r/PFSENSE

Is there any way to configure a rule so I can access files on my wife's notebook from my PC where both machines are on different subnets/interfaces? My PC is on a subnet on "LAN" interface and the notebook is on a different subnet that's on "WIFI" virtual interface.
I just want to be able to open the disk on the notebook from Windows File explorer by entering \\notebookname\d$, but I cannot figure out what kind of rule do I need.

Hi everyone,

I have pfsense 2.8 and I’m trying to set up a VPN on my router with NordVPN. Their instructions say 2.5. but I’m not sure if that matters or not.
I am trying to use server us8567 and the port in the ovpn file says port 53 while the official instructions say 1194. I have tried both in the client.

https://support.nordvpn.com/hc/en-us/articles/20285211284497-pfSense-setup-with-NordVPN

My client will run it just keeps saying “Waiting for response from peer”.

My only other thing is I have pfblockerng in use on the router for ad blocking and a separate open VPN to allow my phone to connect to my network remotely. I am hoping these two things are not interfering with something . (They shouldn’t honestly but who knows)

I don’t know what to do, is it the Dns settings? In General DNS Server settings I have 4 servers, two nordvpn provides and 2 for my ad blocking. Would that be a problem?

Sorry if it’s a bit rambling, I’ve been going in circles on this and it’s a little frustrating to follow the instructions exactly and not have it work. If you need more details on what else I tried let me know.

Hello everyone :-) I am having an issue, and I am hoping someone can help me. We have Comcast Business as our ISP and we have a /28 static IP block from them.

Usable range: xx.xx.xx.209 - xx.xx.xx.221
Gateway: xx.xx.xx.222
Subnet Mask: 255.255.255.240

The issue is, if I go to Assignments->WAN, make the following changes:

IPv4 Configuration Type: Static IPv4
IPv6 Configuration Type: None
IPv4 Address: xx.xx.xx.209/28
Upstream Gateway: xx.xx.xx.222

This fails to work. I have to change the IPv4 address field to xx.xx.xx.210/28 in order for everything to work.

Unless I am missing something, isn't xx.xx.xx.209/28 supposed to work if I put it in the IPv4 Address field? That is the first usable IP that Comcast gave me and from what I understand, you configure pfSense to use the first usable IP that Comcast gives you. Then for the rest of the Static IPs, you create Virtual IPs (with IP Alias) type.

Is this not correct? Any help here would be appreciated!

P.S. Not sure if this has anything to do with it, but in the Virtual IP section, there is an entry for xx.xx.xx.209/32 (IP Alias) and xx.xx.xx.210/32 (Proxy ARP). I don't believe this has anything to do with it, but, I thought I would mention it just in case it does.

Hello.

I have an unusual (to me) configuration I'm trying to configure on a NetGate SG-3100 running pfSense 23.09.1 and I'm looking for advice or help with configuration. I shut down a business that was in an office having several satellites with a Cisco based VPN network and for compliance reasons must maintain something similar to that network with the old servers in my home. Now, I'm working to exit cloud services personally with self hosting (think Immich and NextCloud)

I have two connections to my ISP at my home. One is for residential use and I cannot obtain a fixed IP address on this connection. The second is a commercial account and I have three fixed public IP addresses. The residential network is configured as 172.16.1.x and is totally separate from the NetGate router. The public IP addresses on the other are 66.x.x.68/25. The Netgate router is .68, an email server is .69, and a planned NAS is .70.

For fast implementation when my office closed, the mail server at 66.x.x.69 was setup on a switch in front of the router. Dumb, but had no choice. Now, I'd like to get everything behind the NetGate. I don't need any NAT on the NetGate. The only devices will be the mail server and the NAS. No clients/workstations/PCs.

I can create a small VLAN (say 192.168.15.x) on the router and on the NAS using a second ethernet port on the NAS. I plan to use Nginix to route traffic based on subdomains I've created on the 66.x.x.70 address.

I want the email server to keep a public address (66.x.x.69) in its network configuration. I've no desire to reconfigure.

I want the NAS to be port forwarded on 80 and 443 to the internal (192.168.15.x) address so Nginix can route to the appropriate ports based on the subdomains.

Security is not part of this question. Just router configuration.

How do I do this on pfSense? I cannot get past the bridging for the mail server. I get errors like "IP Address 66.x.x.69 is being used by or overlaps with WAN (66.x.x.68/25) and "A valid IPv4 gateway must be specified" when I have entered the IP address of the ISP upstream gateway.

Do I still need to manually install Realtek drivers in 2026 for them to work? Are there extra settings for Realteks to be stable?

I'm going to be setting up pfsense soon and I'm wondering how would I go about setting it up upon initial boot?

I have one NIC and a managed switch.

I am new to pfsense. So what would be my options?

One option that I was thinking was to connect my PC to the switch before initial boot Pfsense would find the one nic, but what do I do with the switch? Do I setup vlan tagging in that case?

