@gertjan said in pfSense behind ISP Router: The last (4) rule is an explicit "block everything" Since when is this needed?

@johnpoz thx

Didn't say it didn't have a "modem" in it.. But that is a horrible term to use for something that is more than a modem.. Its not a "modem" its a gateway.. Sniff on pfsense2 wan when you try to access one of your forwarded ports from pfsense1 - do you see the traffic? If so then it would work. Just like any other port forward.

@viragomann This is what I see in my deciso (old firewall) on the netgate (new) I don't see anything ! But I have find the problem ! I need to go in Interfaces/PPPs/Edit and select "Link interface(s)" Now it works !! [image: 1627309282711-image.png]

any help or suggestions here!?

@viragomann Thanks, that was indeed the solution

@nogbadthebad Thanks, much appreciated. Kind regards, jB

Damn, that would be such a nice feature... Thanks for your reply @jimp :)

be a start.. This is really no different then setting up some other vlan/network... Your just not natting it.

@brucexling as far as general latency I think that should be fine. DNS lookups are pretty quick and if you’re using a forwarder as you say, the cached response from the authoritative server should be fast too. In general, if it ain’t broke, leave it the hell alone.

can anyone confirm or deny? the identical problem exists with v2.5.1 for me... -- Dennis

We're also experiencing this issue (https://forum.netgate.com/topic/164671/bug-dhclient-flushes-static-routes). Our current theory is that the DHCP client is to blame. A workaround it so go static: set the interfaces configuration to static and also set the gateway manually. We stopped having this issue after that.

Hello Yes, it is for iptv. right now i have stopped digging around this project. At the moment i am diving a bit deeper in zeek, ... .. . regards Thiamata

@johnpoz said in Navigate from lan to wan: Wasn't really specific about pfsense lan mask, I was more curious to your pc mask.. Thinking 10.0.0.2 was local. For example if you had set a static IP on say a windows machine and you start the ip with 10 it defaults to a /8 mask.. Should of been more clear in validating pc vs just pfsense settings.. If your wan and lan overlapped on pfsense you could of had more issues - like no internet at all for clients. Which would of prevented the pc from getting to 10.0.0.x since it would of thought it local and never sent the traffic to pfsense. Thank you Johnpoz, I'm learning about it ;) thank you so much have a good day

@gertjan Thank you! It works now ... Should've known that, won't make that mistake again!