• About Firewall.

    2
    0 Votes
    2 Posts
    996 Views
    stephenw10S
    The main consideration here is how much traffic you need to firewall. What is your WAN connection speed? If you want to run additional services like web proxy, IDS/IPS or VPN that will increase the hardware requirements. The number of NICs you need deppends on how your network is configured. You will need at least two, for WAN and LAN connections, but more if your internal network has several subnets. Steve
  • Busy line

    6
    0 Votes
    6 Posts
    2k Views
    M
    @nothing: Just check "Disable Gateway Monitoring". It's not in your use anyway. Unfortunately it appears that I cannot saturate my upstream completely or these OpenVPN endpoint messages accumulate in the system log, CPU usage peaks and I get a series of check reload status msgs regardless of whether I disable gateway monitoring or disable OpenVPN altogether.  I've even tried to delete and recreate my WAN gateway in case it was a corrupt config. Perhaps a bug as no other significant changes made to my pfsense 2.1 release.
  • PfSense behind another router, partial connectivity

    10
    0 Votes
    10 Posts
    3k Views
    K
    Ok, found the issue. I had the WAN interface set to 192.168.0.150/1 instead of /24. As soon as I changed that, everything started working.
  • Network design questions

    1
    0 Votes
    1 Posts
    888 Views
    No one has replied
  • Pfsense admin

    1
    0 Votes
    1 Posts
    846 Views
    No one has replied
  • Remove "last message repeated…" from logs

    2
    0 Votes
    2 Posts
    1k Views
    C
    FreeBSD syslogd will to that if you add two -c options on the command line when syslogd is started up.  See: http://www.unix.com/man-page/freebsd/8/syslogd/ for example. My 2.1 is running with that already though: q[2.1-RELEASE][root@pfsense.localdomain]/var/log(14): ps axfw | grep syslogd 62744  ??  Is    0:00.48 /usr/sbin/syslogd -s -c -c -l /var/dhcpd/var/run/log -f /var/etc/syslog.conf
  • Bridging/switching interfaces

    4
    0 Votes
    4 Posts
    1k Views
    stephenw10S
    I agree it's sometimes more convenient to bridge interfaces. Depending on your NIC type you may also need this patch: https://forum.pfsense.org/index.php/topic,66908.msg367991.html#msg367991 Steve
  • VPN disconnects when applying a change

    12
    0 Votes
    12 Posts
    4k Views
    G
    Actually, this is still an issue. Applying firewall rules, or almost any update will kill existing connections including my OpenVPN connection to the firewall requiring me to reconnect..
  • More PFSESNE collect the DCHP table

    4
    0 Votes
    4 Posts
    3k Views
    X
    i try edit code like this still ERROR  :( // http://000.000.000.000 // usernamefld  admin // passwordfld  #00000@0# $form_vars = array(); $username = 'admin'; $password = '#00000@0#'; $loginUrl = 'http://172.30.34.254/index.php'; $postUrl='http://172.30.34.254/index.php'; $user_agent="Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6"; $form_data= 'login=Login&usernamefld=admin&passwordfld=#00000@0#'; $ckfile = "/tmp/Cookiefile.txt"; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $loginUrl); curl_setopt($ch, CURLOPT_COOKIEJAR, $ckfile); //curl_setopt($ch, CURLOPT_COOKIEFILE, $ckfile); // curl_setopt($ch, CURLOPT_COOKIE, "A=01;B=02;C=03"); curl_setopt($ch, CURLOPT_POST, TRUE); curl_setopt($ch, CURLOPT_POSTFIELDS, 'login=Login&usernamefld=admin&passwordfld=#00000@0#'); //curl_setopt($ch, CURLOPT_POSTFIELDS, $form_data); //curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE); //curl_setopt($ch, CURLOPT_USERAGENT, $user_agent); //curl_setopt($ch, CURLOPT_REFERER, $postUrl); curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE); curl_exec($ch); curl_setopt($ch, CURLOPT_URL, $postUrl); curl_setopt($ch, CURLOPT_COOKIEFILE, $ckfile); $store = curl_exec($ch); //curl_exec($ch); echo $store; curl_close($ch); ?> CSRF check failed. Either your session has expired, this page has been inactive too long, or you need to enable cookies. Debug:
  • VOIP server behind Pfsense issue

