ping is working over vlan after deny rule
-
I have 2 vlan on same the interface.
I have a rule deny traffic between them, and rdp isnt working..
but ping is always working.
i have pfsense and tplink SG108E
getting correct ip according to the vlan but ping is always working even when deny all..
pc1 192.168.100.50
pc2 192.168.200.1
deny all from vlan100 net to vlan200 net..but ping is working...rdp not
why ping keep working and not blocked..? -
@oren1031
I suspect, you have an L2 leak.
Configure your VLANs properly so that both directions have to pass pfSense. -
@viragomann thank you for the answer, L2 you mean at the switch level? Or configure again on pfsense?
-
@oren1031
Yes. probably the failure is on the switch.
Your issue case seems to be asymmetric routing. -
@viragomann thank you ill check the settings on the switch and updat.
-
@oren1031 if you are actively pinging and add the block, the state is still open:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/firewall.html#check-the-state-table -
@steveits reset stats diesnt help...
-
@oren1031 might be good to show screenshots of 'everything'