pfsense 502 bad gateway

If got problem on your pfsense firewall, please try using Putty connect to SSH, of course you should enabled SSH before.

After login run command    /etc/rc.php-fpm_restart

pfsense login from local, remain blank page or black page

This is cause by the package pfblockerNG, when you enable the services and you are using HTTPs with Port 443 to access from local, but you can access from WAN address.

After enable the pfblockerNG, Aliases and rules will created, and you will see the https 443 is redirect to localhost, so you will not get access pfsense GUI from locally.

You can adjust pfsense webConfigurator Protocol or Port to solve this problem.

pfSense Loopback IP

Source : https://doc.pfsense.org/index.php/Why_can%27t_I_access_forwarded_ports_on_my_WAN_IP_from_my_LAN/OPTx_networks


If you do not enable NAT Reflection Mode, you may not access some NAT from local LAN, for example "www.chuyuk.com:5000" is NAT to your local network IP 192.168.1.1:5000, Outbound access is ok, but inbound you only can access 192.168.1.1:5000, "www.chuyuk.com:5000" will not work in inbound access.

pfsense > System > Advanced / Firewall & NAT

 - NAT Reflection mode for port forwards select "Pure NAT"

 - click Enable "Enable NAT Reflection for 1:1 NAT"

 - click Enable "Enable automatic outbound NAT for reflection"

pfsense WebGui Slow and Not Responding a minutes

Try Disable Updates Check on Dashboard under "System > Update > Update Settings"

pfsense SSD Harddisk Enable TRIM

The first, you should identify your TRIM is enabled or disabled.

WebGUI Interface > Diagnostics > Command Prompt

You also can press [8] on VGA console and type command "tunefs -p /"

tunefs: POSIX.1e ACLs: (-a)                                disabled
tunefs: NFSv4 ACLs: (-N)                                   disabled
tunefs: MAC multilabel: (-l)                               disabled
tunefs: soft updates: (-n)                                 enabled
tunefs: soft update journaling: (-j)                       enabled
tunefs: gjournal: (-J)                                     disabled
tunefs: trim: (-t)                                         disabled
tunefs: maximum blocks per file in a cylinder group: (-e)  4096
tunefs: average file size: (-f)                            16384
tunefs: average number of files in a directory: (-s)       64
tunefs: minimum percentage of free space: (-m)             8%
tunefs: space to hold for metadata blocks: (-k)            6408
tunefs: optimization preference: (-o)                      time
tunefs: volume label: (-L)

OK Now going to enabled TRIM

Now reboot your pfsense to Single User, when the following screen prompt up, Press "2" or "S" to boot Single User.

          __ ____
   _ __  / _/ ___|  ___ _ __  ___  ___
  | '_ \| |_\___ \ / _ \ '_ \/ __|/ _ \
  | |_) |  _|___) |  __/ | | \__ \  __/
  | .__/|_| |____/ \___|_| |_|___/\___|
  |_|


 +------------Welcome to pfSense-----------+
 |                                         |                 ______
 |  1. Boot Multi User [Enter]             |                /      \
 |  2. Boot [S]ingle User                  |          _____/    f   \
 |  3. [Esc]ape to loader prompt           |         /     \        /
 |  4. Reboot                              |        /   p   \______/  Sense
 |                                         |        \       /      \
 |  Options:                               |         \_____/        \
 |  5. [K]ernel: kernel (1 of 2)           |               \        /
 |  6. Configure Boot [O]ptions...         |                \______/
 |                                         |
 |                                         |
 |                                         |
 +-----------------------------------------+

run shell command  "cat /etc/fstab", show the following device, write down the highlight red color string, FStype is ufs.

cd /

cat /etc/fstab

# Device  Mountpoint FStype Options  Dump Pass#
/dev/ufsid/58b03b253575d41a  /  ufs rw  1 1
/dev/label/swap0  none  swap sw  0 0

Type the following command, highlight red color string should same as above.

# /sbin/tunefs -t enable /dev/ufsid/58b03b253575d41a

then press enter, if success will show the following message.

tunefs: issue TRIM to the disk set

then type reboot and verify the TRIM status again.

# /sbin/reboot

Source from : https://gist.github.com/mdouchement/853fbd4185743689f58c

Difference Firewall NAT & Port Forwarding Flow

SONICWALL

Sonicwall should configure Firewall Access Rules & Network NAT Policies :

For Example : Port Forwarding Terminal Services Port 3389

Firewall Access Rules :
 - Should Create a rules, you can assign Incoming Source is any or specific IP

Network NAT Policies
 - Translate the WAN IP to LAN IP, specific the Terminal Services
 - WAN IP translated to "Avenue.Voice" PC only Terminal Services
   ( Remark : "Avenue.Voice" is address objects )
 - You also can translate the Port, For Example 8240 translate to "Avenue.Copier" Port 8000

新增說明文字