• Where do I put additional ifconfig options?

    Locked
    4
    0 Votes
    4 Posts
    5k Views
    jimpJ

    I added a note to the wiki:
    http://doc.pfsense.org/index.php/Interface_Settings

  • GEOM

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    jimpJ

    That may be true for gstripe, but we do have gmirror support (even in the installer)

    Why would you want to stripe two disks on pfSense? That doesn't make a lot of sense, RAID 0 would only reduce your stability over time. It only helps to gain space by adding disks together to get a larger storage area. Not much use on a firewall (unless it's a separate non-boot volume for something like squid).

    gmirror makes sense as it gives you RAID 1 redundancy with two or more disks.

  • Configuring VLANS

    Locked
    10
    0 Votes
    10 Posts
    3k Views
    T

    ok, thank You all for helping me!!
    really appreciate that !

    now I understand it better ….

    Tom

  • [Q] Perl DBI package

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • The insternet is running very slow

    Locked
    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Identifying traffic spikes

    Locked
    2
    0 Votes
    2 Posts
    1k Views
    S

    I'd like a simple method for this as well.
    The best I have so far is to access DarkStat and then hosts.
    From there I just refresh to see what's doing the most bandwidth.
    From there it's tricky though, sometimes I can figure it out just from the device, but if it's my mac, I have to use something like Little Snitch to see what process/port is being naughty.

    If someone has a simple solution, I'm all ears.

  • What could be causing my pfSense Instability?

    Locked
    5
    0 Votes
    5 Posts
    2k Views
    C

    IPv6 has no relation to the DHCP server. All that checkbox does is either add rules blocking all IPv6 or not add them. Neither way has any impact on anything with IPv4.

    Is the DHCP server running when it stops giving leases? Check Status>Services, and the system logs. The only time I've seen the DHCP server stop handing out leases is when it doesn't have any to hand out. It may be possible there is some missing input validation somewhere that lets you generate an invalid config file that stops dhcpd, which would be in the logs, but that would have to be something atypical you're doing.

  • Imspector exclude certain computers

    Locked
    1
    0 Votes
    1 Posts
    913 Views
    No one has replied
  • RRD Traffic Graph Incorrect

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    C

    bump

  • I want to increase speed of my users at night

    Locked
    9
    0 Votes
    9 Posts
    2k Views
    L

    there is a FreeRADIUS package on pfsense, but from testing it in the past it is very limited in comparison to a standalone FreeRADIUS server. (I havent tried the package for a while so it may have gotten better)

  • Find hard drive size in pfSense

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    E

    @marcelloc:

    Does a df -h answer what you want or you need a kind of fdisk tool?

    Perfect! Thanks!

  • Block internet access accept windows update??

    Locked
    4
    0 Votes
    4 Posts
    5k Views
    S

    depends

    easiest way  create rules that  based  alias  change the lan net to single or alias
    create an alias with the ips you wish to have access to the internet or use network and only allow it that way x.x.x.x/24

    I usually  create a couple of rules
    one that allows ports 1-79 (tcp/udp) and one that allows 81- 1000 (tcp/udp)   that way if people have email clients they work behind the system but web surfing is dead . ( you can create a third rule if you want to omit the https port 443 if you want )
    in your case probably would add in a rule for the ports for logmein too ( what ever they are)  i believe microsoft updates use a specific port  443

    then  create an alias  firewall rule that allows port 80 to certain ips or range that you wish to have access to the internet. that way client email will work and  so should windows updates but web surfing is limited to those who are found with in the alias ip range

    if you keep the maxium port at 1000 then there are very few if any proxy servers that use anything under this port range. so it be  but surfing via proxy port usually sucks any ways..

    oops miss read your first post I thought  you wanted updates on all computer and websurfing  to only a select few. but the rules still apply  just block port 80  and any thing over a 1000 or only allow  port 443 and what every log me in ports are
    it still works though you might have access to other 443 site then you just allow microsoft  443 ports and what ever else 443 websites you might want. it pretty  hard to surf with out port 80 for most people.  if you still having problems with windows update  because of lack of port 80  simple fix to that is schedule  port 80 in during down times and have your computer do their updates during that time period

    as a added foot note: if they have hotmail login page booked mark that will still show up. but once  they log in it switches form https to http and the page will fail to load as do all  most web based emails for the most part .. just pointing this out so you do not get perturbed when you first try and then complain it does not work..

