PfSense - Revision history

Tinker: /* Advanced Topics */

2025-08-12T13:56:49Z

Advanced Topics

← Older revision		Revision as of 09:56, 12 August 2025
Line 201:		Line 201:
	* Hardware failover configuration		* Hardware failover configuration
	** Netgate Docs: [https://docs.netgate.com/pfsense/en/latest/recipes/high-availability.html High Availability Configuration Example]		** Netgate Docs: [https://docs.netgate.com/pfsense/en/latest/recipes/high-availability.html High Availability Configuration Example]
			* [[Setting up PIA on pfSense & configuring rules to run traffic to specific sites from inside the LAN through the VPN{{!}}Setting up PIA on pfSense & configuring rules to run traffic to specific sites from inside the LAN through the VPN]]

	= Some Links =		= Some Links =

Tinker: /* pfSense with WAN inside a LAN */

2023-11-09T21:24:26Z

pfSense with WAN inside a LAN

← Older revision		Revision as of 17:24, 9 November 2023
Line 153:		Line 153:
	** Reserved Networks		** Reserved Networks
	*** Un-check "Block private networks and loopback addresses"		*** Un-check "Block private networks and loopback addresses"

			<span style="color: rgb(224, 62, 45); font-size: 24pt;" >'''Reverse this if/when your router goes live on the Internet!'''</span>

	== If you want to be able to ping your network from the outside, Go into Firewall / Rules / WAN & create a rule to allow ICMP. ==		== If you want to be able to ping your network from the outside, Go into Firewall / Rules / WAN & create a rule to allow ICMP. ==

Tinker: /* pfSense with WAN inside a LAN */

2023-11-09T06:56:23Z

pfSense with WAN inside a LAN

← Older revision		Revision as of 02:56, 9 November 2023
Line 145:		Line 145:

	== pfSense with WAN inside a LAN ==		== pfSense with WAN inside a LAN ==
			<span style="color: rgb(224, 62, 45); font-size: 24pt;" >'''WARNING:  This is a potential security hole!'''</span>

	If you want to operatea pfSense router entirely inside your local network (i.e.: building a network for installation elsewhere, but testing it locally...) and your local network uses an RFC 1918 address range, you need to allow that sort of addresses on the WAN interface. By default, they are blocked.		If you want to operatea pfSense router entirely inside your local network (i.e.: building a network for installation elsewhere, but testing it locally...) and your local network uses an RFC 1918 address range, you need to allow that sort of addresses on the WAN interface. By default, they are blocked.

Tinker: /* Notes & Tips */

2023-11-09T06:32:09Z

Notes & Tips

← Older revision		Revision as of 02:32, 9 November 2023
Line 143:		Line 143:

	= Notes & Tips =		= Notes & Tips =

			== pfSense with WAN inside a LAN ==
			If you want to operatea pfSense router entirely inside your local network (i.e.: building a network for installation elsewhere, but testing it locally...) and your local network uses an RFC 1918 address range, you need to allow that sort of addresses on the WAN interface. By default, they are blocked.

			At the Web GUI dashboard:
			* Interfaces / WAN
			** Reserved Networks
			*** Un-check "Block private networks and loopback addresses"

	== If you want to be able to ping your network from the outside, Go into Firewall / Rules / WAN & create a rule to allow ICMP. ==		== If you want to be able to ping your network from the outside, Go into Firewall / Rules / WAN & create a rule to allow ICMP. ==

Tinker: /* Initial Configuration of pfSense */

2022-05-24T22:16:26Z

Initial Configuration of pfSense

← Older revision		Revision as of 18:16, 24 May 2022
Line 50:		Line 50:
	= Initial Configuration of pfSense =		= Initial Configuration of pfSense =

	'''BREAKING NEWS...'''~~  Apparently, current release sets your networking up to default of WAN using DHCP on the first interface & LAN using 192.168.1.1/24 on the second by default...~~		'''BREAKING NEWS...'''

			Apparently, current release sets your networking up to default of WAN using DHCP on the first interface & LAN using 192.168.1.1/24 on the second by default.

			If you have more than 2 interfaces, it seems to leave the rest un-configured.
	<span style="text-decoration: line-through;">On first boot, pfSense will ask "Should VLANs be set up now [y{{!}}n]?"</span>		<span style="text-decoration: line-through;">On first boot, pfSense will ask "Should VLANs be set up now [y{{!}}n]?"</span>

Tinker: /* Initial Configuration of pfSense */

2022-05-24T22:14:34Z

Initial Configuration of pfSense

← Older revision		Revision as of 18:14, 24 May 2022
Line 50:		Line 50:
	= Initial Configuration of pfSense =		= Initial Configuration of pfSense =

	~~On first boot~~, ~~pfSense will ask "Should VLANs be set~~ up ~~now [y{{!}}n]?"~~		'''BREAKING NEWS...'''  Apparently, current release sets your networking up to default of WAN using DHCP on the first interface & LAN using 192.168.1.1/24 on the second by default...

	~~Don't bother...~~		<span style="text-decoration: line-through;">On first boot, pfSense will ask "Should VLANs be set up now [y{{!}}n]?"</span>

	*Select your WAN interface		<span style="text-decoration: line-through;">Don't bother...</span>
	**bce0 on this test machine (T310)
	*Select your LAN interface		*<span style="text-decoration: line-through;">Select your WAN interface</span>
	**bce1 on this test machine (T310)		**<span style="text-decoration: line-through;">bce0 on this test machine (T310)</span>
	*Verify they're selected properly & say yes.		*<span style="text-decoration: line-through;">Select your LAN interface</span>
	*Watch all the "done" messages scroll by (or not... again, your choice...)		**<span style="text-decoration: line-through;">bce1 on this test machine (T310)</span>
			*<span style="text-decoration: line-through;">Verify they're selected properly & say yes.</span>
			*<span style="text-decoration: line-through;">Watch all the "done" messages scroll by (or not... again, your choice...)</span>
	After a moment or 3, you'll see the console menu.		After a moment or 3, you'll see the console menu.


