Hi Greg

everything worked well so far, excep that cluster pfsync doesn't run anymore :-) Will need to fix that now,…

Best regards
Rafael

@johnpoz:

That why it was labeled "Notes" ;)  But ok not a big deal..

Users are stupid in general.. A short and to the point list with all the common stuff seemed like a good idea to me.  All of those items come up all the time.  I am about ready to make the statement of how rules are evaluated a hot key stoke for pasting it ;)

Same with the wan is not the internet thing, just a thread started the other day where user just doesn't get it.. Even after multiple attempts of pointing out its just the wan net, and not the actual internet ;)

edit:  BTW it was my idea for the wiki, not danc idea.. So any blame for that falls to me..  Nice to see a new user trying to help out the others here..

I agree though I can understand that a proper place for these tips might be hard to find on the wiki.

Sadly, most of the learning pains I'd initially ran into were forgotten as I became accustomed to the "quirks" of pfSense.

I applaud the efforts of OP. Seems like a good start. I don't really see any downside for pfSense to make the learning curve for newbies easier.

Thanks Johnpoz again for your help…

Did you enable the new interface? Interface->new interface…make sure Enable is checked.

There's a nice CIDR/subnet calculator online that shows you exactly what addresses are part of a particular subnet and the details of the subnet in address/CIDR/netmask notations.

http://www.subnet-calculator.com/cidr.php

@jimp:

That's just how IPsec works. It has no concept of routing, so you have to nudge the traffic to use the correct source:

https://doc.pfsense.org/index.php/Why_can%27t_I_query_SNMP,_use_syslog,_NTP,_or_other_services_initiated_by_the_firewall_itself_over_IPsec_VPN

Bingo. Add the static route with a /32 and now it's working perfectly. Thanks Jim!

^ you can get SSD for very reasonable prices these days.  For you firewall even something a small as 8GB would be more than enough.  I see some small ones 8/16GB for under 20$ on amazon.

i had same problems starting with pfsense

there is something with the Firewall Rules and WAN net
WAN net is the subnet between pfsense and Router and not "the internet"

So the rule "any from LAN net to WAN net" does not give you internet access but "LAN net to any" does.
you can setup an alias for internet or do it like i do:
On interface LAN
block LAN -> OPT
allow LAN -> any
On interface OPT
block OPT -> LAN
allow LAN -> any

@irs:

still no reply while ping the nas from remote

And what states did you see in pfSense whilst doing that? You should see states from the remote client IP if the port forwards are working correctly.

Steve

Nothing came up that I understood. So here is what was done.

1. Backup the configuration.
2. Re-install the whole pfsense.
3. Restore the configuration.

All working without any error. All running smooth now.

P.V.Anthony