Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Same physical network, squid firewalling box, PfSense Crashes ina sporadic way.

    Scheduled Pinned Locked Moved General pfSense Questions
    5 Posts 3 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      Assen
      last edited by

      As the Title says, I got 1 physical network which implies a lot of switches in cascade. I got a cisco load balancing router at as my main gateway. To that routeur the switch network is connected. I got only 1 network segment 192.168.0.1. I installed a pfsense firewalling, squid box as 192.168.0.10 for the wan IP and 192.168.0.11 for my lan IP. I disabled the DHCP on pfsense and set my default-gateway on my Cisco DHCP to 192.168.0.11. Pfsense filter all the traffic block ports correctly and everything seems fine until I get this kind of error messages:

      Jan 15 02:02:13 kernel: arp: 10.251.230.1 is on fxp1 but got reply from 00:1b:D5:ad:a2:08 on fxp0

      and then PFSense stop pinging and responding on my network. Sometimes it start answering again 5 or 6 minutes later sometimes I have to reboot the box..

      Can anyone explain me or help me with what is happenning?

      Thanks

      -Assen

      1 Reply Last reply Reply Quote 0
      • Cry HavokC
        Cry Havok
        last edited by

        I think a diagram is in order, and an explanation of what you're using your pfSense host for.  From what you've posted it sounds like it's doing nothing as any host can bypass it.

        1 Reply Last reply Reply Quote 0
        • A
          Assen
          last edited by

          I'll do a diagram as soon as I get home with a program like Visio, and for the security concern we're on a environnement where windows account can't access network settings and can't change their gateway. I'm using the pfsense box as a transparent proxy to filter port and urls.

          1 Reply Last reply Reply Quote 0
          • S
            sullrich
            last edited by

            Try http://forum.pfsense.org/index.php/topic,1630.0.html

            1 Reply Last reply Reply Quote 0
            • Cry HavokC
              Cry Havok
              last edited by

              Or just do an ASCII art diagram ;)

              I don't think your arrangement will work as is, if you want a transparent proxy then you need to have the pfSense host as a gateway between 2 different subnets.  If you don't mind it being a "normal" proxy then you'll need to read the threads about using pfSense with a single NIC.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.