IPv4 default deny rule (1000000103)
-
The default rule is not letting me connect to the Graphical Interface, in the logs it appears that this is the rule that blocks my public IP.
I already have rules configured in the floating and in the Wan and it still won't let me connect, how can I address this problem? -
@oscar-pulgarin well without seeing what rules you have in place and where.. If your wanting to allow access to your wan from a public IP.. It would be allowed if the rule was correct.
Common mistake made is calling out the source port on a rule.. The source port of traffic is almost always going to be some random port above 1024.. There are only very specific special times when you would actually know what the source port is.. So if you set your source port in your rule - it would not trigger and would drop down to the default deny..
Another is rule actually on wrong interface.. For example if your using a PPPoE sort of connection and you placed the rule on the actual wan interface.. But traffic is actually coming in on your pppoe interface.
A screenshot of your floating and wan rules, and what is actually logged would go a long way in helping you figure out what is not right.
-
@johnpoz Efectivamente tengo configurado una Interfaz Wan por PPoe, ademas hemos configurado un Bridge con las demas interfaces del equipo en el que tenemos instalado Pfsense
-
@oscar-pulgarin and what exactly is showing as blocked in your log?
So your wan is in a bridge? Bridges can be troublesome.. Are you filtering on the bridge itself or the interface in the bridge, etc.
https://docs.netgate.com/pfsense/en/latest/bridges/firewall.html#bridging-and-firewalling
Looks like your floating rule has triggered because show traffic too it via the states column.
-
@johnpoz said in IPv4 default deny rule (1000000103):
columna d
The wan is not bridged, in the image I show you the configuration and how the log appears
-
@oscar-pulgarin so that looks like hitting pppoe interface
A screenshot of the log might be easier to read..
-
@johnpoz Yes, I am trying to access the front through the public IP since it is a computer that is located elsewhere
