Subcategories

  • Discussions and feedback related to this forum

    607 Topics
    3k Posts
    johnpozJ

    @microserfs and what IP was that - clearly your current IPv6 address is not block that I show you connected with.. And the only other IPv4 I see you using is not blocked.. You would have to let me know what IP you were coming from that was blocked.. Send it to me via PM if you don't want to make it public.

  • Community Hiring and For Hire postings related to jobs that require pfSense software skills

    27 Topics
    114 Posts
    w0wW

    @sef1414
    Name it "run.sh", copy to pf and chmod according documentation
    https://docs.netgate.com/pfsense/en/latest/development/boot-commands.html#shell-script-option
    You will see messages in the system log like those quoted in the script after logger command.

  • Question by David and about in

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Need some help identifying a problem with comcast gateway

    2
    0 Votes
    2 Posts
    1k Views
    M

    Sorry for the late response, did you get this resolved? If not PM me and I will see if I can help.

  • I'm New!

    3
    0 Votes
    3 Posts
    3k Views
    C

    Hello and welcome!! How you getting on installing pfsense? It's such an amazing open source firewall with so many possibilities.

  • Windows OS Backdoors in ADVAPI.DLL driver?

    3
    0 Votes
    3 Posts
    3k Views
    jimpJ

    From what little I've heard/read about it, it wasn't a backdoor per-se, but a Key that was trusted to run/install. So they still had to have a way to get the bits onto the PC, but once there, it would be trusted and wouldn't prompt as unsigned code.

    There really wasn't enough info out there to say much of anything for certain though, it could also be explained other ways besides actually belonging to the NSA.

  • Ethiopia and pfsense

    3
    0 Votes
    3 Posts
    2k Views
    C

    For time and cost reasons it'd be prohibitive for me to get there in person, but I would be willing to present one of the sessions of the conference remotely via Gotomeeting or Skype or something along those lines if you can put something together.

    Not sure on tips for putting such an event together, as I just attend a bunch of conferences, I've never actually put one on myself. Getting the word out to other universities I would think would be relatively easy if you have some contacts at each university. Have one or more people at each pass the word around.

    If you think you could grow the project's presence in Ethiopia with a dedicated board, I would be willing to create one. In the last month, only 87 visits out of hundreds of thousands of total visits to forum.pfsense.org were from Ethiopia (per Google Analytics).

  • MOVED: Problem installing squid

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • PfSense on large home network (What do you run on your Home Network)

    5
    0 Votes
    5 Posts
    3k Views
    Z

    Running a few vlans

    general access NAS/SAN network guest wireless dmz test lab wan

    total nodes is less than 20 with a number of them being vm's. As the pfsense box is a VM I've only got vlans 1,3, and 6 going physical.

  • General Article discussing the State of Network Security

    14
    0 Votes
    14 Posts
    5k Views
    C

    @craigduff:

    In your opinion are big corporates running pfsense? Or do you think companies are now swaying more towards an open source solution? When i have worked for big companies in the city they all seem to be running Cisco or Juniper etc… Iv been a pfsense fan now for 3 years now and love it! And would always implement pfsense when i can.

    For basic filtering and routing Pfsense does a great job ….. add in the fact it has many useful plug-ins its a Ideal Platform for home or small businesses with micro budgets.

    But if your top priority is security, corporations will use Cisco, Juniper ...etc. because you have more security options but they may use Pfsense as DMZ's etc.....behind them to save a few dollars. If security isn't there top priority I suppose some corporations may use them on the front line of defense to save some dollars.

    If your a true security expert and spend 8 hours a day 7 days a week managing a pfsense Firewall I suppose you could by using snort and the firewall filters maintaining a set of custom rules to defend the network. It would be a never ending process new rules every day being added. But this is why you subscribe to a professional security firm selling subscriptions which allow you accesses to there custom rules for just a few thousand dollars a year.

    One of the nice things about Pfsense is the fact you pick your own hardware ..... Old computer you just retired, or buy a new state of the art computer system.

  • 0 Votes
    1 Posts
    2k Views
    No one has replied
  • Email clients not working properly

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    C

    Whats your email setup? Do you have exchange, pop or Imap server?

    I personally use Exchange and i havent had this problem.

  • Merge forum users

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    C

    We can't do either of those, SMF doesn't offer a means of doing so. At least short of manually changing the database which we're not going to do. We can delete one account so that name could be used under a different account, though users can delete their own accounts and we've never done that for anyone.

