Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How do I specify LAN IP to specific WAN and other port traffic to specific WAN

    Scheduled Pinned Locked Moved Routing and Multi WAN
    6 Posts 2 Posters 715 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K Offline
      KruglerD
      last edited by KruglerD

      I noticed that someone already posted this question back in 2012, and tried to setup, reviewed the post which was exactly as I had determined, but for some reason, the "LAN" rule of using WAN2 for a specific IP address is being ignored and sent using the WAN1 interface. I even put a firewall block on all other traffic after the WAN2, but the ip still connects via WAN1.

      Under Firewall / Rules / LAN - Source-192.168.0.50 Port-* Destination-* Port-* Gateway-WAN2

      any help is appreciated

      V 1 Reply Last reply Reply Quote 0
      • V Offline
        viragomann @KruglerD
        last edited by

        @kruglerd
        Consider that a new policy routing rule will not affect already existing connections.
        So you probably have to kill the states for the rule to take affect.

        K 1 Reply Last reply Reply Quote 0
        • K Offline
          KruglerD @viragomann
          last edited by

          @viragomann I've rebooted the firewall in an attempt to ensure a "reconnection" and it still goes through the main WAN

          V 1 Reply Last reply Reply Quote 0
          • V Offline
            viragomann @KruglerD
            last edited by

            @kruglerd
            Ensure that the rule is applied to the meant traffic. Consider that the rules are probed from the top to the bottom. The first one which matches is applied and further rules are ignored.
            Also consider that floating rules with Quick option and rules on interface groups are processed first.

            K 1 Reply Last reply Reply Quote 0
            • K Offline
              KruglerD @viragomann
              last edited by

              @viragomann ![alt text](01671da0-1862-41fd-93f6-7a48624c9563-image.png image url)

              Nothing is listed in between the first lan address and the 3cx_PBX ip. If the first is applied and then ignored, I'd think the traffic should go through the WAN2 (wang as listed), but still shows as traffic is coming from Wan1 (Default)

              V 1 Reply Last reply Reply Quote 0
              • V Offline
                viragomann @KruglerD
                last edited by

                @kruglerd
                So WANGW is your WAN2 gateway?

                If pfSense allows access to go out there must a rule be responsible. So to check out which rule is passing the traffic out, enable logging in all your rules coming in considerations (don't forget interface group and floating), initiate a traffic and check the firewall log.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.