Questions tagged [pfsense]

pfSense is an open source firewall/router computer software distribution based on FreeBSD. It is installed on a computer to make a dedicated firewall/router for a network and is known for its reliability and high-grade features.

Filter by
Sorted by
Tagged with
0
votes
1answer
16 views

How to allow certain IP's accessing an IP:Port range?

So I have an ESXi server setup with pfSense acting as the DHCP Server for the VM's. I use VNC's to access each VM over the internet (For example with ports :5905,5906,5907 etc.) and I would like to ...
0
votes
1answer
70 views

Centos7 Host, KVM pfSense domain, and Docker in a box

I am trying to get routing straight on my server. From the pfSense domain, I can ping IPs in the management and DMZ networks. From the virtual host, I can ping the same IPs pfSense is the gateway for ...
0
votes
0answers
34 views

pfSense does not boot on Compaq

I have a Compaq Presario V2000 with an AMD Turion 64 processor. When booting from this USB image: pfSense-CE-memstick-2.4.4-RELEASE-p1-amd64.img It does load the kernel, but then during the boot ...
0
votes
1answer
91 views

ssh to docker container breaks after 45 seconds

I have docker running on a synology nas. The nas has a private network (172.17.0.0/16) where docker places the containers. It also has a public facing interface on my lan, call it 10.11.12.10/24. ...
2
votes
0answers
53 views

how to re-spin usb .img file to use a different bootloader?

I have a bit of a strange use-case, and after searching for 3 days, I am no closer than I started. So my goal is to install pfSense (freebsd based), onto a Beelink Z83-II. The only problem is that ...
1
vote
1answer
1k views

Can't connect to OpenVPN server (pfsense)

i have some problems connecting to openvpn server with pfsense. For my tests i got 2 network interfaces both on my pfsense openvpn server and my windows 10 openvpn client. On my pfsense i have 1 ...
0
votes
2answers
728 views

Iptables (port forwarding from vps openvpn server to vpn client)

I install openvpn server in Centos VPS. I can connect from my pfsense router. I forwrad rdp a port to my local pc, but can not forward rtp port. iptables -t nat -A PREROUTING -p tcp -m tcp --dport ...
1
vote
1answer
110 views

How to find rule by number of pfctl output in FreeBSD?

I have the following excerpt from pfctl -vvss command: re2 icmp 10.10.0.62:1 <- 192.168.10.56:1 0:0 age 00:08:30, expires in 00:00:05, 192:7 pkts, 14400:584 bytes, rule 117 id: ...
0
votes
1answer
63 views

I have disabled all rules in firewall, but still can tracert from LAN

I have disabled all positive rules in firewall on my pfSense box, and I can't browse Web, but I still can tracert 10.10.0.251 from LAN machine and receive 3 hops from my ISP (behind the router). ...
0
votes
0answers
76 views

How can it be, that routing doesn't work?

I have connected with openvpn client to remote host and am able to ping it. Also route of this IP belongs correctly: > ping 10.10.0.251 PING 10.10.0.251 (10.10.0.251): 56 data bytes 64 bytes from ...
1
vote
1answer
74 views

OpenVPN clients flip status each 120 seconds

I am connecting to two OpenVPN servers with OpenVPN clients of pfSense. Connections work, but each 120 seconds they turn from available to unavailable and back. I.e. ping works for 120 seconds, then ...
0
votes
2answers
104 views

Static route all host and local KVM traffic via local pfSense KVM before routing to gw

Tying to logically force ALL laptop traffic (from local KVMs and host) through a local pfSense KVM before leaving the host (fedora). Still want DHCP from the router. I've made significant progress but ...
0
votes
0answers
238 views

Where to put information from `key` entry of OpenVPN config file in pfSense?

I have the following config file which works well with native OpenVPN client client dev tap proto udp port 1198 remote myhost.com 1194 persist-key persist-tun tls-client ca my-ca.crt cert my-...
1
vote
1answer
2k views

Installed incompatible pkg version, how to uninstall (or fix otherwise)?

While trying to upgrade a pfSense 2.2.6 to the latest version (as described here) and running pkg, I got: The package management tool is not yet installed on your system. Do you want to fetch and ...
0
votes
2answers
715 views

New MySQL Installation on pfSense returns 'Bad -c option' when started

this is my first time actually using FreeBSD so there's a chance I might have missed something big, but it's unlikely. So I want to set up mysql on my pfSense server so I can enable historical ...
0
votes
1answer
662 views

How to compile a pfSense port for ARM?

