Skip to main content
8 votes

Invalid multicast interface

On FreeBSD and macos the -I flag does not behave as one would expect from Linux. If you check the man page carefully, you'll see: -I iface Source multicast packets with the given interface **...
Heath Raftery's user avatar
6 votes
Accepted

Invalid multicast interface

Not much experience in freebsd system, as far as i know for ping try: ping -S 192.168.1.2 192.168.1.1 As for arp If arp cant fetch mac address of your gateway then freebsd server lost it's ...
Rakesh.N's user avatar
  • 802
4 votes
Accepted

pfSense IPv6 Configuration

Your LAN and WAN need separate /64s. You seem to be using 2a01:4f8:162:xxxx::/64 on both sides, which will not work. You'll need for example 2a01:4f8:162:xxxx::/64 on the WAN and 2a01:4f8:162:yyyy::/...
Sander Steffann's user avatar
4 votes
Accepted

IPSec tunnel works until rekeying, then gets NO_PROPOSAL_CHOSEN

Furthermore, I did ask for different algorithms inside of my swanctl configuration file. You have only done so for IKE, not for ESP/IPsec. I am having trouble understanding why the proposals do not ...
ecdsa's user avatar
  • 829
3 votes

Make "local startup" or "service start/enabled filebeat" command on pfSense (FreeBSD)

The service command requires that the filebeat service installed a rc script to be able to start anything. The fist thing I notice is that your syntax is wrong - you need the service name before the ...
Claus Andersen's user avatar
3 votes

I have disabled all rules in firewall, but still can tracert from LAN

Most likely the default rules are allowing ICMP for the outside. tracert in Windows also is implement differently than in Unix/Linux; while the traditional Unix traceroute sends UDP packets, the ...
Rui F Ribeiro's user avatar
3 votes

pfsense: blocking a 2nd DHCP server

I have used DHCP starvation (targeted specifically at the rogue DHCP server) for longer periods of time. Try dhcdrop or dhcpstarv, or a scapy script. I eventually went with the latter because it was ...
user2497's user avatar
  • 747
3 votes
Accepted

pfsense: blocking a 2nd DHCP server

Unfortunately, you cannot block out a 2nd DHCP in the same LAN (certainly not at firewall level, and mitigating it with high-end enterprise switching equipment is not a simple topic); an IP request is ...
Rui F Ribeiro's user avatar
3 votes
Accepted

SSH connection timeout after a couple of seconds when my second interface is up

Your problem is that the TCP packets sent by your server use another path than the TCP packets you send to it, and your pfsense then thinks the connection is not established and removes it from its ...
xhienne's user avatar
  • 17.9k
2 votes

How to prevent DHCP server from behind the router to answer to DHCP requests?

You were getting that IP address because you had the DHCP relay service activated. The "DHCP relay" functionality that is present in many brands of firewalls and routers, is a functionality to ...
Rui F Ribeiro's user avatar
2 votes
Accepted

Installed incompatible pkg version, how to uninstall (or fix otherwise)?

pkgng has several fallbacks: There is a statically-linked version available as pkg-static. You can run the install tool again by explicitly telling it to /usr/sbin/pkg bootstrap -f. What you need to ...
JdeBP's user avatar
  • 69.3k
1 vote

pfSense (FreeBSD 14.0) - Prometheus Node Exporter gives log errors - fix or suppress in log

I finally found a solution. I couldn't get any syslog configuration to work, but I managed to edit the node_exporter config file like this: # This file is generated by the pfSense node_exporter ...
Artur Meinild's user avatar
1 vote
Accepted

UEFI HTTP Boot clarity?

Can any linux distro that supports UEFI (and has a *.efi file) be pointed to for HTTP Boot? Assuming its UEFI bootloader does not have any bug or other behavior that would stop it from working with ...
telcoM's user avatar
  • 99.2k
1 vote
Accepted

Centos7 Host, KVM pfSense domain, and Docker in a box

A machine with multiple interfaces, each with unique subnets, requires that each interface have its own routing table. This is accomplished with policy based routing. Installed and enabled "...
Alex's user avatar
  • 13
1 vote
Accepted

ssh to docker container breaks after 45 seconds

Adding the route to the pfsense makes the traffic flow weird. Traffic from the laptop bounces over the pfsense, back down to the nas and then to the container. Replies from the container however will ...
azzid's user avatar
  • 1,000
1 vote
Accepted

What subsystem is responsible if I can connect via s2s VPN connection only in one direction?

