Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New Installation - No internet on LAN

    Scheduled Pinned Locked Moved General pfSense Questions
    29 Posts 4 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      musthafa @viragomann
      last edited by

      @viragomann said in New Installation - No internet on LAN:

      @musthafa
      Seems well.

      Is the computer able to resolve hostnames?
      No. I tried ping from terminal on mac.

      Is the pfSense outbound NAT in automatic mode and has it added a rule to WAN for LAN sources?
      All default settings. Nothing changed or added from myside

      Computer is able to connect to internet when using VPN service

      V 1 Reply Last reply Reply Quote 0
      • V
        viragomann @musthafa
        last edited by

        @musthafa
        So since you cannot resolve host names, it would be interesting if you can ping 8.8.8.8 or 1.1.1.1.

        pfSense runs the DNS resolver out of the box and the DHCP hands the interface IP out. But is your device using it?

        M 1 Reply Last reply Reply Quote 0
        • M
          musthafa @viragomann
          last edited by musthafa

          @viragomann
          Here is the ping from pfsense
          ping from LAN
          https://www.dropbox.com/scl/fi/s4h7572v0w17x2jm2nui1/pfsense-00002.png?rlkey=sgwuqrvixw06upe098yvbifur&dl=0

          ping from WAN
          https://www.dropbox.com/scl/fi/ob8m17tu39ryf68tcumm3/pfsense-00003.png?rlkey=2j92owdn5746fxxjmrtsl2ot1&dl=0

          however ping from computer is not resolved

          V 1 Reply Last reply Reply Quote 0
          • V
            viragomann @musthafa
            last edited by

            @musthafa
            I saw these screens, but the question is if the computer can ping an IP directly with resolving the host name.

            M 1 Reply Last reply Reply Quote 0
            • M
              musthafa @viragomann
              last edited by

              @viragomann

              musthafa@Musthafas-MacBook-Pro-2 ~ % ping 1.1.1.1
              PING 1.1.1.1 (1.1.1.1): 56 data bytes
              64 bytes from 1.1.1.1: icmp_seq=0 ttl=58 time=11.402 ms
              64 bytes from 1.1.1.1: icmp_seq=1 ttl=58 time=13.829 ms
              64 bytes from 1.1.1.1: icmp_seq=2 ttl=58 time=10.313 ms
              64 bytes from 1.1.1.1: icmp_seq=3 ttl=58 time=10.094 ms
              64 bytes from 1.1.1.1: icmp_seq=4 ttl=58 time=12.572 ms
              ^Z
              zsh: suspended  ping 1.1.1.1
              musthafa@Musthafas-MacBook-Pro-2 ~ % ping 8.8.8.8
              PING 8.8.8.8 (8.8.8.8): 56 data bytes
              64 bytes from 8.8.8.8: icmp_seq=0 ttl=58 time=14.137 ms
              64 bytes from 8.8.8.8: icmp_seq=1 ttl=58 time=7.267 ms
              64 bytes from 8.8.8.8: icmp_seq=2 ttl=58 time=17.667 ms
              64 bytes from 8.8.8.8: icmp_seq=3 ttl=58 time=8.189 ms
              64 bytes from 8.8.8.8: icmp_seq=4 ttl=58 time=10.764 ms
              64 bytes from 8.8.8.8: icmp_seq=5 ttl=58 time=6.689 ms
              ^Z
              zsh: suspended  ping 8.8.8.8
              musthafa@Musthafas-MacBook-Pro-2 ~ % ping google.com
              ping: cannot resolve google.com: Unknown host
              musthafa@Musthafas-MacBook-Pro-2 ~ % 
              
              
              
              
              V 1 Reply Last reply Reply Quote 0
              • V
                viragomann @musthafa
                last edited by viragomann

                @musthafa
                So the internet works well, but it cannot resolve host names...

                Which DNS server does it use?

                On the LAN you have to allow access to the interface IP, port 53 if pfSense is used. But by default there is an any-to-any rule on LAN, so nothing special needed.

                M 1 Reply Last reply Reply Quote 0
                • M
                  musthafa @viragomann
                  last edited by

                  DNS Server Settings
                  https://www.dropbox.com/scl/fi/7xvarr987ubqzeur89f7k/pfsense-00005.png?rlkey=s3th3nss444hpgfivi4490tcp&dl=0

                  WAN firewall rules
                  https://www.dropbox.com/scl/fi/fe1xq2aej3fqnxsydr5ph/pfsense-00006.png?rlkey=ml9bllt3s6ew8nd1giqxr3pqh&dl=0

                  LAN Firewall Rules
                  https://www.dropbox.com/scl/fi/jba2ocpnyb9wg37jzc3xg/pfsense-00007.png?rlkey=ulv0nrk1ewc4wef73cdcvxzqw&dl=0

                  DNS Lookup
                  https://www.dropbox.com/scl/fi/zj1j6bkhl2ingj1jrjeko/pfsense-00008.png?rlkey=5xyso1hic1rhpx9p8d9d15wr8&dl=0

                  DNS Resolver Settings
                  https://www.dropbox.com/scl/fi/9i16phnhc2ebzojnzu6vg/pfsense-00009.png?rlkey=d344ruldsig55ct31s3xdgdbi&dl=0

                  V 1 Reply Last reply Reply Quote 0
                  • V
                    viragomann @musthafa
                    last edited by

                    @musthafa
                    The big question is still, which DNS server your computer is using.

                    pfSense cannot do anything if the computer requests any other server.