Hello, i'm very new to PFSense, i just installed it on Oracle's VM following a book that's from 2021 so some of the things don't line up. I'm having problem setting up my WAN and i don't know what to do anymore, treat me like a five year old when explaining some things. Thanks

Hello, I've been having this issue since upgrading from 2.7. These are virualized firewalls. It's only whichever firewall is the CARP master that has the issue. I've followed the Netgate docs and searched around both Netgate and FreeBSD forums. Reboots are unpredictable, ranging from every day to every few weeks. Anyone have any ideas?

Details: Two VMware VMs setup in HA, 4 AMD EPYC CPUs, 8GB RAM, SCSI controller is LSI Logic SAS, NICs are VMXNET 3, Version 2.8.1-RELEASE (amd64).

Relevant portion of dmesg:

kernel trap 12 with interrupts disabled

Fatal trap 12: page fault while in kernel mode

cpuid = 0; apic id = 00

fault virtual address = 0xfffffe008e5ff008

fault code = supervisor read data, page not present

instruction pointer = 0x20:0xffffffff80b067cf

stack pointer = 0x28:0xfffffe008d620ba0

frame pointer = 0x28:0xfffffe008d620ba0

code segment = base 0x0, limit 0xfffff, type 0x1b

= DPL 0, pres 1, long 1, def32 0, gran 1

processor eflags = resume, IOPL = 0

current process = 11 (idle: cpu0)

rdi: fffff80004a82800 rsi: 0000000000000000 rdx: 0000000000000000

rcx: 0000000000000000 r8: 0000000000002000 r9: 0000000000000000

rax: fffffe008e5fd000 rbx: fffff80004a87800 rbp: fffffe008d620ba0

r10: fffffe008d620e88 r11: 0000000000000001 r12: 0000000000000000

r13: fffffe0084004000 r14: 0000000000000000 r15: 0000000000000000

trap number = 12

panic: page fault

cpuid = 0

time = 1782656446

KDB: enter: panic

Looking at the redmine roadmap for 2.9, I see a couple kernel panic bugs listed, but nothing relevant to me. I'm not using Suricata on these, and there shouldn't be any Wi-Fi hardware (virtualized).

Everytime i try to integrate this into my settings, half my stuff goes down, even after deleting package, still same. im trying to block ads on vlan99-IoT. Im completely lost on what to do setting it up. youtube vids havent been very helpful and trying to find in pfsense manual, doesnt exist? Is anyone willing to help?

I've been tasked with finding a way to get pfSense-CE-2.4.5-RELEASE-p1-amd64 installed on an older netgate appliance (model XG-7100-1U). I found the .iso in the Internet Archive but it's not a bootable image so I can't install it with a thumb drive made with etcher. Also, I don't know how reliable this image is.

Because my company has been relying on the load balancer in pfSense-CE-2.4.5-RELEASE-p1-amd64 (that has since been removed and replaced with HA Proxy) and is not ready to move to the HA Proxy replacement in current versions, we (I) need to find a way to get this older version installed. The current pfSense installer doesn't provide an option for using the 2.4.5 release.

We have another netgate appliance running this version; not sure if there's a way to do something with that.

Any thoughts other than, "It's way past time to upgrade"?

UPDATE: netgate support was able to help me out. They also included the following:

"I stress that is exceptionally important that you move off 2.4.5p1 as soon as you're able.  In the future, if you need firmware or need to replace this device, we will not be providing images for 2.4.5p1 and you will not be able to run the older firmware, as all of our new devices don't support 2.4.5p1.  This release is 6 years old and has been end-of-support for half a decade.  Running it is a significant security and operational risk."

I have access to a couple of proton free accounts. I would like to route certain parts of my lan\networks out through either proton vpn connections in pfsense.

I ran into a problem, I think that proton uses the same ip address for each of these configs, and so using the wireguard plugin, I can only successfully configure 1 vpn connection from proton at a time. I use the gateway firewall rule option to route lan outbound traffic to the vpn interface, so that part I can understand.

Can someone give simple instructions on how to best configure multiple wireguard proton vpn connections in pfsense? Such that LAN1 can have an outbound rule pointed to > proton1, and LAN2 > proton2

I came across some old threads on how to do this with NAT, but its a bit too complicated for me. Wondering is someone can dumb it down to my level

Hi All,

I have noticed, that when the ISP changes their public IP, my internet drops and the only way to get back online is to restart pfsense.

My setup.
Proxmox running on a Dell Wyse 5070, with a 2.5G Nic given direct access to the pfsense.

I could tell the internet is down, when I login to the dashboard page, and WAN ip is empty

I then restart pfsense to get a new IP address. Sometimes this works, and sometimes I have to restart the proxmox host altogether

Has anyone else experienced this and possibly know how to fix it

At the moment, one cable goes from the NBN box to the dell wyse which is directly accessed by pfsense

Feel free to ask me any questions.

Thanks