  • Several Questions about PFSense

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    johnpozJ

    sure you can add nics to your pc..  Then sure use those as network segments - you can put in as many nics as your pc will handle.  I have currently 4 assigned to my vm of pfsense.  wan, lan, wlan and dmz.

    I just run an AP off my wlan segment..  Just never saw the point of using a wireless card in the router as your AP.  Just use a normal AP or wireless router as AP and connect it to that network segment.  Pfsense and wireless not a good fit of as of yet from everything read on the forums.

    wireless cards normally don't make good AccessPoints anyway.

  • Blocking DNS queries to external resolvers

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    P

    Those instructions look good. To let some systems "out" to use another external DNS server/s:

    Add an alias "ExternalDNSallowed" (or some such name). Add all the LAN IP addresses of systems that are allowed to use an external DNS directly. Add an alias "PermittedDNSservers" (or some such name). Add the IP addresses of external DNS servers you allow to be used (e.g. 8.8.8.8 and 8.8.4.4) Add a firewall rule on LAN permitting IPv4, TCP+UDP, source "ExternalDNSallowed", destination "PermittedDNSservers", port 53. Move the rule up before the wildcard rule that blocks everything to port 53.
  • 0 Votes
    4 Posts
    3k Views
    N

    Hello again,

    After thinking a bit more (should have done that before), I found the solution: I added an outbound NAT mapping to NAT source IP network 10.60.0.0/16 to the public virtual IP.

    The reason is that when I ping 8.8.8.8 using the WAN1 interface, pfSense uses the WAN1 private IP as its source IP.
    However, there was no NAT mapping this IP to the public IP.

    So, I understand that the pfSense box (always?) uses the WAN interface when accessing the internet.
    I wrongly assumed that all traffic originating from the pfSense box would use the localhost 127.0.0.1 IP address as its source IP, which would then be NATted to the specified public IP address.

    Thanks for all help.

  • PfSense androidGUI app (a work in progress)

    Locked
    22
    1 Votes
    22 Posts
    19k Views
    C

    Not had time to look at this project recently, been playing with the pfsense webconfiguration instead.

    Anyway here is an updated apk > https://dl.dropboxusercontent.com/u/12367642/Pfsense.apk (you will have to uninstall the previous verion if you have it)

    Changelog:

    Added Arp page
    Added Authentication page
    Added Table page
    Finished the Status > Interfaces page (untested)
    Improved UI of the services page
    Added validation to the wake on lan page

  • For Sale: Fabiatech FX5620 with 2.0.3 - $75 + shipping

    Locked
    1
    0 Votes
    1 Posts
    3k Views
    No one has replied
  • Nic card failure

    Locked
    13
    0 Votes
    13 Posts
    5k Views
    stephenw10S

    @tadleymansions:

    I certainly have learned an awful lot over the last few days and am resolved to learn more about pfsense.

    Not all bad then.  ;) Thanks for signing off.

    Steve

  • RAID 10?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    P

    As you have discovered, RAID protects against failure of the drives. A RAID controller failure brings down the whole thing! To avoid that you need dual-channel disks that can connect to multiple controllers and software that knows how to handle the multiple paths to disks… Then if the multiple RAID controllers are on the same system bus, failure of that bus brings it all down... You need multiple hosts, each with fibre-channel (or whatever) controllers to dual-ported disks, and clustering ability...
    The numbering of disk allocation in RAID will depend on the particular firmware implementation. e.g. a 4 disk RAID10 set might have disk 1+3 mirrored (set A) and 2+4 mirrored (set B). Then the logical blocks are striped across set A and set B. In that case you can lose 1 disk from set A  and 1 disk from set B and users don't notice. But if you lose 2 disks from set A, or 2 disks from set B, you are dead. So, you can't lose just any 2 drives.
    The other hassle with RAID is that the firmware usually writes some custom stuff at the start of the disks, and the ordinary boot block is not where it would be on an ordinary disk. So, even if you are just doing RAID1 (mirrored pair), and the RAID controller has died, you can't just plug 1 of the disks into an ordinary disk controller and have it boot - this can be VERY annoying when trying to get something up and running temporarily.

  • Benchmark of pf / ipfw / forwarding on FreeBSD-HEAD

    Locked
    1
    0 Votes
    1 Posts
    6k Views
    No one has replied
  • PfSense getting some shine on pcper.com podcast

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.