple hours from home. I stay in an RV when up ...
Scott's user avatar
  • 151
0 votes
0 answers
95 views

How is it possible that NAT doesn't back translate packets?

I have the following topology and from myhost I can ping router2 but can't ping router1. With tcpdump I can observe how my pings go and I see that both router1 and router2 reply. But only replies ...
Dims's user avatar
  • 3,285
0 votes
0 answers
43 views

What hardware problem does a video signal shift on hard lock imply?

I'm running a pfsense router on a PC architecture desktop system (AMD FX-8120 CPU with 16GB RAM). It's running version pfsense version 2.7.0, which is based on FreeBSD v14. Every day or two the router ...
deltaray's user avatar
  • 1,387
1 vote
1 answer
1k views

UEFI HTTP Boot clarity?

I'm interested in learning more about UEFI HTTPBoot and setting it up for my LAN as a netboot option, but the details are notably sparse. The best docs I've found are Suse Docs for configuring an HTTP ...
eriknelson's user avatar
1 vote
1 answer
877 views

IPSec tunnel works until rekeying, then gets NO_PROPOSAL_CHOSEN

Context I have set up a site-to-site IPSec tunnel between a Raspberry Pi located in an office and a pfSense firewall in the cloud. I am using Strongswan for the Raspberry Pi side. Issue My tunnel ...
The Coding Penguin's user avatar
0 votes
1 answer
35 views

What subsystem is responsible if I can connect via s2s VPN connection only in one direction?

I have configured the following s2s VPN (in pfSense) connection which is working in general. Unfortunately, I can connect (ping, netcat, ssh) only from client to the server, but not back. If I can ...
Dims's user avatar
  • 3,285
0 votes
1 answer
409 views

What hostname to put in main.cf for self-hosted postfix, behind HAProxy?

Pfsense (HAproxy as reverse proxy)—->Unraid I run postfix on Debian Bullseye VM (under Unraid) on my home server. It is up and running. I can send the mail out but can’t receive any incoming mail. ...
bthoven's user avatar
0 votes
1 answer
1k views

PXE boot problem using netboot.xyz "mounting tmpfs on /cdrom failed: Invalid argument"

I've set up my pfsense server with tftp to support PXE booting. I've configured it to boot the latest (as of posting) version of netboot.xyz. This works to a point, but I've tried loading a few Linux ...
James T Snell's user avatar
2 votes
0 answers
497 views

Port Forwarding over VPN link cloud VPS (To bypass CG-NAT)

I have a radio setup on a 4G connection that utilises CG-NAT. This means I am unable to access the radio remotely using the supplied remote software. To get around this I have setup a cloud VPS ...
CaveJohnson's user avatar
0 votes
0 answers
144 views

Access to pfsense wan interface by ip public

I have this diagram. I have a server(centos 7) with ip public and staic 1.2.3.4 on internet, I want when user send request to this public ip 1.2.3.4, this request pass my modem with not static ip ...
pyramid13's user avatar
  • 639
0 votes
1 answer
535 views

routing already in table when trying to add additional route to the same net

I have the following table $ netstat -r -4 | grep 33.0 192.168.33.0/24 192.168.29.4 UGS ovpns5 I would like to add additional route to the same network and get $ route add -net 192.168....
Dims's user avatar
  • 3,285
0 votes
1 answer
2k views

What are the meaning of keys in OVPN file?

I have ovpn file, which allows me to connect to remote server successfully from desktop OpenVPN GUI. Now I want to copy content of this file to OpenVPN client of pfSense. The problem is that fields ...
Dims's user avatar
  • 3,285
1 vote
1 answer
1k views

IPTables issue between proxmox and pfsense VM

I'm kind of desperate with an IPTables issue. I started to setup my own dedicated server which is a proxmox server. I have a pfSense VM to which all traffic is routed. I secured the LAN access by ...
Darktortue's user avatar
0 votes
0 answers
621 views

IPv6: Server can't ping gateway (pfSense) but gets IP

I have three servers which should now also get IPv6 connectivity besides the IPv4. Servers: Pi4 (Raspberry Pi OS) Nextcloud (Debian 10; Nextcloud as snap) Mailserver (Debian 10; mailcow as docker, ...
Hirsch's user avatar
  • 1
1 vote
1 answer
97 views

Would a Netgate 1100 with pfSense Plus Software support SquidGuard?