	* Welcome to pfSense 2.4.5-RELEASE (amd64) on pfSense *		* Welcome to pfSense 2.6.0-RELEASE (amd64) on pfSense *
	WAN (wan) -> bce0 -> v4/DHCP4: 192.168.0.26/24		WAN (wan) -> bce0 -> v4/DHCP4: 192.168.0.26/24
	LAN (lan) -> bce1 -> v4: 192.168.1.1/24		LAN (lan) -> bce1 -> v4: 192.168.1.1/24

Tinker: /* Via Web UI */

2022-05-24T20:46:57Z

Via Web UI

← Older revision		Revision as of 16:46, 24 May 2022
Line 176:		Line 176:
	** '''Destination port range''':HTTPS (Or the custom port)		** '''Destination port range''':HTTPS (Or the custom port)
	** '''Description''': Allow remote management from anywhere (Dangerous!)		** '''Description''': Allow remote management from anywhere (Dangerous!)
	Note: If you are messing about with an internal pfSense server, you'll get '''DNS Rebinding Attack''' errors. Fix this by going into <code>System / Advanced / Admin Access</code> & setting an appropriate '''Alternate Hostnames''' entry under <code>webConfigurator</code>.		'''Note:''' If you are messing about with an internal pfSense server, you'll get '''DNS Rebinding Attack''' errors. Fix this by going into <code>System / Advanced / Admin Access</code> & setting an appropriate '''Alternate Hostnames''' entry under <code>webConfigurator</code>.

	= Advanced Topics =		= Advanced Topics =

Tinker: /* Via Web UI */

2022-05-24T20:46:18Z

Via Web UI

← Older revision		Revision as of 16:46, 24 May 2022
Line 176:		Line 176:
	** '''Destination port range''':HTTPS (Or the custom port)		** '''Destination port range''':HTTPS (Or the custom port)
	** '''Description''': Allow remote management from anywhere (Dangerous!)		** '''Description''': Allow remote management from anywhere (Dangerous!)
			Note: If you are messing about with an internal pfSense server, you'll get '''DNS Rebinding Attack''' errors. Fix this by going into <code>System / Advanced / Admin Access</code> & setting an appropriate '''Alternate Hostnames''' entry under <code>webConfigurator</code>.

	= Advanced Topics =		= Advanced Topics =

Tinker: /* Some Links */

2022-05-24T18:49:44Z

Some Links

← Older revision		Revision as of 14:49, 24 May 2022
Line 194:		Line 194:
	*[https://www.youtube.com/watch?v=8jYibgeAV0Y Whole-network VPN with pfSense Router]		*[https://www.youtube.com/watch?v=8jYibgeAV0Y Whole-network VPN with pfSense Router]
	*[https://www.youtube.com/watch?v=bkWJ8Cmn03I pfSense: How to Setup in DataCenter on VM-ware ESXi (Morton Hjorth)]		*[https://www.youtube.com/watch?v=bkWJ8Cmn03I pfSense: How to Setup in DataCenter on VM-ware ESXi (Morton Hjorth)]
			*[https://github.com/pfsense The pfSense source code]
	[[Category:Network Management]]		[[Category:Network Management]]
	[[Category:pfSense]]		[[Category:pfSense]]
	[[Category:ServerBuilding]]		[[Category:ServerBuilding]]

Tinker: /* Some Links */

2022-05-24T18:37:22Z

Some Links

← Older revision		Revision as of 14:37, 24 May 2022
Line 176:		Line 176:
	** '''Destination port range''':HTTPS (Or the custom port)		** '''Destination port range''':HTTPS (Or the custom port)
	** '''Description''': Allow remote management from anywhere (Dangerous!)		** '''Description''': Allow remote management from anywhere (Dangerous!)

			= Advanced Topics =

			* Multi-WAN failover configuration
			** From TecMint: [https://www.tecmint.com/how-to-setup-failover-and-load-balancing-in-pfsense/#:~:text=Failover%20is%20a%20type%20of,or%20any%20scheduled%20down%20times. How to Setup Failover and Load Balancing in PFSense]
			* Hardware failover configuration
			** Netgate Docs: [https://docs.netgate.com/pfsense/en/latest/recipes/high-availability.html High Availability Configuration Example]

	= Some Links =		= Some Links =
Line 187:		Line 194:
	*[https://www.youtube.com/watch?v=8jYibgeAV0Y Whole-network VPN with pfSense Router]		*[https://www.youtube.com/watch?v=8jYibgeAV0Y Whole-network VPN with pfSense Router]
	*[https://www.youtube.com/watch?v=bkWJ8Cmn03I pfSense: How to Setup in DataCenter on VM-ware ESXi (Morton Hjorth)]		*[https://www.youtube.com/watch?v=bkWJ8Cmn03I pfSense: How to Setup in DataCenter on VM-ware ESXi (Morton Hjorth)]

	[[Category:Network Management]]		[[Category:Network Management]]
	[[Category:pfSense]]		[[Category:pfSense]]
	[[Category:ServerBuilding]]		[[Category:ServerBuilding]]