• Riverbed and pfsense with MultiWAN

    2
    0 Votes
    2 Posts
    301 Views
    T
    Found some solution on the forum and modified sh script which runs every 15 min for. ping some host available through riverbed. If no answer then reset states. #!/bin/bash HOSTS="10.0.20.30" COUNT=10 echo "HOSTS: " $HOSTS echo "COUNT: " $COUNT for myHost in $HOSTS do counting=$(ping -c $COUNT $myHost | grep 'received' | awk -F',' '{ print $2 }' | awk '{ print $1 }') echo "counting: " $counting if [ $counting -ge 2 ] then echo "ping ok" else echo "reset states" pfctl -F state fi done #end
  • ROUTING OVER 2ND WAN WITH REMOTE DNS SERVERS

    3
    0 Votes
    3 Posts
    473 Views
    B
    @myster_fr Great!! thank you Sir. Looks like is working according your steps. Thanks a lot for suggesting the steps.
  • Newbie question

    4
    0 Votes
    4 Posts
    521 Views
    M
    Hi, One reco regarding your pfSense VM settings in Proxmox : I'd recommend disabling the Proxmox firewall from this VM's interfaces, as it might interfere with the rules you'll set in pfsense. For instance, if you allow some traffic on the pfSense interface, but did not also allow it on the proxmox firewall for the VM, then you might run into trouble. As pfSense is a firewall, there's no point in enabling Proxmox's filtering on top of it In addition, if the 192.168.7.214 interface is the "outside" (WAN) interface of you firewall, all incoming traffic is discarded by default, you'll have to define explicit rules allowing ICMP for instance for your tests.
  • Routing between networks failing??

    17
    0 Votes
    17 Posts
    1k Views
    V
    @johnpoz Yes, I searched the web for the error and came to the same thought. I disabled Both Nortons and also the inbuilt firewall and it made no difference. Also not using VPN at all internally.
  • SMTP Notifications bomb my email address.

    5
    0 Votes
    5 Posts
    685 Views
    R
    @gertjan Thanks Gertjan! My 2440, one of the problem machines, crashed. I am going to replace it. Perhaps it has been hardware all along. That little box has problems with the clock on the Celeron. Still, having the information on the location of the code and how the code works for SMTP will be immensely helpful for me on the other machine.
  • WAN failover to cellular hot spot

    1
    0 Votes
    1 Posts
    301 Views
    No one has replied
  • Create SOCKS5 proxy with SSH

    1
    0 Votes
    1 Posts
    172 Views
    No one has replied
  • different IP ranges

    2
    0 Votes
    2 Posts
    263 Views
    V
    @core7 said in different IP ranges: two of them in bridge mode Any special reason for this? Can you have two bridges with different IP ranges? Yes. But this question is unsuitable, since you only have one bridge, as I got the above. Or do you mean different subnets on the member interfaces of a single bridge?
  • Gateway drops and never comes back

    42
    0 Votes
    42 Posts
    12k Views
    S
    @mindtwist it’s a YY/MM date based version. They are targeting 3 Plus versions per year.
  • 0 Votes
    5 Posts
    435 Views
    B
    @jarhead I didn't do a range, I couldn't remember if it assigns 1 or 254 as the router, so I just did both, for each subnet I've seen. You are correct, I did use the word "range", but I meant to "cover those two ranges for possible router addresses". Sorry for the confusion.
  • New dual Wan not working

    11
    0 Votes
    11 Posts
    1k Views
    N
    @steveits That fixed it! You're a superstar! I owe you a pint. Or six.
  • Mutil Wan routing to wrong/offline interface.

    5
    0 Votes
    5 Posts
    571 Views
    K
    @steveits That fixed the problem - changing the gateway from "Default" to the gateway group resolved my issue. Thanks.
  • Trying to connect two devices behind two interfaces

    6
    0 Votes
    6 Posts
    843 Views
    johnpozJ
    @testcb00 said in Trying to connect two devices behind two interfaces: Finally, I find that I have to set up a static route in the NUT server. You shouldn't have to do that in a normal setup.. That would only make sense if this nut sever was not using pfsense as its gateway. If you can ping the pfsense IP of this vlan interface, but not devices on this vlan. That normally screams host firewall not allowing remote IPs, or again this device not using pfsense as its gateway either.
  • AWS pfSense static route lost

    1
    0 Votes
    1 Posts
    232 Views
    No one has replied
  • 0 Votes
    2 Posts
    441 Views
    B
    I have found the answer to the first part of my own question: https://docs.netgate.com/pfsense/en/latest/config/advanced-misc.html#skip-rules-when-gateway-is-down I needed to check "System/Advanced/Miscellaneous tab/Gateway Monitoring section/Do not create rules when gateway is down", this makes the rules behave the way I wanted. If anyone can still explain when/how/why OpenVPN needs a default gateway for connections to be made successfully, and whether it can be made to work without one, that would still be useful.
  • Help Designing Multi WAN

    13
    0 Votes
    13 Posts
    2k Views
    R
    I applied all the changes and tested and everything works! Thanks for all the help.
  • 0 Votes
    1 Posts
    772 Views
    No one has replied
  • Port forwarding not working correctly with multi wan

    13
    0 Votes
    13 Posts
    1k Views
    V
    @aduzsardi Basically the default gateway is used. But if a request goes to an IP out of the second subnet pfSense uses this IP for response as well, of course. Now if the default gateway lies outside of this subnet it will use the gateway that matches the subnet.
  • Stability issues with Vodafone Gigafast

    9
    0 Votes
    9 Posts
    1k Views
    P
    @eds89 That's the same as I meant, i.e. setting priorities on LAN to PfSense traffic !! If the shaping rules are the same, then the only change is the WAN config. What is different ?
  • Wireguard Policy Routing

    2
    0 Votes
    2 Posts
    481 Views
    Bob.DigB
    @ervin23 I would guess you would divide those groups by vlans but if you don't want to, it should be doable like you have described it, not done it like that myself though. You should beginn with something like this and get it working. Also see this.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.