    2
    0 Votes
    2 Posts
    1k Views
    S
    @zlyzwy: Hi all, First, I know this topic has been discussed serveal times, however I just can't find the answer here.. Basically I have a Voip server(Askozia) behind Pfsense(2.1), The clients comes from both intranet and Internet. For the Intranet clients, they are all working fine. For the Internet clients, they just can't connect to Askozia server. The error message shows timeout. What I have tried : 1. Firewall Optimization Options –> Conservative 2. change NAT Outbound to AON, add a rule like : WAN  192.168.1.0/24 5060 * 5060 WAN address * YES Askozia 3. forward ports (5060,10000-10200) to WAN All these settings has been done but it seems no change. Thanks for any reply in advance.. Zlyzwy \ Forward ports to WAN? You dont forward the ports to the WAN. You forward them to your server on the LAN WAN UDP * * * 5060 - 5160 XXX.XXX.XXX.XXX 5060 - 5160 Asterisk PBX Server (SIP) XXX.XXX.XXX.XXX = Server IP on your LAN. The NAT rule should also auto generate an Firewall Rule. The present AON auto generated rules should suffice and you dont need to add more rules.
  • IP identification when under attack

    1
    0 Votes
    1 Posts
    839 Views
    No one has replied
  • WAN interface never recovers after link loss and restore

    7
    0 Votes
    7 Posts
    1k Views
    H
    @stephenw10: Check for anything that appears. The fact that you said the link light comes up briefly suggests it's stuck in a loop. That should generate a repeating log pattern. By what WAN type I meant dhcp, static IP, pppoe etc. Are your nics using the em driver? Steve Okay, did some poking around: WAN type: DHCP on a Cox Cable installation NIC drivers: yes, using the em driver I cleared the logs after the last link loss, so I don't have anything to go off of right now. I will have to check it next time it goes down.
  • Network virtualization

    1
    0 Votes
    1 Posts
    783 Views
    No one has replied
  • DHCP Leases Page Will Not Load 2.0.3 and 2.1-release

    1
    0 Votes
    1 Posts
    691 Views
    No one has replied
  • Reset to default … No Internet access

    2
    0 Votes
    2 Posts
    855 Views
    G
    Is the gateway set on the WAN connection? Is the gateway blank on the LAN?
  • Help to regain lost data from pen drive

    5
    0 Votes
    5 Posts
    1k Views
    D
    Here's a free solution that works extremely well:  Recuva. If you're willing to pay, try Zero Assumption Recovery.  You can run the demo mode to check if you have any chance of getting your files back before committing to a purchase.
  • Bypass proxy on local IP destination

    6
    0 Votes
    6 Posts
    2k Views
    johnpozJ
    Doesn't want to seem to give any info.
  • Problem with reaching LDAP via IPSEC

    2
    0 Votes
    2 Posts
    1k Views
    W
    Debug patch gave following output: dap_bind_s ldap_simple_bind_s ldap_sasl_bind_s ldap_sasl_bind ldap_send_initial_request ldap_new_connection 1 1 0 ldap_int_open_connection ldap_connect_to_host: TCP 10.20.0.100:389 ldap_new_socket: 15 ldap_prepare_socket: 15 ldap_connect_to_host: Trying 10.20.0.100:389 ldap_pvt_connect: fd: 15 tm: -1 async: 0 attempting to connect: connect errno: 65 ldap_close_socket: 15 ldap_err2string
  • Some questions about the FreeBSD underneath pfSense

    4
    0 Votes
    4 Posts
    1k Views
    M
    sorry for the late reply and woow thanks for the response. Exactly what i've been looking for. Actually, a little help with another rc-script and the 4th partition gets mounted, and the mkfs-tool shipped with the embedded img. So the embedded image deals very well with a classic 4-primary partition table. (and can mount FreeBSD (a5) and FAT (think 0c) partitions). Even DMA transfers seem to be supported by the alix-hardware (cranked up almost ~17MByte), though it will not run usb-disks too stable. :) Oke, there's no partitioner tool inside then - maybe a good thing, agreed And don't worry, just sometimes it's handy to have some extra space, like running a seldom-used-ftp or similar little abuses. Surely no caching with a lot of IO, this kind of storage is not made for this. (Though, the wrong thing to do here is to rely on this hardware and NOT having a spare card with a recent backup) Yes I am aware that what i'm doing here is way beyond the purpose of pfSense, and i love it for as it can actually be done! But I am aware as well, that it's the best non-commercial solution anyone can have, out of the box! (esp. soho environment where there's a lot of throw-away products!) :) thanks a lot
  • How to remove facebook video stream? & How to edit realname.cfg

    3
    0 Votes
    3 Posts
    2k Views
    N
    can u share the list of updated facebook and vimeo ip and cidr list also the complete snapohsts of how to block https://www.facebook.com/ and https://www.vimeo.com/
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.