                    M 1 Reply Last reply Reply Quote 0
                    • M
                      musthafa @viragomann
                      last edited by

                      @viragomann

                      Computer DNS
                      https://www.dropbox.com/scl/fi/k9w4x4cnja9l69xhj8uze/pfsense-00010.png?rlkey=tidtd55cd4t82zmrw6wguokp6&dl=0

                      V M 2 Replies Last reply Reply Quote 0
                      • V
                        viragomann @musthafa
                        last edited by

                        @musthafa
                        So it should work actually, but the computer doesn't resolve.

                        You can to go to the DNS Resolver > ACLs page and add an allow ACL for the LAN subnet.
                        This shouldn't be necessary though, but sometimes there went something wrong obviously.

                        M 1 Reply Last reply Reply Quote 0
                        • JonathanLeeJ
                          JonathanLee
                          last edited by

                          Have you tried to flush the dns cache on your laptop? Your system is not resolving properly. In dos run: Ipconfig /flushdns

                          Sometimes it holds on to records. Also have you set a rule to allow port 53 on your firewall ACL lists? Or nat ?

                          Make sure to upvote

                          M 1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Your laptop looks to have two interfaces connected to pfSense. Is that Ethernet and WIFI? Try disabling WIFI if so.

                            JonathanLeeJ M 2 Replies Last reply Reply Quote 0
                            • JonathanLeeJ
                              JonathanLee @stephenw10
                              last edited by

                              @stephenw10 yeahhh or he can set to to allow use of both in the bios we had to do they for some equipment years ago, one would disable the other for some reason

                              Make sure to upvote

                              1 Reply Last reply Reply Quote 0
                              • M
                                musthafa @viragomann
                                last edited by

                                @viragomann
                                Tried ACL. No luck
                                https://www.dropbox.com/scl/fi/ov66xwsl6dyyb06w237kj/pfsense-00011.png?rlkey=ilwmw6gqnlolfdgscz5f8dxzv&dl=0

                                V 1 Reply Last reply Reply Quote 0
                                • M
                                  musthafa @JonathanLee
                                  last edited by

                                  @JonathanLee said in New Installation - No internet on LAN:

                                  Sometimes it holds on to records. Also have you set a rule to allow port 53 on your firewall ACL lists? Or nat ?

                                  No. I'm new to pfSense. please guide me on it

                                  JonathanLeeJ 1 Reply Last reply Reply Quote 0
                                  • M
                                    musthafa @stephenw10
                                    last edited by

                                    @stephenw10 said in New Installation - No internet on LAN:

                                    Your laptop looks to have two interfaces connected to pfSense. Is that Ethernet and WIFI? Try disabling WIFI if so.

                                    I'm using usb ethernet on MAC OS to connect to pfSense. Im disabling wifi while testing pfSense.

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      @musthafa said in New Installation - No internet on LAN:

                                      192.168.2 link#27 UCS en12 !
                                      192.168.2 link#15 UCSI en0

                                      Your routing table shows two interfaces in that subnet which is a conflict.

                                      Have you tried testing fro some other device?

                                      You shouldn't need to do anything the DNS setup by default. It will allow queries from the LAN subnet.

                                      M 1 Reply Last reply Reply Quote 0
                                      • M
                                        musthafa @musthafa
                                        last edited by

                                        When I changed DNS manually to 1.1.1.1 internet is working on laptop. When DNS is default is set to LAN Gateway IP, 192.168.2.1, internet is not working

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          musthafa @stephenw10
                                          last edited by

                                          @stephenw10

                                          most of the time wifi was disabled. However even when wifi is on , priority is for usb ethernet in order.

                                          the only other device I could use wired was my andorid phone using same usb ethernet dongle and had the same issue

                                          1 Reply Last reply Reply Quote 0
                                          • V
                                            viragomann @musthafa
                                            last edited by

                                            @musthafa said in New Installation - No internet on LAN:

                                            @viragomann
                                            Tried ACL. No luck
                                            https://www.dropbox.com/scl/fi/ov66xwsl6dyyb06w237kj/pfsense-00011.png?rlkey=ilwmw6gqnlolfdgscz5f8dxzv&dl=0

                                            Not sure if this matters here, but you should state a network address in the ACL. This was 192.168.2.0.

                                            If there is still no success check the system and Resolver log for hints.
                                            Is the Resolver even running? Check Status > Services.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.