  • Loader.conf.local Question

    Locked
    6
    0 Votes
    6 Posts
    15k Views
    jimpJ

    You can edit /boot/loader.conf and/or /boot/loader.conf.local from Diagnostics > Edit File or over ssh.

    It's possible that loader.conf is empty if all defaults are being used there.

  • Vhost and web content management systems

    Locked
    6
    0 Votes
    6 Posts
    6k Views
    S

    oh I have it working now and it works fine. just can not upload pictures because of no GD support

    basically it is really easy to install CMS and works fine
    steps how to very easy:

    install vhost
    set up vhost
    is you want to use port 80
    you have to give pfsense a different port and disable webgui redirect in the system advance

    to set up vhost
    enter in host name  (use something simple ie: info)
    enter in ip you wish to binded too
    enter in port  (80 if the above is disabled)
    save

    go to service and start Vhost
    it will not change to green  but it is statred

    test enter in webpage in url it should work  (http://x.x.x.x/"hostname"   example ( if using port 80) : http://pfsense.local/info  or http://192.168.1.1/info if using port 8001 then http://pfsense.local:8001/info or http://192.168.1.1:8001/info)

    to get sqlite to work
    enable ssh in system advance
    ssh in to pfsense  via putty in windows or console in a linux box

    ssh root@x.x.x.x  (x.x.x.x being the ip either wan or lan ip)

    goto shell ( 8 )

    touch /etc/php_dynamodules/pdo
    touch /etc/php_dynamodules/pdo_sqlite
    /etc/rc.php_ini_setup
    exit

    restart webconfiguator (11)
    restart system (5)

    after it restarted
    use filezilla to log in with sftp
    user name is not admin  but root ( password is what ever your password is)
    go too  usr/local/vhost/
    up load  CMS into your host directory

    working CMS
    frog ( will have to disable ( comment out) the security feature in the index.php and do not forget to place the database in a readable directory)
    XE
    mediawiki
    cmsimple ( does not require sqlite)
    dokuwiki  (does not require sqlite)
    plus other

    open browser enter in vhost address into uRL follow instillation procedure

    finished a working CMS
    just no GD support until someone say how to get them activated in Vhost

  • Packet Loss issue

    Locked
    19
    0 Votes
    19 Posts
    7k Views
    stephenw10S

    I would not have guessed that, though it makes sense. Good to know.
    Hopefully this will help anyone else with a similar issue.

    Steve

  • Ssh port 22 unusable (realy slow)

    Locked
    7
    0 Votes
    7 Posts
    3k Views
    C

    There was no problem with the line … did a new installation from 2.0 to 2.01 and everything was ok again ??

  • Log message error?

    Locked
    3
    0 Votes
    3 Posts
    1k Views
    C

    In general, yes that will cause significant Internet connectivity problems in almost every circumstance, you need to get rid of the IP conflict.

  • Uploading files from any machine KILLS latency for everyone on the network

    Locked
    11
    0 Votes
    11 Posts
    4k Views
    chpalmerC

    I was able to control my voip qos issues by using the soproxd package which I actually installed for another reason. The "qos" settings (Ill call them) seem to have made a huge difference for my office. May or may not be an option for you.

    But for reference…  http://cable-dsl.navasgroup.com/#Asymmetry

    Are you using a cable gateway (has own router) device at the office location? Or just a bridge?

  • Etherchannel on pFsense

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    pttP

    Check "LAGG" on the Docs: http://doc.pfsense.org/index.php/LAGG_Interfaces

  • Integration with Active Directory

    Locked
    3
    0 Votes
    3 Posts
    4k Views
    D

    pfSense is not a content filter and web reporting system.

    Squid can authenticate against AD, so you can get much of the functionality found in commercial UTMs by installing squid (proxy) + squidguard (filter) + lightsquid (reporting), but it won't be a tightly-integrated system. Personally, I don't think this functionality belongs on a router/firewall.

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.