Bridged transparent firewall block broadcast /dhcp
-
I think this is what i want, i have an existing network on 192.168.1.0/24. I would like to use pfsense as an additional inline firewall to serve dhcp and block access to everything except internet (gateway 192.168.1.1) and server 192.168.1.2.
Here's how ive got it so far, im writing this after the fact so my memory may be hazy.
NAT disabled.
OPT1: NONE
LAN: NONE
WAN: 192.168.3.1/24, GW: 192.168.1.1
set.link.bridge.pfil_bridge = 0DHCP and DNS running on 193.168.3.1
Everything seems to work except one thing. DHCP offers are leaving the WAN interface and being offered to clients on the 192.168.1.0/24 subnet, DHCP requests are coming in via WAN side. Ive tried firewall rules on WAN and floating rules on WAN/OUT.
How do i stop this?
I've also tried
OPT1: 192.168.3.1/24, GW: 192.168.1.1
LAN: NONE
WAN: NONE
set.link.bridge.pfil_bridge = 1Rules on both OPT1 and WAN, no luck.
Can DHCP broadcast be blocked?