Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Local DNS Records on different subnet

    Scheduled Pinned Locked Moved General pfSense Questions
    87 Posts 5 Posters 9.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Then yes, that should work as long as firewall rules exist to pass it. And, of course, the target host in the LAN must allow it.

      Start a continuous ping from the laptop then check the states on that test firewall to see if it's passing. Or the firewall logs to see if it's being blocked.

      jhmc93J 1 Reply Last reply Reply Quote 0
      • jhmc93J
        jhmc93 @stephenw10
        last edited by

        @stephenw10 ye it didn't work 4 me

        jhmc93J 1 Reply Last reply Reply Quote 0
        • jhmc93J
          jhmc93 @jhmc93
          last edited by

          @jhmc93 wa rulle should i have on firewall

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            A rule on WAN to pass traffic from your laptop to the internal host. Or to the full LAN side subnet.

            I assume it shows blocked traffic in the log then?

            jhmc93J 1 Reply Last reply Reply Quote 0
            • jhmc93J
              jhmc93 @stephenw10
              last edited by

              @stephenw10 so how would i set the rule
              WAN siide?
              source?
              destination lan subnet?

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                On the WAN interface.

                Source: The laptop IP address or the full WAN subnet

                Destination: The LAN side host or the full LAN subnet

                Protocol: icmp to allow pings or all to allow any traffic type.

                jhmc93J 1 Reply Last reply Reply Quote 0
                • jhmc93J
                  jhmc93 @stephenw10
                  last edited by

                  @stephenw10 So this is the outcome:
                  Screenshot_5.png

                  The rule I have set:
                  Screenshot_6.png

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by stephenw10

                    You are pinging 70.86.90.1 but your rule is passing traffic for destination 70.86.90.2. So it's not matching.

                    I assume you are seeing those pings blocked in the firewall logs?

                    jhmc93J 1 Reply Last reply Reply Quote 0
                    • jhmc93J
                      jhmc93 @stephenw10
                      last edited by

                      @stephenw10 yes it must be?? have a look at below picture:
                      Screenshot_7.png

                      1 Reply Last reply Reply Quote 0
                      • patient0P
                        patient0 @jhmc93
                        last edited by patient0

                        @jhmc93 I'm not really following here, just one thing: you'll have to disable the 'Block private networks ...' on your WAN interface if your WAN IP is a private address. Which 192.168.0.75 is.

                        jhmc93J 1 Reply Last reply Reply Quote 1
                        • patient0P patient0 referenced this topic on
                        • jhmc93J
                          jhmc93 @patient0
                          last edited by

                          @patient0 ok thanks

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Yes if you still had that set it would block it.

                            But check the firewall logs like I said several times. That will show you if it's being blocked and by what rule if it is.

                            jhmc93J 1 Reply Last reply Reply Quote 0
                            • jhmc93J
                              jhmc93 @stephenw10
                              last edited by

                              @stephenw10 ok I will try it later on my test machine

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.