Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cannot Connect to the Internet, Unknown Rule on System Logs

    Scheduled Pinned Locked Moved Routing and Multi WAN
    18 Posts 4 Posters 1.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      SteveITS Galactic Empire @Rob893
      last edited by

      @rob893 said in Cannot Connect to the Internet, Unknown Rule on System Logs:

      Router is giving me a public IP

      192.168.1.1 is a private/RFC1918 IP.

      That shouldn't matter for connectivity out though. Try the ping 8.8.8.8 and if that works try nslookup/dig to see if DNS is working.

      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
      Upvote 👍 helpful posts!

      1 Reply Last reply Reply Quote 0
      • V
        viragomann @Rob893
        last edited by

        @rob893 said in Cannot Connect to the Internet, Unknown Rule on System Logs:

        The WAN IP is 192.168.1.1, status is online, other services are running too

        Which WAN? The pfSense screen shows something different.

        Router is giving me a public IP

        Where? To which device??

        1 Reply Last reply Reply Quote 0
        • R
          Rob893 @SteveITS
          last edited by

          @steveits Ah thanks for the tip! As for pinging 8.8.8.8, I was able to do it if I connect my laptop to the ISP router. But if I connect it to the Pfsense router, I get request time outs

          V 1 Reply Last reply Reply Quote 0
          • V
            viragomann @Rob893
            last edited by

            @rob893 said in Cannot Connect to the Internet, Unknown Rule on System Logs:

            But if I connect it to the Pfsense router, I get request time outs

            The question was if you can ping from pfSense itself.
            Go to Diagnostic > Ping and try, please.

            R 1 Reply Last reply Reply Quote 0
            • R
              Rob893 @viragomann
              last edited by

              @viragomann @SteveITS Ah sorry, my mistake. But no, I was not able to ping 8.8.8.8
              ping.png

              V 1 Reply Last reply Reply Quote 0
              • R
                Rob893 @Jarhead
                last edited by

                @jarhead I meant to say, these have been unchecked
                check.png

                1 Reply Last reply Reply Quote 0
                • V
                  viragomann @Rob893
                  last edited by

                  @rob893
                  If assume, you didn't touch the outbound NAT settings yet and it is still in automatic mode (Firewall > NAT > Outbound)?

                  If so at least the ping should work though.
                  Possibly your router requires to add new machines to a trusted device list to allow traffic?

                  R 1 Reply Last reply Reply Quote 0
                  • R
                    Rob893 @viragomann
                    last edited by

                    @viragomann Yes, it is still on automatic. By that, do you man the ISP router or the Pfsense router?

                    V S 2 Replies Last reply Reply Quote 0
                    • V
                      viragomann @Rob893
                      last edited by

                      @rob893
                      The ISP router. Some have a whitelist, where devices must be added to pass traffic.

                      1 Reply Last reply Reply Quote 0
                      • S
                        SteveITS Galactic Empire @Rob893
                        last edited by

                        @rob893 Given the 192.168.1.1 WAN gateway is online that would mean pfSense can ping it. So it would seem your ISP router isn't passing traffic out.

                        If you Diagnostics/Traceroute to 8.8.8.8 does it get any farther than 192.168.1.1?

                        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                        Upvote 👍 helpful posts!

                        R 1 Reply Last reply Reply Quote 0
                        • R
                          Rob893 @SteveITS
                          last edited by

                          @steveits trace.png
                          It doesn't seem so. But I did try to run my ISP router normally (not in bridge mode), and it sort of did something.

                          Before, windows would show a no connection icon.
                          After the change, it shows the connected via ethernet icon

                          I am however, still unable to connect to the internet

                          S 1 Reply Last reply Reply Quote 0
                          • S
                            SteveITS Galactic Empire @Rob893
                            last edited by

                            @rob893 if your ISP router was in bridge mode I would expect pfSense to get a public IP address…

                            From the traceroute it seems the ISP router isn’t passing the packets on.

                            I would go back to your ISP next.

                            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                            Upvote 👍 helpful posts!

                            R 1 Reply Last reply Reply Quote 0
                            • R
                              Rob893 @SteveITS
                              last edited by

                              @steveits Alright, I'll see if I can do something about the ISP router. Thanks for the help!

                              1 Reply Last reply Reply Quote 0
                              • R
                                Rob893
                                last edited by

                                Well, I finally got it working. From the online manual I found on the internet, my ISP router is an ONT, not a ONR. Someone pointed out that it being an ONT means that bridge mode was unnecessary. So, first thing I did was plug Pfsense in without bridge mode.
                                But that was not the end of it because I could ping 8.8.8.8 but was still unable to connect to the internet. Diving into the forums led me to this, which resolved the problem.
                                https://forum.netgate.com/topic/106121/fresh-install-does-not-give-internet-access-resolved?_=1679934258140

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.