Questions tagged [pfsense]

pfsense is a customized FreeBSD+pf distribution designed for use as a firewall. It wraps many of the features of the pf firewall code in an easy-to-use web interface.

pfSense is an open-source firewall product built on top of FreeBSD and the OpenBSD pf firewall.
It provides a graphical (web-based) interface for configuring and managing firewall rules, as well as viewing traffic and firewall decisions (accept/reject).

pfsense is available as a pre-built applicance (such as OPNSense or StrongBochs) or as installable software directly from the pfSense project's site.

pfsense is similar in concept to m0n0wall, however as of this writing m0n0wall uses the ipfilter packet filter.

811 questions
0
votes
0 answers

pfSense RADIUS challenge

I'm trying to configure my pfSense box (running 2.5.2-RELEASE) to use my RADIUS server for admin login authentication. My RADIUS server challenges for a TOTP code after getting the correct password, and this is working correctly (I have a number of…
Michael Kohne
  • 2,284
  • 1
  • 16
  • 29
0
votes
0 answers

IPv6: Server can't ping gateway (pfSense) but gets IP

I have three servers which should now also get IPv6 connectivity besides the IPv4. Servers: Pi4 (Raspberry Pi OS) Nextcloud (Debian 10; Nextcloud as snap) Mailserver (Debian 10; mailcow as docker, which also uses IPv6) They are directly connected…
Hirsch
  • 1
  • 2
0
votes
0 answers

PFsense High-Availability - issues with sync of VLAN interface

So I am trying to build a firewall with a primary and secondary, High-Availability structure. I have configured each of these 2 VirtualBox VMs in GNS3 to connect to each other (for a SYNC) interface, as well as connection to other switches in their…
0
votes
0 answers

Connection timeout when hitting port-forwarded endpoint; works fine with local IP

In pfSense, I have this rule: https://i.imgur.com/10jE1Gs.png Where 192.168.1.203 is my target machine and I have a rancher app hosted at port 8081. If I hit https://MY_DOMAIN_NAME:8081--MY_DOMAIN_NAME resolves to MY_WAN_IP, I get connection…
Kyle
  • 63
  • 5
0
votes
0 answers

pfSense: Block all traffic

I have created a pfSense firewall instance on Azure VNet and configured port forwarding so that pfSense should monitor all the traffic of VM. I have blocked all the WAN traffic on the firewall, but when I'm trying to go to www.google.com. Google…
Yash
  • 1
0
votes
1 answer

pfSense as IPSec remote access client

I have a pfSense router in a residential environment and need to use IPSec/IKEv2 as a remote access client to a commercial VPN provider. I know the pfSense web UI doesn't support the router being the remote access client, but the underlying FreeBSD…
joe_shmo
  • 1
  • 1
0
votes
0 answers

Configuring PFSense to exclude specific external ip address

Pfsense is installed on top of five dedicated servers, NAT rules are already defined and everything works fine. Now, I want to have one of the external IP addresses to be ignored by pfsense gateway. In other words, for that IP, there is no Pfsense…
0
votes
1 answer

PfSense FreeBSD on OVH Public Instance - no internet connection

I have no internet connectivity in freshly installed PfSense system. Steps: I've created OVH instance with Ubuntu and I mounted mfsbsd image. After booting to mfsbsd there was also internet problem. Couldn't download anything or ping at all. I…
maar
  • 487
  • 6
  • 20
0
votes
1 answer

Pfsense DNS address could not be found

I was accessing a site daily until this morning. Now I cannot ping the site through ping on my pfsense firewall or on a client behind the firewall. I have made no changes to the firewall. If I bypass the firewall I can access the site OK…
0
votes
2 answers

Cant connect pfsense openvpn service using tunnelblick as a client

I currently have a working pfsense community version firewall. when I am trying to connect a new user to the openvpn service over the pfsense using the tls+authentication method the user is getting the following error Unrecognized option or missing…
0
votes
1 answer

Juniper EX4200 Stack with PFSense DHCP (Discover/Offer Loop)

I'm currently struggling with my Juniper Switch Stack. Topology is like this Topology The Client Ports on the Stack are configured as tagged-access with dot1x (multiple supplicant) and they switch according to the Radius authentication. This works…
babum
  • 1
  • 2
0
votes
0 answers

Why do we lose IPSec connections and can't re-establish them?

We have tens of IPSec connections between our office and customer sites. At the office we use pfSense V2.4.5 as VPN gateway and placing Ubiquiti Edgerouter X devices with the latest firmware on the customer sites to establish the connection with.…
CodeNinja
  • 265
  • 4
  • 15
0
votes
1 answer

pfSense - Enable ssh (port 22) access through the WAN using terminal/console/shell

We need to enable pfSense ssh (port 22) access through the WAN interface to perform certain configurations using pfSense's terminal/console/shell. Actions already taken... "Secure Shell (sshd)" has already been enabled via pfSense console option 14…
Eduardo Lucio
  • 253
  • 3
  • 13
0
votes
0 answers

Can you help me to better understand pfSense firewall logs entry fields meaning?

I am not a sysadmin or a network administrator (I am a software developer). Working on a project I have to understand more in details the meaning of a log obtained from a pfSense instance. I am using these documentation links in order to better…
0
votes
0 answers

Unbound not returning A records over IPv6

I recently replaced my pfSense installation with OPNsense and have been struggling a bit with the Unbound installation. In short, it's IPv6 enabled and everything works well (both IPv6 and IPv4) in general. However, it seems to struggle with DNS…
vpetersson
  • 721
  • 9
  • 21