Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

pfSense is an open-source firewall product built on top of FreeBSD and the OpenBSD pf firewall.
It provides a graphical (web-based) interface for configuring and managing firewall rules, as well as viewing traffic and firewall decisions (accept/reject).

pfsense is available as a pre-built applicance (such as OPNSense or StrongBochs) or as installable software directly from the pfSense project's site.

pfsense is similar in concept to m0n0wall, however as of this writing m0n0wall uses the ipfilter packet filter.

838 questions
4
votes
4 answers

Failover routing between 2 gateways

I have 2 routers in a cabinet and would like to setup fail over between the two for our servers sort of like BGP but not BGP :). I need to setup the system to realize gateway 1 is (down) or under attack and route through gateway 2 instead. How is…
Jacob
  • 9,204
  • 4
  • 45
  • 56
4
votes
4 answers

Forefront TMG vs pfSense

We currently run pfSense with no problems, however we are looking at TMG as it is included in our partner subscription to MS and allows Windows 7 DirectConnect features to our domain for off-site users. I have had a google, but there don't seem to…
Darbio
  • 557
  • 1
  • 5
  • 15
4
votes
2 answers

Can I use pfsense as a DNS server?

If I have a pfsense based firewall in front of my servers, can I use this also for DNS? Thanks
UpTheCreek
  • 1,628
  • 10
  • 32
  • 48
4
votes
1 answer

pfSense with a bridge as a LAN interface : traffic blocked between interfaces

I have a pfSense 2.0-BETA3 box as a home router. The box has 3 wired ETH ports and a wireless interface. It is configured as follow : WAN : vr0 LAN : BRIDGE0 OPT1 : vr1 OPT2 : vr2 OPT3 : ath0 (wireless card) BRIDGE0 : OPT1, OPT2, OPT3 There is a…
Guillaume
  • 1,063
  • 5
  • 12
  • 24
4
votes
0 answers

Trying to get a new user up on pfSense IPSec VPN; Config file import failed, now getting gateway errors

Caveat: I am not a sysadmin, so please forgive the n00bness of the query. We have a new user and I'm trying to get them up on VPN. We use pfsense as an IPSEC endpoint. This person is using Shrewsoft for the client. I had created an entry in pfsense…
Chris
4
votes
1 answer

Rearrange pfSense interface order

I want to organize a pfSense firewall that I got already running and the first thing is the interface order. I know that pfSense is a little bit harsh when coming to rearrange things, but I would like to know if there's any easy way to reorder the…
Vinícius Ferrão
  • 5,520
  • 11
  • 55
  • 95
4
votes
1 answer

What do the following mean: TCP:RA, TCP:FA ,TCP:PA, TCP:S, TCP:SEC

I'm specifically looking for a definition of what the following mean: TCP:RA, TCP:FA ,TCP:PA, TCP:S, TCP:SEC The context is that I'm looking at some pfSense logs which are showing rejected packets by the default deny rule. My understanding is that…
Walt Stoneburner
  • 173
  • 1
  • 1
  • 9
4
votes
1 answer

SSH Client freeze connect to SSH server with multiple network interface

Case 1: SSH host has ONE network interface Routing table for host SSH: [SSH] $ ip route default via 192.168.211.1 dev eth0 192.168.211.0/24 dev eth0 proto kernel scope link src 192.168.211.119 Initiate ssh connection from SSH_Client to host SSH on…
Chau Chee Yang
  • 347
  • 1
  • 3
  • 12
3
votes
1 answer

VLAN not working on PFSense (SG 1100) with HP switch (HP E3500-48G-PoE yl)

Recently I bought a PFSense server (SG 1100) and a HP switch (HP E3500-48G-PoE yl). My idea is to create VLANs on the PFSense server, and use them on the connected HP switch. I have found a tutorial which helped me set up…
MPH
  • 171
  • 1
  • 9
3
votes
0 answers

Transparent Tor Proxy with pfSense

I'm trying to set up a transparent Tor proxy in Virtualbox using pfSense. In the end I want all traffic to be passed through Tor, whenever I connect a VM to the same internal network as the proxy. I set up a new VM for the pfSense router with 1 WAN…
npkllr
  • 131
  • 1
  • 5
3
votes
3 answers

How to prevent clients from getting static IPs (set by Client Specific Overrides) in OpenVPN via PfSense?

I am getting problems with the current setting in an OpenVPN via PfSense. The situation is the following: I have created a OpenVPN server in the network 192.168.222.0/24; Created two client certificates, C1 and C2. C1 has 192.168.222.2/24 as its…
Tiago Stapenhorst
  • 373
  • 1
  • 4
  • 14
3
votes
3 answers

Installing Pfsense in KVM

I am trying to install PFsense in KVM and it keeps failing for not finding an installable distribution. What does the following error mean? Fetching volume XML failed: Storage volume not found: no storage vol with matching path Here is the install…
LUser
  • 217
  • 1
  • 6
  • 15
3
votes
1 answer

UDP broadcast to remote site

I've been trying to find a way to allow a sever in a certain subnet to send UDP broadcasts over multiple subnets. The scenario is this: In network A (192.168.1.0/24) we have a backup server (using urbackup), the server uses automatic discovery of…
Alex Zel
  • 131
  • 3
3
votes
3 answers

Pfsense as caching DNS server

Is there any way to use pfsense as caching DNS server. It will resolve domains starting from root servers and will cache them for consequent hits. I tried DNS servers package on pfsense 1.2.2, which I guess uses WAN dns serversby default.
dereli
  • 177
  • 1
  • 2
  • 5
3
votes
1 answer

pfSense DHCP Static Mapping not Working in DNS Resolver

I'm using DNS Resolver with a new pfSense v2.3.4 installation with "Register DHCP static mappings in the DNS Resolver" checked I'm using the same setup in a pfSense installation with dedicated hardware. However, the same configuration doesn't work…
jtlindsey
  • 323
  • 1
  • 6
  • 16