A firewall can certainly control the direction TCP connections can be established in, by passing TCP packets with the SYN flag set but the ACK flag unset in one way only. The fact that you can SSH ...
telcoM's user avatar
  • 99.2k
1 vote

routing already in table when trying to add additional route to the same net

When the kernel is looking for a route for an outbound packet, it wants to find a single answer: if there are multiple matches, it doesn't know which one to pick. This thread on the freebsd-questions ...
larsks's user avatar
  • 35.6k
1 vote

What are the meaning of keys in OVPN file?

Some of the OpenVPN configuration options can either reference a file or you can embed the PEM/base64 data directly in the configuration file. https://openvpn.net/community-resources/reference-manual-...
CR.'s user avatar
  • 1,229
1 vote
Accepted

IPTables issue between proxmox and pfsense VM

Your ruleset is missing a stateful rule in the forward/OUTPUT chain to allow reply traffic. Adding this should fix the problem by allowing stateful replies: iptables -I OUTPUT -m conntrack --ctstate ...
A.B's user avatar
  • 37.1k
1 vote

Would a Netgate 1100 with pfSense Plus Software support SquidGuard?

I don't think this would be a good idea as the Netgate 1100 is not performant enough for such operations, it has just not enough processing power, your services would lag or even crash. Make yourself ...
paladin's user avatar
  • 239
1 vote

Where to put information from `key` entry of OpenVPN config file in pfSense?

Looking at the pfSense source code vpn_openvpn_client module, if ($tls_mode && $pconfig['tlsauth_enable'] && !$pconfig['autotls_enable']) { if (!strstr($pconfig['tls'], "--...
Cuthbert Nibbles's user avatar
1 vote
Accepted

How to compile a pfSense port for ARM?

I think you can use FreeBSD's package (see here). FreeBSD has packages for ARM (check http://pkg.freebsd.org/) - since 11.0. But if you really want build your packages from ports please read Using ...
uzsolt's user avatar
  • 1,927
1 vote
Accepted

How pkg is choosing its repos (FreeBSD 10)

The behaviour is actually all documented in the manual (q.v.). REPOS_DIR is taken from pkg.conf and its directories are processed in the order given. Files in each directory are processed in ...
JdeBP's user avatar
  • 69.3k
1 vote
Accepted

PfSense VPN L2TP woes with Windows clients

I suspected fragmented packet issues, and indeed, that was the problem. After setting to on the option "IP Do-Not-Fragment compatibility" in System->Advanced->Firewall&Nat, the sites opened. As ...
Rui F Ribeiro's user avatar
1 vote
Accepted

In pfSense what is the meaning of the "Target Categories" and "Target Categories for off-time" columns in the Groups ACL Screen?

Figured it out. After looking at the code that is generated and referencing the Squid Guardian website for some examples, it became clear to me that the Target Categories column contains the ...
leeand00's user avatar
  • 4,625
1 vote

What is "Localhost" binding in DNS forwarder in pfSense?

The localhost entry is always "the machine you are currently logged in to". It's also referred to as loopback, though that's more the interface name than the host name. The IP address is 127.0.0.1.
John's user avatar
  • 17.1k
1 vote

pfSense with Mellanox ConnectX-2 10GBit NICs

Edit & FreeNAS-9.10-STABLE-201605240427 Note! Recently I upgraded to latest FreeNAS-9.10-STABLE-201605240427 build and upon restart got a kernel panic referencing mlxen module. My [limited ...
test-in-prod's user avatar
1 vote

pfsense: No more processes

In my case I had the same problem because a cron job was running every minute but was not finishing. This created hundreds of processes each running in a shell exhausting the system. So check using ...
artooro's user avatar
  • 111

Only top scored, non community-wiki answers of a minimum length are eligible