Would a Netgate 1100 with pfSense Plus Software support SquidGuard? I'd like to be able to do web filtering using that software / hardware combination. P.S. Apologies if I have posted this in an ...
leeand00's user avatar
  • 4,655
0 votes
1 answer
690 views

Pfsense - Installing Latest 'speedtest-cli' ( v2.1.3) to overcome error 'ValueError: invalid literal for int() with base 10'

Anyone able to install the latest 'speedtest-cli' ( v2.1.3) in their pfsense box to overcome error; ValueError: invalid literal for int() with base 10: '' Apparently something changed upstream and ...
MarcoZen's user avatar
  • 191
0 votes
1 answer
1k views

for loop in FreeBSD (pfSense) doesn't work

I've just noticed that the same code for for loop in bash doesn't work in FreeBSD wolf@linux:~$ echo $SHELL /bin/bash wolf@linux:~$ wolf@linux:~$ for i in {1..3}; do echo $i; done 1 2 3 wolf@linux:~$...
Wolf's user avatar
  • 1,631
1 vote
0 answers
3k views

Running pfsense inside a docker container

Is it possible to run Pfsense as a docker container?
jaberansariali's user avatar
0 votes
0 answers
326 views

Networking: Cannot ping across router in one direction (can ping in other direction)

Here's my network topology: ISP: 192.168.0.1 pfSense: (ip dhcp) <-> 192.168.1.1 pfSense does outbound NAT such that all traffic passing out of interface (ip dhcp) is NAT to map all "...
user3728501's user avatar
1 vote
1 answer
892 views

Make "local startup" or "service start/enabled filebeat" command on pfSense (FreeBSD)

I just install the filebeat port v6.8.7 on pfSense 2.4.5 box (freeBSD 13). After that I want to start filebeat service with service start filebeat but it throw error: start does not exist in /etc/...
mtpumpkin's user avatar
0 votes
1 answer
731 views

QEMU error on pfSense instalation

I'm trying to install pfSense using QEMU on EVE-NG. I'm using the EVE-NG documentation for pfSense 2.4.x, i did all the steps, but in the installation part /opt/qemu/bin/qemu-system-x86_64 -hda ...
zorak's user avatar
  • 1
4 votes
1 answer
3k views

Increasing disk size on FreeBSD 11.2 (pfSense | ESXi)

I tried to use this link to solve my problem but to no avail; Expanding the disk size on pfsense under VMWare ESXi. I'm using pfSense and I wish to increase the disk drive from 11 GB to 200 GB. Steps ...
Contractor's user avatar
2 votes
1 answer
1k views

How to fix my partition after mistaken gpart bootcode?

I was trying to make my HDD bootable and did gpart bootcode -b /boot/pmbr -p /boot/gptboot -i1 ada0s1 and now I got "Invalid partition" message on boot. /boot was from USB drive, not from HDD (...
Dims's user avatar
  • 3,285
1 vote
0 answers
617 views

What can I do from not booting Freebsd box command line

I got a message Can't load 'kernel' And computer is not booting. I have simple commands like ls and lsdev, but I don't have cd or cat. How can I find kernel and check if it is ok with these ...
Dims's user avatar
  • 3,285
0 votes
1 answer
47 views

How to allow certain IP's accessing an IP:Port range?

So I have an ESXi server setup with pfSense acting as the DHCP Server for the VM's. I use VNC's to access each VM over the internet (For example with ports :5905,5906,5907 etc.) and I would like to ...
Xalyy's user avatar
  • 11
0 votes
1 answer
234 views

Centos7 Host, KVM pfSense domain, and Docker in a box

I am trying to get routing straight on my server. From the pfSense domain, I can ping IPs in the management and DMZ networks. From the virtual host, I can ping the same IPs pfSense is the gateway for ...
Alex's user avatar
  • 13
1 vote
1 answer
256 views

ssh to docker container breaks after 45 seconds

I have docker running on a synology nas. The nas has a private network (172.17.0.0/16) where docker places the containers. It also has a public facing interface on my lan, call it 10.11.12.10/24. ...
azzid's user avatar
  • 1,000
2 votes
0 answers
105 views

how to re-spin usb .img file to use a different bootloader?

I have a bit of a strange use-case, and after searching for 3 days, I am no closer than I started. So my goal is to install pfSense (freebsd based), onto a Beelink Z83-II. The only problem is that ...
Tom's user avatar
  • 33
1 vote
1 answer
2k views

Can't connect to OpenVPN server (pfsense)

i have some problems connecting to openvpn server with pfsense. For my tests i got 2 network interfaces both on my pfsense openvpn server and my windows 10 openvpn client. On my pfsense i have 1 ...
Maxime.c's user avatar
0 votes
2 answers
2k views

Iptables (port forwarding from vps openvpn server to vpn client)

I install openvpn server in Centos VPS. I can connect from my pfsense router. I forwrad rdp a port to my local pc, but can not forward rtp port. iptables -t nat -A PREROUTING -p tcp -m tcp --dport ...
Khandaker Shahriar Amin's user avatar
2 votes
2 answers
2k views

How to find rule by number of pfctl output in FreeBSD?

I have the following excerpt from pfctl -vvss command: re2 icmp 10.10.0.62:1 <- 192.168.10.56:1 0:0 age 00:08:30, expires in 00:00:05, 192:7 pkts, 14400:584 bytes, rule 117 id: ...
Dims's user avatar
  • 3,285
0 votes
1 answer
186 views

I have disabled all rules in firewall, but still can tracert from LAN

I have disabled all positive rules in firewall on my pfSense box, and I can't browse Web, but I still can tracert 10.10.0.251 from LAN machine and receive 3 hops from my ISP (behind the router). ...
Dims's user avatar
  • 3,285
0 votes
0 answers
451 views

How can it be, that routing doesn't work?