How do I compile a pfSense port for ARM? Do I need to be running FreeBSD to do it? How do I then transfer it to a USB drive, SD Card, or ISO so I can boot it? I tried the usual compiling in Ubuntu ...
1
vote
1answer
1k views

SSH connection timeout after a couple of seconds when my second interface is up [closed]

So I'm so lost on what to do to debug right now. I've spent a couple of weeks on this issue without understanding what is happening. I'm trying to have the ssh server to only work with connections ...
0
votes
1answer
506 views

How to prevent DHCP server from behind the router to answer to DHCP requests?

I found, that sometimes DHCP server from behind my main router answers DHCP request from clients in the LAN. Below is an example Notebook is connected to LAN via access point. There is DHCP server ...
2
votes
0answers
585 views

Getting pkg data using repo URLs only (without a repo.conf file) - FreeBSD 10/11

This question is about using pkg on systems where the normal FreeBSD repos have been disabled, but may occasionally be needed. To make it concrete, I'm thinking about platforms like pfSense where the ...
2
votes
2answers
1k views

pfsense: blocking a 2nd DHCP server

In my LAN I am using a PFSense server with one DHCP server on it. I need to block a second DHCP server showing up in my LAN. I think I can use the PfSense firewall to refuse the other DHCP server IP ...
1
vote
2answers
2k views

Invalid multicast interface

I am trying to use ping with specified interface with a command ping -I re3 192.168.1.1 I know re3 exists from ifconfig re3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu ...
1
vote
0answers
600 views

Can't ping 8.8.8.8 from router, but can ping it from LAN?

I have pfSense router with 2 WANs. I noticed, that if one WAN is down, then I can't ping 8.8.8.8 from router. Simultaneously, I am able to ping this address from within LAN, i.e. it can pass through ...
0
votes
1answer
1k views

pfSense IPv6 Configuration

I'm running a virtual environment on a root server. To connect all my maschines to the internet i got a pfSense setup up. For the pfSense box it got let's say the 2a01:4f8:162:xxxx::/64-network. ...
1
vote
1answer
1k views

How pkg is choosing its repos (FreeBSD 10)

I'm using pfSense, which uses a customised base of FreeBSD 10. pkg -vv shows the following relevant definitions: PKG_DBDIR = "/var/db/pkg"; PKG_CACHEDIR = "/var/cache/pkg"; PORTSDIR = "/usr/ports"; ...
1
vote
0answers
175 views

PF rule that can match INPUT and OUTPUT interfaces

Is there a way with PfSense (or with a FreeBSD PF cmd line) to make a rule that can match INPUT and OUTPUT interfaces like this one in IPTABLES ? iptables -A FORWARD -i eth0 -s 192.168.0.1 -o eth1 -j ...
0
votes
1answer
1k views

PfSense VPN L2TP woes with Windows clients

I am using PfSense 2.3.2, an open source firewall running on FreeBSD 10.3, to provide VPNs for Windows 7 to 10 customers. I am running a pilot of the project with 200 users. Everyone is (was) happy ...
1
vote
1answer
334 views

Should subject alternative name displayed by openssl utility?

I am using the following web-ui to generate certificates in pfSense: I was thinking to generate a certificate, suitable for serving from multiple domains, prelimilarly from localhost and nebula3. ...
0
votes
2answers
3k views

pfSense + Nginx proxy and Real user IP

Ok, so I have 1 server with pfSense and many virtual servers. I'm using Nginx upstream functionality to run multiplies WEB servers on same public IP. Of course I need to know REAL users IP not Nginx ...
1
vote
0answers
66 views

Physical/virtual network setup

I am setting up a server and am struggling with network setup. This is what I am trying to achieve: The problems I have: 1) How to assign "Ethernet" to "Pfsense" so that "Host" has no access to "...
0
votes
0answers
2k views

How to Include the Common ACL Rules in a Group ACL in the pfSense Squid Guard Package?

I figured out how to use the GUI to block black listed sites dependent on what time it is, but it's a little verbose for my tastes...is it possible to set a Common ACL and then have the Target ...
2
votes
1answer
3k views

In pfSense what is the meaning of the “Target Categories” and “Target Categories for off-time” columns in the Groups ACL Screen?

In SquidGuard within pfSense 2.3.1 in the Groups ACL screen there are two columns in the Target Rules List Target Categories and Target Categories for off-time. Each value in the row has the values ...
1
vote
1answer
1k views

pfsense mount root error after disk clone

I went the lazy route and cloned my SSD that runs my current pfsense (2.1.5) machine to create a backup machine with the same config. Instead of doing a fresh reinstall and copying the config. Both ...
0
votes
1answer
595 views

What is “Localhost” binding in DNS forwarder in pfSense?