I have connected with openvpn client to remote host and am able to ping it. Also route of this IP belongs correctly: > ping 10.10.0.251 PING 10.10.0.251 (10.10.0.251): 56 data bytes 64 bytes from ...
Dims's user avatar
  • 3,285
1 vote
1 answer
278 views

OpenVPN clients flip status each 120 seconds

I am connecting to two OpenVPN servers with OpenVPN clients of pfSense. Connections work, but each 120 seconds they turn from available to unavailable and back. I.e. ping works for 120 seconds, then ...
Dims's user avatar
  • 3,285
0 votes
2 answers
480 views

Static route all host and local KVM traffic via local pfSense KVM before routing to gw

Tying to logically force ALL laptop traffic (from local KVMs and host) through a local pfSense KVM before leaving the host (fedora). Still want DHCP from the router. I've made significant progress but ...
sadtank's user avatar
  • 101
0 votes
1 answer
1k views

Where to put information from `key` entry of OpenVPN config file in pfSense?

I have the following config file which works well with native OpenVPN client client dev tap proto udp port 1198 remote myhost.com 1194 persist-key persist-tun tls-client ca my-ca.crt cert my-...
Dims's user avatar
  • 3,285
1 vote
1 answer
5k views

Installed incompatible pkg version, how to uninstall (or fix otherwise)?

While trying to upgrade a pfSense 2.2.6 to the latest version (as described here) and running pkg, I got: The package management tool is not yet installed on your system. Do you want to fetch and ...
user149408's user avatar
  • 1,333
0 votes
2 answers
2k views

New MySQL Installation on pfSense returns 'Bad -c option' when started

this is my first time actually using FreeBSD so there's a chance I might have missed something big, but it's unlikely. So I want to set up mysql on my pfSense server so I can enable historical ...
LAX1DUDE's user avatar
1 vote
1 answer
2k views

How to compile a pfSense port for ARM?

How do I compile a pfSense port for ARM? Do I need to be running FreeBSD to do it? How do I then transfer it to a USB drive, SD Card, or ISO so I can boot it? I tried the usual compiling in Ubuntu ...
leeand00's user avatar
  • 4,655
1 vote
1 answer
4k views

SSH connection timeout after a couple of seconds when my second interface is up [closed]

So I'm so lost on what to do to debug right now. I've spent a couple of weeks on this issue without understanding what is happening. I'm trying to have the ssh server to only work with connections ...
Vlycop Doo's user avatar
0 votes
1 answer
2k views

How to prevent DHCP server from behind the router to answer to DHCP requests?

I found, that sometimes DHCP server from behind my main router answers DHCP request from clients in the LAN. Below is an example Notebook is connected to LAN via access point. There is DHCP server ...
Dims's user avatar
  • 3,285
2 votes
0 answers
1k views

Getting pkg data using repo URLs only (without a repo.conf file) - FreeBSD 10/11

This question is about using pkg on systems where the normal FreeBSD repos have been disabled, but may occasionally be needed. To make it concrete, I'm thinking about platforms like pfSense where the ...
Stilez's user avatar
  • 1,271
3 votes
2 answers
4k views

pfsense: blocking a 2nd DHCP server

In my LAN I am using a PFSense server with one DHCP server on it. I need to block a second DHCP server showing up in my LAN. I think I can use the PfSense firewall to refuse the other DHCP server IP ...
zore lu's user avatar
  • 45
6 votes
2 answers
11k views

Invalid multicast interface

I am trying to use ping with specified interface with a command ping -I re3 192.168.1.1 I know re3 exists from ifconfig re3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu ...
Dims's user avatar
  • 3,285
1 vote
0 answers
1k views

Can't ping 8.8.8.8 from router, but can ping it from LAN?

I have pfSense router with 2 WANs. I noticed, that if one WAN is down, then I can't ping 8.8.8.8 from router. Simultaneously, I am able to ping this address from within LAN, i.e. it can pass through ...
Dims's user avatar
  • 3,285
0 votes
1 answer
2k views

pfSense IPv6 Configuration

I'm running a virtual environment on a root server. To connect all my maschines to the internet i got a pfSense setup up. For the pfSense box it got let's say the 2a01:4f8:162:xxxx::/64-network. ...
MadddinTribleD's user avatar
1 vote
1 answer
2k views

How pkg is choosing its repos (FreeBSD 10)

I'm using pfSense, which uses a customised base of FreeBSD 10. pkg -vv shows the following relevant definitions: PKG_DBDIR = "/var/db/pkg"; PKG_CACHEDIR = "/var/cache/pkg"; PORTSDIR = "/usr/ports"; ...
Stilez's user avatar
  • 1,271