Trying to debug some network problems, I found that my DNS forwarder is configured in the following way: Although many entries stands for my WAN interfaces and LAN stands for LAN one, I don't ...
1
vote
0answers
426 views

How to make load balancing work from the pfSense box itself?

pdSense is a special distro of FreeBSD for routing. It supports limited multi WAN load balancing, i.e. it is possible to configure pfSense so that each next request will connect via different WAN ...
1
vote
2answers
5k views

pfSense with Mellanox ConnectX-2 10GBit NICs

I recently picked up two Mellanox ConnectX-2 10GBit NICs for dirt cheap. I'm trying to get these to be recognized by a pfSense box. The BIOS recognizes the NICs, no problem whatsoever. However, ...
0
votes
1answer
447 views

Raspbian Jessie wired LAN no DHCPOFFERS from pfSense 2.2.6 DHCP server

Raspberry Pi B+ running Jessie. Spare Compaq laptop running pfSense 2.2.6 with onboard Realtek NIC for the WAN and a Micro Center Inland USB Ethernet adapter for the LAN port. This configuration ...
1
vote
1answer
2k views

pfSense: What package may I install for the `make` command?

I have installed pfSense (FreeBSD based) in order to test it and learn. The first thing I want to do is installing some undetected network card (Silicom PXG6BPi) driver, but it needs compiling its ...
0
votes
0answers
396 views

pfsense: Network freezes when squid service started in bridge mode

We are using pfsense firewall in bridge mode. When squid service with Transparent proxy option is started the network freezes. On routing mode, squid works pretty well. Squid setup is as below: ...
1
vote
2answers
660 views

pfsense tcp connection between openvpn and lan is broken

I am trying to connect openvpn clients into an internal lan, so they can access a http server. pfSense as well as my http server are running on a virtual machine of my home proxmox node. Both are ...
1
vote
0answers
1k views

pfsense: squid transparent proxy not working in bridge mode

I have installed the latest version of pfsense. I have setup it up in bridge mode after creating a rule any for lan and wan respectively. I have setup the squid on transparent proxy mode with ssl ...
4
votes
1answer
343 views

How can I fix an overlapped FreeBSD/UFS partition?

I have a Seagate 1TB Drive [ST1000LM010-9YH146] which had one FreeBSD slice and was formatted as UFS and mounted at /home on a pfsense box. While changing some hardware around, the drive was ...
1
vote
0answers
261 views

Can not reach local DNS server for local dot domain subzones because firewall returns gateway IP

I have pfSense inline between my cable modem and my switch, on pfSense I have a NAT port forward on 53 to my local DNS server which I want to serve local subzones to the LAN with. Right now when I dig ...
3
votes
0answers
990 views

Install man on FreeBSD 10.1 based pfsense 2.2

I'm running a pfsense 2.2 router. While not required most of the time, sometimes using the console is the way to go. Unfortunately pfsense doesn't come with /usr/bin/man I was able to run pkg pkg ...
0
votes
1answer
2k views

Pfsense source code to build firewall

Pfsense is an open source Firewall based on openBSD kernel. Where can I find the code and how to modify it to build my firewall?
2
votes
1answer
1k views

How can I resize an md device in FreeBSD?

I have 1GB RAM installed and I want to enlarge both nodes md0 and md1 /dev/md0 38M 216K 35M 1% /tmp /dev/md1 58M 20M 33M 39% /var I tried this ...
1
vote
1answer
1k views

How to measure network traffic (with pfSense/freeBSD)?

Is it possible to measure network traffic (per month, per WAN, per direction) with pfSense/freeBSD? There are following programs listed https://doc.pfsense.org/index.php/...
1
vote
1answer
605 views

BSD box running PFSense reports weird disk capacity

So I have a BSD box running PFSense. I was alerted to some potential problems when using the web interface, where a warning appeared saying: Warning: fopen(/tmp/config.lock): failed to open stream: ...
2
votes
0answers
737 views

I have a firewall bridge in pfSense and I want to log only the allowed packet

I have a bridge0 which has members em0 (wan) and vge0 (lan) I connect via ssh on vge0, when I tcpdump -i pflog0 I get the blocked packets from the bridge0, but when I tcpdump -i bridge0 I get both ...
3
votes
0answers
1k views

Is it possible to implement IPSec with failover between one pfSense firewall and Amazon VPC (no BGP)

I'm trying to create a VPN connexion between my firewall (a pfsense 2.0.1) and my Amazon Virtual Private Cloud (VPC). Amazon provides two peers endpoints to mount two IPsec tunnels on the same VPC. ...
2
votes
1answer
5k views

How do I set up a OpenVPN server on pfsense

How do I set up a OpenVPN server on pfsense? I want to be able to VPN in from a labptop when I am on the road. I set up a openvpn server in the openvpn menu. I duplicated that NAT rules for the VPN ...